Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Tasos Laskos on 24 Feb, 2017 11:26 AM
That shouldn't have happened, any chance I can be given access to the site?
2 Posted by John on 27 Feb, 2017 02:09 PM
sorry, i don't remember website adress during scanning which such error occured, if i find it - will send
3 Posted by John on 27 Feb, 2017 03:44 PM
http://rgho.st/private/6bkCYFRSn/eb7728bc47ec72cf0e296a0a1ae9f6e0 error log with "missing url", website url included. Will delete afeter you've downloaded
Support Staff 4 Posted by Tasos Laskos on 27 Feb, 2017 03:48 PM
I can't download it, it says: "File is uploading"
Did you uploaded OK?
5 Posted by John on 27 Feb, 2017 03:50 PM
try this: https://mega.nz/#!7ERX1YrB!kz61wemfQolUCUq618M4uKOPi2MTJpE4TNnlyo9ghk0
Support Staff 6 Posted by Tasos Laskos on 27 Feb, 2017 03:53 PM
Thanks, got it.
7 Posted by John on 27 Feb, 2017 06:27 PM
also got such error immediately after scan start (anouther website)
8 Posted by John on 27 Feb, 2017 07:52 PM
+this error occures to most of websites (4/5), repeats during scan so sometimes it takes too long to load scan page because fo huge error log (maybe you should add an option not to display errors in webUI ? just log files in arachni folder seems to be enough)
9 Posted by John on 27 Feb, 2017 08:48 PM
added a new log "log+crash.txt" (same website) with "missing url error" and CRASH, i'm not really sure that this error leaded to scan crash. hope this log will be usefull for you :)
10 Posted by John on 28 Feb, 2017 04:36 PM
Hello, any news?
Support Staff 11 Posted by Tasos Laskos on 28 Feb, 2017 04:38 PM
Yeah I think I fixed it, I'll try to push nightlies later today; I will let you know when I do.
Support Staff 12 Posted by Tasos Laskos on 01 Mar, 2017 10:39 AM
Nightlies are up, give them a try.
13 Posted by John on 01 Mar, 2017 11:51 AM
tried 1 march nightlies (Windows), error still occures
14 Posted by John on 01 Mar, 2017 12:52 PM
arachni seems to be unstable, situations:
1. Sql injection profile - target.com - 1 vuln (1 parameter, sql_injection) - 30 minutes
2. Sql injection profile - target.com - 2 vulns (1 same paramter (two cases) sql_injcetion+sql_injection_timing) - 14 minutes
Why do such sittuations happen ? Responses are stable, nothing on website is changed during the scan.
P.S auto-redundat = 3
Support Staff 15 Posted by Tasos Laskos on 01 Mar, 2017 09:04 PM
When things like that happen something must have changed, but I can't only investigate if I'm given permission by the site owner.
I'll look into the persistence of the error and let you know, FYI I couldn't reproduce it.
16 Posted by John on 02 Mar, 2017 02:07 PM
hello, new day - new bugs (errors) found :)
P.S uploaded new log - "error log 2 march"
Support Staff 17 Posted by Tasos Laskos on 02 Mar, 2017 02:15 PM
This one is pretty straightforward, I'm pushing nightlies now with the fix.
18 Posted by John on 02 Mar, 2017 02:22 PM
also got one more error : "[Errno::ECONNRESET] An existing connection was forcibly closed by the remote host.", i don't mean this to be a bug, but maybe it will be better to ignore such warnings in the future to avoid long-time loading scan pages (WEBUI) and save some RAM?
Support Staff 19 Posted by Tasos Laskos on 02 Mar, 2017 07:41 PM
These can sometimes mean that the process died so they should be logged.
The Windows nightlies failed to build for some reason while I was out, I'm rebuilding and will let you know once they're up.
Support Staff 20 Posted by Tasos Laskos on 02 Mar, 2017 09:27 PM
Nightlies are up, still looking into the url error thought.
Support Staff 21 Posted by Tasos Laskos on 03 Mar, 2017 11:58 AM
Are you sure the url error is still there? I don't think it can happen anymore.
Maybe it's a new error that looks similar but originates from somewhere else, can you please show me the error log for it using the fresh nightlies?
This has to do with URL normalization and it looks like the system comes across a URL that it can't parse for some reason.
22 Posted by John on 03 Mar, 2017 12:08 PM
let me some times to test and i'll send you log if error exists
23 Posted by John on 03 Mar, 2017 12:13 PM
hasn't expected to get such error so soon
Support Staff 24 Posted by Tasos Laskos on 03 Mar, 2017 12:33 PM
Can you please send me the URL in private?
25 Posted by John on 03 Mar, 2017 12:47 PM
sorry, can you help me find a PM ? :) or via email? (i dont remember your email)
Support Staff 26 Posted by Tasos Laskos on 03 Mar, 2017 12:48 PM
tasos[dot]laskos[at]arachni-scanner.com
27 Posted by John on 03 Mar, 2017 01:08 PM
sent
Support Staff 28 Posted by Tasos Laskos on 03 Mar, 2017 01:17 PM
I don't know what's going on, I can't reproduce it.
I'll keep trying.
29 Posted by John on 03 Mar, 2017 03:58 PM
sent one more website url with such error
30 Posted by John on 05 Mar, 2017 02:46 PM
hello, on same settings arachni finds different number of vulns (+-1 vuln) - see screenshot . Why do such happen?
P.S instance: 1 / browsers: 4 / concurrency 20 / auto-redundant: 2
P.P.S this question is repeated, previously u sad that something is changed on website, but i was sure that it didn't; now u can check it yourself