RubyGems - arachni - Versions diffs - 0.2.2.1 → 0.2.2.2 - Mend

arachni 0.2.2.1 → 0.2.2.2

Files changed (44) hide show

data/CHANGELOG.md +30 -0
data/CONTRIBUTORS.md +1 -0
data/README.md +28 -8
data/Rakefile +1 -0
data/bin/arachni_web_autostart +46 -0
data/lib/anemone/page.rb +1 -0
data/lib/arachni.rb +1 -1
data/lib/framework.rb +8 -3
data/lib/http.rb +9 -39
data/lib/mixins/observable.rb +87 -0
data/lib/module/auditor.rb +14 -0
data/lib/module/base.rb +0 -14
data/lib/nokogiri/xml/node.rb +42 -0
data/lib/ui/cli/cli.rb +1 -1
data/lib/ui/web/log.rb +21 -14
data/lib/ui/web/report_manager.rb +100 -15
data/lib/ui/web/server.rb +24 -33
data/lib/ui/web/server/public/reports/demo.testfire.net:Sun Mar 20 02:48:10 2011.afr +104829 -0
data/lib/ui/web/server/views/layout.erb +1 -1
data/lib/ui/web/server/views/options.erb +10 -2
data/lib/ui/web/server/views/plugins.erb +1 -1
data/lib/ui/web/server/views/reports.erb +8 -4
data/lib/ui/xmlrpc/xmlrpc.rb +1 -1
data/metamodules/autothrottle.rb +2 -2
data/metamodules/timeout_notice.rb +1 -1
data/modules/audit/sqli_blind_rdiff.rb +1 -1
data/modules/recon/common_files/filenames.txt +2 -0
data/modules/recon/directory_listing.rb +1 -0
data/modules/recon/interesting_responses.rb +3 -3
data/path_extractors/generic.rb +5 -1
data/plugins/autologin.rb +15 -4
data/plugins/content_types.rb +2 -2
data/plugins/cookie_collector.rb +9 -16
data/plugins/profiler.rb +237 -0
data/reports/html.rb +21 -6
data/reports/html/default.erb +4 -2
data/reports/plugin_formatters/html/autologin.rb +63 -0
data/reports/plugin_formatters/html/profiler.rb +71 -0
data/reports/plugin_formatters/html/profiler/template.erb +177 -0
data/reports/plugin_formatters/stdout/autologin.rb +55 -0
data/reports/plugin_formatters/stdout/profiler.rb +90 -0
data/reports/plugin_formatters/xml/autologin.rb +68 -0
data/reports/plugin_formatters/xml/profiler.rb +120 -0
metadata +23 -68

data/reports/html.rb CHANGED Viewed

@@ -111,12 +111,14 @@ class HTML < Arachni::Report::Base
             }
         }
+        @total_severities = 0
+        @total_elements   = 0
+        @total_verifications = 0
         @audit_store.issues.each_with_index {
             |issue, i|
             @graph_data[:severities][issue.severity] ||= 0
             @graph_data[:severities][issue.severity] += 1
-            @total_severities ||= 0
             @total_severities += 1
             @graph_data[:issues][issue.name] ||= 0
@@ -124,19 +126,20 @@ class HTML < Arachni::Report::Base
             @graph_data[:elements][issue.elem] ||= 0
             @graph_data[:elements][issue.elem] += 1
-            @total_elements ||= 0
             @total_elements += 1
             verification = issue.verification ? 'Yes' : 'No'
             @graph_data[:verification][verification] ||= 0
             @graph_data[:verification][verification] += 1
-            @total_verifications ||= 0
             @total_verifications += 1
             issue.variations.each_with_index {
                 |variation, j|
                 if( variation['response'] && !variation['response'].empty? )
+                    variation['response'] = variation['response'].force_encoding( 'utf-8' )
                     @audit_store.issues[i].variations[j]['escaped_response'] =
                         Base64.encode64( variation['response'] ).gsub( /\n/, '' )
                 end
@@ -158,17 +161,29 @@ class HTML < Arachni::Report::Base
         @graph_data[:severities].each {
             |severity, cnt|
-            @graph_data[:severities][severity] = ((cnt/Float(@total_severities)) * 100).to_i
+            begin
+                @graph_data[:severities][severity] = ((cnt/Float(@total_severities)) * 100).to_i
+            rescue
+                @graph_data[:severities][severity] = 0
+            end
         }
         @graph_data[:elements].each {
             |elem, cnt|
-            @graph_data[:elements][elem] = ((cnt/Float(@total_elements)) * 100).to_i
+            begin
+                @graph_data[:elements][elem] = ((cnt/Float(@total_elements)) * 100).to_i
+            rescue
+                @graph_data[:elements][elem] = 0
+            end
         }
         @graph_data[:verification].each {
             |verification, cnt|
-            @graph_data[:verification][verification] = ((cnt/Float(@total_verifications)) * 100).to_i
+            begin
+                @graph_data[:verification][verification] = ((cnt/Float(@total_verifications)) * 100).to_i
+            rescue
+                @graph_data[:verification][verification] = 0
+            end
         }
     end

data/reports/html/default.erb CHANGED Viewed

@@ -1,3 +1,5 @@
+<%# Encoding: utf-8%>
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
@@ -180,7 +182,7 @@
             var verification;
             $(document).ready(function() {
-               elements = new Highcharts.Chart({
+               verification = new Highcharts.Chart({
                   chart: {
                      renderTo: 'chart-verification',
                      backgroundColor: '#ccc'
@@ -949,7 +951,7 @@
             <p> &nbsp; </p>
             <%@plugins.values.each do |plugin|%>
-            <p><%=plugin%></p>
+            <p><%=plugin.force_encoding( 'utf-8' )%></p>
             <%end%>
         </section>

data/reports/plugin_formatters/html/autologin.rb ADDED Viewed

@@ -0,0 +1,63 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+=end
+module Arachni
+module Reports
+class HTML
+    module PluginFormatters
+        #
+        # HTML formatter for the results of the AutoLogin plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class AutoLogin < Arachni::Plugin::Formatter
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+            def run
+                return ERB.new( tpl ).result( binding )
+            end
+            def tpl
+                %q{
+                    <h3>AutoLogin</h3>
+                    <blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+                    <h4>Result</h4>
+                    <blockquote><%=@results[:msg]%></blockquote>
+                    <% if @results[:cookies].is_a?( Hash )%>
+                    <h5>Cookies were set to:</h5>
+                    <ul>
+                    <% @results[:cookies].each_pair do |name, val|%>
+                        <li><%=name%> = <%=val%></li>
+                    <%end%>
+                    <ul>
+                    <%end%>
+                }
+            end
+        end
+    end
+end
+end
+end

data/reports/plugin_formatters/html/profiler.rb ADDED Viewed

@@ -0,0 +1,71 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+=end
+require 'json'
+module Arachni
+module Reports
+class HTML
+    module PluginFormatters
+        #
+        # HTML formatter for the results of the Profiler plugin
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class Profiler < Arachni::Plugin::Formatter
+            def initialize( plugin_data )
+                @results     = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+            def run
+                @results['times'].each_with_index {
+                    |itm, i|
+                    @results['times'][i] = escape_hash( itm )
+                }
+                times      = @results['times'].map{ |item| item['time'] }
+                total_time = 0
+                times.each {
+                    |time|
+                    total_time += time
+                }
+                avg_time = total_time / times.size
+                times.reject!{ |time| time < avg_time }
+                return ERB.new( IO.read( File.dirname( __FILE__ ) + '/profiler/template.erb' ) ).result( binding )
+            end
+            def escape_hash( hash )
+                hash.each_pair {
+                    |k, v|
+                    hash[k] = CGI.escape( v ) if v.is_a?( String )
+                    hash[k] = escape_hash( v ) if v.is_a? Hash
+                }
+                return hash
+            end
+        end
+    end
+end
+end
+end

