Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Crash trying to find exploits #610

Closed
punk84 opened this issue Mar 17, 2016 · 20 comments
Closed

Crash trying to find exploits #610

punk84 opened this issue Mar 17, 2016 · 20 comments

Comments

@punk84
Copy link

punk84 commented Mar 17, 2016

Inspector works, metasploit starts ok, but , when try to find exploits it crash

@neosck
Copy link

neosck commented Mar 18, 2016

Same here. It was working and yesterday started to crash everytime I tried to find exploits.

@donpedro27476
Copy link

Same here. Tried using both csploit 1.65 and 1.7(unstable)

@fruchttiger00x0
Copy link

Same problem here. Running on Nethunter 3.0 Nexus 6, latest Updates of all components. Crash right after "search exploits" metasploid daemon was up and running (notification "connected to metasploid"). Debug Log is not really useful I guess ( See below ) Setting the option " search metasploid search to "exploitdb only" did NOT crash. So MSF method seems kind of buggy.

Debug
org.csploit.android.core.ChildManager$ChildNotStartedException: cannot start commands
at org.csploit.android.tools.Tool.async(Tool.java:48)
at org.csploit.android.tools.NMap.synScan(NMap.java:142)
at org.csploit.android.tools.NMap.synScan(NMap.java:146)
at org.csploit.android.services.NetworkRadar$2.run(NetworkRadar.java:90)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
at java.lang.Thread.run(Thread.java:818)
org.csploit.android.core.ChildManager$ChildNotStartedException: cannot start commands
at org.csploit.android.tools.Tool.async(Tool.java:48)
at org.csploit.android.tools.NMap.synScan(NMap.java:142)
at org.csploit.android.tools.NMap.synScan(NMap.java:146)
at org.csploit.android.services.NetworkRadar$2.run(NetworkRadar.java:90)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
at java.lang.Thread.run(Thread.java:818)

@fruchttiger00x0
Copy link

Sorry, forgot to post my syslog

03-20 10:13:57.279 I/ACRA (27207): Finished class org.csploit.android.plugins.ExploitFinder

03-20 10:13:57.279 E/ACRA (27207): org.csploit.android fatal error : Attempt to invoke virtual method 'void org.csploit.android.net.metasploit.MsfExploit.setPort(org.csploit.android.net.Target$Port)' on a null object reference

03-20 10:13:57.279 E/ACRA (27207): java.lang.NullPointerException: Attempt to invoke virtual method 'void org.csploit.android.net.metasploit.MsfExploit.setPort(org.csploit.android.net.Target$Port)' on a null object reference

@0MazaHacka0
Copy link
Contributor

Same here android 5.1

@donpedro27476
Copy link

The following message appears when running the exploit finder - ' something went wrong, please select again a valid target'

@st0de
Copy link

st0de commented Mar 23, 2016

Same problem here.

Device: Xiaomi Note
Android: 4.4.4
ROM: MIUI 5.12.11
Root permission allowed in security settings.

The app crash when I search for exploits on a selected target.

@milandev
Copy link

Same here, connected to msf but app crash when i search for exploits.

@BILLyTheLiTTle
Copy link

Same problem here! It doesn't crash on every "target". It crashes even when I try to exploit my Metasploitable-2!

@fruchttiger00x0
Copy link

That would be consistent with the log Output I posted.Null Pointer exception while trying to assign port at target. Try catch would fix the crash but not the empty target I guess.
Could you give some Details about that targets which seems to work?

@rednas0812
Copy link

SAME!

@tux-mind
Copy link
Member

fixed in 1.6.6 release candidate 0. please test it for me with ❤️

@neosck
Copy link

neosck commented Mar 28, 2016

Thanks for working on it but it's worse than before.
Installed without uninstalling previous version: FC at opening.
Removed previous version. Installed 1.6.6 RC0: FC when it was downloading the core.

@BILLyTheLiTTle
Copy link

Oops! 4 problems at one!
1). I downloaded the version you just said but when I open it sais it needs to update to version 1.0.11! If I don't update I cannot continue, but when I update it closes and shows the rash report dialog.

2). At device settings under the App Info (where you move to sd, uninstall, clear data, etc) it sais that this is version 1.6.5

3). I cannot see the launcher icon anymore!

4). I have connected the deviceto Android Studio and when I tryied to send the bug report I get this:

org.csploit.android E/ACRA: Failed to send crash report for 1459152570000-approved.stacktrace
org.acra.sender.ReportSenderException: Error while sending JSON report via Http PUT
at org.acra.sender.HttpSender.send(HttpSender.java:250)
at org.acra.SendWorker.sendCrashReport(SendWorker.java:178)
at org.acra.SendWorker.checkAndSendReports(SendWorker.java:140)
at org.acra.SendWorker.run(SendWorker.java:76)
Caused by: org.apache.http.conn.HttpHostConnectException: Connection to http://csploit.iriscouch.com refused
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:188)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:169)
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:124)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:365)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:560)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:492)
at org.acra.util.HttpRequest.send(HttpRequest.java:158)
at org.acra.sender.HttpSender.send(HttpSender.java:247)
at org.acra.SendWorker.sendCrashReport(SendWorker.java:178) 
at org.acra.SendWorker.checkAndSendReports(SendWorker.java:140) 
at org.acra.SendWorker.run(SendWorker.java:76) 
Caused by: java.net.ConnectException: failed to connect to /72.2.112.168 (port 80) after 3000ms: isConnected failed: ECONNREFUSED (Connection refused)
at libcore.io.IoBridge.isConnected(IoBridge.java:238)
at libcore.io.IoBridge.connectErrno(IoBridge.java:171)
at libcore.io.IoBridge.connect(IoBridge.java:122)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:183)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:456)
at java.net.Socket.connect(Socket.java:882)
at org.apache.http.conn.scheme.PlainSocketFactory.connectSocket(PlainSocketFactory.java:124)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:149)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:169) 
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:124) 
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:365) 
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:560) 
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:492) 
at org.acra.util.HttpRequest.send(HttpRequest.java:158) 
at org.acra.sender.HttpSender.send(HttpSender.java:247) 
at org.acra.SendWorker.sendCrashReport(SendWorker.java:178) 
at org.acra.SendWorker.checkAndSendReports(SendWorker.java:140) 
at org.acra.SendWorker.run(SendWorker.java:76) 
Caused by: android.system.ErrnoException: isConnected failed: ECONNREFUSED (Connection refused)
at libcore.io.IoBridge.isConnected(IoBridge.java:223)
at libcore.io.IoBridge.connectErrno(IoBridge.java:171) 
at libcore.io.IoBridge.connect(IoBridge.java:122) 
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:183) 
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:456) 
at java.net.Socket.connect(Socket.java:882) 
at org.apache.http.conn.scheme.PlainSocketFactory.connectSocket(PlainSocketFactory.java:124) 
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:149) 
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:169) 
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:124) 
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:365) 
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:560) 
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:492) 
at org.acra.util.HttpRequest.send(HttpRequest.java:158) 
at org.acra.sender.HttpSender.send(HttpSender.java:247) 
at org.acra.SendWorker.sendCrashReport(SendWorker.java:178) 
at org.acra.SendWorker.checkAndSendReports(SendWorker.java:140) 

at org.acra.SendWorker.run(SendWorker.java:76) 

Thanks for working on it! We are here to try it out!

@tux-mind
Copy link
Member

My apologizes for the inconvenience guys, without a phone I cannot test out my work.
I'm waiting that the seller re-fill it's mag to get my new Nexus 5X.

Anyway, if you are patient enough we can solve those problems together 😁

@BILLyTheLiTTle the error you posted is not the error, but an error in the error reporter 😅

I don't known why but iriscouch deleted the bugtracker app, probably because they was hosting it for free 😞

I'll fix the version number and try to figure out the missing launcher icon today.

thank you for your time and support 😊

@tux-mind
Copy link
Member

@BILLyTheLiTTle catlog has been provided by @mcilya on #616

Working on it 😉

@punk84
Copy link
Author

punk84 commented Mar 28, 2016

1.6.6 doesn´t work for me (S7 Edge), it says that´s no core for my device and crash... but, 1.7.0-unstable+23746e6 (nightly) works just fine... now I can search exploits with msf without crashing ... thanks !!

@0MazaHacka0
Copy link
Contributor

@tux-mind, well now when i search exploits, it doesn't crash, but it dont find any exploits.

@rednas0812
Copy link

Release - crashes
Nightly - don't find any exploits

@tux-mind
Copy link
Member

move this thread to #616 please.

version 1.6.6-rc.1 is out 😉

I'm closing this as the problem ( crash when searching exploits ) is solved ✌️

please post a full logcat after an exploit search to #619

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

10 participants