Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No Plugins Listing after Caldera Installation in Ubuntu #3152

Open
ksheena opened this issue Mar 11, 2025 · 4 comments
Open

No Plugins Listing after Caldera Installation in Ubuntu #3152

ksheena opened this issue Mar 11, 2025 · 4 comments

Comments

@ksheena
Copy link

ksheena commented Mar 11, 2025

Hello Team,

I have encountered Mutiple module error while installing the Caldera. It was working two weeks ago. I have installed all the dependencies showing in error:
pip install websockets==13.1
pip install rich
pip install aiohttp==3.10.11
pip install aiohttp_apispec
pip install aiohttp_jinja2
pip install aiohttp_security_api
pip install aiohttp_security
pip install aiohttp_session
pip install marshmallow_enum
pip install ldap3
pip install croniter
pip install aioftp
pip install asyncssh

Now, installation is successful, However, plugins or not listing after login:

Image
Image

python3 server.py --insecure --build -l DEBUG

2025-03-11 14:41:57 WARNING --insecure flag set. Caldera will use the default user accounts in default.yml config file. server.py:219
INFO Using main config from conf/default.yml server.py:228
2025-03-11 14:41:58 DEBUG Loaded 2 parsers learning_svc.py:20
INFO Building VueJS front-end. server.py:265

up to date, audited 774 packages in 2s

100 packages are looking for funding
run npm fund for details

20 vulnerabilities (10 moderate, 9 high, 1 critical)

To address issues that do not require attention, run:
npm audit fix

To address all issues (including breaking changes), run:
npm audit fix --force

Run npm audit for details.

magma@0.0.0 build
node prebundle.js && vite build

Copying all plugin GUI source files to magma
Copying over "access" files...
Copying over "atomic" files...
Copying over "builder" files...
Copying over "compass" files...
Copying over "debrief" files...
Copying over "emu" files...
Copying over "gameboard" files...
Copying over "human" files...
Copying over "manx" files...
Copying over "response" files...
Copying over "sandcat" files...
Copying over "ssl" files...
Copying over "stockpile" files...
Copying over "training" files...
Plugin GUI source files copied!
vite v2.9.15 building for production...
✓ 1843 modules transformed.
dist/assets/favicon.cc1c341b.ico 69.07 KiB
dist/assets/caldera-logo.6a24b35b.png 16.51 KiB
dist/assets/caldera-logo-mtn.88f0ff8a.png 36.07 KiB
dist/assets/darwin-icon-privileged.ffa7a1c2.svg 0.68 KiB
dist/assets/darwin-icon.95280721.svg 0.67 KiB
dist/assets/linux-icon-privileged.d1ede01c.svg 3.66 KiB
dist/assets/linux-icon.df96f069.svg 3.65 KiB
dist/assets/windows-icon-privileged.e4e076e8.svg 0.39 KiB
dist/assets/windows-icon.2e7338a5.svg 0.37 KiB
dist/index.html 0.46 KiB
dist/assets/access.86d56648.js 12.71 KiB / gzip: 3.98 KiB
dist/assets/atomic.1e5276cb.js 1.05 KiB / gzip: 0.62 KiB
dist/assets/builder.1fa16f17.js 1.31 KiB / gzip: 0.71 KiB
dist/assets/compass.aba5e44f.js 5.22 KiB / gzip: 2.22 KiB
dist/assets/debrief.e0fbf5f3.js 28.20 KiB / gzip: 7.45 KiB
dist/assets/emu.00340ac9.js 1.56 KiB / gzip: 0.70 KiB
dist/assets/human.abef2e01.js 11.80 KiB / gzip: 3.47 KiB
dist/assets/gameboard.d8a80b83.js 21.79 KiB / gzip: 6.11 KiB
dist/assets/manx.445ba78a.js 6.54 KiB / gzip: 2.46 KiB
dist/assets/response.8319e18b.js 1.60 KiB / gzip: 0.84 KiB
dist/assets/sandcat.605bb046.js 0.68 KiB / gzip: 0.44 KiB
dist/assets/ssl.a111fba2.js 0.98 KiB / gzip: 0.62 KiB
dist/assets/stockpile.a6d20d83.js 1.61 KiB / gzip: 0.76 KiB
dist/assets/training.75c98570.js 8.96 KiB / gzip: 3.55 KiB
dist/assets/access.b689ce59.css 0.32 KiB / gzip: 0.20 KiB
dist/assets/compass.4b402f52.css 0.12 KiB / gzip: 0.12 KiB
dist/assets/debrief.854158fe.css 0.79 KiB / gzip: 0.34 KiB
dist/assets/human.d7b43e12.css 2.31 KiB / gzip: 0.77 KiB
dist/assets/gameboard.430857df.css 2.01 KiB / gzip: 0.68 KiB
dist/assets/manx.fdacbfd3.css 3.11 KiB / gzip: 1.52 KiB
dist/assets/response.9692d0ec.css 0.20 KiB / gzip: 0.13 KiB
dist/assets/training.9d43ffbb.css 3.86 KiB / gzip: 1.05 KiB
dist/assets/index.907db634.css 248.58 KiB / gzip: 33.88 KiB
dist/assets/index.8a0f844a.js 1738.21 KiB / gzip: 560.16 KiB

