Home → Questions →

login plugins check failed.

• Edit

Joseph

27 Oct, 2016 05:29 AM

We are trying to get login script working with a website we are testing.
where loginScript.js is:

response = http.post( 'http://192.168.70.15/designs/imm/index.php',
    parameters:     {
        'user'   => 'USERID',
        'password' => 'PASSW0RD'
    },
    mode:           :sync,
    update_cookies: true
)

framework.options.session.check_url     = to_absolute( response.headers.location, response.url )
framework.options.session.check_pattern = /Log out/

On our windows 10 pc it failed to log in because of a check failed error, how can I to correct the login script?

• error-7392.log 6.55 KB
• login_script.jpg 324 KB

1. 1 Posted by Joseph on 27 Oct, 2016 05:43 AM

   

   Sorry! Just the filename extension description was wrong.
   It's .rb not .js!
   loginScript.rb is:
   response = http.post( 'http://192.168.70.15/designs/imm/index.php',
   parameters: { 'user' => 'USERID', 'password' => 'PASSW0RD' }, mode: :sync, update_cookies: true )

   framework.options.session.check_url = to_absolute( response.headers.location, response.url )
   framework.options.session.check_pattern = /Log out/

   • Edit

2. 2 Posted by Joseph on 27 Oct, 2016 05:49 AM

   

   We have also use autologin to tried:
   arachni http://192.168.70.15/ --plugin=autologin:url=http://192.168.70.15/designs/imm/index.php,parameters="user=US... out"
   But after execute it will keep in "Autologin: Logging in, please wait." then don't continue......

   • autologin.jpg 185 KB
   • Edit

3. Support Staff 3 Posted by Tasos Laskos on 27 Oct, 2016 09:49 AM

   

   Can you please retry with --output-debug=3 and upload the output?

   • Edit

4. 4 Posted by Joseph on 28 Oct, 2016 02:04 AM

   

   Thank you for your reply.
   We have use autologin to tried:
   C:\arachni-2.0dev-1.0dev-windows-x86_64\bin>arachni http://192.168.70.15/ --plugin=autologin:url=http://192.168.70.15/designs/imm/index.php,parameters="user=US... out" --output-debug=3

   After 12 hours still stuck in this message(Please refer to the attachment file "autologin02.jpg".)
   Connection: Closed because: [Arachni::Reactor::Connection::Error::Closed] end of file reached

   • autologin01.jpg 564 KB
   • autologin02.jpg 832 KB
   • Edit

5. 5 Posted by Joseph on 28 Oct, 2016 02:08 AM

   

   After 12 hours I retested
   arachni http://192.168.70.15/ --plugin=autologin:url=http://192.168.70.15/designs/imm/index.php,parameters="user=US... out" --output-debug=3

   It stuck in another message(Please refer to the attachment file "autologin03.jpg".)

   • autologin03.jpg 754 KB
   • Edit

6. Support Staff 6 Posted by Tasos Laskos on 28 Oct, 2016 09:01 AM

   

   I think I know what's going on, pushing nightlies now with the fix.
   Will let you know once they're up.

   • Edit

7. Support Staff 7 Posted by Tasos Laskos on 28 Oct, 2016 10:39 AM

   

   Windows nightly is up, please retry and it you get the same behavior please re-enable debugging and show me the messages.

   • Edit

8. 8 Posted by Joseph on 31 Oct, 2016 04:07 AM

   

   Thank you for your reply.
   I've used nightlies(arachni-2.0dev-1.0dev-windows-x86_64) to test.
   And got the scan report and logged error.(Please refer to the attachment file)
   But how do I know the scanner has successful login my web app?

   • 192.168.70.15_2016-10-31_11_18_53__0800.afr.zip 529 KB
   • Edit

9. 9 Posted by Joseph on 31 Oct, 2016 04:09 AM

   

   Attachment file

   • error-5608.log 26.3 KB
   • Edit

10. 10 Posted by Joseph on 04 Nov, 2016 05:23 AM

    

    Hi Tasos
    Could you help me check error log as attatchment file that on nightly build test.
    Thanks!

    • Edit

11. Support Staff 11 Posted by Tasos Laskos on 07 Nov, 2016 06:03 PM

    

    Any chance I can be given access to the webapp?

    • Edit

12. 12 Posted by Joseph on 11 Nov, 2016 08:35 AM

    

    Hi Tasos
    So sorry...
    I can't give you access the webapp.

    • Edit

13. Support Staff 13 Posted by Tasos Laskos on 17 Nov, 2016 04:50 PM

    

    Was the machine under a lot of stress at the time?
    Were you running multiple scans?

    • Edit

14. Tasos Laskos closed this discussion on 14 Dec, 2016 02:12 PM.