kasperskylab / klara Goto Github PK

(klara)cuckoo@cuckoo-OptiPlex-9020:/var/projects/klara/dispatcher$ ./klara-dispatcher
bash: ./klara-dispatcher: Permission denied

Subject of the issue

Email format verification.

Steps to reproduce

At 'My Profile', try to use an email with a special TLD like .services .

Actual behavior

Error message: 'Please input a valid e-mail address'

Awesome tool. However is it possible to make a docker image for easy deployment? I find it very frustrating when it comes to update our server and something breaks

the problem occures after GETting the index.php page. The line contains:

$config['sess_driver'] = 'database';

Database's up. Table 'ci_session' exists. What's incorrect?

Subject of the issue

Running a scan on 100k+ sample end up with :

[ERROR] General failure when trying to insert the job in db: (1118, 'The size of BLOB/TEXT data inserted in one transaction is greater than 10% of redo log size. Increase the redo log size using innodb_log_file_size.')

The job remained in "Assigned" and therefor can't be stop/removed from the UI. (It has to be done on the DB).

Your environment

• your operating system : Ubuntu Server 18.04.2
• your Python version: Python 2.7.15+

Steps to reproduce

Probably running an always true "dummy" rules on 100k+ sample :
My dummy rule was similar to:
rule dummy_true { condition: true }

Expected behavior

A notification on the UI or anything that let us on a better state that this one (job still "assigned" but not running on the server)

Actual behavior

Job remain in "Assigned", nothing happens on the server. Jobs has to be removed from the DB.

Had issue cloning using the instructions...

projects@GhostCatcher:/var/projects$ git clone [email protected]:kasperskylab/klara.git ~/klara-github-repo
Cloning into '/home/projects/klara-github-repo'...
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

Made a slight modification to the line and it worked.

projects@GhostCatcher:/var/projects$ git clone https://github.com/kasperskylab/klara.git ~/klara-github-repo
Cloning into '/home/projects/klara-github-repo'...
remote: Counting objects: 706, done.
remote: Compressing objects: 100% (424/424), done.
remote: Total 706 (delta 277), reused 700 (delta 275), pack-reused 0
Receiving objects: 100% (706/706), 2.86 MiB | 477.00 KiB/s, done.
Resolving deltas: 100% (277/277), done.
Checking connectivity... done.

Just in case others are having the same issue.

Hi GReAT!

On database setup document, running cat * > db.schema.sql can causes database error because wrong order on file concatenation (2.4.1.txt is appending before 2.4.txt). This step may require some improvement.

After installation finished, I couldn't have found any registration page for WebUI and there is no sign about where can I register myself in.

Subject of the issue

Changing your email address or setting your mail address for the first time does not work with Safari.

Your environment

• macOS High Sierra (10.13.6), Safari Version 11.1.2 (13605.3.8)

Is it possible to scan files within a zipped folder?

aoa
receiving following errors:
git clone https://github.com:kasperskylab/klara.git ~/klara-github-repo
Cloning into '/home/cuckoo/klara-github-repo'...
fatal: repository 'https://github.com:kasperskylab/klara.git/' not found

Is your feature request related to a problem? Please describe.

As python2 reaching end of life. I tried to upgrade my system, which doesn't come with python2 anymore.
My first attempt to manual install python2 (and especially the mysql module) failed, so I start digging if a transition to python3 wasn't going to be more straight forward.

I endup on a dead-end because (at least) the dispachter use the "tornado" and "torndb" module which isn't supported anymore.

Even though they still exists:

$ python3 --version
Python 3.10.6

$ python3 -m pip list | grep torn
tornado                6.3.2
torndb                 0.3

$ ./klara-dispatcher
Traceback (most recent call last):
  File "/dispatcher/./klara-dispatcher", line 9, in <module>
    import torndb
  File "/.local/lib/python3.10/site-packages/torndb.py", line 260, in <module>
    CONVERSIONS[field_type] = [(FLAG.BINARY, str)] + CONVERSIONS[field_type]
TypeError: can only concatenate list (not "type") to list

Thus the question, would it be possible to port the project to python3 using "recent" or at least still maintain library ?

Maybe tornado/torndb aren't the only one who'll need a rewrite.

https://github.com/Derelict98

Hello,

I can't access the rest api. When I press 127.0.0.1:8888 i only get a message saying "Job Dispatcher" and at 127.0.0.1:8888/api i get nothing. Also there is no documentation as to what I should write to the repository_control file in order to start operations. Could you help me with a more extensive review of how the tool works?

If you make enough KLARA jobs that the job list goes to second (third, fourth, ...) page, then on any page except the first one, you cannot delete job. I tried Firefox and Chrome, both behave the same.

To be able to delete any job, you basically need to maintain your jobs so they never overflow to second page.

Ladislav Zezula

when create new job,then have a error

Notes

• dispatcher running
• worker running
• database up
• web up
• testuser created in users table

Issue

• Login attempts seem to go to /index.php/login/check which seems incorrect to me.
• This endpoint returns a 404
• Attempts to alter login code to hit /login/check still produce 404s

Subject of the issue

error on docker-compose up

Your environment

Ubuntu 18.0

Steps to reproduce

Tell us how to reproduce this issue.
sudo docker-compose up

Expected behavior

Tell us what should happen
build the compose

Actual behavior

Error on building container apt-get update failed and

Subject of the issue

There is a lack of documentation on how to start the web interface. In addition, I cannot seem to find the index.html file of the klara web interface.

Your environment

• ubuntu 22
• python 2.7

Steps to reproduce

Add documentation if needed + add the missing html files

Expected behavior

Web interface working

Actual behavior

No web interface

Subject of the issue

Add a try/catch block when trying to execute the Yara binary

Steps to reproduce

Point yara to an invalid location in the worker config file

Expected behavior

Worker should error out saying Yara binary not available

Actual behavior

Worker raises exception wtih OSError: [Errno 2] No such file or directory which is not so intuivite