Ekultek / Ekultek/Zeus-Scanner

Unhandled exception (ece8e27a)

Open
#762 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
999
Forks
245
PR merge metrics
No merged PRs in 30d

Description

Zeus version:
`1.5.2.21b875`

Firefox version:
`failed to start`

Geckodriver version:
`geckodriver-v0.19.0-linux64.tar.gzgeckodriver-v0.19.0-linux64.tar.gzgeckodriver-v0.19.0-linux64.tar.gz`

Error info:
```Traceback (most recent call last):
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 222, in sqlmap_scan_main
sqlmap_scan.show_sqlmap_log(api_id)
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 126, in show_sqlmap_log
log_json = json.loads(log_req.content)
File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
return _default_decoder.decode(s)
File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 222, in sqlmap_scan_main
sqlmap_scan.show_sqlmap_log(api_id)
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 126, in show_sqlmap_log
log_json = json.loads(log_req.content)
File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
return _default_decoder.decode(s)
File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
```

Running details:
`Linux-4.4.0-18362-Microsoft-x86_64-with-Kali-kali-rolling-kali-rolling`

Commands used:
`zeus.py -r --sqli --random-agent -BM`

Log file info:
``` obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded

2019-06-15 04:45:31,854;zeus-log;INFO;Zeus got an unexpected error and will automatically create an issue for this error, please wait
2019-06-15 04:45:31,858;zeus-log;INFO;getting authorization
2019-06-15 04:45:31,880;zeus-log;INFO;extracting traceback from log file
2019-06-15 04:45:31,904;zeus-log;INFO;attempting to get firefox browser version
2019-06-15 04:45:31,953;zeus-log;ERROR;failed to run firefox
2019-06-15 04:45:34,401;zeus-log;INFO;issue has been created successfully with the following name 'Unhandled exception (a6633ecb)', your unique identifier for this issue is 'a6633ecb' and the URL to your issue is 'None'
2019-06-15 04:45:34,411;zeus-log;INFO;currently running on 'http://www.acfrigo.cl/mapa-del-sitio.php' (target #2)
2019-06-15 04:45:34,413;zeus-log;INFO;fetching target meta-data
2019-06-15 04:45:35,243;zeus-log;INFO;detecting target charset
2019-06-15 04:45:35,247;zeus-log;INFO;target charset appears to be 'iso-8859-1'
2019-06-15 04:45:35,252;zeus-log;INFO;attempting to get request headers for 'http://www.acfrigo.cl/mapa-del-sitio.php'
2019-06-15 04:45:35,255;zeus-log;INFO;writing found headers to log file
2019-06-15 04:45:35,264;zeus-log;INFO;successfully wrote found items to '/home/fuck/zeus-scanner/log/header-log/www.acfrigo.cl-headers.json'
2019-06-15 04:45:35,269;zeus-log;WARNING;skipping 'http://www.acfrigo.cl/mapa-del-sitio.php'
2019-06-15 04:45:35,271;zeus-log;INFO;currently running on 'http://www.guiaautomotrizcr.com/mapa-sitio.php' (target #3)
2019-06-15 04:45:35,273;zeus-log;INFO;fetching target meta-data
2019-06-15 04:45:35,655;zeus-log;INFO;detecting target charset
2019-06-15 04:45:35,658;zeus-log;INFO;target charset appears to be 'iso-8859-1'
2019-06-15 04:45:35,662;zeus-log;INFO;attempting to get request headers for 'http://www.guiaautomotrizcr.com/mapa-sitio.php'
2019-06-15 04:45:35,665;zeus-log;INFO;writing found headers to log file
2019-06-15 04:45:35,674;zeus-log;INFO;successfully wrote found items to '/home/fuck/zeus-scanner/log/header-log/www.guiaautomotrizcr.com-headers.json'
2019-06-15 04:45:37,048;zeus-log;INFO;creating arguments for sqlmap
2019-06-15 04:45:39,992;zeus-log;INFO;initializing new sqlmap scan with given URL 'http://www.guiaautomotrizcr.com/mapa-sitio.php'
2019-06-15 04:45:40,015;zeus-log;INFO;gathering sqlmap API scan ID
2019-06-15 04:45:40,047;zeus-log;INFO;starting sqlmap scan on url: 'http://www.guiaautomotrizcr.com/mapa-sitio.php'
2019-06-15 04:45:40,050;zeus-log;WARNING;please keep in mind that this is the API, output will not be saved to log file, it may take a little longer to finish processing, launching sqlmap
2019-06-15 04:45:42,395;zeus-log;ERROR;ran into error 'No JSON object could be decoded', seems something went wrong, error has been saved to current log file.
Traceback (most recent call last):
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 222, in sqlmap_scan_main
sqlmap_scan.show_sqlmap_log(api_id)
File "/home/fuck/zeus-scanner/lib/attacks/sqlmap_scan/__init__.py", line 126, in show_sqlmap_log
log_json = json.loads(log_req.content)
File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
return _default_decoder.decode(s)
File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded

2019-06-15 04:45:44,024;zeus-log;INFO;Zeus got an unexpected error and will automatically create an issue for this error, please wait
2019-06-15 04:45:44,026;zeus-log;INFO;getting authorization
2019-06-15 04:45:44,034;zeus-log;INFO;extracting traceback from log file
2019-06-15 04:45:44,062;zeus-log;INFO;attempting to get firefox browser version
2019-06-15 04:45:44,107;zeus-log;ERROR;failed to run firefox
```

Contributor guide

Open the contributing guide

Research direction

Start in lib/attacks/sqlmap_scan/__init__.py at show_sqlmap_log, line 126, and trace its call from sqlmap_scan_main at line 222. Reproduce the command `zeus.py -r --sqli --random-agent -BM` and inspect the sqlmap API response before json.loads is called. Done means the reported response no longer causes an unhandled exception and the scan reports the failure appropriately.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.