(!) Some chunks are larger than 500 KiB after minification. Consider:

  • Using dynamic import() to code-split the application

  • Use build.rollupOptions.output.manualChunks to improve chunking: https://rollupjs.org/guide/en/#outputmanualchunks

  • Adjust chunk size limit for this warning via build.chunkSizeWarningLimit.
    2025-03-11 14:42:16 INFO VueJS front-end build complete. server.py:268
    ERROR go does not meet the minimum version of 1.19 app_svc.py:188
    DEBUG Collision in ability name detected for 52928f462ea8f5fa617aa8c815f5598b and 5e3512c73a461c17ddcb1cc0bbdbeef9 (WinPwn - PowerSharpPack - Kerberoasting Using c_ability.py:103
    Rubeus). Modifying name of the second ability to WinPwn - PowerSharpPack - Kerberoasting Using Rubeus (2)...
    DEBUG Collision in ability name detected for 7db784562afbea0265fcafc4243b66de and 5ac7f6ec1898d8d408f9cdc687262cc7 (Exfiltration Over Alternative Protocol - SSH). c_ability.py:103
    Modifying name of the second ability to Exfiltration Over Alternative Protocol - SSH (2)...
    DEBUG Collision in ability name detected for f674301b84ea3344f119270bf7bb97cd and 4d4b29abb6b1e580e33c0035c1fc37ad (rm -rf). Modifying name of the second ability c_ability.py:103
    to rm -rf (2)...
    DEBUG Collision in ability name detected for 3bfd3a51f3c7352d7c6c6c785d01e5f7 and 9bd1997d793d0ac5b1aea4888c75c932 (Loadable Kernel Module based Rootkit). c_ability.py:103
    Modifying name of the second ability to Loadable Kernel Module based Rootkit (2)...
    DEBUG Collision in ability name detected for 9bd17863cd45f82002a6f011de139363 and ab44803d5a9c299258efff185b0f70b5 (rc.common). Modifying name of the second c_ability.py:103
    ability to rc.common (2)...
    DEBUG Collision in ability name detected for dca8b042fcdffcc1f5cddcff4122c434 and 44705da4b28c8fa57fc2a2940b34565a (System Information Discovery). Modifying name c_ability.py:103
    of the second ability to System Information Discovery (2)...
    DEBUG Collision in ability name detected for 26d3702887944abcc64b406baf8f8e43 and 68a0a328719faa26fff5b92e18108b3f (Enumerate users and groups). Modifying name of c_ability.py:103
    the second ability to Enumerate users and groups (2)...
    DEBUG Collision in ability name detected for b73d58b20bcb138a26175f240cca9de2 and 44705da4b28c8fa57fc2a2940b34565a (System Information Discovery). Modifying name c_ability.py:103
    of the second ability to System Information Discovery (2)...
    DEBUG Collision in ability name detected for 4370001012f5f0df001269627b4737e9 and 942316dc6a362e44b248a872e5f42c92 (System Owner/User Discovery). Modifying name c_ability.py:103
    of the second ability to System Owner/User Discovery (2)...
    DEBUG Collision in ability name detected for c84a57391dbc724dc51436deb3e0ca00 and e0c75b4cc32124ef4c61508694fd0808 (Get-DomainUser with PowerView). Modifying name c_ability.py:103
    of the second ability to Get-DomainUser with PowerView (2)...
    DEBUG Collision in ability name detected for fcf71ee3-d1a9-4136-b919-9e5f6da43608 and 3838447b079b302fe75b700a70163815 (Clear Logs). Modifying name of the second c_ability.py:103
    ability to Clear Logs (2)...
    2025-03-11 14:42:17 DEBUG Collision in ability name detected for 10a9d979-e342-418a-a9b0-002c483e0fa6 and b1d41972-3ad9-4aa1-8f7f-05f049a2980e (Start 54ndc47). Modifying name of the c_ability.py:103
    second ability to Start 54ndc47 (2)...
    DEBUG Collision in ability name detected for 2488245e-bcbd-405d-920e-2de27db882b3 and 1d3cb1429f530cb89f41c65e57f03db4 (Query Registry). Modifying name of the c_ability.py:103
    second ability to Query Registry (2)...
    DEBUG Restored data from persistent storage data_svc.py:116
    DEBUG There are 0 jobs in the scheduler data_svc.py:117
    DEBUG Restored data from persistent storage base_knowledge_svc.py:308
    DEBUG Registered contact: websocket contact_svc.py:38
    DEBUG Registered contact: gist contact_svc.py:38
    DEBUG Registered contact: tcp contact_svc.py:38
    DEBUG Registered contact: slack contact_svc.py:38
    DEBUG Registered contact: dns contact_svc.py:38
    DEBUG Registered contact: html contact_svc.py:38
    DEBUG Registered contact: ftp contact_svc.py:38
    DEBUG Registered contact: udp contact_svc.py:38
    DEBUG Registered contact: http contact_svc.py:38
    DEBUG Registered contact tunnel: ssh_tunneling contact_svc.py:53
    INFO Invalid Github Gist personal API token provided. Gist C2 contact will not be started. contact_gist.py:70
    INFO Generating temporary SSH private key. Was unable to use provided SSH private key tunnel_ssh.py:26
    INFO Enabled plugin: fieldmanual app_svc.py:131
    INFO Enabled plugin: manx app_svc.py:131
    INFO Enabled plugin: atomic app_svc.py:131
    WARNING /usr/lib/python3/dist-packages/paramiko/pkey.py:59: CryptographyDeprecationWarning: TripleDES has been moved to warnings.py:109
    cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.
    "cipher": algorithms.TripleDES,

                  WARNING  /usr/lib/python3/dist-packages/paramiko/transport.py:219: CryptographyDeprecationWarning: Blowfish has been moved to                                          warnings.py:109
                           cryptography.hazmat.decrepit.ciphers.algorithms.Blowfish and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 45.0.0.                               
                             "class": algorithms.Blowfish,                                                                                                                                              
                                                                                                                                                                                                        
                  WARNING  /usr/lib/python3/dist-packages/paramiko/transport.py:243: CryptographyDeprecationWarning: TripleDES has been moved to                                         warnings.py:109
                           cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.                              
                             "class": algorithms.TripleDES,                                                                                                                                             
                                                                                                                                                                                                        
                  INFO     Enabled plugin: training                                                                                                                                       app_svc.py:131
                  INFO     Enabled plugin: magma                                                                                                                                          app_svc.py:131
                  INFO     Enabled plugin: access                                                                                                                                         app_svc.py:131
                  DEBUG    Configuration (agents) update, setting deployments=['0ab383be-b819-41bf-91b9-1bd4404d83bf', '1837b43e-4fff-46b2-a604-a602f7540469',                          base_world.py:46
                           '356d1722-7784-40c4-822b-0cf864b0b36d', '2f34977d-9558-4c12-abad-349716777c6b']                                                                                              
                  INFO     Enabled plugin: response                                                                                                                                       app_svc.py:131
                  INFO     Enabled plugin: debrief                                                                                                                                        app_svc.py:131
                  DEBUG    Loaded gocat extension module: shared                                                                                                                          sand_svc.py:94
                  DEBUG    Loaded gocat extension module: proxy_http                                                                                                                      sand_svc.py:94
                  DEBUG    Loaded gocat extension module: shellcode                                                                                                                       sand_svc.py:94
                  DEBUG    Loaded gocat extension module: shells                                                                                                                          sand_svc.py:94
                  DEBUG    Loaded gocat extension module: native                                                                                                                          sand_svc.py:94
                  DEBUG    Loaded gocat extension module: donut                                                                                                                           sand_svc.py:94
                  DEBUG    Loaded gocat extension module: slack                                                                                                                           sand_svc.py:94
                  INFO     Enabled plugin: sandcat                                                                                                                                        app_svc.py:131
                  INFO     Enabled plugin: compass                                                                                                                                        app_svc.py:131
                  INFO     Enabled plugin: stockpile                                                                                                                                      app_svc.py:131
                  INFO     Creating SSH listener on 0.0.0.0, port 8022                                                                                                                    logging.py:102
                  INFO     serving on 0.0.0.0:2222                                                                                                                                         server.py:756
                  WARNING  upx does not meet the minimum version of 0.0.0. Upx is an optional dependency which adds more functionality.                                                   app_svc.py:186
    

2025-03-11 14:42:28 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: 2f32a5c66db68b291469a3ab49be9261 c_adversary.py:90
WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: 854e480af3b5e2946bb3ae44916e951a c_adversary.py:90
WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: 6401e9fc7007569199a38703f0aa0f0f c_adversary.py:90
WARNING Unable to build docs: hook.py:60

                         Extension error:                                                                                                                                                             
                         Could not import extension myst_parser (exception: No module named 'myst_parser')                                                                                            
                                                                                                                                                                                                      
                DEBUG    Using default login handler.                                                                                                                                  auth_svc.py:209

2025-03-11 14:42:29 DEBUG Created authentication group: blue auth_svc.py:72
DEBUG Created authentication group: red auth_svc.py:72
DEBUG = connection is CONNECTING protocol.py:249
DEBUG > GET /system/ready HTTP/1.1 client.py:110
DEBUG > Host: 0.0.0.0:7012 client.py:112
DEBUG > Upgrade: websocket client.py:112
DEBUG > Connection: Upgrade client.py:112
DEBUG > Sec-WebSocket-Key: h/N2hCovJuS2650MYVeJZg== client.py:112
DEBUG > Sec-WebSocket-Version: 13 client.py:112
DEBUG > Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits client.py:112
DEBUG > User-Agent: Python/3.8 websockets/13.1 client.py:112
DEBUG 'WebSocketServerProtocol' object has no attribute 'request' contact_websocket.py:43
DEBUG < HTTP/1.1 101 Switching Protocols client.py:139
DEBUG < Upgrade: websocket client.py:141
DEBUG < Connection: Upgrade client.py:141
DEBUG < Sec-WebSocket-Accept: SdX2DpjIcU/jdvx3Z/VCs7IK9yM= client.py:141
DEBUG < Sec-WebSocket-Extensions: permessage-deflate; server_max_window_bits=12; client_max_window_bits=12 client.py:141
DEBUG < Date: Tue, 11 Mar 2025 13:42:29 GMT client.py:141
DEBUG < Server: Python/3.8 websockets/13.1 client.py:141
DEBUG = connection is OPEN protocol.py:351
DEBUG < CLOSE 1000 (OK) [2 bytes] protocol.py:1162
DEBUG = connection is CLOSING protocol.py:1215
DEBUG > CLOSE 1000 (OK) [2 bytes] protocol.py:1168
DEBUG = connection is CLOSED protocol.py:1482
INFO All systems ready. server.py:104

██████╗ █████╗ ██╗ ██████╗ ███████╗██████╗ █████╗
██╔════╝██╔══██╗██║ ██╔══██╗██╔════╝██╔══██╗██╔══██╗
██║ ███████║██║ ██║ ██║█████╗ ██████╔╝███████║
██║ ██╔══██║██║ ██║ ██║██╔══╝ ██╔══██╗██╔══██║
╚██████╗██║ ██║███████╗██████╔╝███████╗██║ ██║██║ ██║
╚═════╝╚═╝ ╚═╝╚══════╝╚═════╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝

@endiz
Copy link

endiz commented Mar 12, 2025

I just made a clean install off the latest repo and all plugins showed up correctly. What are the steps you take to pull the repo down, install dependencies and run the server?

FYI this is what I run on ubuntu 22.04:

git clone https://github.com/mitre/caldera.git --recursive
cd caldera && python3 -m venv .venv && source .venv/bin/activate
pip install setuptools wheel && pip install pyminizip donut-shellcode && pip install -r requirements.txt
python3 server.py --build --insecure

@ksheena
Copy link
Author

ksheena commented Mar 12, 2025

I am installing it in:
NAME="Ubuntu"
VERSION="20.04.4

I followed provided steps. Getting same error:

Collecting cryptography==44.0.1
Downloading cryptography-44.0.1-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (4.2 MB)
|████████████████████████████████| 4.2 MB 5.7 MB/s
ERROR: Could not find a version that satisfies the requirement websockets==15.0 (from -r requirements.txt (line 9)) (from versions: 1.0, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 3.0, 3.1, 3.2, 3.3, 3.4, 4.0.1, 5.0, 5.0.1, 6.0, 7.0, 8.0, 8.0.1, 8.0.2, 8.1, 9.0, 9.0.1, 9.0.2, 9.1, 10.0, 10.1, 10.2, 10.3, 10.4, 11.0, 11.0.1, 11.0.2, 11.0.3, 12.0, 13.0, 13.0.1, 13.1)
ERROR: No matching distribution found for websockets==15.0 (from -r requirements.txt (line 9))
(.venv) root@analyst-virtual-machine:/opt/caldera#
(.venv) root@analyst-virtual-machine:/opt/caldera#
(.venv) root@analyst-virtual-machine:/opt/caldera#

(.venv) root@analyst-virtual-machine:/opt/caldera# pip install websockets==13.1
Collecting websockets==13.1
Downloading websockets-13.1-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (164 kB)
|████████████████████████████████| 164 kB 1.7 MB/s
Installing collected packages: websockets
Successfully installed websockets-13.1

(.venv) root@analyst-virtual-machine:/opt/caldera#
(.venv) root@analyst-virtual-machine:/opt/caldera# python3 server.py --build --insecure
Traceback (most recent call last):
File "server.py", line 5, in
from rich.console import Console
ModuleNotFoundError: No module named 'rich'

@endiz
Copy link

endiz commented Mar 12, 2025

What version of python? Please try with 3.9+

@ksheena
Copy link
Author

ksheena commented Mar 14, 2025

It worked with that. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants