-
Notifications
You must be signed in to change notification settings - Fork 23
Open
Description
Hi,
I tried to use the tool, which looked promising but it crashed twice during the first and second run. First the introspection file was not created because the responses directory was not there:
# shifter scan --url https://xxxx/graphql/2018-04-30 --proxies 127.0.0.1:8080
[INFO] TESTING FOR CONSOLES AND ENDPOINTS
SCANNING.... [####################################] 100%
| POSSIBLE POST ENDPOINT LOCATED AT: https://xxxx/graphql/2018-04-30
[INFO] TESTING FOR INTROSPECTION
[SUCCESS] INTROSPECTION QUERY EXECUTED
Traceback (most recent call last):
File "/usr/local/bin/shifter", line 11, in <module>
load_entry_point('shifter==0.1', 'console_scripts', 'shifter')()
File "/usr/lib/python3/dist-packages/click/core.py", line 764, in __call__
return self.main(*args, **kwargs)
File "/usr/lib/python3/dist-packages/click/core.py", line 717, in main
rv = self.invoke(ctx)
File "/usr/lib/python3/dist-packages/click/core.py", line 1137, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/lib/python3/dist-packages/click/core.py", line 956, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/lib/python3/dist-packages/click/core.py", line 555, in invoke
return callback(*args, **kwargs)
File "/usr/lib/python3/dist-packages/click/decorators.py", line 17, in new_func
return f(get_current_context(), *args, **kwargs)
File "/usr/local/lib/python3.8/dist-packages/shifter-0.1-py3.8.egg/shifter.py", line 129, in scan
with open(filename, mode='wb') as localfile:
FileNotFoundError: [Errno 2] No such file or directory: 'responses/introspection-response-2020_08_13_10_41_51.json'
After I created the responses directory:
# shifter scan --url https://xxxx/graphql/2018-04-30 --proxies 127.0.0.1:8080
[INFO] TESTING FOR CONSOLES AND ENDPOINTS
SCANNING.... [####################################] 100%
| POSSIBLE POST ENDPOINT LOCATED AT: https://xxxx/graphql/2018-04-30
[INFO] TESTING FOR INTROSPECTION
[SUCCESS] INTROSPECTION QUERY EXECUTED
[SAVED] SCHEMA SAVED TO: responses/introspection-response-2020_08_13_10_43_31.json
Traceback (most recent call last):
File "/usr/local/bin/shifter", line 11, in <module>
load_entry_point('shifter==0.1', 'console_scripts', 'shifter')()
File "/usr/lib/python3/dist-packages/click/core.py", line 764, in __call__
return self.main(*args, **kwargs)
File "/usr/lib/python3/dist-packages/click/core.py", line 717, in main
rv = self.invoke(ctx)
File "/usr/lib/python3/dist-packages/click/core.py", line 1137, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/lib/python3/dist-packages/click/core.py", line 956, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/lib/python3/dist-packages/click/core.py", line 555, in invoke
return callback(*args, **kwargs)
File "/usr/lib/python3/dist-packages/click/decorators.py", line 17, in new_func
return f(get_current_context(), *args, **kwargs)
File "/usr/local/lib/python3.8/dist-packages/shifter-0.1-py3.8.egg/shifter.py", line 133, in scan
parseIntroResp()
File "/usr/lib/python3/dist-packages/click/decorators.py", line 17, in new_func
return f(get_current_context(), *args, **kwargs)
File "/usr/local/lib/python3.8/dist-packages/shifter-0.1-py3.8.egg/shifter.py", line 162, in parseIntroResp
createQuery(field['name'], arg['name'], arg['type']['name'])
File "/usr/local/lib/python3.8/dist-packages/shifter-0.1-py3.8.egg/shifter.py", line 253, in createQuery
writeFile("Queries", scalar, field_name+"-"+arg_name, query)
UnboundLocalError: local variable 'query' referenced before assignment
Unfortunately I am unable to share the introspection file.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels