{"action":"opened","issue":{"url":"https://api.github.com/repos/andresriancho/w3af/issues/12728","labels_url":"https://api.github.com/repos/andresriancho/w3af/issues/12728/labels{/name}","comments_url":"https://api.github.com/repos/andresriancho/w3af/issues/12728/comments","events_url":"https://api.github.com/repos/andresriancho/w3af/issues/12728/events","html_url":"https://github.com/andresriancho/w3af/issues/12728","id":108488069,"number":12728,"title":"[Auto-Generated] Bug Report -     assert self._state == RUN","user":{"login":"1d3df9903ad","id":3416690,"avatar_url":"https://avatars.githubusercontent.com/u/3416690?v=3","gravatar_id":"","url":"https://api.github.com/users/1d3df9903ad","html_url":"https://github.com/1d3df9903ad","followers_url":"https://api.github.com/users/1d3df9903ad/followers","following_url":"https://api.github.com/users/1d3df9903ad/following{/other_user}","gists_url":"https://api.github.com/users/1d3df9903ad/gists{/gist_id}","starred_url":"https://api.github.com/users/1d3df9903ad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/1d3df9903ad/subscriptions","organizations_url":"https://api.github.com/users/1d3df9903ad/orgs","repos_url":"https://api.github.com/users/1d3df9903ad/repos","events_url":"https://api.github.com/users/1d3df9903ad/events{/privacy}","received_events_url":"https://api.github.com/users/1d3df9903ad/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-09-26T19:26:22Z","updated_at":"2015-09-26T19:26:22Z","closed_at":null,"body":"No user description was provided for this bug report given that it was related to handled exceptions in scan with id 215959d3cb\n## Version Information\n```\n  Python version: 2.7.9 (default, Mar  1 2015, 18:22:53) [GCC 4.9.2]\n  GTK version: 2.24.25\n  PyGTK version: 2.24.0\n  w3af version:\n    w3af - Web Application Attack and Audit Framework\n    Version: 1.6.54\n    Distribution: Kali Linux\n    Author: Andres Riancho and the w3af team.\n```\n## Traceback\n```pytb\nA \"AssertionError\" exception was found while running audit.phishing_vector on \"Method: GET | http://domain/%%75F%460e\\%%75F%4630%uF%46%31%31%uF%462%32%%75%46%46%352%%75%46F54%u%46F23%uFF2c%uFF43%%75%46F4%66%%75%46%46%31%30%u%46F3%33%%75%46F%336%%75FF%32%31%%75F%46%32%35%u%46F34%uFF%33%34%%75%46%4651%%75%46%464d%%75FF56\\%uF%46%30e\\%u%46F%30e%uFF%2d%312%uFF%2d1%31%u%46F%30e\\%%75FF%30e\\ | Query string: (DrN6o)\". The exception was: \"\" at pool276.py:imap_unordered():332.The full traceback is:\n  File \"/usr/share/w3af/w3af/core/controllers/core_helpers/consumers/audit.py\", line 126, in _audit\n    plugin.audit_with_copy(fuzzable_request, orig_resp)\n  File \"/usr/share/w3af/w3af/core/controllers/plugins/audit_plugin.py\", line 141, in audit_with_copy\n    return self.audit(fuzzable_request, orig_resp)\n  File \"/usr/share/w3af/w3af/plugins/audit/phishing_vector.py\", line 64, in audit\n    self._analyze_result)\n  File \"/usr/share/w3af/w3af/core/controllers/plugins/plugin.py\", line 205, in _send_mutants_in_threads\n    for result in imap_unordered(awre, args):\n  File \"/usr/share/w3af/w3af/core/controllers/threads/pool276.py\", line 332, in imap_unordered\n    assert self._state == RUN\n\n```\n## Enabled Plugins\n```python\n{'attack': {},\n 'audit': {u'blind_sqli': <OptionList: eq_limit>,\n           u'buffer_overflow': <OptionList: >,\n           u'cors_origin': <OptionList: origin_header_value>,\n           u'csrf': <OptionList: >,\n           u'dav': <OptionList: >,\n           u'eval': <OptionList: use_time_delay|use_echo>,\n           u'file_upload': <OptionList: extensions>,\n           u'format_string': <OptionList: >,\n           u'frontpage': <OptionList: >,\n           u'generic': <OptionList: diff_ratio>,\n           u'global_redirect': <OptionList: >,\n           u'htaccess_methods': <OptionList: >,\n           u'ldapi': <OptionList: >,\n           u'lfi': <OptionList: >,\n           u'memcachei': <OptionList: >,\n           u'mx_injection': <OptionList: >,\n           u'os_commanding': <OptionList: >,\n           u'phishing_vector': <OptionList: >,\n           u'preg_replace': <OptionList: >,\n           u'redos': <OptionList: >,\n           u'response_splitting': <OptionList: >,\n           u'rfd': <OptionList: >,\n           u'rfi': <OptionList: listen_address|listen_port|use_w3af_site>,\n           u'shell_shock': <OptionList: >,\n           u'sqli': <OptionList: >,\n           u'ssi': <OptionList: >,\n           u'ssl_certificate': <OptionList: minExpireDays|caFileName>,\n           u'un_ssl': <OptionList: >,\n           u'xpath': <OptionList: >,\n           u'xss': <OptionList: persistent_xss>,\n           u'xst': <OptionList: >},\n 'auth': {'detailed': {}},\n 'bruteforce': {u'basic_auth': <OptionList: usersFile|passwdFile|useSvnUsers|stopOnFirst|passEqUser|useLeetPasswd|useEmails|useProfiling|profilingNumber|comboFile|comboSeparator>,\n                u'form_auth': <OptionList: usersFile|passwdFile|useSvnUsers|stopOnFirst|passEqUser|useLeetPasswd|useEmails|useProfiling|profilingNumber|comboFile|comboSeparator>},\n 'crawl': {u'bing_spider': <OptionList: result_limit>,\n           u'oracle_discovery': <OptionList: >,\n           u'phishtank': <OptionList: >,\n           u'phpinfo': <OptionList: >,\n           u'robots_txt': <OptionList: >,\n           u'sitemap_xml': <OptionList: >,\n           u'user_dir': <OptionList: >,\n           u'web_spider': <OptionList: only_forward|follow_regex|ignore_regex>},\n 'evasion': {'backspace_between_dots': {},\n             'full_width_encode': {},\n             'mod_security': {},\n             'reversed_slashes': {},\n             'rnd_case': {},\n             'rnd_hex_encode': {},\n             'rnd_param': {},\n             'rnd_path': {},\n             'self_reference': {},\n             'shift_out_in_between_dots': {},\n             'x_forwarded_for': {}},\n 'grep': {u'analyze_cookies': <OptionList: >,\n          u'blank_body': <OptionList: >,\n          'cache_control': {},\n          'clamav': {},\n          u'click_jacking': <OptionList: >,\n          u'code_disclosure': <OptionList: >,\n          'content_sniffing': {},\n          u'credit_cards': <OptionList: >,\n          'cross_domain_js': {},\n          'csp': {},\n          u'directory_indexing': <OptionList: >,\n          u'dom_xss': <OptionList: >,\n          u'dot_net_event_validation': <OptionList: >,\n          u'error_500': <OptionList: >,\n          u'error_pages': <OptionList: >,\n          u'feeds': <OptionList: >,\n          u'file_upload': <OptionList: >,\n          u'form_autocomplete': <OptionList: >,\n          'form_cleartext_password': {},\n          u'get_emails': <OptionList: only_target_domain>,\n          u'hash_analysis': <OptionList: >,\n          u'html_comments': <OptionList: >,\n          u'http_auth_detect': <OptionList: >,\n          u'http_in_body': <OptionList: >,\n          u'lang': <OptionList: >,\n          u'meta_tags': <OptionList: >,\n          u'motw': <OptionList: >,\n          u'objects': <OptionList: >,\n          u'oracle': <OptionList: >,\n          u'password_profiling': <OptionList: >,\n          u'path_disclosure': <OptionList: >,\n          u'private_ip': <OptionList: >,\n          u'ssn': <OptionList: >,\n          u'strange_headers': <OptionList: >,\n          u'strange_http_codes': <OptionList: >,\n          u'strange_parameters': <OptionList: >,\n          u'strange_reason': <OptionList: >,\n          'strict_transport_security': {},\n          u'svn_users': <OptionList: >,\n          u'symfony': <OptionList: override>,\n          'url_session': {},\n          u'user_defined_regex': <OptionList: single_regex|regex_file_path>,\n          'websockets_links': {},\n          u'wsdl_greper': <OptionList: >,\n          'xss_protection_header': {}},\n 'infrastructure': {u'afd': <OptionList: >,\n                    u'allowed_methods': <OptionList: execOneTime|reportDavOnly>,\n                    u'detect_reverse_proxy': <OptionList: >,\n                    u'detect_transparent_proxy': <OptionList: >,\n                    u'dns_wildcard': <OptionList: >,\n                    'domain_dot': {},\n                    u'dot_net_errors': <OptionList: >,\n                    'favicon_identification': {},\n                    'find_jboss': {},\n                    u'find_vhosts': <OptionList: >,\n                    'finger_bing': {},\n                    'finger_google': {},\n                    'finger_pks': {},\n                    u'fingerprint_WAF': <OptionList: >,\n                    u'fingerprint_os': <OptionList: >,\n                    'frontpage_version': {},\n                    u'halberd': <OptionList: >,\n                    u'hmap': <OptionList: gen_fingerprint>,\n                    'http_vs_https_dist': {},\n                    'ms15_034': {},\n                    u'php_eggs': <OptionList: >,\n                    u'server_header': <OptionList: >,\n                    u'server_status': <OptionList: >,\n                    u'shared_hosting': <OptionList: result_limit>,\n                    'xssed_dot_com': {},\n                    'zone_h': {}},\n 'mangle': {'sed': {}},\n 'output': {u'console': <OptionList: verbose>,\n            u'text_file': <OptionList: verbose|output_file|http_output_file>}}\n\n```\n"}}