arachni 0.3 → 0.4

data/plugins/{profiler.rb → defaults/profiler.rb}

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -21,7 +21,7 @@ module Plugins
 # @author: Tasos "Zapotek" Laskos
 #                                      <tasos.laskos@gmail.com>
 #                                      <zapotek@segfault.gr>
-# @version: 0.1
+# @version: 0.1.3
 #
 class Profiler < Arachni::Plugin::Base
 
@@ -134,36 +134,13 @@ class Profiler < Arachni::Plugin::Base
 
     end
 
-    #
-    # @param    [Arachni::Framework]    framework
-    # @param    [Hash]        options    options passed to the plugin
-    #
-    def initialize( framework, options )
-        @framework = framework
-        @http      = framework.http
-        @options   = options
-    end
-
     def prepare
-
         Struct.new( 'Body', :type, :method, :raw, :auditable )
 
         @inputs = []
-        @times  = []
     end
 
     def run
-
-        @http.add_on_complete {
-            |res|
-            @times << {
-                'url'    => res.effective_url,
-                'method' => res.request.method.to_s.upcase,
-                'params' => res.request.params,
-                'time'   => res.start_transfer_time
-            }
-        }
-
         @framework.add_on_run_mods {
             |page|
 
@@ -176,9 +153,8 @@ class Profiler < Arachni::Plugin::Base
     end
 
     def clean_up
-        ::IO.select( nil, nil, nil, 1 ) while( @framework.running? )
-
-        register_results( { 'inputs' => @inputs, 'times' => @times } )
+        wait_while_framework_running
+        register_results( { 'inputs' => @inputs } )
     end
 
     def log( taint, res, elem, landed_elems )
@@ -219,15 +195,28 @@ class Profiler < Arachni::Plugin::Base
         @inputs << result
     end
 
+    def self.distributable?
+        true
+    end
+
+    def self.merge( results )
+        inputs = []
+        results.each {
+            |result|
+            inputs |= result['inputs']
+        }
+        return { 'inputs' => inputs }
+    end
+
     def self.info
         {
             :name           => 'Profiler',
             :description    => %q{Examines the behavior of the web application gathering general statistics
                 and performs taint analysis to determine which inputs affect the output.
 
-                It's does not perform any vulnerability assesment nor does it send attack payloads.},
+                It does not perform any vulnerability assesment nor does it send attack payloads.},
             :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
-            :version        => '0.1'
+            :version        => '0.1.3'
         }
     end
 

data/plugins/defaults/resolver.rb

@@ -0,0 +1,55 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Plugins
+
+#
+# @author: Tasos "Zapotek" Laskos
+#                                      <tasos.laskos@gmail.com>
+#                                      <zapotek@segfault.gr>
+# @version: 0.1
+#
+class Resolver < Arachni::Plugin::Base
+
+    def prepare
+        wait_while_framework_running
+    end
+
+    def run
+        print_status 'Resolving hostnames...'
+
+        host_to_ipaddress = {}
+        @framework.audit_store.deep_clone.issues.each_with_index {
+            |issue|
+            exception_jail( false ) {
+                host = URI( issue.url ).host
+                host_to_ipaddress[host] ||= ::IPSocket.getaddress( host )
+            }
+        }
+        print_status 'Done!'
+
+        register_results( host_to_ipaddress )
+    end
+
+    def self.info
+        {
+            :name           => 'Resolver',
+            :description    => %q{Resolves vulnerable hostnames to IP addresses.},
+            :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
+            :tags           => [ 'ip address', 'hostname' ],
+            :version        => '0.1'
+        }
+    end
+
+end
+
+end
+end

