-
Notifications
You must be signed in to change notification settings - Fork 162
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Selenium-webdriver 3.8.0. Phantomjs folder is missing #81
Comments
@sampathmende in previous post i explained you,This is a dependency issue, some how you need to fix it yourself . And we are not facing this issue in our systems |
@kmadhusudhan Dear how can i fix the contents inside the gem . you got my question correct?? |
selenium-webdriver is a gem , any way selenium-webdriver is not included in our gemfile , you can verify from https://github.com/olacabs/jackhammer/blob/master/web/app/Gemfile. We are depending on arachni gem for running web-scans and Arachni depend on selenium-webdriver. Refer https://rubygems.org/gems/arachni/versions/1.4 for Arachni dependencies |
you almost closed the doors ?? |
here i have raised issue in arachini forum on github. |
@kmadhusudhan I am not a ruby developer. As a end user I put my best efforts to run jackhammer on my machine |
I have to side with @sampathmende on this. Jackhammer has integrated with Arachni in a way that creates a complicated dependency situation, requiring users to have to setup all Arachni dependencies manually, which is very hard to get right and it's why I've provided official self-contained packages. You should be asking your users for Arachni's REST server address and integrate via the REST API and not pull the gem, as this can also introduce licensing issues. Users should download the proper Arachni package for their platform on their own to ensure compatibility and license compliance and all will be well. |
hey @kmadhusudhan , |
refer https://github.com/SeleniumHQ/selenium/blob/master/rb/lib/selenium/webdriver.rb , line no: 39 Phantomjs getting auto loaded . when i do ls -lrt $GEM_HOME/selenium-webdriver-3.8.0/lib/selenium/webdriver , it listed below files i could see Selenium-webdriver 3.8.0 dose not have Phantomjs. And when i do ln -s /usr/local/bin/phantomjs $GEM_HOME/selenium-webdriver-3.8.0/lib/selenium/webdriver/phantomjs and do agin ls -lrt $GEM_HOME/selenium-webdriver-3.8.0/lib/selenium/webdriver after building soft link ,it listed below files please follow these steps to build soft link ,After building soft link you need to restart sidekiq from web docker |
Thankyou @kmadhusudhan for your reply and solution i will try it out. root@f43f32501a38:/home/app/log/scans# gem environment
|
Some more observations by comparing your docker setup to our docker setup And list file of selenium web-driver contains as below how Selenium-webdriver 3.8.0 got installed in your system ? did you modify Gemfile or Gemfile.lock? |
selenium-webdriver-3.8.0 is mentioned Gemfile.lock at line at 485 |
As of now you modify version to 3.7.0 and lets verify in your system . we will figure out how the version got upgraded and why we modified . |
again sh ./docker-build.sh is required??? |
yes running docker-build script is required after changing gem version |
I have build it again with selenium-webdriver 3.7.0 (updated in Gemfile.lock) root@7bd2bcb5e215:/home/app/log# ls Logfile created on 2018-02-22 13:34:09 +0000 by logger.rb/53141/root/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/rb-readline-0.5.1/lib/readline.rb:458: warning: already initialized constant Readline::HISTORY |
Any update |
let me know scan status , if scan status is completed , then scan has finished with no errors. did you verify Arachni has run ? . if not run , check if arachni disabled from Admin settings. finally you need to make sure that arachni running for your scan |
dear @kmadhusudhan , root@7bd2bcb5e215:/home/app/log# ls scanner is not started it seems. tell me i have already shared sidekiq.log and no scan logs i have /root/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/rb-readline-0.5.1/lib/readline.rb:458: warning: already initialized constant Readline::HISTORY |
Following logs say Arachni has run for the added target. Either it found vulnerabilities or not, You can verify from UI, on the clicking view results link or can check vulnerabilities count on listing page of scans. if there are no results you can Re-verify the vulnerabilities by running Arachni scanner manually.
|
1Q : i did not find any vulnerability/issue in the application and file in scans folder also showing empty. It has to show issues in app and log file should not be empty?? rt?? I waited for two days to complete the scan. |
@kmadhusudhan is there any update ???? 1Q : i did not find any vulnerability/issue in the application and file in scans folder also showing empty. It has to show issues in app and log file should not be empty?? rt?? I waited for two days to complete the scan. Thanks in advance |
we are writing logs only when an application throws error. did you check sidekiq process status while scan running ? |
sidekiq running without any issues. i have sent entire sidekiq logs in the post above. but scan logs are empty. It means its not scanning. But if i dont change the selenium-webdriver version to 8.0 means if i run with 7.0(default in gemfile.lock) in Gemfile.lock its throwing driver error that you know. |
@kmadhusudhan any update ?? |
@kmadhusudhan any update ???? |
@kmadhusudhan Please helps us solve this issue. It is already a headache to make Jackhammer run. We will appreciate you feedback on no vulnerability after scanning a vulnerable web page. |
@dkogue @sampathmende |
@kmadhusudhan Thanks in advance for your support. |
|
I unzipped gem Selenium-webdriver 3.8.0 and checked for phantomjs folder but not found. Thats why its throwing error like can't load such file selenium/webdriver /phantomjs
Its not a path issue.
But i found the folder in github sourcecode of above gem but not in rubygems.org
But in 3.6.0 i found in rubygems. Org website and in github source code also.
I tried changing in Selenium-webdriver version to 3.6.0 Gemfile.lock file. But its not scanning and throwing sidekiq errors. But in scans folder it created 1.log file thats is empty
Pls resolve earliest
The text was updated successfully, but these errors were encountered: