Illegal reflective access by com.google.inject.internal.cglib.core.$ReflectUtils$1 about tsunami-security-scanner HOT 6 CLOSED

Can you please try the quick start script again to rebuild all the plugins? This should have been fixed by google/tsunami-security-scanner-plugins@9474dea.

from tsunami-security-scanner.

Thank you for the reply. I rebuilt all the plugins but no success. So, I downgraded from java 11 to java 8, and some of the problems were solved. However, there is still an issue.

diego@servtestesvmware:~$ cd ~/tsunami && java -cp "tsunami-main-0.0.2-SNAPSHOT-cli.jar:/root/tsunami/plugins/*" -Dtsunami-config.location=/root/tsunami/tsunami.yaml com.google.tsunami.main.cli.TsunamiCli --ip-v4-target=127.0.0.1 --scan-results-local-output-format=JSON --scan-results-local-output-filename=/tmp/tsunami-output-39.json
Jun 30, 2020 8:34:31 PM com.google.tsunami.main.cli.TsunamiCli main
INFO: Full classpath scan took 2.141 s
Jun 30, 2020 8:34:31 PM com.google.tsunami.common.cli.CliOptionsModule configure
INFO: Found CliOption: com.google.tsunami.common.io.archiving.GoogleCloudStorageArchiver$Options
Jun 30, 2020 8:34:31 PM com.google.tsunami.common.cli.CliOptionsModule configure
INFO: Found CliOption: com.google.tsunami.main.cli.ScanResultsArchiver$Options
Jun 30, 2020 8:34:31 PM com.google.tsunami.common.cli.CliOptionsModule configure
INFO: Found CliOption: com.google.tsunami.main.cli.option.ScanTargetCliOptions
Jun 30, 2020 8:34:32 PM com.google.tsunami.main.cli.TsunamiCli main
SEVERE: Exiting due to workflow execution exceptions.
com.google.inject.ConfigurationException: Guice configuration errors:

1. No implementation for java.util.Map<com.google.tsunami.plugin.PluginDefinition, javax.inject.Provider<com.google.tsunami.plugin.TsunamiPlugin>> was bound.
   while locating java.util.Map<com.google.tsunami.plugin.PluginDefinition, javax.inject.Provider<com.google.tsunami.plugin.TsunamiPlugin>>
   for the 1st parameter of com.google.tsunami.plugin.PluginManager.(PluginManager.java:41)
   while locating com.google.tsunami.plugin.PluginManager
   for the 1st parameter of com.google.tsunami.workflow.DefaultScanningWorkflow.(DefaultScanningWorkflow.java:100)
   while locating com.google.tsunami.workflow.DefaultScanningWorkflow
   for the 1st parameter of com.google.tsunami.main.cli.TsunamiCli.(TsunamiCli.java:62)
   while locating com.google.tsunami.main.cli.TsunamiCli

1 error
at com.google.inject.internal.InjectorImpl.getProvider(InjectorImpl.java:1120)
at com.google.inject.internal.InjectorImpl.getProvider(InjectorImpl.java:1078)
at com.google.inject.internal.InjectorImpl.getInstance(InjectorImpl.java:1131)
at com.google.tsunami.main.cli.TsunamiCli.main(TsunamiCli.java:137)

from tsunami-security-scanner.

+1
@magl0 I am facing this issue as well. I used quick_install script and used following yaml for config:

plugins:
  google:
    port_scanner:
      nmap:
        nmap_binary_path: "/usr/local/bin/nmap"
        port_targets: "80,8080,15000-16000"

from tsunami-security-scanner.

UPDATE: Mine was fixed by using full path /Users/user/tsunami/plugins of the plugins folder instead of shortcut ~/tsunami/plugins. @magl0 Please update documentation for MacOS to use full path only.

@dverasqrz Looks like your user folder is /home/diego but you are using /root folder for plugins. Please check your plugins path properly and it might fix the issue.

from tsunami-security-scanner.

@kakumanivrn Thanks for confirming! In theory the quick_start.sh script should printout a command with full path using the HOME env variable. But it worth documenting in the README.

from tsunami-security-scanner.

I was having the same issue. I went ahead and ran the quick start code again and it gave me the commands to run. It finally worked this time.

Running Quick Start:
bash -c "$(curl -sfL https://raw.githubusercontent.com/google/tsunami-security-scanner/master/quick_start.sh)"

and it gave me the output:
cd /home/kali/tsunami &&
java -cp "tsunami-main-0.0.2-SNAPSHOT-cli.jar:/home/kali/tsunami/plugins/*"
-Dtsunami-config.location=/home/kali/tsunami/tsunami.yaml
com.google.tsunami.main.cli.TsunamiCli
--ip-v4-target=127.0.0.1
--scan-results-local-output-format=JSON
--scan-results-local-output-filename=/tmp/tsunami-output.json

from tsunami-security-scanner.