RubyGems - arachni - Versions diffs - 0.2.2.1 → 0.2.2.2 - Mend

arachni 0.2.2.1 → 0.2.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (44) hide show

data/CHANGELOG.md +30 -0
data/CONTRIBUTORS.md +1 -0
data/README.md +28 -8
data/Rakefile +1 -0
data/bin/arachni_web_autostart +46 -0
data/lib/anemone/page.rb +1 -0
data/lib/arachni.rb +1 -1
data/lib/framework.rb +8 -3
data/lib/http.rb +9 -39
data/lib/mixins/observable.rb +87 -0
data/lib/module/auditor.rb +14 -0
data/lib/module/base.rb +0 -14
data/lib/nokogiri/xml/node.rb +42 -0
data/lib/ui/cli/cli.rb +1 -1
data/lib/ui/web/log.rb +21 -14
data/lib/ui/web/report_manager.rb +100 -15
data/lib/ui/web/server.rb +24 -33
data/lib/ui/web/server/public/reports/demo.testfire.net:Sun Mar 20 02:48:10 2011.afr +104829 -0
data/lib/ui/web/server/views/layout.erb +1 -1
data/lib/ui/web/server/views/options.erb +10 -2
data/lib/ui/web/server/views/plugins.erb +1 -1
data/lib/ui/web/server/views/reports.erb +8 -4
data/lib/ui/xmlrpc/xmlrpc.rb +1 -1
data/metamodules/autothrottle.rb +2 -2
data/metamodules/timeout_notice.rb +1 -1
data/modules/audit/sqli_blind_rdiff.rb +1 -1
data/modules/recon/common_files/filenames.txt +2 -0
data/modules/recon/directory_listing.rb +1 -0
data/modules/recon/interesting_responses.rb +3 -3
data/path_extractors/generic.rb +5 -1
data/plugins/autologin.rb +15 -4
data/plugins/content_types.rb +2 -2
data/plugins/cookie_collector.rb +9 -16
data/plugins/profiler.rb +237 -0
data/reports/html.rb +21 -6
data/reports/html/default.erb +4 -2
data/reports/plugin_formatters/html/autologin.rb +63 -0
data/reports/plugin_formatters/html/profiler.rb +71 -0
data/reports/plugin_formatters/html/profiler/template.erb +177 -0
data/reports/plugin_formatters/stdout/autologin.rb +55 -0
data/reports/plugin_formatters/stdout/profiler.rb +90 -0
data/reports/plugin_formatters/xml/autologin.rb +68 -0
data/reports/plugin_formatters/xml/profiler.rb +120 -0
metadata +23 -68

data/reports/html.rb CHANGED Viewed

@@ -111,12 +111,14 @@ class HTML < Arachni::Report::Base
             }
         }
+        @total_severities = 0
+        @total_elements   = 0
+        @total_verifications = 0
         @audit_store.issues.each_with_index {
             |issue, i|
             @graph_data[:severities][issue.severity] ||= 0
             @graph_data[:severities][issue.severity] += 1
-            @total_severities ||= 0
             @total_severities += 1
             @graph_data[:issues][issue.name] ||= 0
@@ -124,19 +126,20 @@ class HTML < Arachni::Report::Base
             @graph_data[:elements][issue.elem] ||= 0
             @graph_data[:elements][issue.elem] += 1
-            @total_elements ||= 0
             @total_elements += 1
             verification = issue.verification ? 'Yes' : 'No'
             @graph_data[:verification][verification] ||= 0
             @graph_data[:verification][verification] += 1
-            @total_verifications ||= 0
             @total_verifications += 1
             issue.variations.each_with_index {
                 |variation, j|
                 if( variation['response'] && !variation['response'].empty? )
+                    variation['response'] = variation['response'].force_encoding( 'utf-8' )
                     @audit_store.issues[i].variations[j]['escaped_response'] =
                         Base64.encode64( variation['response'] ).gsub( /\n/, '' )
                 end
@@ -158,17 +161,29 @@ class HTML < Arachni::Report::Base
         @graph_data[:severities].each {
             |severity, cnt|
-            @graph_data[:severities][severity] = ((cnt/Float(@total_severities)) * 100).to_i
+            begin
+                @graph_data[:severities][severity] = ((cnt/Float(@total_severities)) * 100).to_i
+            rescue
+                @graph_data[:severities][severity] = 0
+            end
         }
         @graph_data[:elements].each {
             |elem, cnt|
-            @graph_data[:elements][elem] = ((cnt/Float(@total_elements)) * 100).to_i
+            begin
+                @graph_data[:elements][elem] = ((cnt/Float(@total_elements)) * 100).to_i
+            rescue
+                @graph_data[:elements][elem] = 0
+            end
         }
         @graph_data[:verification].each {
             |verification, cnt|
-            @graph_data[:verification][verification] = ((cnt/Float(@total_verifications)) * 100).to_i
+            begin
+                @graph_data[:verification][verification] = ((cnt/Float(@total_verifications)) * 100).to_i
+            rescue
+                @graph_data[:verification][verification] = 0
+            end
         }
     end

data/reports/html/default.erb CHANGED Viewed

@@ -1,3 +1,5 @@
+<%# Encoding: utf-8%>
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
@@ -180,7 +182,7 @@
             var verification;
             $(document).ready(function() {
-               elements = new Highcharts.Chart({
+               verification = new Highcharts.Chart({
                   chart: {
                      renderTo: 'chart-verification',
                      backgroundColor: '#ccc'
@@ -949,7 +951,7 @@
             <p> &nbsp; </p>
             <%@plugins.values.each do |plugin|%>
-            <p><%=plugin%></p>
+            <p><%=plugin.force_encoding( 'utf-8' )%></p>
             <%end%>
         </section>

data/reports/plugin_formatters/html/autologin.rb ADDED Viewed

@@ -0,0 +1,63 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+=end
+module Arachni
+module Reports
+class HTML
+    module PluginFormatters
+        #
+        # HTML formatter for the results of the AutoLogin plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class AutoLogin < Arachni::Plugin::Formatter
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+            def run
+                return ERB.new( tpl ).result( binding )
+            end
+            def tpl
+                %q{
+                    <h3>AutoLogin</h3>
+                    <blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+                    <h4>Result</h4>
+                    <blockquote><%=@results[:msg]%></blockquote>
+                    <% if @results[:cookies].is_a?( Hash )%>
+                    <h5>Cookies were set to:</h5>
+                    <ul>
+                    <% @results[:cookies].each_pair do |name, val|%>
+                        <li><%=name%> = <%=val%></li>
+                    <%end%>
+                    <ul>
+                    <%end%>
+                }
+            end
+        end
+    end
+end
+end
+end

data/reports/plugin_formatters/html/profiler.rb ADDED Viewed

@@ -0,0 +1,71 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+=end
+require 'json'
+module Arachni
+module Reports
+class HTML
+    module PluginFormatters
+        #
+        # HTML formatter for the results of the Profiler plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class Profiler < Arachni::Plugin::Formatter
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+            def run
+                @results['times'].each_with_index {
+                    |itm, i|
+                    @results['times'][i] = escape_hash( itm )
+                }
+                times      = @results['times'].map{ |item| item['time'] }
+                total_time = 0
+                times.each {
+                    |time|
+                    total_time += time
+                }
+                avg_time = total_time / times.size
+                times.reject!{ |time| time < avg_time }
+                return ERB.new( IO.read( File.dirname( __FILE__ ) + '/profiler/template.erb' ) ).result( binding )
+            end
+            def escape_hash( hash )
+                hash.each_pair {
+                    |k, v|
+                    hash[k] = CGI.escape( v ) if v.is_a?( String )
+                    hash[k] = escape_hash( v ) if v.is_a? Hash
+                }
+                return hash
+            end
+        end
+    end
+end
+end
+end

