Permission Denied

[Lia]

Hi there,

I have been running ZAP full scan via Automation Framework in command line and I did not change any configuration.

I noticed for last night's scan, I am suddenly seeing this warning message in zap.log file:

[ZAP-ActiveScanner-5] WARN  UserAgentScanRule - Permission denied: no further information
java.net.SocketException: Permission denied: no further information
  at sun.nio.ch.Net.pollConnect(Native Method) ~[?:?]
  at sun.nio.ch.Net.pollConnectNow(Net.java:682) ~[?:?]
  at sun.nio.ch.NioSocketImpl.timedFinishConnect(NioSocketImpl.java:542) ~[?:?]
  at sun.nio.ch.NioSocketImpl.connect(NioSocketImpl.java:592) ~[?:?]
  at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:327) ~[?:?]
  at java.net.Socket.connect(Socket.java:751) ~[?:?]
  at org.apache.hc.client5.http.ssl.SSLConnectionSocketFactory.lambda$connectSocket$0(SSLConnectionSocketFactory.java:232) ~[?:?]
  at java.security.AccessController.doPrivileged(AccessController.java:571) ~[?:?]
  at org.apache.hc.client5.http.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:231) ~[?:?]
  at org.zaproxy.addon.network.internal.client.apachev5.SslConnectionSocketFactory.connectSocket(SslConnectionSocketFactory.java:195) ~[?:?]
  at org.apache.hc.client5.http.impl.io.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:181) ~[?:?]
  at org.apache.hc.client5.http.impl.io.ZapHttpClientConnectionOperator.connect(ZapHttpClientConnectionOperator.java:95) ~[?:?]
  at org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:447) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.connectEndpoint(InternalExecRuntime.java:162) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.connectEndpoint(InternalExecRuntime.java:172) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ConnectExec.execute(ConnectExec.java:142) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ZapProtocolExec.execute(ZapProtocolExec.java:178) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ZapHttpRequestRetryExec.execute(ZapHttpRequestRetryExec.java:81) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.ZapInternalHttpClient.doExecute(ZapInternalHttpClient.java:173) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:245) ~[?:?]
  at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:188) ~[?:?]
  at org.zaproxy.addon.network.internal.client.apachev5.HttpSenderApache.sendImpl0(HttpSenderApache.java:481) ~[?:?]
  at org.zaproxy.addon.network.internal.client.apachev5.HttpSenderApache.sendImpl(HttpSenderApache.java:362) ~[?:?]
  at org.zaproxy.addon.network.internal.client.apachev5.HttpSenderApache.sendImpl(HttpSenderApache.java:116) ~[?:?]
  at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendRateLimited(BaseHttpSender.java:413) ~[?:?]
  at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAuthenticated(BaseHttpSender.java:382) ~[?:?]
  at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendNoRedirections(BaseHttpSender.java:350) ~[?:?]
  at org.zaproxy.addon.network.internal.client.BaseHttpSender.send(BaseHttpSender.java:306) ~[?:?]
  at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAndReceive(BaseHttpSender.java:277) ~[?:?]
  at org.zaproxy.addon.network.internal.client.BaseHttpSender.sendAndReceive(BaseHttpSender.java:233) ~[?:?]
  at org.parosproxy.paros.network.HttpSender.sendImpl(HttpSender.java:524) ~[zap-2.13.0.jar:2.13.0]
  at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:517) ~[zap-2.13.0.jar:2.13.0]
  at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(AbstractPlugin.java:313) ~[zap-2.13.0.jar:2.13.0]
  at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(AbstractPlugin.java:252) ~[zap-2.13.0.jar:2.13.0]
  at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(AbstractPlugin.java:225) ~[zap-2.13.0.jar:2.13.0]
  at org.zaproxy.zap.extension.ascanrules.UserAgentScanRule.sendUserAgent(UserAgentScanRule.java:179) ~[?:?]
  at org.zaproxy.zap.extension.ascanrules.UserAgentScanRule.attack(UserAgentScanRule.java:168) ~[?:?]
  at org.zaproxy.zap.extension.ascanrules.UserAgentScanRule.scan(UserAgentScanRule.java:151) ~[?:?]
  at org.parosproxy.paros.core.scanner.AbstractPlugin.run(AbstractPlugin.java:368) ~[zap-2.13.0.jar:2.13.0]
  at java.lang.Thread.run(Thread.java:1583) [?:?]

The Number of Alerts reported in the report is also lower than the previous scan. 

The previous scan does not contain the above warning message.

Can I please know what the error message is about? 

I did not make any changes to the target website too.

[Lia]

Hi, 

Just wondering if anyone can give advice/help on this matter?

Thank you.

[thc...@gmail.com]

Hi.

That looks like the OS blocking connections.

Do you have a firewall or anti-virus?

Best regards.

[Lia]

Hi thc202,

Thanks for the reply.

The target website has firewall but no antivirus installed.

[thc...@gmail.com]

That would be caused by the host/machine running ZAP not the target.

Best regards.

[Lia]

Hi there,

In that case, the host machine running ZAP do have a corporate VPN installed but before the scan is run, I made sure to turn it off.

The firewall might be the default setting and there is no antivirus installed.

Thanks