arachni 0.2.2.1

data/reports/plugin_formatters/html/form_dicattack.rb

@@ -0,0 +1,54 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+module Reports
+
+class HTML
+    module PluginFormatters
+
+        #
+        # HTML formatter for the results of the FormDicattack plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class FormDicattack < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                return ERB.new( tpl ).result( binding )
+            end
+
+            def tpl
+                %q{
+                    <h3>Form dictionary attacker</h3>
+                    <blockquote><%=@description%></blockquote>
+
+                    <h4>Credentials</h4>
+                    <strong>Username</strong>: <%=CGI.escapeHTML(@results[:username])%> <br/>
+                    <strong>Password</strong>: <%=CGI.escapeHTML(@results[:password])%>
+                }
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/html/healthmap.rb

@@ -0,0 +1,76 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+module Reports
+
+class HTML
+    module PluginFormatters
+
+        #
+        # HTML formatter for the results of the HealthMap plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class HealthMap < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                return ERB.new( tpl ).result( binding )
+            end
+
+            def tpl
+                %q{
+                    <style type="text/css">
+                        a.safe {
+                            color: blue
+                        }
+                        a.unsafe {
+                            color: red
+                        }
+                    </style>
+
+                    <h3>Healthmap</h3>
+                    <blockquote><%=@description%></blockquote>
+
+                    <h4>Results</h4>
+                    <% @results[:map].each do |entry| %>
+                        <% state = entry.keys[0]%>
+                        <% url   = entry.values[0]%>
+
+                        <a class="<%=state%>" href="<%=CGI.escapeHTML(url)%>"><%=CGI.escapeHTML(url)%></a> <br/>
+                    <%end%>
+
+                    <br/>
+
+                    <h5>Stats</h5>
+                    <strong>Total</strong>: <%=@results[:total]%> <br/>
+                    <strong>Safe</strong>: <%=@results[:safe]%> <br/>
+                    <strong>Unsafe</strong>: <%=@results[:unsafe]%> <br/>
+                    <strong>Issue percentage</strong>: <%=@results[:issue_percentage]%>%
+                }
+            end
+
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/html/http_dicattack.rb

@@ -0,0 +1,54 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+module Reports
+
+class HTML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the HTTPDicattack plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class HTTPDicattack < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                return ERB.new( tpl ).result( binding )
+            end
+
+            def tpl
+                %q{
+                    <h3>HTTP dictionary attacker</h3>
+                    <blockquote><%=@description%></blockquote>
+
+                    <h4>Credentials</h4>
+                    <strong>Username</strong>: <%=CGI.escapeHTML(@results[:username])%> <br/>
+                    <strong>Password</strong>: <%=CGI.escapeHTML(@results[:password])%>
+                }
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/html/metaformatters/timeout_notice.rb

@@ -0,0 +1,65 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+module Reports
+
+class HTML
+module PluginFormatters
+
+class MetaModules
+
+module MetaFormatters
+
+    #
+    # HTML formatter for the results of the TimeoutNotice metamodule
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class TimeoutNotice < Arachni::Plugin::Formatter
+
+        def initialize( metadata )
+            @results     = metadata[:results]
+            @description = metadata[:description]
+        end
+
+        def run
+            return ERB.new( tpl ).result( binding )
+        end
+
+        def tpl
+            %q{
+                    <h4>Timeout notice</h4>
+                    <blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+
+                    <ul>
+                    <%@results.each do |issue| %>
+                        <li>
+                            <a href="#issue_<%=issue['index']%>">
+                                <%=issue['name']%> at <%=issue['url']%> in <%=issue['elem']%> variable '<%=issue['var']%>' using <%=issue['method']%>
+                            </a>
+                        </li>
+                    <%end%>
+                    </ul>
+            }
+        end
+    end
+
+end
+
+end
+end
+end
+end
+end

data/reports/plugin_formatters/html/metaformatters/uniformity.rb

@@ -0,0 +1,71 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class HTML
+module PluginFormatters
+
+class MetaModules
+module MetaFormatters
+
+    #
+    # HTML formatter for the results of the Uniformity metamodule
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class Uniformity < Arachni::Plugin::Formatter
+
+        def initialize( metadata )
+            @results     = metadata[:results]
+            @description = metadata[:description]
+        end
+
+        def run
+            return ERB.new( tpl ).result( binding )
+        end
+
+        def tpl
+            %q{
+                    <h4>Uniformity (Lack of centralised sanitization)</h4>
+                    <blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+
+                    <ul>
+                    <%@results['uniformals'].each_pair do |id, uniformal| %>
+                        <% issue = uniformal['issue'] %>
+                        <li>
+                            <%=issue['name']%> in <%=issue['elem']%> variable '<%=issue['var']%>' using <%=issue['method']%> at the following pages:
+                            <ul>
+
+                            <%@results['pages'][id].each_with_index do |url, i|%>
+                                <li>
+                                    <a href="#issue_<%=uniformal['indices'][i]%>"><%=url%></a>
+                                </li>
+                            <%end%>
+
+                            </ul>
+                        </li>
+                    <%end%>
+                    </ul>
+            }
+        end
+
+    end
+
+end
+end
+end
+end
+end
+end

data/reports/plugin_formatters/html/metamodules.rb

@@ -0,0 +1,93 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+module Reports
+
+class HTML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the MetaModules plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class MetaModules
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+
+                metaresults = format_meta_results( @results ).values
+                return ERB.new( tpl ).result( binding )
+            end
+
+            def tpl
+                %q{
+                    <h3>Metamodules</h3>
+                    <blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+
+                    <%metaresults.each do |html|%>
+                        <%=html%>
+                    <%end%>
+                }
+            end
+
+            #
+            # Runs plugin formatters for the running report and returns a hash
+            # with the prepared/formatted results.
+            #
+            # @param    [AuditStore#plugins]      plugins   plugin data/results
+            #
+            def format_meta_results( plugins )
+
+                ancestor = self.class.ancestors[0]
+
+                # add the PluginFormatters module to the report
+                eval( "module  MetaFormatters end" )
+
+                # prepare the directory of the formatters for the running report
+                lib = File.dirname( __FILE__ ) + '/metaformatters/'
+
+                @@formatters ||= {}
+                # initialize a new component manager to handle the plugin formatters
+                @@formatters[ancestor] ||= ::Arachni::Report::FormatterManager.new( lib, ancestor.const_get( 'MetaFormatters' ) )
+
+                # load all the formatters
+                @@formatters[ancestor].load( ['*'] ) if @@formatters[ancestor].empty?
+
+                # run the formatters and gather the formatted data they return
+                formatted = {}
+                @@formatters[ancestor].each_pair {
+                    |name, formatter|
+                    plugin_results = plugins[name]
+                    next if !plugin_results || plugin_results[:results].empty?
+
+                    formatted[name] = formatter.new( plugin_results.deep_clone ).run
+                }
+
+                return formatted
+            end
+
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/html/waf_detector.rb

@@ -0,0 +1,54 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+module Reports
+
+class HTML
+    module PluginFormatters
+
+        #
+        # HTML formatter for the results of the WAF Detector plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class WAFDetector < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                return ERB.new( tpl ).result( binding )
+            end
+
+            def tpl
+                %q{
+                    <h3>WAF Detector</h3>
+                    <blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+
+                    <h4>Result</h4>
+                    <blockquote><%=@results[:msg]%></blockquote>
+                }
+
+            end
+
+        end
+
+    end
+end
+
+end
+end