Home → Problems →

Arachni is running so long even with the latest version 0.4.1.3

• Edit

gopal.bansal1990

07 Mar, 2013 12:13 PM

Hello,

I have scheduled a scan on one of my site before 2 days and still the test are In-Progress.
also, Is there any method to get the report by killing the process because we are executing the command from back end.

1. 1 Posted by gopal.bansal199... on 07 Mar, 2013 12:25 PM

   

   Hello,

   I have scheduled a test scan before 2 days and still the test are in-progress.
   i also used the --link-count=10 command, but it seems to be not feasible.Hope you will help me on this.
   I am working with the latest version of arachni 0.4.1.3.

   • Edit

2. Support Staff 2 Posted by Tasos Laskos on 07 Mar, 2013 02:50 PM

   

   Hi there,

   There was a bug when it came to enforcing that restriction. Fortunately, it has been fixed in the experimental branch of the project and you can grab a self-contained package with that fix.

   Pick the package which suits you from the nightly builds and let me know how it works.

   • Edit

3. 3 Posted by gopal.bansal199... on 08 Mar, 2013 06:19 AM

   

   Hey Tasos,

   Thanks alot for the quick response.

   Actually we are working on windows machine and unfortunately was not able to find any nightly for Windows platform (32 bit).

   Can you please point us to the correct location to download the same for windows?
   Meanwhile we are trying for linux distribution.

   Regards,
   Gopal

   • Edit

4. Support Staff 4 Posted by Tasos Laskos on 08 Mar, 2013 03:07 PM

   

   I'm sorry, there aren't any nightly packages available; I recommend installing Linux in a virtual machine.

   • Edit

5. 5 Posted by gopal.bansal199... on 12 Mar, 2013 05:24 AM

   

   Hi Tasos,

   Is there any other option to limit the scan so that scan can stop after 2-3 hour??

   • Edit

6. 6 Posted by gopal.bansal199... on 12 Mar, 2013 06:24 AM

   

   Here is another query...

   I already have a previous version of Arachni installed on Ubuntu. Is there is a way to update the same version so that it gets upgraded to the latest build in which you have applied the patch.

   if yes, please help us with the exact command line arguments to do the upgrade.

   • Edit

7. Support Staff 7 Posted by Tasos Laskos on 12 Mar, 2013 02:36 PM

   

   Unfortunately, the answer is no to both.

   • Edit

8. Tasos Laskos closed this discussion on 12 Mar, 2013 02:36 PM.

9. gopal.bansal1990 re-opened this discussion on 13 Mar, 2013 07:51 AM

10. 8 Posted by gopal.bansal199... on 13 Mar, 2013 07:51 AM

    

    Hi Tasos,

    thanks for your replies. However I tried the nightly build provided but seems that some specific RUBY gem is either missing from the build or is unavailable in RUBY distribution.
    whenever I try to run the tool, I get the below error. Can you please help us on this issue?

    Error:
    /usr/local/rvm/rubies/ruby-1.9.3-p392/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:36:in require': cannot load such file -- bundler/setup (LoadError) from /usr/local/rvm/rubies/ruby-1.9.3-p392/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:36:inrequire' from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/arachni-1.0dev-0.4dev/bin/../system/arachni-ui-web/bin/arachni:14:in `'

    Also, i am successfully able to run the current build v0.4.1.3.

    Regards,
    Gopal

    • Edit

11. Support Staff 9 Posted by Tasos Laskos on 13 Mar, 2013 02:04 PM

    

    Thanks for letting me know, that seems to be a problem with the package, will fix it and let you know.

    • Edit

12. 10 Posted by gopal.bansal199... on 13 Mar, 2013 03:41 PM

    

    Thanks Tasos,

    We are in a business critical situation, and have been struggling with this situation for quite long.
    I would really appreciate if you take this request on priority and provide the solution for the same ASAP.

    Regards,
    Gopal

    • Edit

13. Support Staff 11 Posted by Tasos Laskos on 13 Mar, 2013 03:44 PM

    

    Duly noted Gopal, working on it now.

    • Edit

14. Support Staff 12 Posted by Tasos Laskos on 13 Mar, 2013 03:48 PM

    

    Just to make sure, can you show be how you're running it?

    PS. And which package you're using.

    • Edit

15. 13 Posted by gopal.bansal199... on 13 Mar, 2013 04:07 PM

    

    I have downloaded the nightly package.

    steps:
    1) download the arachni setup
    2) untar the setup
    3) goto path arachni-1.0dev-0.4dev/system/gems/bin [install ruby and update gems]
    4) also tried arachni-1.0dev-0.4dev/system/gems/gems/ [install ruby and update gems]
    5) command ./arachni -h [not working]
    5) In gems/gems path, there is no arachni-1.0dev-0.4dev/bin folder to work on that.
    but this type of folder structure is available on build v0.4.1.3.

    so i am not sure why its not working, kindly suggest.

    Thanks!!!

    • Edit

16. Support Staff 14 Posted by Tasos Laskos on 13 Mar, 2013 04:11 PM

    

    Why are you being so hard on yourself?
    The packages are self-contained, you just run the executable under arachni-1.0dev-0.4dev/bin/.

    I thought the README file in the package made that clear.

    Let me know how it works.

    • Edit

17. Tasos Laskos closed this discussion on 13 Mar, 2013 04:11 PM.

18. gopal.bansal1990 re-opened this discussion on 13 Mar, 2013 04:36 PM

19. 15 Posted by gopal.bansal199... on 13 Mar, 2013 04:36 PM

    

    I have also tried with arachni-1.0dev-0.4dev/bin/ path and update ruby and gems within it but it seems to be not working for me.

    while the same is working fine with v0.4.1.3 build.

    • Edit

20. Support Staff 16 Posted by Tasos Laskos on 13 Mar, 2013 04:47 PM

    

    There's a misunderstanding here, let's start over.

    The packages are self-contained, they don't need anything else to be installed on the system. They contain a Ruby installation and all gem dependencies and even system library dependencies like libxml2, curl etc.

    You should not touch anything under system/ nor need to.
    You only have to run the executables under the immediate bin/ dir of the package, if that doesn't work then I'd like to see that output in order to help out.

    And before retrying, please remove the existing directory and download the package again because there's a chance you may have corrupted it.

    • Edit

21. Support Staff 17 Posted by Tasos Laskos on 13 Mar, 2013 04:50 PM

    

    Also, the fact that what you were doing worked for the v0.4.1.3 package was pure change, you should have, once again, used the executables under the immediate bin/ dir only.

    • Edit

22. 18 Posted by gopal.bansal199... on 13 Mar, 2013 05:39 PM

    

    I really thank you for your prompt response.
    i am also working in the same manner as you suggested to resolve the issue, but could not.
    Please find the attached screenshot:

    • ArachniIssue.jpg 123 KB
    • Edit

23. Support Staff 19 Posted by Tasos Laskos on 13 Mar, 2013 05:53 PM

    

    I'm guessing that that VM hasn't been updated in a while.

    The packages may very well be self-contained but one thing they depend on is that the system uses the same glibc version as everything depends on it (and relevantly compatible kernels).

    There's only so much you can do...

    You can either grab a recent distro or upgrade.

    • Edit

24. 20 Posted by gopal.bansal199... on 13 Mar, 2013 06:24 PM

    

    I tried following the same steps on Ubuntu 11.04 and got a separate error. Attached screenshot might be helpful.

    • Arachni.jpg 165 KB
    • Edit

25. Support Staff 21 Posted by Tasos Laskos on 13 Mar, 2013 06:49 PM

    

    Are you just the most unlucky person on the face of the earth?
    At least the last error made sense, this one...I'm lost.

    I just went through all the packages and they all worked fine.

    Can you check if the file reported to not exist is there? Can you do an ls -la on that directory and paste it please?

    • Edit

26. 22 Posted by gopal.bansal199... on 13 Mar, 2013 07:05 PM

    

    Please find the attached screenshot for ls -la.

    • Arachni_1.jpg 277 KB
    • Edit

27. Support Staff 23 Posted by Tasos Laskos on 13 Mar, 2013 07:08 PM

    

    No, the error reports that system/usr/ruby doesn't exist so could you list the contents of system/usr/ and paste the output here?

    • Edit

28. 24 Posted by gopal.bansal199... on 13 Mar, 2013 07:14 PM

    

    Please find the attached screenshot for system/usr:

    • Arachni_2.jpg 279 KB
    • Edit

29. Support Staff 25 Posted by Tasos Laskos on 13 Mar, 2013 07:17 PM

    

    Ok, the bin folder is there, does it contain a ruby binary?

    • Edit

30. 26 Posted by gopal.bansal199... on 13 Mar, 2013 07:27 PM

    

    Yes, it contain a ruby file. please find the attached screenshot:

    • Arachni_3.jpg 279 KB
    • Edit

31. Support Staff 27 Posted by Tasos Laskos on 13 Mar, 2013 07:31 PM

    

    Any chance I can have SSH access to that VM?

    • Edit

32. 28 Posted by gopal.bansal199... on 13 Mar, 2013 07:37 PM

    

    I will initiate the goToMeeting session and will share you the link.

    • Edit

33. Support Staff 29 Posted by Tasos Laskos on 13 Mar, 2013 07:49 PM

    

    I was the one who deleted your previous posts and I also sent you an e-mail saying that you shouldn't post those online on a public forum.

    Morever, I'm on a Linux system which is not supported by GTM.

    • Edit

34. 30 Posted by gopal.bansal199... on 13 Mar, 2013 07:56 PM

    

    Okay, so how we can share the screen.Can we have a online TeamViewer session.

    • Edit