Ekultek / Ekultek/Zeus-Scanner

Unhandled exception (beecb50e)

Open
#770 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
999
Forks
245
PR merge metrics
No merged PRs in 30d

Description

Zeus version:
`1.5.2.21b875`

Firefox version:
`(58, 0)`

Geckodriver version:
`geckodriver-v0.19.0-linux64.tar.gz`

Error info:
```Traceback (most recent call last):
File "/app/var/blackwidow/__init__.py", line 43, in test_connection
proxy=self.proxy
File "/app/lib/core/common.py", line 335, in get_page
req = requests.get(url, params=headers, proxies=proxies, verify=False, timeout=20)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 70, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 56, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 488, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 609, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/adapters.py", line 499, in send
raise ReadTimeout(e, request=request)
ReadTimeout: HTTPSConnectionPool(host='thelittledetails.co.za', port=443): Read timed out. (read timeout=20)
```

Running details:
`Linux-4.19.37-parrot1-amd64-x86_64-with-Ubuntu-18.10-cosmic`

Commands used:
`zeus.py -b https://thelittledetails.co.za -a -p -w -c -x -L 15 --identify-waf --verbose`

Log file info:
```2019-07-04 03:00:02,103;zeus-log;DEBUG;checking if the application has been run before
2019-07-04 03:00:02,104;zeus-log;DEBUG;running with options '{'adminPanelFinder': True, 'performClickjackingScan': True, 'runPortScan': True, 'identifyProtection': True, 'performWhoisLookup': True, 'spiderWebSite': 'https://thelittledetails.co.za', 'runInVerbose': True, 'runXssScan': True, 'amountToSearch': 15}'
2019-07-04 03:00:02,104;zeus-log;INFO;log file being saved to '/app/log/zeus-log-3.log'
2019-07-04 03:00:02,105;zeus-log;DEBUG;using default search engine (Google)
2019-07-04 03:00:02,105;zeus-log;INFO;using default search engine
2019-07-04 03:00:02,105;zeus-log;DEBUG;settings user-agent to 'Zeus-Scanner/1.5.2.21b875 (Language=Python/2.7.16; Platform=Linux)'
2019-07-04 03:00:02,105;zeus-log;INFO;starting blackwidow on 'https://thelittledetails.co.za'
2019-07-04 03:00:02,105;zeus-log;DEBUG;testing connection to the URL
2019-07-04 03:00:22,616;zeus-log;ERROR;failed to connect to 'https://thelittledetails.co.za' received error 'HTTPSConnectionPool(host='thelittledetails.co.za', port=443): Read timed out. (read timeout=20)'
Traceback (most recent call last):
File "/app/var/blackwidow/__init__.py", line 43, in test_connection
proxy=self.proxy
File "/app/lib/core/common.py", line 335, in get_page
req = requests.get(url, params=headers, proxies=proxies, verify=False, timeout=20)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 70, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 56, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 488, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 609, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/requests/adapters.py", line 499, in send
raise ReadTimeout(e, request=request)
ReadTimeout: HTTPSConnectionPool(host='thelittledetails.co.za', port=443): Read timed out. (read timeout=20)

2019-07-04 03:00:47,065;zeus-log;INFO;Zeus got an unexpected error and will automatically create an issue for this error, please wait
2019-07-04 03:00:47,066;zeus-log;INFO;getting authorization
2019-07-04 03:00:47,066;zeus-log;INFO;extracting traceback from log file
2019-07-04 03:00:47,067;zeus-log;INFO;attempting to get firefox browser version
```

Contributor guide

Open the contributing guide

Research direction

Start with var/blackwidow/__init__.py at test_connection and lib/core/common.py at get_page, then reproduce the reported command against a reachable target and a timing-out target. Trace how the ReadTimeout is handled after the connection test; done means the timeout no longer becomes an unhandled exception and the resulting behavior is covered by an appropriate test.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.