org.zaproxy.zap.extension.api.ApiException: no_implementor

[Feng Zhang]

Hi,

I use following commands to scan my application:

docker run -p 8080:8080 -v $(pwd):/zap/wrk/:rw -t owasp/zap2docker-stable zap-full-scan.py -t https://example.com -P 8080 -c zap-casa-config.conf -x copper-results-full.xml -n DefaultContext.context -U exampleuser

It was working Yesterday, but today it throws error:

===

15654 [ZAP-IO-EventExecutor-3-5] WARN  org.zaproxy.zap.extension.api.API - Bad request to API endpoint [/JSON/spider/action/scan/] from [127.0.0.1]:

org.zaproxy.zap.extension.api.ApiException: no_implementor
    at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:445) ~[zap-2.12.0.jar:2.12.0]
    at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleApiRequest(ZapApiHandler.java:100) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleRequest(ZapApiHandler.java:74) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleMessage(ZapApiHandler.java:59) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:133) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:115) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.LocalServerHandler.processMessage(LocalServerHandler.java:63) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:84) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.channelRead0(MainServerHandler.java:73) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.channelRead0(MainServerHandler.java:38) ~[?:?]
    at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99) ~[?:?]
    at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) ~[?:?]
    at io.netty.channel.AbstractChannelHandlerContext.access$600(AbstractChannelHandlerContext.java:61) ~[?:?]
    at io.netty.channel.AbstractChannelHandlerContext$7.run(AbstractChannelHandlerContext.java:370) ~[?:?]
    at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:174) ~[?:?]
    at io.netty.util.concurrent.DefaultEventExecutor.run(DefaultEventExecutor.java:66) ~[?:?]
    at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) ~[?:?]
    at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[?:?]
    at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) ~[?:?]
    at java.lang.Thread.run(Thread.java:829) ~[?:?]

Any advise is appreciated!

Feng

[thc...@gmail.com]

Hi.

That works fine here, are you sure you are using the latest Docker image?

Regarding the error that indicates the Spider add-on is not installed:
https://www.zaproxy.org/docs/api/#common-errors

Best regards.

[test0427 rqa]

Thanks @thc202!

It is the reason.

Best Regards!

Feng

[Szymon Musioł]

The issue seems to be caused by update to Network plugin that happened 2 days ago.

Is it possible to disable auto updates when running zap-baseline and other scripts?

[thc...@gmail.com]

There's no command line argument to disable that in the scripts.

The latest image has the add-ons up-to-date though. Did you try pulling
it again?

In any case I'll try reproduce the issue, the Network add-on being
updated should not cause the Spider add-on to go missing.

Best regards.

[Feng Zhang]

@thc202

Yes, I did remove the old image and pull again. 

Best Regards!

Feng

[thc...@gmail.com]

Being tracked in https://github.com/zaproxy/zaproxy/issues/7593

Best regards.

[Feng Zhang]

Hi @thc202,

Now I am getting "missing parameters" error after a few successful scans: (I have tried removing image and pull again)

9032 [ZAP-daemon] INFO  org.zaproxy.addon.network.ExtensionNetwork - ZAP is now listening on 0.0.0.0:8080
13265 [ZAP-IO-EventExecutor-3-2] WARN  org.zaproxy.zap.extension.api.API - Bad request to API endpoint [/JSON/spider/action/scanAsUser/] from [127.0.0.1]:
org.zaproxy.zap.extension.api.ApiException: missing_parameter
    at org.zaproxy.addon.spider.SpiderAPI.scanURL(SpiderAPI.java:491) ~[?:?]
    at org.zaproxy.addon.spider.SpiderAPI.handleApiAction(SpiderAPI.java:282) ~[?:?]
    at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:521) ~[zap-2.12.0.jar:2.12.0]

    at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleApiRequest(ZapApiHandler.java:100) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleRequest(ZapApiHandler.java:74) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.handlers.ZapApiHandler.handleMessage(ZapApiHandler.java:59) ~[?:?]

    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.notifyMessageHandlers(MainServerHandler.java:135) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.processMessage(MainServerHandler.java:117) ~[?:?]

    at org.zaproxy.addon.network.internal.server.http.LocalServerHandler.processMessage(LocalServerHandler.java:63) ~[?:?]

    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.process(MainServerHandler.java:86) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.channelRead0(MainServerHandler.java:75) ~[?:?]
    at org.zaproxy.addon.network.internal.server.http.MainServerHandler.channelRead0(MainServerHandler.java:40) ~[?:?]

    at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99) ~[?:?]

    at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[?:?]

    at io.netty.channel.AbstractChannelHandlerContext.access$600(AbstractChannelHandlerContext.java:61) ~[?:?]

    at io.netty.channel.AbstractChannelHandlerContext$7.run(AbstractChannelHandlerContext.java:425) ~[?:?]

    at io.netty.util.concurrent.AbstractEventExecutor.runTask(AbstractEventExecutor.java:174) ~[?:?]
    at io.netty.util.concurrent.DefaultEventExecutor.run(DefaultEventExecutor.java:66) ~[?:?]
    at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) ~[?:?]
    at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[?:?]
    at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) ~[?:?]
    at java.lang.Thread.run(Thread.java:829) ~[?:?

Thank you in advance!

Feng