Super confusing ZAP error: [java.net.SocketException]: Connection reset

160 views
Skip to first unread message

REWWa

unread,
Jul 26, 2023, 9:24:49 PM7/26/23
to OWASP ZAP User Group
Thank you so much for reading this!!!! I'm struggling here
I'm getting an error page when proxying my browser with ZAP(127.0.0.1:8080)
specific for one website that I am trying to visit
error occurs like when I use AJAX spider(because AJAX spider is basically using my browser to crawl)
it was fine when I ran standard spider(yes I ran a standard spider)
full error here:
"ZAP Error [java.net.SocketException]: Connection reset


Stack Trace:
java.net.SocketException: Connection reset
at java.base/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:323)
at java.base/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350)
at java.base/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:803)
at java.base/java.net.Socket.read(Socket.java:966)
at org.apache.hc.core5.http.impl.io.SessionInputBufferImpl.fillBuffer(SessionInputBufferImpl.java:149)
at org.apache.hc.core5.http.impl.io.SessionInputBufferImpl.readLine(SessionInputBufferImpl.java:280)
at org.apache.hc.core5.http.impl.io.AbstractMessageParser.parse(AbstractMessageParser.java:247)
at org.apache.hc.core5.http.impl.io.AbstractMessageParser.parse(AbstractMessageParser.java:54)
at org.apache.hc.core5.http.impl.io.DefaultBHttpClientConnection.receiveResponseHeader(DefaultBHttpClientConnection.java:299)
at org.zaproxy.addon.network.internal.client.apachev5.ZapHttpRequestExecutor.execute(ZapHttpRequestExecutor.java:74)
at org.apache.hc.core5.http.impl.io.HttpRequestExecutor.execute(HttpRequestExecutor.java:218)
at org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager.execute(PoolingHttpClientConnectionManager.java:685)
at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.execute(InternalExecRuntime.java:213)
at org.apache.hc.client5.http.impl.classic.MainClientExec.execute(MainClientExec.java:116)
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
at org.apache.hc.client5.http.impl.classic.ConnectExec.execute(ConnectExec.java:188)
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
at org.apache.hc.client5.http.impl.classic.ProtocolExec.execute(ProtocolExec.java:192)
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
at org.apache.hc.client5.http.impl.classic.ZapHttpRequestRetryExec.execute(ZapHttpRequestRetryExec.java:81)
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
at org.apache.hc.client5.http.impl.classic.ZapInternalHttpClient.doExecute(ZapInternalHttpClient.java:158)
at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:245)
at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:188)
at org.zaproxy.addon.network.internal.client.apachev5.HttpSenderApache.sendImpl0(HttpSenderApache.java:394)
at org.zaproxy.addon.network.internal.client.apachev5.HttpSenderApache.sendImpl(HttpSenderApache.java:297)
at org.zaproxy.addon.network.internal.client.apachev5.HttpSenderApache.sendImpl(HttpSenderApache.java:103)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAuthenticated(BaseHttpSender.java:298)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendNoRedirections(BaseHttpSender.java:266)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.send(BaseHttpSender.java:222)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAndReceive(BaseHttpSender.java:193)
at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAndReceive(BaseHttpSender.java:57)
at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:303)
at org.zaproxy.addon.network.internal.server.http.handlers.HttpSenderHandler.handleMessage(HttpSenderHandler.java:77)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:133)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:115)
at org.zaproxy.addon.network.internal.server.http.LocalServerHandler.processMessage(LocalServerHandler.java:63)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:84)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.channelRead0(MainServerHandler.java:73)
at org.zaproxy.addon.network.internal.server.http.MainServerHandler.channelRead0(MainServerHandler.java:38)
at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99)
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
at io.netty.channel.AbstractChannelHandlerContext.access(AbstractChannelHandlerContext.java:61)
at io.netty.channel.AbstractChannelHandlerContext.run(AbstractChannelHandlerContext.java:370)
at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:174)
at io.netty.util.concurrent.DefaultEventExecutor.run(DefaultEventExecutor.java:66)
at io.netty.util.concurrent.SingleThreadEventExecutor.run(SingleThreadEventExecutor.java:997)
at io.netty.util.internal.ThreadExecutorMap.run(ThreadExecutorMap.java:74)
at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
at java.base/java.lang.Thread.run(Thread.java:833)
"
and I've checked the server response
there isn't even a response just blank
and this error page shown in the browser
for other websites ZAP proxying works fine
I'm running it on a Kali VM using NAT mode
I've tried restarting my VM and ZAP, and checking configurations
and I wonder if the website blocks me or something?
whereas it's just a normal website not something super secure and the error doesn't seem to be related
last but not least
like about one day or two days ago
I remember visiting that website with ZAP proxying on and it was somehow successful
what I mean is that sometimes that error is thrown
(and at that point I remember the error was different, goes like "connect pool" "illegalstate" or something can't remember it sorry)
but sometimes
I can successfully visit that website and get responses, with a browser(using Firefox) warning indicating insecure connection, which is also confusing because it uses HTTPS.
actually here's the website: https://xmyz.xmedu.cn/
(don't worry I'm not doing any illegal hacking this is actually a school website and I've queried relevant teachers and they say it's fine to hack the school website if I can lol)
I hope my statement was clear
if any further details would help please let me know
sincerely appreciate if anyone could help
thank you!!
btw I am using ZAP 2.12.0
TYSM!!!!!

Reply all
Reply to author
Forward
0 new messages