Results 1 to 2 of 2

Thread: Unicornscan Not Logging To Database

Hybrid View

  1. #1
    Just burned his ISO
    Join Date
    Feb 2010
    Posts
    7

    Default Unicornscan Not Logging To Database

    I ran into a couple issues so far trying to get unicornscan up and running. During install, the setup script to get it working with postgesql failed due to /opt/framework3/ being named /opt/framework/ on my copy of BT (was this a recent change?). Easy enough fix by replacing appropriate references.

    Now I can do scans and the scan summary shows up in db, but none of the data (viewdata empty in web interface) after running the scan with -epgsqldb. Logging into db directly shows the uni_ipreportdata table is empty (the web interface also has some query issues...display.php needs work I think to make the queries valid). uni_scans is all that is populated but that doesnt contain the port data actually discovered from scan.

    Anyone else running BT5 have unicornscan working with postgresql in BT5?

  2. #2
    Just burned his ISO
    Join Date
    Feb 2010
    Posts
    7

    Default Re: Unicornscan Not Logging To Database

    After more searching and debugging, I found the problem so here is the solution for anyone else that runs into this.

    In BT5 R1, it seems the version of postgresql doesn't play well with Unicornscan by default with regards to escape characters. Unicornscan uses backslashes for escape characters in some of the major queries, and this causes the queries to fail and rows never get inserted into the database outside of a couple tables. Of course this breaks logging to database, but this also is the root cause of the Web GUI query errors seen (a different error related to invalid syntax of WHERE statement, but must be introduced in the code logic due to the other error).

    http://www.postgresql.org/docs/8.3/i...SYNTAX-STRINGS
    http://www.postgresql.org/docs/8.3/i...ORMING-STRINGS

    If you turn off standard conforming strings in /opt/framework.postgresql/data/postgresql.conf (seems it is now on by default), you will still get the warnings in SQL logs (unless you turn those off too) but queries complete successfully and Unicornscan works again.

Similar Threads

  1. Unicornscan Missing from BT5 (and Repo)
    By Securethoughts in forum BackTrack 5 Tool Requests (NOW CLOSED) Please see sticky
    Replies: 2
    Last Post: 05-28-2011, 02:11 PM
  2. Unicornscan (with PostgreSQL and web front end) Install Script
    By dash1b in forum BackTrack 5 Experts Section
    Replies: 1
    Last Post: 05-20-2011, 01:51 AM
  3. Book like "The Database Hacker's Handbook: Defending Database Servers"
    By -=Renegade=- in forum OLD General IT Discussion
    Replies: 3
    Last Post: 01-01-2010, 04:18 AM
  4. Unicornscan front-end
    By arapozo in forum OLD Newbie Area
    Replies: 3
    Last Post: 03-24-2008, 05:44 PM
  5. Unicornscan
    By chrisbdaemon in forum OLD BT3beta Software related issues
    Replies: 1
    Last Post: 12-21-2007, 10:47 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •