Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Docs for XXE Injection Emulator #335

Merged
merged 4 commits into from
Jul 7, 2019
Merged

Conversation

rjt-gupta
Copy link
Collaborator

No description provided.

@rjt-gupta
Copy link
Collaborator Author

rjt-gupta commented Jun 21, 2019

@rnehra01 Can you please look at the docker failure in the first commit's travis log.

I think one possible fix is to pull the latest images (but requires authentication) before using docker_compose up.

@rnehra01
Copy link
Collaborator

The failing seems to be a problem with alphine. On running the phpox dockerfile locally, I'm getting

Step 3/6 : RUN apk -U --no-cache add                build-base                file                git                make                php7                php7-dev                php7-tokenizer                python3                python3-dev                re2c &&     pip3 install --no-cache-dir --upgrade pip &&     git clone --depth=1 https://github.com/mushorg/BFR /opt/BFR &&     cd /opt/BFR &&     phpize7 &&     ./configure       --with-php-config=/usr/bin/php-config7       --enable-bfr &&     make &&     make install &&     cd / &&     rm -rf /opt/BFR /tmp/* /var/tmp/* &&     echo "zend_extension = "$(find /usr -name bfr.so) >> /etc/php7/php.ini &&     git clone --depth=1 https://github.com/mushorg/phpox /opt/phpox &&     cd /opt/phpox &&     cp /root/dist/sandbox.py . &&     pip3 install -r requirements.txt &&     make &&     apk del --purge build-base                     git                     php7-dev                     python3-dev &&     rm -rf /root/* &&     rm -rf /var/cache/apk/*
 ---> Running in c75cf7a3eb89
fetch http://dl-cdn.alpinelinux.org/alpine/v3.10/main/armv7/APKINDEX.tar.gz
WARNING: Ignoring http://dl-cdn.alpinelinux.org/alpine/v3.10/main/armv7/APKINDEX.tar.gz: temporary error (try again later)
fetch http://dl-cdn.alpinelinux.org/alpine/v3.10/community/armv7/APKINDEX.tar.gz
WARNING: Ignoring http://dl-cdn.alpinelinux.org/alpine/v3.10/community/armv7/APKINDEX.tar.gz: temporary error (try again later)
ERROR: unsatisfiable constraints:
  build-base (missing):
    required by: world[build-base]
  file (missing):
    required by: world[file]

There seems to be a problem be apk -U --no-cache add. @glaslos any ideas to fix this?

@afeena
Copy link
Collaborator

afeena commented Jul 3, 2019

Images should not be pulled, see #338 for additional info about build error fix

@rjt-gupta
Copy link
Collaborator Author

Alternatively, using just python3 instead of 3.6 also fixes the issue. But maybe @afeena 's fix is more robust.

@coveralls
Copy link

Pull Request Test Coverage Report for Build 1034

  • 2 of 3 (66.67%) changed or added relevant lines in 1 file are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.03%) to 76.729%

Changes Missing Coverage Covered Lines Changed/Added Lines %
tanner/emulators/sqli.py 2 3 66.67%
Totals Coverage Status
Change from base Build 1013: -0.03%
Covered Lines: 1309
Relevant Lines: 1706

💛 - Coveralls

@afeena
Copy link
Collaborator

afeena commented Jul 4, 2019

@rjt-gupta I don't mind any solution until it works :) I created pr just to show you the direction, you can choose anything you like :)

@rjt-gupta
Copy link
Collaborator Author

@rjt-gupta I don't mind any solution until it works :) I created pr just to show you the direction, you can choose anything you like :)

That's so nice of you.
@rnehra01 What do you think?

@rnehra01
Copy link
Collaborator

rnehra01 commented Jul 4, 2019

@rjt-gupta I don't mind any solution until it works :) I created pr just to show you the direction, you can choose anything you like :)

That's so nice of you.
@rnehra01 What do you think?

Yeah, no problem for me.

tanner/emulators/sqli.py Outdated Show resolved Hide resolved
@rjt-gupta
Copy link
Collaborator Author

Please merge this first.

@rnehra01 rnehra01 merged commit 48bf597 into mushorg:master Jul 7, 2019
@rjt-gupta rjt-gupta deleted the xxe-docs branch July 7, 2019 09:31
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants