Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

请问xray扫描发现漏洞,页面不显示 #37

Open
Cliffordwr opened this issue Jun 27, 2022 · 4 comments
Open

请问xray扫描发现漏洞,页面不显示 #37

Cliffordwr opened this issue Jun 27, 2022 · 4 comments

Comments

@Cliffordwr
Copy link

请问大佬
xray扫描通过查看日志可知发现漏洞,但是web页面漏洞数仍为0,是什么原因导致的。

@Cliffordwr
Copy link
Author

[ERRO] 2022-06-27 15:25:54 [plugin-base:bifrost.go:211] error when sending result to webhook url, err Post "http://h_server_1:5005/webhook": context deadline exceeded (Client.Timeout exceeded while awaiting headers), result {"data":{"create_time":1656343495815,"detail":{"ad ...
报错如上
查看服务端docker和客户端docker发现时区不一样 不确定是不是这个问题

@Cliffordwr
Copy link
Author

修改失去后还是不行
root@41b0447966fa:/app/vuln_scan/xray_scan# curl http://h_server_1:5005/webhook

<title>500 Internal Server Error</title>

Internal Server Error

The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there is an error in the application.

root@41b0447966fa:/app/vuln_scan/xray_scan# 响应码500 请问大佬该如何解决

@SiJiDo
Copy link
Owner

SiJiDo commented Jun 28, 2022

不是区时问题,你要看你webhook的地址对不对,h_server_1:5005是server的容器地址,只有在client和server一体时才会识别到这个地址,如果分离的话就要填公网ip,还有就是确定server的容器名是不是叫h_server_1

@Cliffordwr
Copy link
Author

大佬您好 感谢回复 方便的话 麻烦您加我一下微信 便于沟通细节v:17860505781
我部署的时候客户端和服务端的docker 都是在一台vps上并且server容器名确定是h_server_1
经过我查看日志 发现在上报漏洞的时候 是如下报错(其他功能都正常 就是漏洞扫描时 xray上报不正常)
172.18.0.3 - - [28/Jun/2022 11:15:20] "POST /webhook HTTP/1.1" 200 -
172.18.0.3 - - [28/Jun/2022 11:15:25] "POST /webhook HTTP/1.1" 200 -
172.18.0.3 - - [28/Jun/2022 11:15:30] "POST /webhook HTTP/1.1" 200 -
172.18.0.3 - - [28/Jun/2022 11:15:35] "POST /webhook HTTP/1.1" 200 -
[2022-06-28 11:15:38,798] ERROR in app: Exception on /webhook [POST]
Traceback (most recent call last):
File "/usr/local/lib/python3.6/dist-packages/flask/app.py", line 2447, in wsgi_app
response = self.full_dispatch_request()
File "/usr/local/lib/python3.6/dist-packages/flask/app.py", line 1952, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/usr/local/lib/python3.6/dist-packages/flask/app.py", line 1821, in handle_user_exception
reraise(exc_type, exc_value, tb)
File "/usr/local/lib/python3.6/dist-packages/flask/_compat.py", line 39, in reraise
raise value
File "/usr/local/lib/python3.6/dist-packages/flask/app.py", line 1950, in full_dispatch_request
rv = self.dispatch_request()
File "/usr/local/lib/python3.6/dist-packages/flask/app.py", line 1936, in dispatch_request
return self.view_functionsrule.endpoint
File "/app/app/scan/routes.py", line 24, in webhookroute
return webhook()
File "/app/app/scan/run.py", line 117, in webhook
Sendemail(isdaliy=False, tool=v.vuln_tool, url=v.vuln_name, info=v.vuln_info, poc=v.vuln_poc, level=v.vuln_level,scantime=time.strftime('%Y-%m-%d %H:%M:%S', time.localtime(time.time())) )
File "/app/app/schedulertasks/emailsend.py", line 105, in Sendemail
smtpObj.connect(smtp_server, 25) # 25 为 SMTP 端口号
File "/usr/lib/python3.6/smtplib.py", line 336, in connect
self.sock = self._get_socket(host, port, self.timeout)
File "/usr/lib/python3.6/smtplib.py", line 307, in _get_socket
self.source_address)
File "/usr/lib/python3.6/socket.py", line 724, in create_connection
raise err
File "/usr/lib/python3.6/socket.py", line 713, in create_connection
sock.connect(sa)
OSError: [Errno 99] Cannot assign requested address
172.18.0.3 - - [28/Jun/2022 11:15:38] "POST /webhook HTTP/1.1" 500 -
172.18.0.3 - - [28/Jun/2022 11:15:40] "POST /webhook HTTP/1.1" 200 -
172.18.0.3 - - [28/Jun/2022 11:15:45] "POST /webhook HTTP/1.1" 200 -
172.18.0.3 - - [28/Jun/2022 11:15:50] "POST /webhook HTTP/1.1" 200 -

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants