I installed Nexpose without incident. During the install I did the initialization. It looked to me like everything went fine. No error messages. When I point my browser to https://localhost:3780 I receive "no data received" from Chrome or "The connection was reset" from Firefox. I did see a problem like this in a thread for Medasploit with no solution. I'd love to see this product in action.
Windows 2012 Server 8 gig of memory, 2 processors.
Thanks,
Tom
Are there any type of install logs for Nexpose that might point to where the problem might be?
Thanks,
Tom
Logs are going to be under the install directory, then under ~/nsc/logs/. That should give you some insight into what's going wrong. You could also have security restrictions on your machine blocking Nexpose from running.
Thanks much. I'm seeing 3 warnings:
1 .
2013-08-08T14:17:59 [WARN] [Thread: Security Console] No valid licenses were found. This will prevent site modification and the running of scans.
2.
2013-08-08T14:18:48 [WARN] [Thread: Security Console] Failed to auto-update console.
com.rapid7.updater.UpdateException: Not licensed for updates.
at com.rapid7.updater.InternetUpdateClient.checkResponse(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.updater.InternetUpdateClient.doUpdateActivation(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.updater.InternetUpdateClient.doInitialHandshake(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.updater.InternetUpdateClient.refreshUpdateTable(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.updater.UpdatePackageProcessor.getUpdates(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.updater.UpdatePackageProcessor.getUpdates(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.nexpose.nsc.NSC.setupAutoUpdate(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.NSC.initAutoUpdate(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.NSC.initCriticalSubsystems(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.NSC.initSubsystems(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.NSC.run(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.NSC.main(Unknown Source) [nsc.jar:na]
3.
2013-08-08T14:18:56 [WARN] [Thread: Security Console] HHH000436: Entity manager factory name (default) is already registered. If entity manager will be clustered or passivated, specify a unique value for property 'hibernate.ejb.entitymanager_factory_name'
To the best of my knowledge, I believe I put in the license when I did the install. But I could be wrong on that.
Is there a way to confirm the license has been accepted?
What services should be running?
Thanks,
Tom
The license is actually entered after you install and the first time you log into the Nexpose web interface. Is port 3780 listed in Netstat as listening? Do you have any software firewall that could prevent access? Anti-virus with browser plugin?
The server is behind a firewall with a 192.x.x.x address. The machine is able to access the Nexpose website. Port 80 and 443 are open. The install runs ok.. But I'm not asked for a license because it never gets that far.
Tom
If you run this command in a command prompt do you get a result?
netstat -on | findstr 3780
Also, in the nsc.log, do you see a line that says "[INFO] [Thread: Security Console] Accepting web server logins." or something similar?
When I do a netstat -on | findstr 3780 nothing comes back.
I also see a line that says: "[INFO] [Thread: Security Console] Accepting web server logins."
But . . . . a few line below it there is the following error message:
2013-08-08T18:57:25 [ERROR] [Thread: /style/image Request Handler] Error while displaying style.
java.io.FileNotFoundException: C:\Program Files\rapid7\nexpose\nsc\htroot\style\default\image (Access is denied)
at java.io.FileInputStream.open(Native Method) ~[na:1.7.0_03]
at java.io.FileInputStream.<init>(Unknown Source) ~[na:1.7.0_03]
at com.rapid7.io.IOTools.pipeFile(Unknown Source) ~[r7shared.jar:na]
at com.rapid7.nexpose.nsc.http.proglets.StyleProglet.doGet(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.http.Proglet.service(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.http.httpd.RequestHandler.handleRequest(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.http.httpd.RequestHandler.handle(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.http.httpd.WebServerManager.executeRequest(Unknown Source) [nsc.jar:na]
at com.rapid7.nexpose.nsc.tomcat.TomcatForwardingServlet.service(Unknown Source) [nsc.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:728) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:305) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:210) [tomcat-embed-core-7.0.35.jar:7.0.35]
at com.rapid7.nexpose.nsc.tomcat.SessionValidationFilter.doFilter(Unknown Source) [nsc.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:243) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:210) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(Charact erEncodingFilter.java:88) [spring-web-3.2.0.RELEASE.jar:3.2.0.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilt er.java:107) [spring-web-3.2.0.RELEASE.jar:3.2.0.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:243) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:210) [tomcat-embed-core-7.0.35.jar:7.0.35]
at com.rapid7.nexpose.nsc.tomcat.ResponseHeadersFilter.doFilter(Unknown Source) [nsc.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:243) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:210) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 222) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 123) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.ja va:472) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:11 8) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processo r.java:1004) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractPr otocol.java:589) [tomcat-embed-core-7.0.35.jar:7.0.35]
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:168 0) [tomcat-embed-core-7.0.35.jar:7.0.35]
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [na:1.7.0_03]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [na:1.7.0_03]
at java.lang.Thread.run(Unknown Source) [na:1.7.0_03]
Thanks - Tom
Well after a lot of help, the problem turned out to be IE Enhanced Security Configuration must be turned OFF. I believe that when a new browser is installed, these settings get carried over. So . . . . because IE Enhanced Security Configuration was initially turned on, when I installed Firefox and Chrome, the setting get carried over and those browsers failed.
Thanks to the folks at Rapid7 for their assistance,
Tom
Tom,
Thanks for coming back and giving us the actual answer - as I'm sure there's someone else who'll be scratching their head in the near future.
Logs are going to be under the install directory, then under ~/nsc/logs/. That should give you some insight into what's going wrong. You could also have security restrictions on your machine blocking Nexpose from running.