arachni 0.2.2.1

data/reports/plugin_formatters/stdout/waf_detector.rb

@@ -0,0 +1,48 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+class Stdout
+    module PluginFormatters
+
+        #
+        # Stdout formatter for the results of the WAFDetector plugin
+        #
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class WAFDetector < Arachni::Plugin::Formatter
+
+            def initialize( plugin_data )
+                @results = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                print_status( 'WAF Detector' )
+                print_info( '~~~~~~~~~~~~~~' )
+
+                print_info( 'Description: ' + @description )
+                print_line
+                print_ok( @results[:msg] )
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/xml/content_types.rb

@@ -0,0 +1,91 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the ContentTypes plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class ContentTypes < Arachni::Plugin::Formatter
+
+            include Buffer
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                start_tag( 'content_types' )
+                simple_tag( 'description', @description )
+
+                start_tag( 'results' )
+                @results.each_pair {
+                    |type, responses|
+
+                    start_content_type( type )
+
+                    responses.each {
+                        |res|
+
+                        start_tag( 'response' )
+
+                        simple_tag( 'url', res[:url] )
+                        simple_tag( 'method', res[:method] )
+
+                        if res[:params] && res[:method].downcase == 'post'
+                            start_tag( 'params' )
+                            res[:params].each_pair {
+                                |name, value|
+                                add_param( name, value )
+                            }
+                            end_tag( 'params' )
+                        end
+
+                        end_tag( 'response' )
+                    }
+
+                    end_content_type
+                }
+
+                end_tag( 'results' )
+                end_tag( 'content_types' )
+
+                return buffer( )
+            end
+
+            def start_content_type( type )
+                __buffer( "<content_type name=\"#{type}\">" )
+            end
+
+            def end_content_type
+                __buffer( "</content_type>" )
+            end
+
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/xml/cookie_collector.rb

@@ -0,0 +1,70 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the CookieCollector plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class CookieCollector < Arachni::Plugin::Formatter
+
+            include Buffer
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                start_tag( 'cookie_collector' )
+                simple_tag( 'description', @description )
+
+                start_tag( 'results' )
+                @results.each_with_index {
+                    |result, i|
+
+                    start_tag( 'response' )
+                    simple_tag( 'time', result[:time].to_s )
+                    simple_tag( 'url', result[:res]['effective_url'] )
+
+                    start_tag( 'cookies' )
+                    result[:cookies].each_pair{
+                        |name, value|
+                        add_cookie( name, value )
+                    }
+                    end_tag( 'cookies' )
+                    end_tag( 'response' )
+                }
+                end_tag( 'results' )
+
+                end_tag( 'cookie_collector' )
+
+                return buffer( )
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/xml/form_dicattack.rb

@@ -0,0 +1,57 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the FormDicattack plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class FormDicattack < Arachni::Plugin::Formatter
+
+            include Buffer
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                start_tag( 'form_dicattack' )
+                simple_tag( 'description', @description )
+
+                start_tag( 'results' )
+
+                add_credentials( @results[:username], @results[:password] )
+
+                end_tag( 'results' )
+                end_tag( 'form_dicattack' )
+
+                return buffer( )
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/xml/healthmap.rb

@@ -0,0 +1,82 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the HealthMap plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class HealthMap < Arachni::Plugin::Formatter
+
+            include Buffer
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                start_tag( 'healthmap' )
+                simple_tag( 'description', @description )
+
+                start_tag( 'results' )
+                start_tag( 'map' )
+                @results[:map].each {
+                    |i|
+
+                    state = i.keys[0]
+                    url   = i.values[0]
+
+                    if state == :unsafe
+                        add_url( 'unsafe', url )
+                    else
+                        add_url( 'safe', url )
+                    end
+                }
+                end_tag( 'map' )
+
+                start_tag( 'stats' )
+
+                simple_tag( 'total', @results[:total].to_s )
+                simple_tag( 'safe', @results[:safe].to_s )
+                simple_tag( 'unsafe', @results[:unsafe].to_s )
+                simple_tag( 'issue_percentage', @results[:issue_percentage].to_s )
+
+                end_tag( 'stats' )
+                end_tag( 'results' )
+                end_tag( 'healthmap' )
+
+                return buffer( )
+            end
+
+            def add_url( type, url )
+                __buffer( "<entry state=\"#{type}\" url=\"#{url}\" />" )
+            end
+
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/xml/http_dicattack.rb

@@ -0,0 +1,57 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+    module PluginFormatters
+
+        #
+        # XML formatter for the results of the HTTPDicattack plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class HTTPDicattack < Arachni::Plugin::Formatter
+
+            include Buffer
+
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+
+            def run
+                start_tag( 'http_dicattack' )
+                simple_tag( 'description', @description )
+
+                start_tag( 'results' )
+
+                add_credentials( @results[:username], @results[:password] )
+
+                end_tag( 'results' )
+                end_tag( 'http_dicattack' )
+
+                return buffer( )
+            end
+
+        end
+
+    end
+end
+
+end
+end

data/reports/plugin_formatters/xml/metaformatters/timeout_notice.rb

@@ -0,0 +1,67 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+module PluginFormatters
+
+class MetaModules
+
+module MetaFormatters
+
+    #
+    # XML formatter for the results of the TimeoutNotice metamodule
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class TimeoutNotice < Arachni::Plugin::Formatter
+
+        include Arachni::Reports::Buffer
+
+        def initialize( metadata )
+            @results     = metadata[:results]
+            @description = metadata[:description]
+        end
+
+        def run
+            start_tag( 'timeout_notice' )
+            simple_tag( 'description', @description )
+            start_tag( 'results' )
+
+            @results.each { |issue| add_issue( issue ) }
+
+            end_tag( 'results' )
+            end_tag( 'timeout_notice' )
+        end
+
+        def add_issue( issue )
+            __buffer( "<issue hash=\"#{issue['hash'].to_s}\" " +
+                " index=\"#{issue['index'].to_s}\" name=\"#{issue['name']}\"" +
+                " url=\"#{issue['url']}\" element=\"#{issue['elem']}\" " +
+                " variable=\"#{issue['var']}\" method=\"#{issue['method']}\" />" )
+        end
+
+    end
+
+end
+
+end
+end
+end
+end
+end