Ekultek / Ekultek/Zeus-Scanner
Unhandled exception (1b33d2e0)
- Dominant language
- Python
- Stars
- 999
- Forks
- 245
- PR merge metrics
- No merged PRs in 30d
Description
Zeus version:
`1.5.2.21b875`
Firefox version:
`failed to start`
Geckodriver version:
`geckodriver-v0.18.0-linux64.tar.gzgeckodriver-v0.19.0-linux64.tar.gz`
Error info:
```Traceback (most recent call last):
File "zeus.py", line 199, in
__run_attacks_main()
File "zeus.py", line 146, in __run_attacks_main
threads=opt.amountOfThreads, force_ssl=opt.forceSSL
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 994, in run_attacks
opts=create_arguments(sqlmap=True, sqlmap_args=sqlmap_arguments, conf=conf_file), auto_start=auto_start)
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/attacks/sqlmap_scan/__init__.py", line 154, in sqlmap_scan_main
is_started = lib.core.settings.search_for_process("sqlmapapi.py")
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 599, in search_for_process
all_process_names.add(" ".join(process.cmdline()).strip())
File "/usr/local/lib/python2.7/site-packages/psutil/__init__.py", line 663, in cmdline
return self._proc.cmdline()
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 342, in wrapper
return fun(self, *args, **kwargs)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 426, in cmdline
return cext.proc_cmdline(self.pid)
File "/usr/local/Cellar/python@2/2.7.16/Frameworks/Python.framework/Versions/2.7/lib/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 375, in catch_zombie
raise AccessDenied(proc.pid, proc._name)
AccessDenied: psutil.AccessDenied (pid=65976)
```
Running details:
`Darwin-18.5.0-x86_64-i386-64bit`
Commands used:
`zeus.py -d inurl:php?id= site:.in -s`
Log file info:
```2019-05-19 21:39:13,321;zeus-log;WARNING;will not parse webcache URL's (to parse webcache pass -W)
2019-05-19 21:39:13,321;zeus-log;WARNING;only pulling URLs with GET(query) parameters (to pull all URL's pass -E)
2019-05-19 21:39:13,321;zeus-log;INFO;attempting to gather query URL
2019-05-19 21:39:13,323;zeus-log;INFO;setting up virtual display to hide the browser
2019-05-19 21:39:13,470;zeus-log;INFO;setting the browser
2019-05-19 21:39:17,624;zeus-log;INFO;browser will open shortly
2019-05-19 21:39:20,165;zeus-log;INFO;searching search engine using query 'inurl:php?id='
2019-05-19 21:39:23,241;zeus-log;INFO;closing the browser and continuing process..
2019-05-19 21:39:23,786;zeus-log;INFO;URL successfully gathered, searching for GET parameters
2019-05-19 21:39:23,787;zeus-log;INFO;no proxy configuration detected
2019-05-19 21:39:25,097;zeus-log;INFO;adjusting user-agent header to default user agent 'Zeus-Scanner/1.5.2.21b875 (Language=Python/2.7.16; Platform=Darwin)'
2019-05-19 21:39:25,125;zeus-log;INFO;successfully wrote found items to '/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/log/url-log/url-log-2.log'
2019-05-19 21:39:25,125;zeus-log;INFO;found a total of 19 URLs with given query 'inurl:php?id='
2019-05-19 21:39:25,126;zeus-log;INFO;currently running on 'http://www.interaliaproject.com/news.php?id=115' (target #1)
2019-05-19 21:39:25,126;zeus-log;INFO;fetching target meta-data
2019-05-19 21:39:26,514;zeus-log;INFO;detecting target charset
2019-05-19 21:39:26,515;zeus-log;INFO;target charset appears to be 'iso-8859-1'
2019-05-19 21:39:26,541;zeus-log;INFO;attempting to get request headers for 'http://www.interaliaproject.com/news.php?id=115'
2019-05-19 21:39:26,543;zeus-log;INFO;writing found headers to log file
2019-05-19 21:39:26,546;zeus-log;INFO;successfully wrote found items to '/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/log/header-log/www.interaliaproject.com-headers.json'
2019-05-19 21:39:32,903;zeus-log;INFO;creating arguments for sqlmap
2019-05-19 21:39:32,907;zeus-log;ERROR;[7;31;31mran into exception 'psutil.AccessDenied (pid=65976)' exception has been saved to log file
Traceback (most recent call last):
File "zeus.py", line 199, in
__run_attacks_main()
File "zeus.py", line 146, in __run_attacks_main
threads=opt.amountOfThreads, force_ssl=opt.forceSSL
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 994, in run_attacks
opts=create_arguments(sqlmap=True, sqlmap_args=sqlmap_arguments, conf=conf_file), auto_start=auto_start)
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/attacks/sqlmap_scan/__init__.py", line 154, in sqlmap_scan_main
is_started = lib.core.settings.search_for_process("sqlmapapi.py")
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 599, in search_for_process
all_process_names.add(" ".join(process.cmdline()).strip())
File "/usr/local/lib/python2.7/site-packages/psutil/__init__.py", line 663, in cmdline
return self._proc.cmdline()
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 342, in wrapper
return fun(self, *args, **kwargs)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 426, in cmdline
return cext.proc_cmdline(self.pid)
File "/usr/local/Cellar/python@2/2.7.16/Frameworks/Python.framework/Versions/2.7/lib/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 375, in catch_zombie
raise AccessDenied(proc.pid, proc._name)
AccessDenied: psutil.AccessDenied (pid=65976)
2019-05-19 21:39:40,255;zeus-log;INFO;[32mZeus got an unexpected error and will automatically create an issue for this error, please wait[0m
2019-05-19 21:39:40,256;zeus-log;INFO;[32mgetting authorization[0m
2019-05-19 21:39:40,258;zeus-log;INFO;[32mextracting traceback from log file[0m
2019-05-19 21:39:40,259;zeus-log;INFO;[32mattempting to get firefox browser version[0m
2019-05-19 21:39:40,280;zeus-log;ERROR;[7;31;31mfailed to run firefox[0m
```
Contributor guide
Research direction
Start in lib/core/settings.py at search_for_process around line 599, then follow its call from lib/attacks/sqlmap_scan/__init__.py around line 154. Reproduce with `zeus.py -d inurl:php?id= site:.in -s` on the reported environment and inspect how psutil.AccessDenied is handled. Done means this process check no longer terminates the scan with the shown exception.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100