0x48piraj / jiraffe Goto Github PK

I'm getting an old error "str object is not callable " while running "Jiraffe" on Mac. Please suggest how to resolve the issue. Thanks!

pip install jiraffe

tried to run jiraffe -t but says no command found

Encounter the following error:

jiraffe -h
Traceback (most recent call last):
  File "/usr/local/bin/jiraffe", line 8, in <module>
    sys.exit(main())
  File "/usr/local/lib/python3.7/dist-packages/jiraffe/__main__.py", line 48, in main
    parser = argparse.ArgumentParser(formatter_class=argparse.RawDescriptionHelpFormatter, description=style.GREEN(banner) + style.RESET(''), usage=style.GREEN("jiraffe ") + style.YELLOW("[-h] [-t {}]").format(style.UNDERLINE("https://example-jira-instance.com") + style.RESET('') + style.YELLOW('')) + style.RESET(''))
TypeError: 'str' object is not callable

Quickfix on Line 8:
if sys.platform.lower() == "win32" or "linux":

Somehow something with the color setup is going worse...

References

jas502n/CVE-2019-11581: Atlassian JIRA Template injection vulnerability RCE: https://github.com/jas502n/CVE-2019-11581
sry309/CVE-2019-11581: Atlassian JIRA Template injection vulnerability RCE: https://github.com/sry309/CVE-2019-11581

For targeted payloads on specific vendors. (AWS, gcloud, ...)

References —

• https://www.coengoedegebure.com/how-i-got-access-to-local-aws-info-via-jira/
• https://medium.com/@Skylinearafat/how-outdated-jira-instances-suffers-from-multiple-security-vulnerabilities-6a88c45e9ec6
• https://blog.detectify.com/2019/01/29/hacking-isnt-an-exact-science/

Links

• https://jira.atlassian.com/browse/JRASERVER-69796
• https://nvd.nist.gov/vuln/detail/CVE-2019-8449
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8449
• https://www.cvedetails.com/cve/CVE-2019-8449/
• https://github.com/bcoles/jira_scan
• https://gist.github.com/0x240x23elu/891371d46a1e270c7bdded0469d8e09c
• https://github.com/random-robbie/Jira-Scan

Installed Jiraffe using pip:
pip install jiraffe
Tried to run and got import exception:
C:\Python37\Scripts>jiraffe Traceback (most recent call last): File "c:\python37\lib\runpy.py", line 193, in _run_module_as_main "__main__", mod_spec) File "c:\python37\lib\runpy.py", line 85, in _run_code exec(code, run_globals) File "C:\Python37\Scripts\jiraffe.exe\__main__.py", line 4, in <module> File "c:\python37\lib\site-packages\jiraffe\__main__.py", line 5, in <module> from .recon import request, isjira, getversion File "c:\python37\lib\site-packages\jiraffe\recon.py", line 8, in <module> from packaging import version ModuleNotFoundError: No module named 'packaging'

I think something in pip manifest should me changed to install packaging module

root@wmfb-xps:/usr/local/bin# ./jiraffe
Traceback (most recent call last):
File "./jiraffe", line 11, in
load_entry_point('jiraffe==2.0.1', 'console_scripts', 'jiraffe')()
File "/usr/local/lib/python3.8/dist-packages/jiraffe-2.0.1-py3.8.egg/jiraffe/main.py", line 48, in main
TypeError: 'str' object is not callable

i give the error after installing and running the tool this cmd python -m jiraffe

error:-

Traceback (most recent call last):
File "/usr/lib/python2.7/runpy.py", line 163, in _run_module_as_main
mod_name, _Error)
File "/usr/lib/python2.7/runpy.py", line 114, in _get_module_details
return _get_module_details(pkg_main_name)
File "/usr/lib/python2.7/runpy.py", line 119, in _get_module_details
code = loader.get_code(mod_name)
File "/usr/local/lib/python2.7/dist-packages/jiraffe-2.0.3-py2.7.egg/jiraffe/main.py", line 75
print(style.GREEN("[+] Jira instance detected") + style.RESET(''), style.YELLOW("[*] Enumerating the version ...") + style.RESET(''), sep="\n")
^
SyntaxError: invalid syntax

please kindly solve my issue