Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docs for XXE Injection Emulator #335

Merged
merged 4 commits into from
Jul 7, 2019
Merged

Conversation

rjt-gupta
Copy link
Collaborator

No description provided.

@rjt-gupta
Copy link
Collaborator Author

rjt-gupta commented Jun 21, 2019

@rnehra01 Can you please look at the docker failure in the first commit's travis log.

I think one possible fix is to pull the latest images (but requires authentication) before using docker_compose up.

@rnehra01
Copy link
Collaborator

The failing seems to be a problem with alphine. On running the phpox dockerfile locally, I'm getting

Step 3/6 : RUN apk -U --no-cache add                build-base                file                git                make                php7                php7-dev                php7-tokenizer                python3                python3-dev                re2c &&     pip3 install --no-cache-dir --upgrade pip &&     git clone --depth=1 https://github.com/mushorg/BFR /opt/BFR &&     cd /opt/BFR &&     phpize7 &&     ./configure       --with-php-config=/usr/bin/php-config7       --enable-bfr &&     make &&     make install &&     cd / &&     rm -rf /opt/BFR /tmp/* /var/tmp/* &&     echo "zend_extension = "$(find /usr -name bfr.so) >> /etc/php7/php.ini &&     git clone --depth=1 https://github.com/mushorg/phpox /opt/phpox &&     cd /opt/phpox &&     cp /root/dist/sandbox.py . &&     pip3 install -r requirements.txt &&     make &&     apk del --purge build-base                     git                     php7-dev                     python3-dev &&     rm -rf /root/* &&     rm -rf /var/cache/apk/*
 ---> Running in c75cf7a3eb89
fetch http://dl-cdn.alpinelinux.org/alpine/v3.10/main/armv7/APKINDEX.tar.gz
WARNING: Ignoring http://dl-cdn.alpinelinux.org/alpine/v3.10/main/armv7/APKINDEX.tar.gz: temporary error (try again later)
fetch http://dl-cdn.alpinelinux.org/alpine/v3.10/community/armv7/APKINDEX.tar.gz
WARNING: Ignoring http://dl-cdn.alpinelinux.org/alpine/v3.10/community/armv7/APKINDEX.tar.gz: temporary error (try again later)
ERROR: unsatisfiable constraints:
  build-base (missing):
    required by: world[build-base]
  file (missing):
    required by: world[file]

There seems to be a problem be apk -U --no-cache add. @glaslos any ideas to fix this?

@afeena
Copy link
Collaborator

afeena commented Jul 3, 2019

Images should not be pulled, see #338 for additional info about build error fix

@rjt-gupta
Copy link
Collaborator Author

Alternatively, using just python3 instead of 3.6 also fixes the issue. But maybe @afeena 's fix is more robust.

@coveralls
Copy link

Pull Request Test Coverage Report for Build 1034

  • 2 of 3 (66.67%) changed or added relevant lines in 1 file are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.03%) to 76.729%

Changes Missing Coverage Covered Lines Changed/Added Lines %
tanner/emulators/sqli.py 2 3 66.67%
Totals Coverage Status
Change from base Build 1013: -0.03%
Covered Lines: 1309
Relevant Lines: 1706

💛 - Coveralls

@afeena
Copy link
Collaborator

afeena commented Jul 4, 2019

@rjt-gupta I don't mind any solution until it works :) I created pr just to show you the direction, you can choose anything you like :)

@rjt-gupta
Copy link
Collaborator Author

@rjt-gupta I don't mind any solution until it works :) I created pr just to show you the direction, you can choose anything you like :)

That's so nice of you.
@rnehra01 What do you think?

@rnehra01
Copy link
Collaborator

rnehra01 commented Jul 4, 2019

@rjt-gupta I don't mind any solution until it works :) I created pr just to show you the direction, you can choose anything you like :)

That's so nice of you.
@rnehra01 What do you think?

Yeah, no problem for me.

tanner/emulators/sqli.py Outdated Show resolved Hide resolved
@rjt-gupta
Copy link
Collaborator Author

Please merge this first.

@rnehra01 rnehra01 merged commit 48bf597 into mushorg:master Jul 7, 2019
@rjt-gupta rjt-gupta deleted the xxe-docs branch July 7, 2019 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants