Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Internal Server Error After successful installation of Caldera #3064

Closed
ksheena opened this issue Oct 2, 2024 · 6 comments
Closed

Internal Server Error After successful installation of Caldera #3064

ksheena opened this issue Oct 2, 2024 · 6 comments
Assignees
@elegantmoose
Labels
bug

Comments

@ksheena
Copy link

ksheena commented Oct 2, 2024

I am getting Internal Server error while accessing http://localhost:8888/

500 Internal Server Error
Server got itself in trouble

There is no error found. It was working fine last week. Here is the debug logs.

root@analyst# python3 server.py --fresh --insecure --build --log DEBUG
2024-10-02 09:29:12 WARNING --insecure flag set. Caldera will use the default user accounts in default.yml config file. server.py:226
INFO Using main config from conf/default.yml server.py:235
2024-10-02 09:29:13 DEBUG Loaded 2 parsers learning_svc.py:20
INFO Setting VueJS environment file. server.py:151
INFO Building VueJS front-end. server.py:273

up to date, audited 768 packages in 2s

100 packages are looking for funding
run npm fund for details

16 vulnerabilities (8 moderate, 7 high, 1 critical)

To address issues that do not require attention, run:
npm audit fix

To address all issues (including breaking changes), run:
npm audit fix --force

Run npm audit for details.

magma@0.0.0 build
node prebundle.js && vite build

Copying all plugin GUI source files to magma
Copying over "access" files...
Copying over "atomic" files...
Copying over "builder" files...
Copying over "compass" files...
Copying over "debrief" files...
Copying over "emu" files...
Copying over "gameboard" files...
Copying over "human" files...
Copying over "manx" files...
Copying over "response" files...
Copying over "sandcat" files...
Copying over "ssl" files...
Copying over "stockpile" files...
Copying over "training" files...
Plugin GUI source files copied!
vite v2.9.15 building for production...
✓ 1483 modules transformed.
dist/assets/favicon.cc1c341b.ico 69.07 KiB
dist/assets/caldera-logo.6a24b35b.png 16.51 KiB
dist/assets/caldera-logo-mtn.88f0ff8a.png 36.07 KiB
dist/assets/darwin-icon-privileged.ffa7a1c2.svg 0.68 KiB
dist/assets/darwin-icon.95280721.svg 0.67 KiB
dist/assets/linux-icon-privileged.d1ede01c.svg 3.66 KiB
dist/assets/linux-icon.df96f069.svg 3.65 KiB
dist/assets/windows-icon-privileged.e4e076e8.svg 0.39 KiB
dist/assets/windows-icon.2e7338a5.svg 0.37 KiB
dist/index.html 0.46 KiB
dist/assets/atomic.14c1a336.js 1.05 KiB / gzip: 0.62 KiB
dist/assets/builder.6ed8e34f.js 1.31 KiB / gzip: 0.71 KiB
dist/assets/compass.9c93073b.js 5.22 KiB / gzip: 2.22 KiB
dist/assets/access.99152918.js 12.71 KiB / gzip: 3.98 KiB
dist/assets/debrief.7a1c24f5.js 28.20 KiB / gzip: 7.45 KiB
dist/assets/emu.18f358c5.js 1.56 KiB / gzip: 0.70 KiB
dist/assets/human.4e7a81eb.js 11.80 KiB / gzip: 3.47 KiB
dist/assets/response.824330bc.js 1.60 KiB / gzip: 0.84 KiB
dist/assets/manx.d65a4640.js 6.54 KiB / gzip: 2.46 KiB
dist/assets/gameboard.c4ac16c4.js 21.79 KiB / gzip: 6.11 KiB
dist/assets/sandcat.2b247b3d.js 0.68 KiB / gzip: 0.44 KiB
dist/assets/ssl.28b916d0.js 0.98 KiB / gzip: 0.62 KiB
dist/assets/access.b689ce59.css 0.32 KiB / gzip: 0.20 KiB
dist/assets/stockpile.278d5b64.js 1.61 KiB / gzip: 0.76 KiB
dist/assets/gameboard.430857df.css 2.01 KiB / gzip: 0.68 KiB
dist/assets/compass.4b402f52.css 0.12 KiB / gzip: 0.12 KiB
dist/assets/training.ff363c9c.js 8.96 KiB / gzip: 3.55 KiB
dist/assets/debrief.854158fe.css 0.79 KiB / gzip: 0.34 KiB
dist/assets/training.9d43ffbb.css 3.86 KiB / gzip: 1.05 KiB
dist/assets/human.d7b43e12.css 2.31 KiB / gzip: 0.77 KiB
dist/assets/response.9692d0ec.css 0.20 KiB / gzip: 0.13 KiB
dist/assets/manx.fdacbfd3.css 3.11 KiB / gzip: 1.52 KiB
dist/assets/index.b7b89f4c.css 248.36 KiB / gzip: 33.84 KiB
dist/assets/index.d0e3f54f.js 1646.08 KiB / gzip: 530.67 KiB

