Ekultek / Ekultek/Zeus-Scanner
Unhandled exception (beecb50e)
- Dominant language
- Python
- Stars
- 999
- Forks
- 245
- PR merge metrics
- No merged PRs in 30d
Description
Zeus version:
`1.5.2.21b875`
Firefox version:
`(58, 0)`
Geckodriver version:
`geckodriver-v0.19.0-linux64.tar.gz`
Error info:
```Traceback (most recent call last):
File "/app/var/blackwidow/__init__.py", line 43, in test_connection
proxy=self.proxy
File "/app/lib/core/common.py", line 335, in get_page
req = requests.get(url, params=headers, proxies=proxies, verify=False, timeout=20)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 70, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 56, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 488, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 609, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/adapters.py", line 499, in send
raise ReadTimeout(e, request=request)
ReadTimeout: HTTPSConnectionPool(host='thelittledetails.co.za', port=443): Read timed out. (read timeout=20)
```
Running details:
`Linux-4.19.37-parrot1-amd64-x86_64-with-Ubuntu-18.10-cosmic`
Commands used:
`zeus.py -b https://thelittledetails.co.za -a -p -w -c -x -L 15 --identify-waf --verbose`
Log file info:
```2019-07-04 03:00:02,103;zeus-log;DEBUG;checking if the application has been run before
2019-07-04 03:00:02,104;zeus-log;DEBUG;running with options '{'adminPanelFinder': True, 'performClickjackingScan': True, 'runPortScan': True, 'identifyProtection': True, 'performWhoisLookup': True, 'spiderWebSite': 'https://thelittledetails.co.za', 'runInVerbose': True, 'runXssScan': True, 'amountToSearch': 15}'
2019-07-04 03:00:02,104;zeus-log;INFO;log file being saved to '/app/log/zeus-log-3.log'
2019-07-04 03:00:02,105;zeus-log;DEBUG;using default search engine (Google)
2019-07-04 03:00:02,105;zeus-log;INFO;using default search engine
2019-07-04 03:00:02,105;zeus-log;DEBUG;settings user-agent to 'Zeus-Scanner/1.5.2.21b875 (Language=Python/2.7.16; Platform=Linux)'
2019-07-04 03:00:02,105;zeus-log;INFO;starting blackwidow on 'https://thelittledetails.co.za'
2019-07-04 03:00:02,105;zeus-log;DEBUG;testing connection to the URL
2019-07-04 03:00:22,616;zeus-log;ERROR;[7;31;31mfailed to connect to 'https://thelittledetails.co.za' received error 'HTTPSConnectionPool(host='thelittledetails.co.za', port=443): Read timed out. (read timeout=20)'
Traceback (most recent call last):
File "/app/var/blackwidow/__init__.py", line 43, in test_connection
proxy=self.proxy
File "/app/lib/core/common.py", line 335, in get_page
req = requests.get(url, params=headers, proxies=proxies, verify=False, timeout=20)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 70, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 56, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 488, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 609, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/adapters.py", line 499, in send
raise ReadTimeout(e, request=request)
ReadTimeout: HTTPSConnectionPool(host='thelittledetails.co.za', port=443): Read timed out. (read timeout=20)
2019-07-04 03:00:47,065;zeus-log;INFO;[32mZeus got an unexpected error and will automatically create an issue for this error, please wait[0m
2019-07-04 03:00:47,066;zeus-log;INFO;[32mgetting authorization[0m
2019-07-04 03:00:47,066;zeus-log;INFO;[32mextracting traceback from log file[0m
2019-07-04 03:00:47,067;zeus-log;INFO;[32mattempting to get firefox browser version[0m
```
Contributor guide
Research direction
Start with var/blackwidow/__init__.py at test_connection and lib/core/common.py at get_page, then reproduce the reported command against a reachable target and a timing-out target. Trace how the ReadTimeout is handled after the connection test; done means the timeout no longer becomes an unhandled exception and the resulting behavior is covered by an appropriate test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100