{"action":"created","issue":{"url":"https://api.github.com/repos/Arachni/arachni/issues/648","labels_url":"https://api.github.com/repos/Arachni/arachni/issues/648/labels{/name}","comments_url":"https://api.github.com/repos/Arachni/arachni/issues/648/comments","events_url":"https://api.github.com/repos/Arachni/arachni/issues/648/events","html_url":"https://github.com/Arachni/arachni/issues/648","id":121563042,"number":648,"title":"Scan from current (2015-12-09) nightly GUI not working ","user":{"login":"mdembree","id":16245325,"avatar_url":"https://avatars.githubusercontent.com/u/16245325?v=3","gravatar_id":"","url":"https://api.github.com/users/mdembree","html_url":"https://github.com/mdembree","followers_url":"https://api.github.com/users/mdembree/followers","following_url":"https://api.github.com/users/mdembree/following{/other_user}","gists_url":"https://api.github.com/users/mdembree/gists{/gist_id}","starred_url":"https://api.github.com/users/mdembree/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mdembree/subscriptions","organizations_url":"https://api.github.com/users/mdembree/orgs","repos_url":"https://api.github.com/users/mdembree/repos","events_url":"https://api.github.com/users/mdembree/events{/privacy}","received_events_url":"https://api.github.com/users/mdembree/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Arachni/arachni/labels/Bug","name":"Bug","color":"e10c02"}],"state":"open","locked":false,"assignee":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/Arachni/arachni/milestones/12","html_url":"https://github.com/Arachni/arachni/milestones/v1.4","labels_url":"https://api.github.com/repos/Arachni/arachni/milestones/12/labels","id":1332769,"number":12,"title":"v1.4","description":"","creator":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":12,"state":"open","created_at":"2015-10-01T09:05:39Z","updated_at":"2015-12-10T20:09:47Z","due_on":null,"closed_at":null},"comments":9,"created_at":"2015-12-10T19:46:19Z","updated_at":"2015-12-10T21:10:05Z","closed_at":null,"body":"Using the latest (2015-12-09) nightly build, when I run a scan from the GUI, it doesn't do anything and eventually returns the following error.  It is configured to use PostgreSQL.  If I switch back to the current release, the same scan runs fine.\r\n\r\nBTW, the updated GUI works much better behind a HTTPS reverse proxy than the current release, thanks for changing the URLs to absolute paths.\r\n\r\n```\r\n2015-12-10 11:59:44 -0400 --------------------------------------------------------------------------------\r\nENV:\r\n---\r\nCPLUS_INCLUDE_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/include\"\r\nXDG_SESSION_ID: c23\r\nHOSTNAME: as1217.internal\r\nSELINUX_ROLE_REQUESTED: ''\r\nGEM_HOME: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/gems\"\r\nTERM: screen\r\nSHELL: \"/bin/bash\"\r\nHISTSIZE: '1000'\r\nIRBRC: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby/.irbrc\"\r\nSSH_CLIENT: 10.x.x.x 52395 22\r\nLIBRARY_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib\"\r\nARACHNI_HOME: \"/home/user/apps/arachni\"\r\nCDC_PREW2KHOST: as1217\r\nSELINUX_USE_CURRENT_RANGE: ''\r\nMY_RUBY_HOME: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby\"\r\nSSH_TTY: \"/dev/pts/0\"\r\nUSER: user\r\nLD_LIBRARY_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib\"\r\nLS_COLORS: 'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=01;05;37;41:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=01;36:*.au=01;36:*.flac=01;36:*.mid=01;36:*.midi=01;36:*.mka=01;36:*.mp3=01;36:*.mpc=01;36:*.ogg=01;36:*.ra=01;36:*.wav=01;36:*.axa=01;36:*.oga=01;36:*.spx=01;36:*.xspf=01;36:'\r\nTERMCAP: \"SC|screen|VT 100/ANSI X3.64 virtual terminal:\\\\\\n\\t:DO=\\\\E[%dB:LE=\\\\E[%dD:RI=\\\\E[%dC:UP=\\\\E[%dA:bs:bt=\\\\E[Z:\\\\\\n\\t:cd=\\\\E[J:ce=\\\\E[K:cl=\\\\E[H\\\\E[J:cm=\\\\E[%i%d;%dH:ct=\\\\E[3g:\\\\\\n\\t:do=^J:nd=\\\\E[C:pt:rc=\\\\E8:rs=\\\\Ec:sc=\\\\E7:st=\\\\EH:up=\\\\EM:\\\\\\n\\t:le=^H:bl=^G:cr=^M:it#8:ho=\\\\E[H:nw=\\\\EE:ta=^I:is=\\\\E)0:\\\\\\n\\t:li#24:co#167:am:xn:xv:LP:sr=\\\\EM:al=\\\\E[L:AL=\\\\E[%dL:\\\\\\n\\t:cs=\\\\E[%i%d;%dr:dl=\\\\E[M:DL=\\\\E[%dM:dc=\\\\E[P:DC=\\\\E[%dP:\\\\\\n\\t:im=\\\\E[4h:ei=\\\\E[4l:mi:IC=\\\\E[%d@:ks=\\\\E[?1h\\\\E=:\\\\\\n\\t:ke=\\\\E[?1l\\\\E>:vi=\\\\E[?25l:ve=\\\\E[34h\\\\E[?25h:vs=\\\\E[34l:\\\\\\n\\t:ti=\\\\E[?1049h:te=\\\\E[?1049l:us=\\\\E[4m:ue=\\\\E[24m:so=\\\\E[3m:\\\\\\n\\t:se=\\\\E[23m:mb=\\\\E[5m:md=\\\\E[1m:mr=\\\\E[7m:me=\\\\E[m:ms:\\\\\\n\\t:Co#8:pa#64:AF=\\\\E[3%dm:AB=\\\\E[4%dm:op=\\\\E[39;49m:AX:\\\\\\n\\t:vb=\\\\Eg:G0:as=\\\\E(0:ae=\\\\E(B:\\\\\\n\\t:ac=\\\\140\\\\140aaffggjjkkllmmnnooppqqrrssttuuvvwwxxyyzz{{||}}~~..--++,,hhII00:\\\\\\n\\t:po=\\\\E[5i:pf=\\\\E[4i:Km=\\\\E[M:k0=\\\\E[10~:k1=\\\\EOP:k2=\\\\EOQ:\\\\\\n\\t:k3=\\\\EOR:k4=\\\\EOS:k5=\\\\E[15~:k6=\\\\E[17~:k7=\\\\E[18~:\\\\\\n\\t:k8=\\\\E[19~:k9=\\\\E[20~:k;=\\\\E[21~:F1=\\\\E[23~:F2=\\\\E[24~:\\\\\\n\\t:F3=\\\\E[1;2P:F4=\\\\E[1;2Q:F5=\\\\E[1;2R:F6=\\\\E[1;2S:\\\\\\n\\t:F7=\\\\E[15;2~:F8=\\\\E[17;2~:F9=\\\\E[18;2~:FA=\\\\E[19;2~:kb=\\x7F:\\\\\\n\\t:K2=\\\\EOE:kB=\\\\E[Z:kF=\\\\E[1;2B:kR=\\\\E[1;2A:*4=\\\\E[3;2~:\\\\\\n\\t:*7=\\\\E[1;2F:#2=\\\\E[1;2H:#3=\\\\E[2;2~:#4=\\\\E[1;2D:%c=\\\\E[6;2~:\\\\\\n\\t:%e=\\\\E[5;2~:%i=\\\\E[1;2C:kh=\\\\E[1~:@1=\\\\E[1~:kH=\\\\E[4~:\\\\\\n\\t:@7=\\\\E[4~:kN=\\\\E[6~:kP=\\\\E[5~:kI=\\\\E[2~:kD=\\\\E[3~:ku=\\\\EOA:\\\\\\n\\t:kd=\\\\EOB:kr=\\\\EOC:kl=\\\\EOD:km:\"\r\nDA_SESSION_ID_AUTH: 8965fc3c-37db-c14b-916c-ab8f53b0aacc\r\nMAIL: \"/var/spool/mail/user\"\r\nPATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/gems/bin:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/../bin:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/bin:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/gems/bin:/usr/share/centrifydc/bin:/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/home/user/.local/bin:/home/user/bin:/home/user/apps/arachni/bin\"\r\nSTY: 5310.pts-0.as1217\r\nC_INCLUDE_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/include\"\r\nPWD: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin\"\r\nARACHNI_WEBUI_LOGDIR: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/logs/webui\"\r\nLANG: en_US.UTF-8\r\nARACHNI_FRAMEWORK_LOGDIR: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/logs/framework\"\r\nUSER_PRINCIPAL_NAME: user@internal\r\nSELINUX_LEVEL_REQUESTED: ''\r\nHISTCONTROL: ignoredups\r\nCDC_JOINED_DC: internal\r\nSHLVL: '2'\r\nHOME: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/home/arachni\"\r\nCDC_JOINED_SITE: Data-Centre-Servers\r\nRAILS_ENV: production\r\nDYLD_LIBRARY_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib\"\r\nLOGNAME: user\r\nWINDOW: '0'\r\nGEM_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/gems\"\r\nSSH_CONNECTION: 10.x.x.x 52395 10.y.y.y 22\r\nLESSOPEN: \"||/usr/bin/lesspipe.sh %s\"\r\nCDC_JOINED_ZONE: CN=Universal,OU=Unix,DC=internal\r\nXDG_RUNTIME_DIR: \"/run/user/285218791\"\r\nCDC_LOCALHOST: as1217.internal\r\nRUBYLIB: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/gems/gems/bundler-1.10.6/lib:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby/site_ruby/2.2.0:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby/2.2.0:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby/2.2.0/x86_64-linux:/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/usr/lib/ruby/site_ruby/2.2.0/x86_64-linux\"\r\nRUBY_VERSION: ruby-2.2.3\r\nCDC_JOINED_DOMAIN: internal\r\nRACK_ENV: development\r\nBUNDLE_GEMFILE: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/arachni-ui-web/Gemfile\"\r\n_ORIGINAL_GEM_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/bin/../system/gems\"\r\nBUNDLE_BIN_PATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/gems/gems/bundler-1.10.6/bin/bundle\"\r\nRUBYOPT: \"-rbundler/setup\"\r\nMANPATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/gems/gems/kramdown-1.4.1/man\"\r\nBUNDLE_ORIG_MANPATH: \"/home/user/apps/arachni-2.0dev-1.0dev_20151209/system/gems/gems/kramdown-1.4.1/man\"\r\n--------------------------------------------------------------------------------\r\nOPTIONS:\r\ndatastore:\r\n  token: a1ce8f6ff728e491535abe06dede5366\r\nbrowser_cluster:\r\n  local_storage: {}\r\n  wait_for_elements: {}\r\n  pool_size: 12\r\n  job_timeout: 25\r\n  worker_time_to_live: 100\r\n  ignore_images: true\r\n  screen_width: 1600\r\n  screen_height: 1200\r\nscope:\r\n  redundant_path_patterns: {}\r\n  dom_depth_limit: 5\r\n  exclude_file_extensions: []\r\n  exclude_path_patterns: []\r\n  exclude_content_patterns: []\r\n  include_path_patterns: []\r\n  restrict_paths: []\r\n  extend_paths:\r\n  - \"/bep\"\r\n  - \"/offices\"\r\n  - \"/econ\"\r\n  - \"/fin\"\r\n  - \"/natr\"\r\n  - \"/nsaf\"\r\n  - \"/nsarm\"\r\n  - \"/proc\"\r\n  - \"/prot\"\r\n  - \"/speak\"\r\n  - \"/tir\"\r\n  url_rewrites: {}\r\n  include_subdomains: false\r\n  auto_redundant_paths: 10\r\n  https_only: false\r\naudit:\r\n  parameter_values: true\r\n  exclude_vector_patterns: []\r\n  include_vector_patterns: []\r\n  link_templates: []\r\n  links: true\r\n  forms: true\r\n  cookies: true\r\n  headers: false\r\n  with_both_http_methods: false\r\n  cookies_extensively: false\r\n  jsons: true\r\n  xmls: true\r\n  ui_forms: true\r\n  ui_inputs: true\r\ninput:\r\n  values:\r\n    \"(?i-mx:name)\": arachni_name\r\n    \"(?i-mx:user)\": arachni_user\r\n    \"(?i-mx:usr)\": arachni_user\r\n    \"(?i-mx:pass)\": 5543!%arachni_secret\r\n    \"(?i-mx:txt)\": arachni_text\r\n    \"(?i-mx:num)\": '132'\r\n    \"(?i-mx:amount)\": '100'\r\n    \"(?i-mx:mail)\": arachni@scan.internal\r\n    \"(?i-mx:account)\": '12'\r\n    \"(?i-mx:id)\": '1'\r\n  default_values:\r\n    name: arachni_name\r\n    user: arachni_user\r\n    usr: arachni_user\r\n    pass: 5543!%arachni_secret\r\n    txt: arachni_text\r\n    num: '132'\r\n    amount: '100'\r\n    mail: arachni@email.gr\r\n    account: '12'\r\n    id: '1'\r\n  without_defaults: true\r\n  force: false\r\nhttp:\r\n  user_agent: Arachni/v1.3.2\r\n  request_timeout: 10000\r\n  request_redirect_limit: 5\r\n  request_concurrency: 20\r\n  request_queue_size: 100\r\n  request_headers: {}\r\n  response_max_size: 500000\r\n  cookies: {}\r\nsession: {}\r\nchecks:\r\n- code_injection\r\n- code_injection_php_input_wrapper\r\n- code_injection_timing\r\n- csrf\r\n- file_inclusion\r\n- ldap_injection\r\n- no_sql_injection\r\n- no_sql_injection_differential\r\n- os_cmd_injection\r\n- os_cmd_injection_timing\r\n- path_traversal\r\n- response_splitting\r\n- rfi\r\n- session_fixation\r\n- source_code_disclosure\r\n- sql_injection\r\n- sql_injection_differential\r\n- sql_injection_timing\r\n- trainer\r\n- unvalidated_redirect\r\n- unvalidated_redirect_dom\r\n- xpath_injection\r\n- xss\r\n- xss_dom\r\n- xss_dom_script_context\r\n- xss_event\r\n- xss_path\r\n- xss_script_context\r\n- xss_tag\r\n- xxe\r\n- allowed_methods\r\n- backdoors\r\n- backup_directories\r\n- backup_files\r\n- captcha\r\n- common_admin_interfaces\r\n- common_directories\r\n- common_files\r\n- cookie_set_for_parent_domain\r\n- credit_card\r\n- cvs_svn_users\r\n- directory_listing\r\n- emails\r\n- form_upload\r\n- hsts\r\n- htaccess_limit\r\n- html_objects\r\n- http_only_cookies\r\n- http_put\r\n- insecure_client_access_policy\r\n- insecure_cookies\r\n- insecure_cors_policy\r\n- insecure_cross_domain_policy_access\r\n- insecure_cross_domain_policy_headers\r\n- interesting_responses\r\n- localstart_asp\r\n- mixed_resource\r\n- origin_spoof_access_restriction_bypass\r\n- password_autocomplete\r\n- private_ip\r\n- ssn\r\n- unencrypted_password_forms\r\n- webdav\r\n- x_frame_options\r\n- xst\r\nplatforms: []\r\nplugins:\r\n  autothrottle: \r\n  discovery: \r\n  healthmap: \r\n  timing_attacks: \r\n  uniformity: \r\nno_fingerprinting: false\r\nauthorized_by: \r\nurl: https://dev.iweb.internal/\r\n[2015-12-10 11:59:44 -0400] Could not spawn browser process.\r\n[2015-12-10 11:59:44 -0400] 6827: Started\r\nPID: 6830\r\n6827: Working\r\n6827: Working\r\n6827: EOF\r\n6827: Exiting\r\n\r\n  token: 4942011c4e9fc4763adc569556cd1d2e\r\n  master_priv_token: 988fe5e10b78c647ca93c0ccbfdb5e4f\r\n  page_limit: 0\r\n[2015-12-10 11:59:44 -0400] 6823: Started\r\nPID: 6835\r\n6823: Working\r\n6823: Working\r\n6823: EOF\r\n6823: Exiting\r\n```"},"comment":{"url":"https://api.github.com/repos/Arachni/arachni/issues/comments/163750059","html_url":"https://github.com/Arachni/arachni/issues/648#issuecomment-163750059","issue_url":"https://api.github.com/repos/Arachni/arachni/issues/648","id":163750059,"user":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"created_at":"2015-12-10T21:10:05Z","updated_at":"2015-12-10T21:10:05Z","body":"Can you please extract the nightly package to a different directory to which you have write access and try using it directly, without any sort of modifications?\r\nI need to know if that makes a difference."}}