(!) Some chunks are larger than 500 KiB after minification. Consider:

  • Using dynamic import() to code-split the application

  • Use build.rollupOptions.output.manualChunks to improve chunking: https://rollupjs.org/guide/en/#outputmanualchunks

  • Adjust chunk size limit for this warning via build.chunkSizeWarningLimit.
    2024-10-02 09:29:28 INFO VueJS front-end build complete. server.py:276
    INFO Fresh startup: resetting server data. See data/backup directory for data backups. server.py:291
    DEBUG There are 0 jobs in the scheduler data_svc.py:117
    DEBUG Registered contact: websocket contact_svc.py:38
    DEBUG Registered contact: gist contact_svc.py:38
    DEBUG Registered contact: tcp contact_svc.py:38
    DEBUG Registered contact: slack contact_svc.py:38
    DEBUG Registered contact: dns contact_svc.py:38
    DEBUG Registered contact: html contact_svc.py:38
    DEBUG Registered contact: ftp contact_svc.py:38
    DEBUG Registered contact: udp contact_svc.py:38
    DEBUG Registered contact: http contact_svc.py:38
    DEBUG Registered contact tunnel: ssh_tunneling contact_svc.py:53
    INFO Invalid Github Gist personal API token provided. Gist C2 contact will not be started. contact_gist.py:70
    INFO Generating temporary SSH private key. Was unable to use provided SSH private key tunnel_ssh.py:26
    INFO Enabled plugin: fieldmanual app_svc.py:128
    INFO Enabled plugin: manx app_svc.py:128
    INFO Enabled plugin: atomic app_svc.py:128
    WARNING /usr/lib/python3/dist-packages/paramiko/transport.py:219: CryptographyDeprecationWarning: Blowfish has been deprecated and will be removed in a future warnings.py:109
    release
    "class": algorithms.Blowfish,

                  INFO     Enabled plugin: training                                                                                                                                       app_svc.py:128
              INFO     Enabled plugin: magma                                                                                                                                          app_svc.py:128
              INFO     Enabled plugin: access                                                                                                                                         app_svc.py:128
              DEBUG    Configuration (agents) update, setting deployments=['2f34977d-9558-4c12-abad-349716777c6b', '0ab383be-b819-41bf-91b9-1bd4404d83bf',                          base_world.py:46
                       '356d1722-7784-40c4-822b-0cf864b0b36d', '1837b43e-4fff-46b2-a604-a602f7540469']                                                                                              
              INFO     Enabled plugin: response                                                                                                                                       app_svc.py:128
              INFO     Enabled plugin: debrief                                                                                                                                        app_svc.py:128
              DEBUG    Loaded gocat extension module: shared                                                                                                                          sand_svc.py:94
              DEBUG    Loaded gocat extension module: proxy_http                                                                                                                      sand_svc.py:94
              DEBUG    Loaded gocat extension module: shellcode                                                                                                                       sand_svc.py:94
              DEBUG    Loaded gocat extension module: shells                                                                                                                          sand_svc.py:94
              DEBUG    Loaded gocat extension module: native                                                                                                                          sand_svc.py:94
              DEBUG    Loaded gocat extension module: donut                                                                                                                           sand_svc.py:94
              DEBUG    Loaded gocat extension module: slack                                                                                                                           sand_svc.py:94
              DEBUG    Loaded gocat extension module: dns_tunneling                                                                                                                   sand_svc.py:94
              INFO     Enabled plugin: sandcat                                                                                                                                        app_svc.py:128
              INFO     Enabled plugin: compass                                                                                                                                        app_svc.py:128
              INFO     Enabled plugin: stockpile                                                                                                                                      app_svc.py:128
              INFO     Creating SSH listener on 0.0.0.0, port 8022                                                                                                                     logging.py:92
              INFO     serving on 0.0.0.0:2222                                                                                                                                         server.py:741

