The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Issues scanning juice shop with Dastardly in Gitlab CI/CD

ana | Last updated: Oct 08, 2023 04:53PM UTC

Hello :) I would like to scan the Juice-Shop application in the Gitlab CI/CD using Dastardly: https://github.com/juice-shop/juice-shop I defined the following job in the ci/cd Yaml: dastardly_burpsuit: image: docker:stable stage: test variables: TARGET_URL: "http://juiceshoptest-srv:3000" script: docker run --user $(id -u) --rm -v $CI_PROJECT_DIR:/dastardly -e BURP_START_URL=$TARGET_URL -e BURP_REPORT_FILE_PATH=/dastardly/dastardly-report.xml public.ecr.aws/portswigger/dastardly:latest artifacts: paths: - dastardly-report.xml when: always I ran into the following problem: 2023-10-08 10:17:35 INFO dastardly.ScanTimeoutHandler - Scan exceeded time limit - scan will now be terminated 2023-10-08 10:17:35 INFO b.s.ScanProgress - Scan has failed with error code: 112 and error message: Scan exceeded time limit 2023-10-08 10:17:35 INFO b.s.EventLogPrinter - Oct 08 2023 10:02:33 INFORMATION Running as super-user, browser sandbox is not supported 2023-10-08 10:17:35 INFO b.s.EventLogPrinter - Oct 08 2023 10:02:35 INFORMATION Crawl started. 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - 2023-10-08 10:17:36: Burp shutting down due to DELETE request 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - 2023-10-08 10:17:36: FAILED -> crawlUniqueLocationsVisited:0, crawlRequestsMade:110, auditQueueItemsWaiting:0, auditQueueItemsCompleted:0, auditRequestsMade:0, insertionPointCount:0 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - Deleting temporary files - please wait ... done. 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - Exception report: 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - Category: FAILED_ASSERTION 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - Detail: 2023-10-08 10:17:36 ERROR bsee.BurpProcess.scan.scan-1 - java.lang.AssertionError: <<00008000>> 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at net.portswigger.Zt5.ZR(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at net.portswigger.Zt5.ZK(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at burp.Zodr.Ze(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at burp.Zopy.Zw(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at burp.Zodr.lambda$new$0(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at burp.Zpwa.lambda$pause$10(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.base/java.util.concurrent.CopyOnWriteArrayList.forEach(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at burp.Zpwa.lambda$pause$11(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.event.InvocationEvent.dispatch(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventQueue.dispatchEventImpl(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventQueue$4.run(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventQueue$4.run(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.base/java.security.AccessController.doPrivileged(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventQueue.dispatchEvent(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventDispatchThread.pumpEvents(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventDispatchThread.pumpEvents(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - at java.desktop/java.awt.EventDispatchThread.run(Unknown Source) 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - -------------------------------------------------------------------------------- 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - 2023-10-08 10:17:36: Crawl finished 2023-10-08 10:17:36 INFO bsee.BurpProcess.scan.scan-1 - 2023-10-08 10:17:36: Audit finished 2023-10-08 10:17:37 INFO dastardly.ScanManager - Scan finished, exiting So there is a timeout and the scan fails. And there are no artifacts created. How can I resolve this problem to carry out a successful scan and receive artifacts? Thank you in advance :)

Alex, PortSwigger Agent | Last updated: Oct 09, 2023 03:03PM UTC

Hi Ana, Thanks for your post. I'm just in the process of running a test scan with Dastardly against Juice Shop in an attempt to recreate the issue. I shall update this post further. Best regards,

Alex, PortSwigger Agent | Last updated: Oct 17, 2023 05:32PM UTC