data/reports/plugin_formatters/html/profiler/template.erb ADDED Viewed

@@ -0,0 +1,177 @@
+<h3>Profiler</h3>
+<blockquote><pre><%=::Arachni::Reports::HTML.prep_description(@description)%></pre></blockquote>
+<script type="text/javascript">
+    var tooltip_data = <%=@results['times'].to_json%>;
+    var chart;
+    $(document).ready(function() {
+       chart = new Highcharts.Chart({
+          chart: {
+             renderTo: 'chart-response-times',
+             zoomType: 'x',
+             spacingRight: 20,
+             backgroundColor: '#ccc'
+          },
+           title: {
+             text: 'Response times exceeding the average (<%=times.size%> out of <%=@results['times'].size%> responses)'
+          },
+           subtitle: {
+             text: document.ontouchstart === undefined ?
+                'Click and drag in the plot area to zoom in' :
+                'Drag your finger over the plot to zoom in'
+          },
+          xAxis: {
+             title: {
+                text: null
+             }
+          },
+          yAxis: {
+             title: {
+                text: 'Seconds'
+             },
+             min: <%=times.min%>,
+             startOnTick: false,
+             showFirstLabel: false
+          },
+          tooltip: {
+             formatter: function() {
+                return 'URL: <b>' + unescape( tooltip_data[this.x]['url'] ) + '</b><br/>' +
+                    'Response time: <b>' + this.y +'</b> seconds<br/>';
+             }
+          },
+          legend: {
+             enabled: false
+          },
+          plotOptions: {
+             area: {
+                fillColor: {
+                   linearGradient: [0, 0, 0, 300],
+                   stops: [
+                      [0, 'rgba(0,0,0,0)'],
+                      [1, 'rgba(2,0,0,0)']
+                   ]
+                },
+                lineWidth: 1,
+                marker: {
+                   enabled: false,
+                   states: {
+                      hover: {
+                         enabled: true,
+                         radius: 5
+                      }
+                   }
+                },
+                shadow: false,
+                states: {
+                   hover: {
+                      lineWidth: 1
+                   }
+                }
+             }
+          },
+          series: [{
+             type: 'area',
+             pointInterval: 1,
+             data: <%=times.to_s%>
+          }]
+       });
+    });
+</script>
+<h4>Response time analysis</h4>
+<strong>Average response time</strong>: <%=avg_time%> seconds <br/>
+<strong>Max</strong>: <%=times.max%> seconds <br/>
+<strong>Min</strong>: <%=@results['times'].map{ |item| item['time'] }.min%> seconds <br/>
+<strong>Sample size</strong>: <%=@results['times'].size%> responses <br/>
+<div id="chart-response-times" style="width: 1000px"></div>
+<p>&nbsp;</p>
+<h4>Inputs that affect output (Taint analysis)</h4>
+<% @results['inputs'].each_with_index do |item, idx| %>
+    <h5>
+        <%=item['element']['type'].capitalize%>
+        <%if item['element']['name']%>
+        named '<%=item['element']['name']%>'
+        <%end%>
+        <%if item['element']['altered']%>
+        using the '<%=item['element']['altered']%>' input
+        <%end%>
+        <%if item['element']['owner']%>
+        at <a href="<%=CGI.escapeHTML( item['element']['owner'] )%>"> <%=item['element']['owner']%> </a>
+        <%end%>
+        <%if item['element']['action']%>
+        pointing to <a href="<%=CGI.escapeHTML( item['element']['action'] )%>"> <%=item['element']['action']%>  </a>
+        <%end%>
+        <%if item['element']['method']%>
+        using <%=item['request']['method']%>
+        <%end%>
+    </h5>
+    <p>
+        It was submitted using the following parameters:
+        <ul>
+        <%item['element']['auditable'].each_pair do |k, v| %>
+            <li><%=k%> = <%=v%></li>
+        <%end%>
+        </ul>
+        The taint landed in the following elements at <a href="<%=CGI.escapeHTML( item['request']['url'] )%>"> <%=item['request']['url']%> </a>:
+            <ul>
+            <%item['landed'].each do |elem| %>
+                <li>
+                <%=elem['type'].capitalize%>
+                <%if elem['name']%>
+                named '<%=elem['name']%>'
+                <%end%>
+                <%if elem['altered']%>
+                using the '<%=elem['altered']%>' input
+                <%end%>
+                <%if elem['auditable']%>
+                <ul>
+                    <%elem['auditable'].each_pair do |k, v| %>
+                        <li><%=k%> = <%=v%></li>
+                    <%end%>
+                </ul>
+                <%end%>
+                </li>
+            <%end%>
+            </ul>
+            <div class="hidden" id="inspection-dialog_<%=idx%>" title="Relevant content is shown in red.">
+              <% match = CGI.escapeHTML( item['response']['body'] )%>
+              <pre> <%=CGI.escapeHTML( item['response']['body'] ).gsub( item['taint'], '<strong style="color: red">' + item['taint'] + '</strong>' ) %> </pre>
+            </div>
+            <form style="display:inline" action="#">
+              <input onclick="javascript:inspect( '#inspection-dialog_<%=idx%>')" type="button" value="Inspect" />
+            </form>
+            <form style="display:inline" action="<%=item['request']['url']%>" target="_blank" method="<%=item['request']['method']%>">
+              <% item['request']['params'].each_pair do |name, value|%>
+              <input type="hidden" name="<%=CGI.escapeHTML(name)%>" value="<%=CGI.escapeHTML( value )%>" />
+              <%end%>
+              <input type="submit" value="Replay" />
+            </form>
+    </p>
+    <p>&nbsp;</p>
+<%end%>

data/reports/plugin_formatters/stdout/autologin.rb ADDED Viewed

@@ -0,0 +1,55 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+=end
+module Arachni
+module Reports
+class Stdout
+    module PluginFormatters
+        #
+        # Stdout formatter for the results of the AutoLogin plugin
+        #
+        #
+        # @author: Tasos "Zapotek" Laskos
+        #                                      <tasos.laskos@gmail.com>
+        #                                      <zapotek@segfault.gr>
+        # @version: 0.1
+        #
+        class AutoLogin < Arachni::Plugin::Formatter
+            def initialize( plugin_data )
+                @results = plugin_data[:results]
+                @description = plugin_data[:description]
+            end
+            def run
+                print_status( 'AutoLogin' )
+                print_info( '~~~~~~~~~~~~~~' )
+                print_info( 'Description: ' + @description )
+                print_line
+                print_ok( @results[:msg] )
+                return if !@results[:cookies]
+                print_info( 'Cookies set to:' )
+                @results[:cookies].each_pair {
+                    |name, val|
+                    print_info( '    * ' + name + ' = ' + val )
+                }
+            end
+        end
+    end
+end
+end
+end