Web interface not working

Brad Alexander's Avatar

Brad Alexander

11 Feb, 2015 06:09 PM

I have installed arachni-1.0.6-0.5.6 on an Ubuntu 12.04 vm. I was able to run a test scan from the command line, however, when I start the web interface, when I attempt to connect to host.example.com:9292, it redirects me to host.example.com:9292d/users/sign_in, and the message "We're sorry, but something went wrong." is displayed.

I tailed the logs, and sawthe following:

Started GET "/d/users/sign_in" for 172.16.17.1 at 2015-02-11 12:40:00 -0500
Processing by Devise::SessionsController#new as HTML
  Rendered devise/sessions/new.html.erb within layouts/application (6.8ms)
Completed 500 Internal Server Error in 14ms

ActionView::Template::Error (undefined method `welcomed?' for nil:NilClass):
    1: <h2>Sign in</h2>
    2: 
    3: <% if !Settings.welcomed? %>
    4: <p class="alert alert-info">
    5:     Please consult the
    6:     <a target="_blank" href="https://github.com/Arachni/arachni-ui-web/wiki#default-credentials">Wiki</a>
  lib/settings.rb:22:in `block (2 levels) in singleton class'
  app/views/devise/sessions/new.html.erb:3:in `_app_views_devise_sessions_new_html_erb___3179016185596890208_62400080'

So i am not getting any indication of what the problem is. Can someone give me some idea?

Thanks
--b

  1. Support Staff 1 Posted by Tasos Laskos on 11 Feb, 2015 06:17 PM

    Tasos Laskos's Avatar

    Hello, when you say "installed", did you do something other than just extract the package? Also, what arch are you using?

    Cheers

  2. 2 Posted by arac.10.storm on 11 Feb, 2015 07:22 PM

    arac.10.storm's Avatar

    I did the prereqs (which were challenging on ubuntu), untarred the package to /usr/local/arachni-1.0.6-0.5.6/, and did a gem install arachni. To start the web interface, I do a bin/arachni_web.

    Arch is amd64.

  3. Support Staff 3 Posted by Tasos Laskos on 11 Feb, 2015 07:26 PM

    Tasos Laskos's Avatar

    Erm...there are no prereqs. The packages are self-contained, you just extract them and run the executables under the bin/ directory. No need to install anything.

    Did you make any changes to the directory of the package?
    Also, what arch are you using? 32 or 64bit?

  4. 4 Posted by arac.10.storm on 11 Feb, 2015 07:31 PM

    arac.10.storm's Avatar

    As for the prereqs, according to the wiki:

    Users of Debian-based distributions can run the following to install them:

    sudo apt-get install build-essential curl libcurl3 libcurl4-openssl-dev ruby ruby-dev

    This is what I did.

    Both the arachni package and the architecture are 64 bit.

  5. Support Staff 5 Posted by Tasos Laskos on 11 Feb, 2015 07:35 PM

    Tasos Laskos's Avatar

    The wiki lists all the available ways to grab Arachni, you didn't need to go down the whole list, just the Linux section and grab the package.

    Also, did you alter anything in the directory of the extracted package?

  6. 6 Posted by arac.10.storm on 11 Feb, 2015 07:38 PM

    arac.10.storm's Avatar

    I also had to, by the way, do update-alternatives to get the both ruby and gem to point to the 1.9.3 version, as it was directed to 1.8, as Debian and Ubuntu are wont to do.

    I did not alter anything. Should I delete the directory tree and untar it again? Or perhaps did the gem install arachni break it?

  7. Support Staff 7 Posted by Tasos Laskos on 11 Feb, 2015 07:43 PM

    Tasos Laskos's Avatar

    Yeah try extracting it somewhere that your user has write access.

  8. 8 Posted by arac.10.storm on 11 Feb, 2015 10:41 PM

    arac.10.storm's Avatar

    Tasos,

    Since my original goal was to set this VM up as a server to allow others to run scans, I was running Arachni as root, who does have access to the /usr/local tree.

  9. Support Staff 9 Posted by Tasos Laskos on 11 Feb, 2015 11:27 PM

    Tasos Laskos's Avatar

    This is really strange, this error in particular doesn't make sense. Either no-one or everyone should get this, but I've never heard of it before and I just tested the package and it works fine.

    Would it be too much trouble to reset the VM to a clean state and retry after just extracting the package? I just want to rule out any sort of interference.

    To get more technical, it's as if a DB entry is missing from your package, but that's impossible because you get the same package a everyone else, and that entry is there.

  10. 10 Posted by arac.10.storm on 12 Feb, 2015 02:21 AM

    arac.10.storm's Avatar

    I will try and do this tomorrow.

  11. 11 Posted by arac.10.storm on 17 Feb, 2015 07:05 PM

    arac.10.storm's Avatar

    Tasos,

    I finally got a chance to get back to this. I deleted and rebuilt the KVM machine, and did a clean install. Did not get any gems, just untarred the arachni-1.0.6-0.5.6-linux-x86_64.tar.gz tarball (which I freshly downloaded from the site and checked the sha1sum) to /usr/local. Made the necessary database connections to our psql db server (it is on another machine) in database.yaml, and started bin/arachni_web.

    When I tried to hit the web site, again, I got "We're sorry, something went wrong." and the logs show

    tarted GET "/d/users/sign_in" for 192.168.8.50 at 2015-02-17 13:36:41 -0500
    Processing by Devise::SessionsController#new as HTML
    Rendered devise/sessions/new.html.erb within layouts/application (7.5ms) Completed 500 Internal Server Error in 17ms

    ActionView::Template::Error (undefined method welcomed?' for nil:NilClass): 1: <h2>Sign in</h2> 2: 3: <% if !Settings.welcomed? %> 4: <p class="alert alert-info"> 5: Please consult the 6: <a target="_blank" href="https://github.com/Arachni/arachni-ui-web/wiki#default-credentials">Wiki</a> lib/settings.rb:22:inblock (2 levels) in singleton class' app/views/devise/sessions/new.html.erb:3:in `_app_views_devise_sessions_new_html_erb___3876329194843953946_57769040'

    Suggestions?

    Thanks,
    --b

  12. Support Staff 12 Posted by Tasos Laskos on 17 Feb, 2015 07:08 PM

    Tasos Laskos's Avatar
  13. Support Staff 13 Posted by Tasos Laskos on 18 Mar, 2015 10:01 PM

    Tasos Laskos's Avatar

    Closing this due to lack of feedback.

    Feel free to re-open if the instructions in the link didn't solve your problem.

    Cheers

  14. Tasos Laskos closed this discussion on 18 Mar, 2015 10:01 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac