Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Empty scan reports #79

Open
Kamerabuilt opened this issue Dec 5, 2018 · 27 comments
Open

Empty scan reports #79

Kamerabuilt opened this issue Dec 5, 2018 · 27 comments

Comments

@Kamerabuilt
Copy link

I am able to scan, Iget a status message, and I see the scan in progress, however, when the scan is completed, and I click on it, I am simply getting a completely blank page with absolutely no info.

If the scan has no results, it should say so.

If it does have output, well then there is a bug and I am not sure what to do.

All it says is "Scanning report" on the top, and nothing else.

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 5, 2018

@Kamerabuilt If there has no vulnerability identified by the tool, it won't show anything on UI. We will add some message on UI if there has no bug.

@sagarpo sagarpo closed this as completed Dec 5, 2018
@Kamerabuilt
Copy link
Author

^^ Thanks, but then, how do I know if its really empty or that there is some bug? Can I access the reports through another method (via CLI for example)?

@Kamerabuilt
Copy link
Author

I scanned a site that I know has many vulns, thats why I have doubts

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 5, 2018

@Kamerabuilt Reports can be accessible from Reports tab. Also which site did you try to scan? Did Astra identify bug?

@sagarpo sagarpo reopened this Dec 5, 2018
@Kamerabuilt
Copy link
Author

But all scans are empty. Is there a way to access them through the command line to make sure if they are really empty?

I tried on a tool called Pixi: https://github.com/thedeadrobots/pixi

It has an API built-in.

Also, I cannot know if bugs were found if the report is empty.

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 5, 2018

@Kamerabuilt Can you share the logs here? Logs file can be found at /logs/scan.log

@Kamerabuilt
Copy link
Author

am gonna reinstall it from scratch and try again, if it still not working, I will upload the logs.

Do you have an app (maybe DVWA) that you know 100% will report bugs with Astra?

@Kamerabuilt
Copy link
Author

Scan status is completed.

/logs/scan.log is empty

Scanning report is empty as well.

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 6, 2018

@Kamerabuilt Astra is a rest API security testing framework. It only scans REST API, not the web app.

@Kamerabuilt
Copy link
Author

Kamerabuilt commented Dec 6, 2018

Did more testing, am still trying to figure out whats happening (on APIs and not just GET URLs), but one thing for sure is if a scan is empty, it should mention something in the reports page.

But why the scan log is empty? should it not have some debugging info, or inform us whether the DB is working, etc?

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 7, 2018

@Kamerabuilt We are logging everything on the logs (logs/scan.log). If there have no logs generated, that means something is not working properly. Can you share your OS, python & flask version?

@Kamerabuilt
Copy link
Author

Kamerabuilt commented Dec 7, 2018

Sure:
Linux kali 4.16.0-kali2-amd64 #1 SMP Debian 4.16.16-2kali2 (2018-07-04) x86_64 GNU/Linux
Python 2.7.15
Python 3.6.7
Python2 flask: 1.0.2

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 10, 2018

@Kamerabuilt Are you using astra through docker?

@Kamerabuilt
Copy link
Author

^^ yes. Any ideas what could it be?

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 10, 2018

If you are using docker, the logs can be found at /app/logs/scan.log. Please share that with us.

@Kamerabuilt
Copy link
Author

Hi, found the logs, can I send them to you by email?

@sagarpo
Copy link
Collaborator

sagarpo commented Dec 10, 2018

@Kamerabuilt You can share it here!

@Kamerabuilt
Copy link
Author

172.17.0.1 - - [10/Dec/2018 16:38:52] "GET / HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:38:52] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:38:57] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:02] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:07] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:12] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:17] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:22] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:23] "POST /scan/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:24] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:27] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:32] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:32] "GET /scan/scanids/ HTTP/1.1" 200 -
Sqlmap is running
SQLi - Scan started.
API is not vulnerable to sql injection
SQLi - Task deleted: c51f365fd6aff638
XXE: Server started.
Exception from sendrequest HTTPConnectionPool(host='localhost', port=8090): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fd30162e0d0>: Failed to establish a new connection: [Errno 111] Connection refused',))
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /scan/scanids/ HTTP/1.1" 200 -

@Kamerabuilt
Copy link
Author

hmm the API / Application I am using does not have rate limiting, not sure whats that exception based on. Any ideas?

@divyang-desai
Copy link

divyang-desai commented Jan 4, 2019

I think this is an issue. We checked our web api project before, Astra was displaying 5 to 6 security issues. However then we deployed a new build on our staging server, we'd nothing fixed for those security issues, but the report now comes up clean. Not sure want is the issue.

@sagarpo
Copy link
Collaborator

sagarpo commented Jan 4, 2019

@divyang-desai I will look into this. Can you share the logs?

@sagarpo
Copy link
Collaborator

sagarpo commented Jan 4, 2019

@Kamerabuilt I will check that

@divyang-desai
Copy link

divyang-desai commented Jan 4, 2019

@sagarpo Find logs from scan.log as below

* Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:24] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:01:33] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -

* Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET / HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:18] "POST /scan/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:47] "GET /scan/scanids/ HTTP/1.1" 200 -
sqlmap is started
SQLi - Scan started.
API is not vulnerable to sql injection
SQLi - Task deleted: 55860cd33a2888a4
XXE: Server started.
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:50] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:55] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/a029f75c1b0685a9b5d55dd63419a7d1 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:08:01] "GET /alerts/a029f75c1b0685a9b5d55dd63419a7d1 HTTP/1.1" 500 -
/app/logs # cat scan.log 
* Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:24] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:01:33] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -

* Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET / HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:18] "POST /scan/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:47] "GET /scan/scanids/ HTTP/1.1" 200 -
sqlmap is started
SQLi - Scan started.
API is not vulnerable to sql injection
SQLi - Task deleted: 55860cd33a2888a4
XXE: Server started.
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:50] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:55] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/a029f75c1b0685a9b5d55dd63419a7d1 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:08:01] "GET /alerts/a029f75c1b0685a9b5d55dd63419a7d1 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 12:09:10] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/a029f75c1b0685a9b5d55dd63419a7d1 [GET]
Traceback (most recent call last):
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
   response = self.full_dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
   rv = self.handle_user_exception(e)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
   reraise(exc_type, exc_value, tb)
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
   rv = self.dispatch_request()
 File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
   return self.view_functions[rule.endpoint](**req.view_args)
 File "./api.py", line 172, in return_alerts
   result = fetch_records(scanid)
 File "./api.py", line 133, in fetch_records
   if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:09:12] "GET /alerts/a029f75c1b0685a9b5d55dd63419a7d1 HTTP/1.1" 500 -


@sagarpo
Copy link
Collaborator

sagarpo commented Jan 16, 2019

@divyang-desai Can you share the test URL that you tried?

@Kamerabuilt
Copy link
Author

Any feedback on this yet? Still same issue (you can test it with pixi, it has a built-in API service, https://github.com/thedeadrobots/pixi) :

Sqlmap is running
SQLi - Scan started.
API is not vulnerable to sql injection
SQLi - Task deleted: c51f365fd6aff638
XXE: Server started.
Exception from sendrequest HTTPConnectionPool(host='localhost', port=8090): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fd30162e0d0>: Failed to establish a new connection: [Errno 111] Connection refused',))
172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /reports.html HTTP/1.1" 200 -

@sagarpo
Copy link
Collaborator

sagarpo commented Feb 5, 2019

@Kamerabuilt Give me some time. I am checking this.

@vinayakooyala
Copy link

@Kamerabuilt how did you get the docker logs? can you please share the command and navigation path?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants