arachni 0.2.2.1

data/reports/plugin_formatters/stdout/content_types.rb

@@ -0,0 +1,73 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the ContentTypes plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class ContentTypes < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                print_status( 'Content-types' )
+                print_info( '~~~~~~~~~~~~~~~~~~~~~~~~~~' )
+
+                print_info( 'Description: ' + @description )
+                print_line
+
+                @results.each_pair {
+                    |type, responses|
+
+                    print_ok( type )
+
+                    responses.each {
+                        |res|
+                        print_status( "    URL:    " + res[:url] )
+                        print_info( "    Method: " + res[:method] )
+
+                        if res[:params] && res[:method].downcase == 'post'
+                            print_info( "    Parameters:" )
+                            res[:params].each_pair {
+                                |k, v|
+                                print_info( "        #{k} => #{v}" )
+                            }
+                        end
+
+                        print_line
+                    }
+
+                    print_line
+                }
+
+                print_line
+
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/stdout/cookie_collector.rb

@@ -0,0 +1,61 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the CookieCollector plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class CookieCollector < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                print_status( 'Cookie collector' )
+                print_info( '~~~~~~~~~~~~~~~~~~' )
+
+                print_info( 'Description: ' + @description )
+                print_line
+
+                @results.each_with_index {
+                    |result, i|
+
+                    print_info( "[#{(i + 1).to_s}] On #{result[:time]}" )
+                    print_info( "URL: " + result[:res]['effective_url'] )
+                    print_info( 'Cookies forced to: ' )
+                    result[:cookies].each_pair{
+                        |name, value|
+                        print_info( "    #{name} => #{value}" )
+                    }
+                    print_line
+                }
+
+                print_line
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/stdout/form_dicattack.rb

@@ -0,0 +1,52 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the FormDicattack plugin
+        #
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class FormDicattack < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                print_status( 'Form dictionary attacker' )
+                print_info( '~~~~~~~~~~~~~~~~~~~~~~~~~~' )
+
+                print_info( 'Description: ' + @description )
+                print_line
+                print_info( "Cracked credentials:" )
+                print_ok( '    Username: ' + @results[:username] ) if @results[:username]
+                print_ok( '    Password: ' + @results[:password] ) if @results[:password]
+
+                print_line
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/stdout/healthmap.rb

@@ -0,0 +1,72 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the HealthMap plugin
+        #
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class HealthMap < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results = plugin_data[:results]
+            end
+
+            def run
+                print_status( 'URL health-map' )
+                print_info( '~~~~~~~~~~~~~~~~' )
+
+                print_line
+                print_info( 'Legend:' )
+                print_ok( 'No issues' )
+                print_error( 'Has issues' )
+                print_line
+
+                @results[:map].each {
+                    |i|
+
+                    state = i.keys[0]
+                    url   = i.values[0]
+
+                    if state == :unsafe
+                        print_error( url )
+                    else
+                        print_ok( url )
+                    end
+                }
+
+                print_line
+
+                print_info( 'Total: ' + @results[:total].to_s )
+                print_ok( 'Without issues: ' + @results[:safe].to_s )
+                print_error( 'With issues: ' + @results[:unsafe].to_s +
+                    " ( #{@results[:issue_percentage].to_s}% )" )
+
+                print_line
+
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/stdout/http_dicattack.rb

@@ -0,0 +1,53 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the HTTPDicattack plugin
+        #
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class HTTPDicattack < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                print_status( 'HTTP dictionary attacker' )
+                print_info( '~~~~~~~~~~~~~~~~~~~~~~~~~~' )
+
+                print_info( 'Description: ' + @description )
+                print_line
+                print_info( "Cracked credentials:" )
+                print_ok( '    Username: ' + @results[:username] )
+                print_ok( '    Password: ' + @results[:password] )
+
+                print_line
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/stdout/metaformatters/timeout_notice.rb

@@ -0,0 +1,55 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+module PluginFormatters
+
+class MetaModules
+module MetaFormatters
+
+    #
+    # Stdout formatter for the results of the TimeoutNotice metamodule
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class TimeoutNotice < Arachni::Plugin::Formatter
+
+        def initialize( metadata )
+            @results     = metadata[:results]
+            @description = metadata[:description]
+        end
+
+        def run
+            print_status( ' --- Timeout notice:' )
+            print_info( 'Description: ' + @description )
+
+            print_line
+            print_info( 'Relevant issues:' )
+            print_info( '--------------------' )
+            @results.each {
+                |issue|
+                print_ok( "[\##{issue['index']}] #{issue['name']} at #{issue['url']} in #{issue['elem']} variable '#{issue['var']}' using #{issue['method']}." )
+            }
+        end
+
+    end
+
+end
+end
+end
+end
+end
+end

data/reports/plugin_formatters/stdout/metaformatters/uniformity.rb

@@ -0,0 +1,68 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+module PluginFormatters
+
+class MetaModules
+module MetaFormatters
+
+    #
+    # Stdout formatter for the results of the Uniformity metamodule
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class Uniformity < Arachni::Plugin::Formatter
+
+        def initialize( metadata )
+            @results     = metadata[:results]
+            @description = metadata[:description]
+        end
+
+        def run
+            print_status( ' --- Uniformity (Lack of centralised sanitization):' )
+            print_info( 'Description: ' + @description )
+
+            print_line
+            print_info( 'Relevant issues:' )
+            print_info( '--------------------' )
+
+            uniformals = @results['uniformals']
+            pages      = @results['pages']
+
+            uniformals.each_pair {
+                |id, uniformal|
+
+                issue = uniformal['issue']
+                print_ok( "#{issue['name']} in #{issue['elem']} variable '#{issue['var']}' using #{issue['method']} at the following pages:" )
+
+                pages[id].each_with_index {
+                    |url, i|
+                    print_info( url + " (Issue \##{uniformal['indices'][i]} - Hash ID: #{uniformal['hashes'][i]} )" )
+                }
+
+                print_line
+            }
+        end
+
+    end
+
+end
+end
+end
+end
+end
+end

data/reports/plugin_formatters/stdout/metamodules.rb

@@ -0,0 +1,89 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the MetaModules plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class MetaModules
+
+            include Arachni::UI::Output
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                print_status( 'Meta-Modules' )
+                print_info( '~~~~~~~~~~~~~~' )
+
+                print_info( 'Description: ' + @description )
+                print_line
+
+                format_meta_results( @results )
+
+                print_line
+            end
+
+            #
+            # Runs plugin formatters for the running report and returns a hash
+            # with the prepared/formatted results.
+            #
+            # @param    [AuditStore#plugins]      plugins   plugin data/results
+            #
+            def format_meta_results( plugins )
+
+                ancestor = self.class.ancestors[0]
+
+                # add the PluginFormatters module to the report
+                eval( "module  MetaFormatters end" )
+
+                # prepare the directory of the formatters for the running report
+                lib = File.dirname( __FILE__ ) + '/metaformatters/'
+
+                @@formatters ||= {}
+                # initialize a new component manager to handle the plugin formatters
+                @@formatters[ancestor] ||= ::Arachni::Report::FormatterManager.new( lib, ancestor.const_get( 'MetaFormatters' ) )
+
+                # load all the formatters
+                @@formatters[ancestor].load( ['*'] ) if @@formatters[ancestor].empty?
+
+                # run the formatters and gather the formatted data they return
+                formatted = {}
+                @@formatters[ancestor].each_pair {
+                    |name, formatter|
+                    plugin_results = plugins[name]
+                    next if !plugin_results || plugin_results[:results].empty?
+
+                    formatted[name] = formatter.new( plugin_results.deep_clone ).run
+                }
+
+                return formatted
+            end
+
+
+        end
+
+    end
+end
+
+end
+end