Home → Problems →

Unable to create XML file from AFR

• Edit

Frank

07 Jul, 2016 09:21 PM

I'm trying to create an XML file from the attached AFR, and I'm unsuccessful. I get an error from the command line using the arachni_reporter executable. I imported it into the database, with the arachni_web_scan_import, and I can view it with the Web user interface, but I still can't download and XML version. I get a 500 error. Using version 1.4 - WebUI v0.5.10.

Other formats have no issue (HTML, JSON, TXT, YAML) from the command line and web UI.

• benchmark.afr 40.1 KB

1. Support Staff 1 Posted by Tasos Laskos on 08 Jul, 2016 04:40 AM

   

   Hello, this issue has been resolved in the nightlies: http://downloads.arachni-scanner.com/nightlies/

   • Edit

2. Tasos Laskos closed this discussion on 08 Jul, 2016 04:40 AM.

3. Frank re-opened this discussion on 27 Oct, 2016 06:14 PM

4. 2 Posted by Frank on 27 Oct, 2016 06:14 PM

   

   I have to re-open this. I have two different AFR files, from two different applications, that are unable to be converted to XML. Both contain the error message:

   [-] [utilities#exception_jail:428] [ArgumentError] string contains null byte

   I'm able to convert the AFR to HTML and TXT with no issue.

   I have attempted this with the nightly build from 10/26.

   • Edit

5. Support Staff 3 Posted by Tasos Laskos on 27 Oct, 2016 06:34 PM

   

   Can you show me the entire backtrace please?

   • Edit

6. Support Staff 4 Posted by Tasos Laskos on 27 Oct, 2016 06:40 PM

   

   Also, having the AFR would let me solve this quickly.

   • Edit

7. 5 Posted by Frank on 28 Oct, 2016 01:13 PM

   

   Can I privately share the AFR with you?

   • Edit

8. Support Staff 6 Posted by Tasos Laskos on 28 Oct, 2016 01:14 PM

   

   Sure: tasos[dot]laskos[at]arachni-scanner.com

   • Edit

9. 7 Posted by Frank on 28 Oct, 2016 02:43 PM

   

   Sent

   • Edit

10. Support Staff 8 Posted by Tasos Laskos on 28 Oct, 2016 05:51 PM

    

    Fix is in the nightlies.

    E-mail discussion summary:

    Had forgotten to apply the original fix to plugin XML formatters.

    Let me know how it works.

    • Edit

11. 9 Posted by Frank on 30 Oct, 2016 03:18 PM

    

    The conversion to XML is working with the fix in the nightlies, but did anything change in the structure of the XML? I'm not able to import the XMLs into ThreadFix.

    When importing an XML I now see the error message "Failed to determine the scan type."

    • Edit

12. Support Staff 10 Posted by Tasos Laskos on 30 Oct, 2016 04:55 PM

    

    Yep, the nightlies include some schema updates.

    • Edit

13. 11 Posted by Frank on 31 Oct, 2016 02:12 PM

    

    We import our scans into ThreadFix. This fix breaks that functionality for all our apps due to the schema update. It was only a couple of apps that had an issue with the null bytes, and a majority had no issue. I know that we will not be able to apply this update.

    Is there a way to make the fix without modifying the schema?

    • Edit

14. Support Staff 12 Posted by Tasos Laskos on 31 Oct, 2016 02:37 PM

    

    The schema update isn't relevant to the fix.
    You should contact the ThreadFix folks if you'd like it to support the upcoming version.

    • Edit

15. Tasos Laskos closed this discussion on 28 Nov, 2016 03:28 PM.

16. Frank re-opened this discussion on 29 Nov, 2016 07:00 PM

17. 13 Posted by Frank on 29 Nov, 2016 07:00 PM

    

    We need this fix, but with the old schema. Is is possible to build the arachni_reporter to include this fix, but output an XML without the schema updates?

    • Edit

18. Support Staff 14 Posted by Tasos Laskos on 01 Dec, 2016 11:22 AM

    

    Sorry I can't do that.

    • Edit

19. Tasos Laskos closed this discussion on 14 Dec, 2016 02:14 PM.