data/reports/plugin_formatters/html/profiler/template.erb ADDED Viewed

@@ -0,0 +1,177 @@
+<h3>Profiler</h3>
+<blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+<script type="text/javascript">
+    var tooltip_data = <%=@results['times'].to_json%>;
+    var chart;
+    $(document).ready(function() {
+       chart = new Highcharts.Chart({
+          chart: {
+             renderTo: 'chart-response-times',
+             zoomType: 'x',
+             spacingRight: 20,
+             backgroundColor: '#ccc'
+          },
+           title: {
+             text: 'Response times exceeding the average (<%=times.size%> out of <%=@results['times'].size%> responses)'
+          },
+           subtitle: {
+             text: document.ontouchstart === undefined ?
+                'Click and drag in the plot area to zoom in' :
+                'Drag your finger over the plot to zoom in'
+          },
+          xAxis: {
+             title: {
+                text: null
+             }
+          },
+          yAxis: {
+             title: {
+                text: 'Seconds'
+             },
+             min: <%=times.min%>,
+             startOnTick: false,
+             showFirstLabel: false
+          },
+          tooltip: {
+             formatter: function() {
+                return 'URL: <b>' + unescape( tooltip_data[this.x]['url'] ) + '</b><br/>' +
+                    'Response time: <b>' + this.y +'</b> seconds<br/>';
+             }
+          },
+          legend: {
+             enabled: false
+          },
+          plotOptions: {
+             area: {
+                fillColor: {
+                   linearGradient: [0, 0, 0, 300],
+                   stops: [
+                      [0, 'rgba(0,0,0,0)'],
+                      [1, 'rgba(2,0,0,0)']
+                   ]
+                },
+                lineWidth: 1,
+                marker: {
+                   enabled: false,
+                   states: {
+                      hover: {
+                         enabled: true,
+                         radius: 5
+                      }
+                   }
+                },
+                shadow: false,
+                states: {
+                   hover: {
+                      lineWidth: 1
+                   }
+                }
+             }
+          },
+          series: [{
+             type: 'area',
+             pointInterval: 1,
+             data: <%=times.to_s%>
+          }]
+       });
+    });
+</script>
+<h4>Response time analysis</h4>
+<strong>Average response time</strong>: <%=avg_time%> seconds <br/>
+<strong>Max</strong>: <%=times.max%> seconds <br/>
+<strong>Min</strong>: <%=@results['times'].map{ |item| item['time'] }.min%> seconds <br/>
+<strong>Sample size</strong>: <%=@results['times'].size%> responses <br/>
+<div id="chart-response-times" style="width: 1000px"></div>
+<p>&nbsp;</p>
+<h4>Inputs that affect output (Taint analysis)</h4>
+<% @results['inputs'].each_with_index do |item, idx| %>
+    <h5>
+        <%=item['element']['type'].capitalize%>
+        <%if item['element']['name']%>
+        named '<%=item['element']['name']%>'
+        <%end%>
+        <%if item['element']['altered']%>
+        using the '<%=item['element']['altered']%>' input
+        <%end%>
+        <%if item['element']['owner']%>
+        at <a href="<%=CGI.escapeHTML( item['element']['owner'] )%>"> <%=item['element']['owner']%> </a>
+        <%end%>
+        <%if item['element']['action']%>
+        pointing to <a href="<%=CGI.escapeHTML( item['element']['action'] )%>"> <%=item['element']['action']%>  </a>
+        <%end%>
+        <%if item['element']['method']%>
+        using <%=item['request']['method']%>
+        <%end%>
+    </h5>
+    <p>
+        It was submitted using the following parameters:
+        <ul>
+        <%item['element']['auditable'].each_pair do |k, v| %>
+            <li><%=k%> = <%=v%></li>
+        <%end%>
+        </ul>
+        The taint landed in the following elements at <a href="<%=CGI.escapeHTML( item['request']['url'] )%>"> <%=item['request']['url']%> </a>:
+            <ul>
+            <%item['landed'].each do |elem| %>
+                <li>
+                <%=elem['type'].capitalize%>
+                <%if elem['name']%>
+                named '<%=elem['name']%>'
+                <%end%>
+                <%if elem['altered']%>
+                using the '<%=elem['altered']%>' input
+                <%end%>
+                <%if elem['auditable']%>
+                <ul>
+                    <%elem['auditable'].each_pair do |k, v| %>
+                        <li><%=k%> = <%=v%></li>
+                    <%end%>
+                </ul>
+                <%end%>
+                </li>
+            <%end%>
+            </ul>
+            <div class="hidden" id="inspection-dialog_<%=idx%>" title="Relevant content is shown in red.">
+              <% match = CGI.escapeHTML( item['response']['body'] )%>
+              <pre> <%=CGI.escapeHTML( item['response']['body'] ).gsub( item['taint'], '<strong style="color: red">' + item['taint'] + '</strong>' ) %> </pre>
+            </div>
+            <form style="display:inline" action="#">
+              <input onclick="javascript:inspect( '#inspection-dialog_<%=idx%>')" type="button" value="Inspect" />
+            </form>
+            <form style="display:inline" action="<%=item['request']['url']%>" target="_blank" method="<%=item['request']['method']%>">
+              <% item['request']['params'].each_pair do |name, value|%>
+              <input type="hidden" name="<%=CGI.escapeHTML(name)%>" value="<%=CGI.escapeHTML( value )%>" />
+              <%end%>
+              <input type="submit" value="Replay" />
+            </form>
+    </p>
+    <p>&nbsp;</p>
+<%end%>

data/reports/plugin_formatters/stdout/autologin.rb ADDED Viewed

@@ -0,0 +1,55 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+=end
+module Arachni
+module Reports
+class Stdout
+    module PluginFormatters
+        #
+        # Stdout formatter for the results of the AutoLogin plugin
+        #
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class AutoLogin < Arachni::Plugin::Formatter
+            def initialize( plugin_data )
+                @results = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+            def run
+                print_status( 'AutoLogin' )
+                print_info( '~~~~~~~~~~~~~~' )
+                print_info( 'Description: ' + @description )
+                print_line
+                print_ok( @results[:msg] )
+                return if !@results[:cookies]
+                print_info( 'Cookies set to:' )
+                @results[:cookies].each_pair {
+                    |name, val|
+                    print_info( '    * ' + name + ' = ' + val )
+                }
+            end
+        end
+    end
+end
+end
+end