data/plugins/email_notify.rb

@@ -0,0 +1,108 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Plugins
+
+#
+# Uses the Pony gem send a notification (and optionally report) at the end
+# of the scan over SMTP.
+#
+# @author: Tasos "Zapotek" Laskos
+#                                      <tasos.laskos@gmail.com>
+#                                      <zapotek@segfault.gr>
+# @version: 0.1
+#
+class EmailNotify < Arachni::Plugin::Base
+
+    def run
+        wait_while_framework_running
+    end
+
+    def clean_up
+        issue_cnt = @framework.audit_store.issues.size
+        time      = @framework.audit_store.delta_time
+        url       = @framework.opts.url
+
+        opts = {
+            :subject => "Scan for #{url} finished in #{time}",
+            :body    => "Found #{issue_cnt} unique issues.",
+            :to      => @options['to'],
+            :cc      => @options['cc'],
+            :bcc     => @options['bcc'],
+            :from    => @options['from'],
+            :via => :smtp,
+            :via_options => {
+                :address              => @options['server_address'],
+                :port                 => @options['server_port'],
+                :enable_starttls_auto => @options['tls'],
+                :user_name            => @options['username'],
+                :password             => @options['password'],
+                :authentication       => !@options['authentication'].empty? ? @options['authentication'].to_sym : nil,
+                :domain               => "localhost.localdomain"
+            }
+        }
+
+        if @options['report'] != 'none'
+            report = @framework.reports[ @options['report'] ]
+
+            rep_opts = {}
+            report.info[:options].each {
+                |opt|
+                rep_opts[opt.name] = opt.default if opt.default
+            }
+
+            rep_opts['outfile'] = 'scan_report.' + @options['report']
+            report.new( @framework.audit_store( true ), rep_opts ).run
+
+            opts[:attachments] = {
+                rep_opts['outfile'] => File.read( rep_opts['outfile'] )
+            }
+
+            FileUtils.rm( rep_opts['outfile'] )
+        end
+
+        print_status( 'Sending the notification...' )
+        Pony.mail( opts )
+        print_status( 'Done.' )
+    end
+
+    def self.gems
+        [ 'pony' ]
+    end
+
+    def self.info
+        {
+            :name           => 'E-mail notify',
+            :description    => %q{Sends a notification (and optionally a report) over SMTP
+                at the end of the scan.},
+            :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
+            :version        => '0.1',
+            :options        => [
+                Arachni::OptString.new( 'to', [ true, 'E-mail address of the receiver.' ] ),
+                Arachni::OptString.new( 'cc', [ false, 'E-mail address to which to send a carbon copy of the notification.' ] ),
+                Arachni::OptString.new( 'bcc', [ false, 'E-mail address for a blind carbon copy.' ] ),
+                Arachni::OptString.new( 'from', [ true, 'E-mail address of the sender.' ] ),
+                Arachni::OptAddress.new( 'server_address', [ true, 'Address of the SMTP server to use.' ] ),
+                Arachni::OptPort.new( 'server_port', [ true, 'SMTP port.' ] ),
+                Arachni::OptBool.new( 'tls', [ false, 'Use TLS/SSL?.' ] ),
+                Arachni::OptString.new( 'username', [ true, 'SMTP username.' ] ),
+                Arachni::OptString.new( 'password', [ true, 'SMTP password.' ] ),
+                Arachni::OptString.new( 'authentication', [ false, 'Authentication.', 'plain', [ 'plain', 'login', 'cram_md5', '' ] ] ),
+                Arachni::OptEnum.new( 'report', [ false, 'Report type to send as an attachment.', 'txt', [ 'txt', 'xml', 'html', 'json', 'yaml', 'marshal' 'none' ] ] )
+            ]
+
+        }
+    end
+
+end
+
+end
+end

data/plugins/form_dicattack.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -21,23 +21,14 @@ class FormDicattack < Arachni::Plugin::Base
 
     attr_accessor :http
 
-    #
-    # @param    [Arachni::Framework]    framework
-    # @param    [Hash]        options    options passed to the plugin
-    #
-    def initialize( framework, options )
-        @framework = framework
-        @options   = options
-
+    def prepare
         # disable spidering and the subsequent audit
         # @framework.opts.link_count_limit = 0
 
         # don't scan the website just yet
         @framework.pause!
         print_info( "System paused." )
-    end
 
-    def prepare
         @url     = @framework.opts.url.to_s
         @users   = File.read( @options['username_list'] ).split( "\n" )
         @passwds = File.read( @options['password_list'] ).split( "\n" )
@@ -52,10 +43,10 @@ class FormDicattack < Arachni::Plugin::Base
         @found = false
     end
 
-    def run( )
+    def run
 
         if !form = login_form
-            print_error( 'Could not find a form suiting the provided params at: ' +
+            print_bad( 'Could not find a form suiting the provided params at: ' +
                 @url )
             return
         end
@@ -87,7 +78,8 @@ class FormDicattack < Arachni::Plugin::Base
                 opts = {
                     :headers => {
                         'cookie'  => ''
-                    }
+                    },
+                    :update_cookies => true
                 }
                 form.submit( opts ).on_complete {
                     |res|
@@ -106,7 +98,7 @@ class FormDicattack < Arachni::Plugin::Base
 
                     # register our findings...
                     register_results( { :username => user, :password => pass } )
-                    clean_up( )
+                    clean_up
 
                     raise "Stopping the attack."
                 }
@@ -116,7 +108,7 @@ class FormDicattack < Arachni::Plugin::Base
 
         print_status( "Waiting for the requests to complete..." )
         @http.run
-        print_error( "Couldn't find a match." )
+        print_bad( "Couldn't find a match." )
 
     end
 

data/plugins/http_dicattack.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -19,13 +19,7 @@ module Plugins
 #
 class HTTPDicattack < Arachni::Plugin::Base
 
-    #
-    # @param    [Arachni::Framework]    framework
-    # @param    [Hash]        options    options passed to the plugin
-    #
-    def initialize( framework, options )
-        @framework = framework
-        @options   = options
+    def prepare
 
         # disable spidering and the subsequent audit
         # @framework.opts.link_count_limit = 0
@@ -33,9 +27,7 @@ class HTTPDicattack < Arachni::Plugin::Base
         # don't scan the website just yet
         @framework.pause!
         print_info( "System paused." )
-    end
 
-    def prepare
         @url     = @framework.opts.url.to_s
         @users   = File.read( @options['username_list'] ).split( "\n" )
         @passwds = File.read( @options['password_list'] ).split( "\n" )
@@ -43,7 +35,7 @@ class HTTPDicattack < Arachni::Plugin::Base
         @found = false
     end
 
-    def run( )
+    def run
 
         if !protected?( @url )
             print_info( "The URL you provided doesn't seem to be protected." )
@@ -94,7 +86,7 @@ class HTTPDicattack < Arachni::Plugin::Base
 
         print_status( "Waiting for the requests to complete..." )
         @framework.http.run
-        print_error( "Couldn't find a match." )
+        print_bad( "Couldn't find a match." )
 
     end
 

data/plugins/libnotify.rb

@@ -0,0 +1,86 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Plugins
+
+#
+# Uses the libnotify library to send notifications for each discovered issue
+# and a summary at the end on the scan.
+#
+# @author: Tasos "Zapotek" Laskos
+#                                      <tasos.laskos@gmail.com>
+#                                      <zapotek@segfault.gr>
+# @version: 0.1
+#
+class LibNotify < Arachni::Plugin::Base
+
+    def prepare
+        return if !@options['for_every_issue']
+
+        Arachni::Module::Manager.on_register_results {
+            |issues|
+            issues.each {
+                |issue|
+                notify(
+                    :summary   => "Found #{issue.name}",
+                    :body      => "In #{issue.elem} variable" +
+                        " '#{issue.var}' (Severity: #{issue.severity})\n" +
+                        "At #{issue.url}"
+                )
+            }
+        }
+    end
+
+    def run
+        wait_while_framework_running
+    end
+
+    def clean_up
+        issue_cnt = @framework.audit_store.issues.size
+        time      = @framework.audit_store.delta_time
+        url       = @framework.opts.url
+
+        notify(
+            :summary   => "Scan finished in #{time}",
+            :body      => "Found #{issue_cnt} unique issues for #{url}."
+        )
+    end
+
+    def notify( opts )
+        Libnotify.show({
+            :icon_path => @framework.opts.dir['gfx'] + "spider.png",
+            :timeout   => 2.5,
+            :append    => true
+        }.merge( opts ))
+    end
+
+    def self.gems
+        [ 'libnotify' ]
+    end
+
+    def self.info
+        {
+            :name           => 'libnotify',
+            :description    => %q{Uses the libnotify library to send notifications for each discovered issue
+                and a summary at the end of the scan.},
+            :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
+            :version        => '0.1',
+            :options        => [
+                Arachni::OptBool.new( 'for_every_issue', [ false, 'Show every issue.', true ] ),
+            ]
+
+        }
+    end
+
+end
+
+end
+end