2024-10-02 09:29:29 WARNING upx does not meet the minimum version of 0.0.0. Upx is an optional dependency which adds more functionality. app_svc.py:183
DEBUG Collision in ability name detected for 52928f462ea8f5fa617aa8c815f5598b and 5e3512c73a461c17ddcb1cc0bbdbeef9 (WinPwn - PowerSharpPack - Kerberoasting Using c_ability.py:103
Rubeus). Modifying name of the second ability to WinPwn - PowerSharpPack - Kerberoasting Using Rubeus (2)...
DEBUG Collision in ability name detected for 7db784562afbea0265fcafc4243b66de and 5ac7f6ec1898d8d408f9cdc687262cc7 (Exfiltration Over Alternative Protocol - SSH). c_ability.py:103
Modifying name of the second ability to Exfiltration Over Alternative Protocol - SSH (2)...
2024-10-02 09:29:30 DEBUG Collision in ability name detected for f674301b84ea3344f119270bf7bb97cd and 4d4b29abb6b1e580e33c0035c1fc37ad (rm -rf). Modifying name of the second ability c_ability.py:103
to rm -rf (2)...
2024-10-02 09:29:31 DEBUG Collision in ability name detected for 3bfd3a51f3c7352d7c6c6c785d01e5f7 and 9bd1997d793d0ac5b1aea4888c75c932 (Loadable Kernel Module based Rootkit). c_ability.py:103
Modifying name of the second ability to Loadable Kernel Module based Rootkit (2)...
DEBUG Collision in ability name detected for 9bd17863cd45f82002a6f011de139363 and ab44803d5a9c299258efff185b0f70b5 (rc.common). Modifying name of the second c_ability.py:103
ability to rc.common (2)...
2024-10-02 09:29:32 DEBUG Collision in ability name detected for dca8b042fcdffcc1f5cddcff4122c434 and 44705da4b28c8fa57fc2a2940b34565a (System Information Discovery). Modifying name c_ability.py:103
of the second ability to System Information Discovery (2)...
DEBUG Collision in ability name detected for 26d3702887944abcc64b406baf8f8e43 and 68a0a328719faa26fff5b92e18108b3f (Enumerate users and groups). Modifying name of c_ability.py:103
the second ability to Enumerate users and groups (2)...
DEBUG Collision in ability name detected for b73d58b20bcb138a26175f240cca9de2 and 44705da4b28c8fa57fc2a2940b34565a (System Information Discovery). Modifying name c_ability.py:103
of the second ability to System Information Discovery (2)...
DEBUG Collision in ability name detected for 4370001012f5f0df001269627b4737e9 and 942316dc6a362e44b248a872e5f42c92 (System Owner/User Discovery). Modifying name c_ability.py:103
of the second ability to System Owner/User Discovery (2)...
DEBUG Collision in ability name detected for c84a57391dbc724dc51436deb3e0ca00 and e0c75b4cc32124ef4c61508694fd0808 (Get-DomainUser with PowerView). Modifying name c_ability.py:103
of the second ability to Get-DomainUser with PowerView (2)...
2024-10-02 09:29:33 DEBUG Collision in ability name detected for fcf71ee3-d1a9-4136-b919-9e5f6da43608 and 3838447b079b302fe75b700a70163815 (Clear Logs). Modifying name of the second c_ability.py:103
ability to Clear Logs (2)...
DEBUG Collision in ability name detected for 10a9d979-e342-418a-a9b0-002c483e0fa6 and b1d41972-3ad9-4aa1-8f7f-05f049a2980e (Start 54ndc47). Modifying name of the c_ability.py:103
second ability to Start 54ndc47 (2)...
DEBUG Collision in ability name detected for 2488245e-bcbd-405d-920e-2de27db882b3 and 1d3cb1429f530cb89f41c65e57f03db4 (Query Registry). Modifying name of the c_ability.py:103
second ability to Query Registry (2)...
2024-10-02 09:29:39 INFO Docs built successfully. hook.py:58
DEBUG Using default login handler. auth_svc.py:209
DEBUG Created authentication group: blue auth_svc.py:72
DEBUG Created authentication group: red auth_svc.py:72
DEBUG = connection is CONNECTING protocol.py:255
DEBUG > GET /system/ready HTTP/1.1 client.py:115
DEBUG > Host: 0.0.0.0:7012 client.py:117
DEBUG > Upgrade: websocket client.py:117
DEBUG > Connection: Upgrade client.py:117
DEBUG > Sec-WebSocket-Key: v44pMsf83FbIpby82j1XDg== client.py:117
DEBUG > Sec-WebSocket-Version: 13 client.py:117
DEBUG > Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits client.py:117
DEBUG > User-Agent: Python/3.8 websockets/11.0.3 client.py:117
DEBUG < HTTP/1.1 101 Switching Protocols client.py:148
DEBUG < Upgrade: websocket client.py:150
DEBUG < Connection: Upgrade client.py:150
DEBUG < Sec-WebSocket-Accept: k8iQwAQNW09jLIZ2TyjFkvKP23U= client.py:150
DEBUG < Sec-WebSocket-Extensions: permessage-deflate; server_max_window_bits=12; client_max_window_bits=12 client.py:150
DEBUG < Date: Wed, 02 Oct 2024 07:29:39 GMT client.py:150
DEBUG < Server: Python/3.8 websockets/11.0.3 client.py:150
DEBUG = connection is OPEN protocol.py:356
DEBUG < CLOSE 1000 (OK) [2 bytes] protocol.py:1168
DEBUG = connection is CLOSING protocol.py:1223
DEBUG > CLOSE 1000 (OK) [2 bytes] protocol.py:1174
DEBUG = connection is CLOSED protocol.py:1494
INFO All systems ready. server.py:104

██████╗ █████╗ ██╗ ██████╗ ███████╗██████╗ █████╗
██╔════╝██╔══██╗██║ ██╔══██╗██╔════╝██╔══██╗██╔══██╗
██║ ███████║██║ ██║ ██║█████╗ ██████╔╝███████║
██║ ██╔══██║██║ ██║ ██║██╔══╝ ██╔══██╗██╔══██║
╚██████╗██║ ██║███████╗██████╔╝███████╗██║ ██║██║ ██║
╚═════╝╚═╝ ╚═╝╚══════╝╚═════╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝
@ksheena ksheena added the bug label Oct 2, 2024
@github-actions GitHub Actions
Copy link

github-actions bot commented Oct 2, 2024

Looks like your first issue -- we aim to respond to issues as quickly as possible. In the meantime, check out our documentation here: http://caldera.readthedocs.io/

@ksheena
Copy link
Author

ksheena commented Oct 2, 2024

Screenshot from 2024-10-02 09-44-15

@elegantmoose
Copy link
Contributor

Believe this is fixed via #3063, repull and confirm for me dont have issue still.

@efanmak efanmak mentioned this issue Oct 4, 2024
Closed
@efanmak
Copy link

efanmak commented Oct 4, 2024

I see that when you make a git clone you receive the old version of requirement.txt file which sets the aiohttp==3.9.3.
When i changed it to aiohttp==3.10.8 (as the elegant did in the in the bug fix 3063) it worked ,
but after that i faced the problem 2901

@ksheena
Copy link
Author

ksheena commented Oct 7, 2024

Thank you. It is working now.

However, encountered one more issue. Noticed below errors while installation by enabling additional plugins in default.yml file. Login is not working:
ERROR Error enabling plugin=ssl, [Errno 2] No such file or directory: 'haproxy' c_plugin.py:70
INFO Enabled plugin: ssl app_svc.py:128
INFO Enabled plugin: fieldmanual app_svc.py:128
INFO Enabled plugin: manx app_svc.py:128
INFO Enabled plugin: atomic app_svc.py:128
2024-10-04 09:22:20 ERROR Error loading extension=plugins.human.pyhuman.app.workflows.open_office_writer, Can't connect to display ":100": b'No protocol specified\n' human_svc.py:52
ERROR Error loading extension=plugins.human.pyhuman.app.workflows.open_office_calc, Can't connect to display ":100": b'No protocol specified\n' human_svc.py:52
INFO Enabled plugin: human app_svc.py:128
WARNING /usr/lib/python3/dist-packages/paramiko/transport.py:220: CryptographyDeprecationWarning: Blowfish has been deprecated and will be removed in a future warnings.py:109
release
"class": algorithms.Blowfish,

                ERROR    Error enabling plugin=builder, Error while fetching server API version: ('Connection aborted.', FileNotFoundError(2, 'No such file or directory'))

Rest all look good with default.yml file in repo.

@elegantmoose
Copy link
Contributor

Yes, plugins may have their own installation steps as well. You have to check their READMEs too, as we dont put plugin dependencies in the core repo.

e.g.
https://github.com/mitre/SSL

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@elegantmoose elegantmoose

Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@elegantmoose @ksheena @efanmak