Ekultek / Ekultek/Zeus-Scanner
Unhandled exception (ece8e27a)
- Dominant language
- Python
- Stars
- 999
- Forks
- 245
- PR merge metrics
- No merged PRs in 30d
Description
Zeus version:
`1.5.2.21b875`
Firefox version:
`failed to start`
Geckodriver version:
`geckodriver-v0.19.0-linux64.tar.gzgeckodriver-v0.19.0-linux64.tar.gzgeckodriver-v0.19.0-linux64.tar.gz`
Error info:
```Traceback (most recent call last):
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 222, in sqlmap_scan_main
sqlmap_scan.show_sqlmap_log(api_id)
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 126, in show_sqlmap_log
log_json = json.loads(log_req.content)
File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
return _default_decoder.decode(s)
File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 222, in sqlmap_scan_main
sqlmap_scan.show_sqlmap_log(api_id)
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 126, in show_sqlmap_log
log_json = json.loads(log_req.content)
File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
return _default_decoder.decode(s)
File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
```
Running details:
`Linux-4.4.0-18362-Microsoft-x86_64-with-Kali-kali-rolling-kali-rolling`
Commands used:
`zeus.py -r --sqli --random-agent -BM`
Log file info:
``` obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
2019-06-15 04:45:31,854;zeus-log;INFO;Zeus got an unexpected error and will automatically create an issue for this error, please wait
2019-06-15 04:45:31,858;zeus-log;INFO;getting authorization
2019-06-15 04:45:31,880;zeus-log;INFO;extracting traceback from log file
2019-06-15 04:45:31,904;zeus-log;INFO;attempting to get firefox browser version
2019-06-15 04:45:31,953;zeus-log;ERROR;[7;31;31mfailed to run firefox
2019-06-15 04:45:34,401;zeus-log;INFO;issue has been created successfully with the following name 'Unhandled exception (a6633ecb)', your unique identifier for this issue is 'a6633ecb' and the URL to your issue is 'None'
2019-06-15 04:45:34,411;zeus-log;INFO;currently running on 'http://www.acfrigo.cl/mapa-del-sitio.php' (target #2)
2019-06-15 04:45:34,413;zeus-log;INFO;fetching target meta-data
2019-06-15 04:45:35,243;zeus-log;INFO;detecting target charset
2019-06-15 04:45:35,247;zeus-log;INFO;target charset appears to be 'iso-8859-1'
2019-06-15 04:45:35,252;zeus-log;INFO;attempting to get request headers for 'http://www.acfrigo.cl/mapa-del-sitio.php'
2019-06-15 04:45:35,255;zeus-log;INFO;writing found headers to log file
2019-06-15 04:45:35,264;zeus-log;INFO;successfully wrote found items to '/home/fuck/zeus-scanner/log/header-log/www.acfrigo.cl-headers.json'
2019-06-15 04:45:35,269;zeus-log;WARNING;skipping 'http://www.acfrigo.cl/mapa-del-sitio.php'
2019-06-15 04:45:35,271;zeus-log;INFO;currently running on 'http://www.guiaautomotrizcr.com/mapa-sitio.php' (target #3)
2019-06-15 04:45:35,273;zeus-log;INFO;fetching target meta-data
2019-06-15 04:45:35,655;zeus-log;INFO;detecting target charset
2019-06-15 04:45:35,658;zeus-log;INFO;target charset appears to be 'iso-8859-1'
2019-06-15 04:45:35,662;zeus-log;INFO;attempting to get request headers for 'http://www.guiaautomotrizcr.com/mapa-sitio.php'
2019-06-15 04:45:35,665;zeus-log;INFO;writing found headers to log file
2019-06-15 04:45:35,674;zeus-log;INFO;successfully wrote found items to '/home/fuck/zeus-scanner/log/header-log/www.guiaautomotrizcr.com-headers.json'
2019-06-15 04:45:37,048;zeus-log;INFO;creating arguments for sqlmap
2019-06-15 04:45:39,992;zeus-log;INFO;initializing new sqlmap scan with given URL 'http://www.guiaautomotrizcr.com/mapa-sitio.php'
2019-06-15 04:45:40,015;zeus-log;INFO;gathering sqlmap API scan ID
2019-06-15 04:45:40,047;zeus-log;INFO;starting sqlmap scan on url: 'http://www.guiaautomotrizcr.com/mapa-sitio.php'
2019-06-15 04:45:40,050;zeus-log;WARNING;please keep in mind that this is the API, output will not be saved to log file, it may take a little longer to finish processing, launching sqlmap
2019-06-15 04:45:42,395;zeus-log;ERROR;[7;31;31mran into error 'No JSON object could be decoded', seems something went wrong, error has been saved to current log file.
Traceback (most recent call last):
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 222, in sqlmap_scan_main
sqlmap_scan.show_sqlmap_log(api_id)
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 126, in show_sqlmap_log
log_json = json.loads(log_req.content)
File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
return _default_decoder.decode(s)
File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
2019-06-15 04:45:44,024;zeus-log;INFO;[32mZeus got an unexpected error and will automatically create an issue for this error, please wait[0m
2019-06-15 04:45:44,026;zeus-log;INFO;[32mgetting authorization[0m
2019-06-15 04:45:44,034;zeus-log;INFO;[32mextracting traceback from log file[0m
2019-06-15 04:45:44,062;zeus-log;INFO;[32mattempting to get firefox browser version[0m
2019-06-15 04:45:44,107;zeus-log;ERROR;[7;31;31mfailed to run firefox[0m
```
Contributor guide
Research direction
Start in lib/attacks/sqlmap_scan/__init__.py at show_sqlmap_log, line 126, and trace its call from sqlmap_scan_main at line 222. Reproduce the command `zeus.py -r --sqli --random-agent -BM` and inspect the sqlmap API response before json.loads is called. Done means the reported response no longer causes an unhandled exception and the scan reports the failure appropriately.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100