{"action":"created","issue":{"url":"https://api.github.com/repos/Arachni/arachni/issues/585","labels_url":"https://api.github.com/repos/Arachni/arachni/issues/585/labels{/name}","comments_url":"https://api.github.com/repos/Arachni/arachni/issues/585/comments","events_url":"https://api.github.com/repos/Arachni/arachni/issues/585/events","html_url":"https://github.com/Arachni/arachni/issues/585","id":76250712,"number":585,"title":"login_script plugin is not working properly","user":{"login":"Gaurang033","id":2620261,"avatar_url":"https://avatars.githubusercontent.com/u/2620261?v=3","gravatar_id":"","url":"https://api.github.com/users/Gaurang033","html_url":"https://github.com/Gaurang033","followers_url":"https://api.github.com/users/Gaurang033/followers","following_url":"https://api.github.com/users/Gaurang033/following{/other_user}","gists_url":"https://api.github.com/users/Gaurang033/gists{/gist_id}","starred_url":"https://api.github.com/users/Gaurang033/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Gaurang033/subscriptions","organizations_url":"https://api.github.com/users/Gaurang033/orgs","repos_url":"https://api.github.com/users/Gaurang033/repos","events_url":"https://api.github.com/users/Gaurang033/events{/privacy}","received_events_url":"https://api.github.com/users/Gaurang033/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-05-14T06:20:13Z","updated_at":"2015-05-14T10:51:58Z","closed_at":null,"body":"Hi Guys, \r\n\r\nI am trying to use arachni for doing security testing of my website, however the problem is my website requires authentication.\r\n\r\nAs our site, doesn't have any login form (uses extjs), I thought it would be good idea to write login script for that and so I wrote login script using waitr-webdriver as suggested. Login script is working fine. \r\n\r\nHowever when I provide this login script to arachni it fails at check pattern.  If i don't provide blank in check pattern then arachani performs the attack, however it's not able to visit the pages which requires Authentication. \r\n\r\nFollowing is the login script. \r\n\r\n```\r\nrequire 'selenium-webdriver'\r\nrequire 'watir-webdriver'\r\nrequire 'arachni'\r\n\r\nb = Watir::Browser.new\r\nb.goto \"https://10.10.10.10/webui/login\"\r\nb.text_field(:id => 'j_username-inputEl').send_keys 'admin'\r\nb.element(:id => 'j_password-inputEl').send_keys 'symantec'\r\nb.element(:xpath => \"//*[text()='Sign In']\").click\r\nsleep(30)\r\nWatir::Wait.until { b.text.include? 'System is Healthy' }\r\n```\r\n\r\nfollowing is the command I am using \r\n\r\n    arachni https://10.10.10.10/webui/login --plugin=login_script:script=login.rb --session-check-pattern=/.*/ --session-check-url=\"http://110.10.10.10/webui/charts/getactivethreatschartdata\"\r\n\r\n\r\nand following is the output \r\n\r\n```\r\n [!] Session: Logging in via sequence: #<Proc:0x000000012647c8@/usr/local/rvm/gems/ruby-2.0.0-p643/gems/arachni-1.1/components/plugins/login_script.rb:30>\r\n [~] Login script: Running the script.\r\n [~] Login script: Execution completed.\r\n [!] Client: ------------\r\n [!] Client: Queued request.\r\n [!] Client: ID#: 0\r\n [!] Client: Performer: nil\r\n [!] Client: URL: http://10.10.10.10/webui/charts/getactivethreatschartdata\r\n [!] Client: Method: get\r\n [!] Client: Params: {}\r\n [!] Client: Body: \r\n [!] Client: Headers: {\"Accept\"=>\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\", \"User-Agent\"=>\"Arachni/v1.1\"}\r\n [!] Client: Cookies: {}\r\n [!] Client: Train?: false\r\n [!] Client: ------------\r\n [!] Client: ------------\r\n [!] Client: Got response for request ID#: 0\r\n [!] Client: Performer: nil\r\n [!] Client: Status: 0\r\n [!] Client: Code: couldnt_connect\r\n [!] Client: Message: Couldn't connect to server\r\n [!] Client: URL: http://10.10.10.10/webui/charts/getactivethreatschartdata\r\n [!] Client: Headers:\r\n\r\n [!] Client: Parsed headers: {}\r\n [!] Client: Request timed-out! -- ID# 0\r\n [!] Client: ------------\r\n [+] Login script: Login was successful.\r\n [~] Login script: Cookies set to:\r\n [!] \r\n [!] Waiting on 4 plugins to finish:\r\n [!] uniformity, timing_attacks, discovery, healthmap\r\n [!] \r\n```\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/Arachni/arachni/issues/comments/102002755","html_url":"https://github.com/Arachni/arachni/issues/585#issuecomment-102002755","issue_url":"https://api.github.com/repos/Arachni/arachni/issues/585","id":102002755,"user":{"login":"Gaurang033","id":2620261,"avatar_url":"https://avatars.githubusercontent.com/u/2620261?v=3","gravatar_id":"","url":"https://api.github.com/users/Gaurang033","html_url":"https://github.com/Gaurang033","followers_url":"https://api.github.com/users/Gaurang033/followers","following_url":"https://api.github.com/users/Gaurang033/following{/other_user}","gists_url":"https://api.github.com/users/Gaurang033/gists{/gist_id}","starred_url":"https://api.github.com/users/Gaurang033/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Gaurang033/subscriptions","organizations_url":"https://api.github.com/users/Gaurang033/orgs","repos_url":"https://api.github.com/users/Gaurang033/repos","events_url":"https://api.github.com/users/Gaurang033/events{/privacy}","received_events_url":"https://api.github.com/users/Gaurang033/received_events","type":"User","site_admin":false},"created_at":"2015-05-14T10:51:58Z","updated_at":"2015-05-14T10:51:58Z","body":"Hi Tasos,\n\nyes, I checked and realize it has nothing to do with Arachni, I create a\nnew file where I creating phantomjs object, it also gives me the same\nresult. Not able to render the page.\n\nSo I wanted to ask you, is any way where I can change the driver other than\nphantomjs. as with Firefox driver this script is working perfectly fine.\n\n\n\nGaurang Shah\nBlog: qtp-help.blogspot.com\nMobile: +91 7387756556\n\nOn Thu, May 14, 2015 at 3:59 PM, Tasos Laskos <notifications@github.com>\nwrote:\n\n> From what little I can make out in the output, the server returned an\n> empty response, this isn't an Arachni nor browser issue.\n> Is there any chance there's a firewall or something interfering with the\n> scan? Something that blocks Arachni based on its user-agent perhaps?\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/Arachni/arachni/issues/585#issuecomment-101996562>.\n>\n"}}