arachni 0.3 → 0.4

data/reports/plugin_formatters/xml/resolver.rb

@@ -0,0 +1,53 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+
+require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
+
+module Reports
+
+class XML
+module PluginFormatters
+
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class Resolver < Arachni::Plugin::Formatter
+
+        include Buffer
+
+        def run
+            start_tag( 'resolver' )
+            simple_tag( 'description', @description )
+
+            start_tag( 'results' )
+
+            @results.each {
+                |hostname, ipaddress|
+                __buffer( "<hostname value='#{hostname}' ipaddress='#{ipaddress}' />" )
+            }
+
+            end_tag( 'results' )
+            end_tag( 'resolver' )
+
+            return buffer( )
+        end
+
+    end
+
+end
+end
+
+end
+end

data/reports/plugin_formatters/xml/{metaformatters/timeout_notice.rb → timing_attacks.rb}

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -17,27 +17,18 @@ module Reports
 class XML
 module PluginFormatters
 
-class MetaModules
-
-module MetaFormatters
-
     #
-    # XML formatter for the results of the TimeoutNotice metamodule
+    # XML formatter for the results of the TimingAttacks plugin.
     #
     # @author: Tasos "Zapotek" Laskos
     #                                      <tasos.laskos@gmail.com>
     #                                      <zapotek@segfault.gr>
     # @version: 0.1
     #
-    class TimeoutNotice < Arachni::Plugin::Formatter
+    class TimingAttacks < Arachni::Plugin::Formatter
 
         include Arachni::Reports::Buffer
 
-        def initialize( metadata )
-            @results     = metadata[:results]
-            @description = metadata[:description]
-        end
-
         def run
             start_tag( 'timeout_notice' )
             simple_tag( 'description', @description )
@@ -59,9 +50,6 @@ module MetaFormatters
     end
 
 end
-
-end
-end
 end
 end
 end

data/reports/plugin_formatters/xml/{metaformatters/uniformity.rb → uniformity.rb}

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -17,11 +17,8 @@ module Reports
 class XML
 module PluginFormatters
 
-class MetaModules
-module MetaFormatters
-
     #
-    # XML formatter for the results of the Uniformity metamodule
+    # XML formatter for the results of the Uniformity plugin.
     #
     # @author: Tasos "Zapotek" Laskos
     #                                      <tasos.laskos@gmail.com>
@@ -32,11 +29,6 @@ module MetaFormatters
 
         include Arachni::Reports::Buffer
 
-        def initialize( metadata )
-            @results     = metadata[:results]
-            @description = metadata[:description]
-        end
-
         def run
             start_tag( 'uniformity' )
             simple_tag( 'description', @description )
@@ -63,7 +55,8 @@ module MetaFormatters
         end
 
         def add_uniformal( idx, uniformal )
-            __buffer( "<issue index=\"#{uniformal['indices'][idx]}\" hash=\"#{uniformal['hashes'][idx]}\" />" )
+            __buffer( "<issue index=\"#{uniformal['indices'][idx]}\"" +
+                " hash=\"#{uniformal['hashes'][idx]}\" />" )
         end
 
         def start_uniformals( id )
@@ -74,9 +67,6 @@ module MetaFormatters
     end
 
 end
-
-end
-end
 end
 end
 end

data/reports/plugin_formatters/xml/waf_detector.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -15,43 +15,38 @@ require Arachni::Options.instance.dir['reports'] + '/xml/buffer.rb'
 module Reports
 
 class XML
-    module PluginFormatters
+module PluginFormatters
 
-        #
-        # XML formatter for the results of the WAF Detector plugin
-        #
-        # @author: Tasos "Zapotek" Laskos
-        #                                      <tasos.laskos@gmail.com>
-        #                                      <zapotek@segfault.gr>
-        # @version: 0.1
-        #
-        class WAFDetector < Arachni::Plugin::Formatter
+    #
+    # XML formatter for the results of the WAF Detector plugin
+    #
+    # @author: Tasos "Zapotek" Laskos
+    #                                      <tasos.laskos@gmail.com>
+    #                                      <zapotek@segfault.gr>
+    # @version: 0.1
+    #
+    class WAFDetector < Arachni::Plugin::Formatter
 
-            include Buffer
+        include Buffer
 
-            def initialize( plugin_data )
-                @results     = plugin_data[:results]
-                @description = plugin_data[:description]
-            end
+        def run
+            start_tag( 'waf_detector' )
+            simple_tag( 'description', @description )
 
-            def run
-                start_tag( 'waf_detector' )
-                simple_tag( 'description', @description )
+            start_tag( 'results' )
 
-                start_tag( 'results' )
+            simple_tag( 'message', @results[:msg] )
+            simple_tag( 'code', @results[:code].to_s )
 
-                simple_tag( 'message', @results[:msg] )
-                simple_tag( 'code', @results[:code].to_s )
-
-                end_tag( 'results' )
-                end_tag( 'waf_detector' )
-
-                return buffer( )
-            end
+            end_tag( 'results' )
+            end_tag( 'waf_detector' )
 
+            return buffer( )
         end
 
     end
+
+end
 end
 
 end

data/reports/stdout.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License

data/reports/txt.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -64,10 +64,7 @@ class Text < Arachni::Report::Base
             :description    => %q{Exports a report as a plain text file.},
             :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
             :version        => '0.2',
-            :options        => [
-                Arachni::OptString.new( 'outfile', [ false, 'Where to save the report.',
-                    Time.now.to_s + '.txt' ] ),
-            ]
+            :options        => [ Arachni::Report::Options.outfile( '.txt' ) ]
         }
     end
 

data/reports/xml.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -174,10 +174,7 @@ class XML < Arachni::Report::Base
             :description    => %q{Exports a report as an XML file.},
             :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
             :version        => '0.2',
-            :options        => [
-                Arachni::OptString.new( 'outfile', [ false, 'Where to save the report.',
-                    Time.now.to_s + '.xml' ] ),
-            ]
+            :options        => [ Arachni::Report::Options.outfile( '.xml' ) ]
         }
     end
 

data/reports/xml/buffer.rb

@@ -1,6 +1,6 @@
 =begin
                   Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 
   This is free software; you can copy and distribute and modify
   this program under the term of the GPL v2.0 License
@@ -60,7 +60,11 @@ module Reports
             start_tag( type )
             headers.each_pair {
                 |name, value|
-                __buffer( "<field name=\"#{name}\" value=\"#{CGI.escapeHTML( value.strip )}\" />" )
+                if name.downcase == 'set-cookie' && value.is_a?( Array )
+                    __buffer( "<field name=\"#{name}\" value=\"#{CGI.escapeHTML( value.join( "\n" ) )}\" />" )
+                else
+                    __buffer( "<field name=\"#{name}\" value=\"#{CGI.escapeHTML( value.strip )}\" />" )
+                end
             }
             end_tag( type )
         end

data/reports/yaml.rb

@@ -0,0 +1,49 @@
+=begin
+                  Arachni
+  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+
+  This is free software; you can copy and distribute and modify
+  this program under the term of the GPL v2.0 License
+  (See LICENSE file for details)
+
+=end
+
+module Arachni
+module Reports
+
+#
+# Converts the AuditStore to a Hash which it then dumps in YAML format into a file.
+#
+# @author: Tasos "Zapotek" Laskos
+#                                      <tasos.laskos@gmail.com>
+#                                      <zapotek@segfault.gr>
+# @version: 0.1
+#
+class YAML < Arachni::Report::Base
+
+    def run
+        print_line( )
+        print_status( 'Dumping audit results in \'' + @options['outfile']  + '\'.' )
+
+        File.open( @options['outfile'], 'w' ) {
+            |f|
+            f.write( ::YAML::dump( @audit_store.to_h ) )
+        }
+
+        print_status( 'Done!' )
+    end
+
+    def self.info
+        {
+            :name           => 'YAML Report',
+            :description    => %q{Exports the audit results as a YAML file.},
+            :author         => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
+            :version        => '0.1',
+            :options        => [ Arachni::Report::Options.outfile( '.yaml' ) ]
+        }
+    end
+
+end
+
+end
+end

metadata

@@ -1,162 +1,245 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: arachni
-version: !ruby/object:Gem::Version 
+version: !ruby/object:Gem::Version
+  version: '0.4'
   prerelease: 
-  version: "0.3"
 platform: ruby
-authors: 
+authors:
 - Tasos Laskos
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2011-07-26 00:00:00 +03:00
-default_executable: 
-dependencies: 
-- !ruby/object:Gem::Dependency 
-  name: arachni-typhoeus
+date: 2012-01-07 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: typhoeus
+  requirement: &7947780 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.3.3
+  type: :runtime
   prerelease: false
-  requirement: &id001 !ruby/object:Gem::Requirement 
+  version_requirements: *7947780
+- !ruby/object:Gem::Dependency
+  name: awesome_print
+  requirement: &7947180 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 0.2.0.2
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
   type: :runtime
-  version_requirements: *id001
-- !ruby/object:Gem::Dependency 
-  name: nokogiri
   prerelease: false
-  requirement: &id002 !ruby/object:Gem::Requirement 
+  version_requirements: *7947180
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: &7944620 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 1.4.4
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
   type: :runtime
-  version_requirements: *id002
-- !ruby/object:Gem::Dependency 
-  name: awesome_print
   prerelease: false
-  requirement: &id003 !ruby/object:Gem::Requirement 
+  version_requirements: *7944620
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: &7930700 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 0.3.1
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.5.0
   type: :runtime
-  version_requirements: *id003
-- !ruby/object:Gem::Dependency 
-  name: sys-proctable
   prerelease: false
-  requirement: &id004 !ruby/object:Gem::Requirement 
+  version_requirements: *7930700
+- !ruby/object:Gem::Dependency
+  name: sys-proctable
+  requirement: &7929640 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 0.8.1
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.9.1
   type: :runtime
-  version_requirements: *id004
-- !ruby/object:Gem::Dependency 
-  name: terminal-table
   prerelease: false
-  requirement: &id005 !ruby/object:Gem::Requirement 
+  version_requirements: *7929640
+- !ruby/object:Gem::Dependency
+  name: terminal-table
+  requirement: &7928680 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
         version: 1.4.2
   type: :runtime
-  version_requirements: *id005
-- !ruby/object:Gem::Dependency 
-  name: sinatra
   prerelease: false
-  requirement: &id006 !ruby/object:Gem::Requirement 
+  version_requirements: *7928680
+- !ruby/object:Gem::Dependency
+  name: sinatra
+  requirement: &7927880 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
+    requirements:
     - - ~>
-      - !ruby/object:Gem::Version 
-        version: 1.2.1
+      - !ruby/object:Gem::Version
+        version: 1.3.1
   type: :runtime
-  version_requirements: *id006
-- !ruby/object:Gem::Dependency 
-  name: datamapper
   prerelease: false
-  requirement: &id007 !ruby/object:Gem::Requirement 
+  version_requirements: *7927880
+- !ruby/object:Gem::Dependency
+  name: sinatra-flash
+  requirement: &7927080 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 1.0.2
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.3.0
   type: :runtime
-  version_requirements: *id007
-- !ruby/object:Gem::Dependency 
-  name: rack_csrf
   prerelease: false
-  requirement: &id008 !ruby/object:Gem::Requirement 
+  version_requirements: *7927080
+- !ruby/object:Gem::Dependency
+  name: async_sinatra
+  requirement: &7926520 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 2.1.0
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.5.0
   type: :runtime
-  version_requirements: *id008
-- !ruby/object:Gem::Dependency 
-  name: rack-flash
   prerelease: false
-  requirement: &id009 !ruby/object:Gem::Requirement 
+  version_requirements: *7926520
+- !ruby/object:Gem::Dependency
+  name: thin
+  requirement: &7926040 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 0.1.1
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.2.11
   type: :runtime
-  version_requirements: *id009
-- !ruby/object:Gem::Dependency 
-  name: json
   prerelease: false
-  requirement: &id010 !ruby/object:Gem::Requirement 
+  version_requirements: *7926040
+- !ruby/object:Gem::Dependency
+  name: data_objects
+  requirement: &7925500 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 1.4.6
+    requirements:
+    - - =
+      - !ruby/object:Gem::Version
+        version: 0.10.7
   type: :runtime
-  version_requirements: *id010
-- !ruby/object:Gem::Dependency 
-  name: dm-sqlite-adapter
   prerelease: false
-  requirement: &id011 !ruby/object:Gem::Requirement 
+  version_requirements: *7925500
+- !ruby/object:Gem::Dependency
+  name: datamapper
+  requirement: &7925040 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 1.0.2
+    requirements:
+    - - =
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: *7925040
+- !ruby/object:Gem::Dependency
+  name: dm-sqlite-adapter
+  requirement: &7924540 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - =
+      - !ruby/object:Gem::Version
+        version: 1.1.0
   type: :runtime
-  version_requirements: *id011
-- !ruby/object:Gem::Dependency 
+  prerelease: false
+  version_requirements: *7924540
+- !ruby/object:Gem::Dependency
   name: net-ssh
+  requirement: &7923820 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 2.2.1
+  type: :runtime
   prerelease: false
-  requirement: &id012 !ruby/object:Gem::Requirement 
+  version_requirements: *7923820
+- !ruby/object:Gem::Dependency
+  name: net-scp
+  requirement: &7912240 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        version: 2.1.4
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.0.4
   type: :runtime
-  version_requirements: *id012
-description: "        Arachni is a feature-full, modular, high-performance Ruby framework aimed towards\n        helping penetration testers and administrators evaluate the security of web applications.\n\n        Arachni is smart, it trains itself by learning from the HTTP responses it receives during the audit process.\n        Unlike other scanners, Arachni takes into account the dynamic nature of web applications and can detect changes caused while travelling\n        through the paths of a web application's cyclomatic complexity.\n        This way attack/input vectors that would otherwise be undetectable by non-humans are seamlessly handled by Arachni.\n\n        Finally, Arachni yields great performance due to its asynchronous HTTP model (courtesy of Typhoeus).\n        Thus, you'll only be limited by the responsiveness of the server under audit and your available bandwidth.\n\n        Note: Despite the fact that Arachni is mostly targeted towards web application security,\n        it can easily be used for general purpose scraping, data-mining, etc with the addition of custom modules.\n"
+  prerelease: false
+  version_requirements: *7912240
+- !ruby/object:Gem::Dependency
+  name: eventmachine
+  requirement: &7911200 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.0.0.beta.4
+  type: :runtime
+  prerelease: false
+  version_requirements: *7911200
+- !ruby/object:Gem::Dependency
+  name: em-synchrony
+  requirement: &7910580 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: *7910580
+- !ruby/object:Gem::Dependency
+  name: arachni-rpc-em
+  requirement: &7909560 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: *7909560
+description: ! "        Arachni is a feature-full, modular, high-performance Ruby
+  framework aimed towards\n        helping penetration testers and administrators
+  evaluate the security of web applications.\n\n        Arachni is smart, it trains
+  itself by learning from the HTTP responses it receives during the audit process\n
+  \       and is able to perform meta-analysis using a number of factors in order
+  to correctly assess the trustworthiness\n        of results and intelligently identify
+  false-positives.\n\n        Unlike other scanners, it takes into account the dynamic
+  nature of web applications, can detect changes caused while travelling\n        through
+  the paths of a web application's cyclomatic complexity and is able to adjust itself
+  accordingly.\n        This way attack/input vectors that would otherwise be undetectable
+  by non-humans are seamlessly handled by Arachni.\n\n        Moreover, Arachni yields
+  great performance due to its asynchronous HTTP model (courtesy of Typhoeus) -- especially\n
+  \       when combined with a High Performance Grid setup which allows you to combine
+  the resources of multiple nodes for lightning fast scans.\n        Thus, you'll
+  only be limited by the responsiveness of the server under audit.\n\n        Finally,
+  it is versatile enough to cover a great deal of use cases, ranging from a simple\n
+  \       command line scanner utility, to a global high performance grid of scanners,
+  to a Ruby library allowing for scripted audits.\n\n        Note: Despite the fact
+  that Arachni is mostly targeted towards web application security,\n        it can
+  easily be used for general purpose scraping, data-mining, etc with the addition
+  of custom modules.\n"
 email: tasos.laskos@gmail.com
-executables: 
+executables:
 - arachni
-- arachni_xmlrpcd_monitor
-- arachni_xmlrpcd
-- arachni_xmlrpc
+- arachni_rpcd_monitor
+- arachni_rpcd
+- arachni_rpc
 - arachni_web
 - arachni_web_autostart
 extensions: []
-
-extra_rdoc_files: 
+extra_rdoc_files:
 - README.md
 - ACKNOWLEDGMENTS.md
 - LICENSE.md
@@ -165,11 +248,10 @@ extra_rdoc_files:
 - CONTRIBUTORS.md
 - EXPLOITATION.md
 - HACKING.md
-files: 
+files:
 - README.md
 - ACKNOWLEDGMENTS.md
 - Rakefile
-- getoptslong.rb
 - LICENSE.md
 - AUTHORS.md
 - CHANGELOG.md
@@ -177,143 +259,151 @@ files:
 - EXPLOITATION.md
 - HACKING.md
 - data/crypto/public.pem
-- lib/nokogiri/xml/node.rb
-- lib/module.rb
-- lib/module/trainer.rb
-- lib/module/output.rb
-- lib/module/utilities.rb
-- lib/module/auditor.rb
-- lib/module/key_filler.rb
-- lib/module/element_db.rb
-- lib/module/base.rb
-- lib/module/manager.rb
-- lib/mixins/observable.rb
-- lib/parser.rb
-- lib/component_options.rb
-- lib/report.rb
-- lib/options.rb
-- lib/issue.rb
-- lib/component_manager.rb
-- lib/plugin/base.rb
-- lib/plugin/manager.rb
 - lib/arachni.rb
-- lib/framework.rb
-- lib/crypto/rsa_aes_cbc.rb
-- lib/http.rb
-- lib/spider.rb
-- lib/audit_store.rb
-- lib/rpc/xml/server/module/manager.rb
-- lib/rpc/xml/server/output.rb
-- lib/rpc/xml/server/options.rb
-- lib/rpc/xml/server/plugin/manager.rb
-- lib/rpc/xml/server/framework.rb
-- lib/rpc/xml/server/dispatcher.rb
-- lib/rpc/xml/server/instance.rb
-- lib/rpc/xml/server/base.rb
-- lib/rpc/xml/client/dispatcher.rb
-- lib/rpc/xml/client/instance.rb
-- lib/rpc/xml/client/base.rb
-- lib/ruby/xmlrpc/server.rb
-- lib/ruby/string.rb
-- lib/ruby/object.rb
-- lib/anemone.rb
-- lib/exceptions.rb
-- lib/ui/xmlrpc/xmlrpc.rb
-- lib/ui/xmlrpc/dispatcher_monitor.rb
-- lib/ui/cli/output.rb
-- lib/ui/cli/cli.rb
-- lib/ui/web/server/public/sidebar-top.jpg
-- lib/ui/web/server/public/style.css
-- lib/ui/web/server/public/bodybg.png
-- lib/ui/web/server/public/nav-selected-right.jpg
-- lib/ui/web/server/public/logo.png
-- lib/ui/web/server/public/favicon.ico
-- lib/ui/web/server/public/nav-right.jpg
-- lib/ui/web/server/public/css/smoothness/jquery-ui-1.8.9.custom.css
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_flat_0_aaaaaa_40x100.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_highlight-soft_75_cccccc_1x100.png
-- lib/ui/web/server/public/css/smoothness/images/ui-icons_2e83ff_256x240.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_glass_95_fef1ec_1x400.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_dadada_1x400.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_glass_55_fbf9ee_1x400.png
-- lib/ui/web/server/public/css/smoothness/images/ui-icons_888888_256x240.png
-- lib/ui/web/server/public/css/smoothness/images/ui-icons_222222_256x240.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png
-- lib/ui/web/server/public/css/smoothness/images/pbar-ani.gif
-- lib/ui/web/server/public/css/smoothness/images/ui-icons_cd0a0a_256x240.png
-- lib/ui/web/server/public/css/smoothness/images/ui-icons_454545_256x240.png
-- lib/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_e6e6e6_1x400.png
-- lib/ui/web/server/public/nav-left.jpg
-- lib/ui/web/server/public/sidebar-bottom.jpg
-- lib/ui/web/server/public/nav-selected-left.jpg
-- lib/ui/web/server/public/js/jquery-1.4.4.min.js
-- lib/ui/web/server/public/js/jquery-ui-timepicker.js
-- lib/ui/web/server/public/js/jquery-ui-1.8.9.custom.min.js
-- lib/ui/web/server/public/spider.png
-- lib/ui/web/server/public/banner.png
-- lib/ui/web/server/public/bodybg-small.png
-- lib/ui/web/server/public/reports/placeholder
-- lib/ui/web/server/public/icons/status.png
-- lib/ui/web/server/public/icons/info.png
-- lib/ui/web/server/public/icons/error.png
-- lib/ui/web/server/public/icons/ok.png
-- lib/ui/web/server/public/sidebar-h4.jpg
-- lib/ui/web/server/public/plugins/sample/style.css
-- lib/ui/web/server/public/footer.jpg
-- lib/ui/web/server/tmp/placeholder
-- lib/ui/web/server/db/placeholder
-- lib/ui/web/server/views/dispatcher_error.erb
-- lib/ui/web/server/views/instance.erb
-- lib/ui/web/server/views/log.erb
-- lib/ui/web/server/views/flash.erb
-- lib/ui/web/server/views/report_formats.erb
-- lib/ui/web/server/views/modules.erb
-- lib/ui/web/server/views/addons.erb
-- lib/ui/web/server/views/plugins.erb
-- lib/ui/web/server/views/layout.erb
-- lib/ui/web/server/views/output_results.erb
-- lib/ui/web/server/views/options.erb
-- lib/ui/web/server/views/dispatchers.erb
-- lib/ui/web/server/views/error.erb
-- lib/ui/web/server/views/home.erb
-- lib/ui/web/server/views/welcome.erb
-- lib/ui/web/server/views/reports.erb
-- lib/ui/web/server/views/addon.erb
-- lib/ui/web/server/views/dispatchers_edit.erb
-- lib/ui/web/server/views/settings.erb
-- lib/ui/web/scheduler.rb
-- lib/ui/web/utilities.rb
-- lib/ui/web/addons/autodeploy.rb
-- lib/ui/web/addons/scheduler.rb
-- lib/ui/web/addons/scheduler/views/options.erb
-- lib/ui/web/addons/scheduler/views/index.erb
-- lib/ui/web/addons/sample/views/index.erb
-- lib/ui/web/addons/autodeploy/lib/manager.rb
-- lib/ui/web/addons/autodeploy/views/index.erb
-- lib/ui/web/addons/sample.rb
-- lib/ui/web/report_manager.rb
-- lib/ui/web/server.rb
-- lib/ui/web/log.rb
-- lib/ui/web/dispatcher_manager.rb
-- lib/ui/web/output_stream.rb
-- lib/ui/web/instance_manager.rb
-- lib/ui/web/addon_manager.rb
-- lib/parser/auditable.rb
-- lib/parser/parser.rb
-- lib/parser/page.rb
-- lib/parser/elements.rb
-- lib/report/base.rb
-- lib/report/manager.rb
-- lib/plugin.rb
-- lib/typhoeus/response.rb
-- lib/typhoeus/request.rb
-- lib/ruby.rb
+- lib/arachni/nokogiri/xml/node.rb
+- lib/arachni/module.rb
+- lib/arachni/module/trainer.rb
+- lib/arachni/module/output.rb
+- lib/arachni/module/utilities.rb
+- lib/arachni/module/auditor.rb
+- lib/arachni/module/key_filler.rb
+- lib/arachni/module/element_db.rb
+- lib/arachni/module/base.rb
+- lib/arachni/module/manager.rb
+- lib/arachni/mixins/terminal.rb
+- lib/arachni/mixins/observable.rb
+- lib/arachni/mixins/progress_bar.rb
+- lib/arachni/parser.rb
+- lib/arachni/version.rb
+- lib/arachni/component_options.rb
+- lib/arachni/report.rb
+- lib/arachni/options.rb
+- lib/arachni/database.rb
+- lib/arachni/database/hash.rb
+- lib/arachni/database/queue.rb
+- lib/arachni/database/base.rb
+- lib/arachni/issue.rb
+- lib/arachni/component_manager.rb
+- lib/arachni/plugin/base.rb
+- lib/arachni/plugin/manager.rb
+- lib/arachni/framework.rb
+- lib/arachni/crypto/rsa_aes_cbc.rb
+- lib/arachni/http.rb
+- lib/arachni/spider.rb
+- lib/arachni/audit_store.rb
+- lib/arachni/rpc/server/module/manager.rb
+- lib/arachni/rpc/server/output.rb
+- lib/arachni/rpc/server/options.rb
+- lib/arachni/rpc/server/plugin/manager.rb
+- lib/arachni/rpc/server/framework.rb
+- lib/arachni/rpc/server/node.rb
+- lib/arachni/rpc/server/dispatcher.rb
+- lib/arachni/rpc/server/instance.rb
+- lib/arachni/rpc/server/base.rb
+- lib/arachni/rpc/client/dispatcher.rb
+- lib/arachni/rpc/client/instance.rb
+- lib/arachni/rpc/client/base.rb
+- lib/arachni/ruby/string.rb
+- lib/arachni/ruby/array.rb
+- lib/arachni/ruby/object.rb
+- lib/arachni/exceptions.rb
+- lib/arachni/ui/cli/output.rb
+- lib/arachni/ui/cli/cli.rb
+- lib/arachni/ui/rpc/rpc.rb
+- lib/arachni/ui/rpc/dispatcher_monitor.rb
+- lib/arachni/ui/web/server/public/sidebar-top.jpg
+- lib/arachni/ui/web/server/public/style.css
+- lib/arachni/ui/web/server/public/bodybg.png
+- lib/arachni/ui/web/server/public/nav-selected-right.jpg
+- lib/arachni/ui/web/server/public/logo.png
+- lib/arachni/ui/web/server/public/favicon.ico
+- lib/arachni/ui/web/server/public/nav-right.jpg
+- lib/arachni/ui/web/server/public/css/smoothness/jquery-ui-1.8.9.custom.css
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_flat_0_aaaaaa_40x100.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_highlight-soft_75_cccccc_1x100.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_2e83ff_256x240.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_95_fef1ec_1x400.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_dadada_1x400.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_55_fbf9ee_1x400.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_888888_256x240.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_222222_256x240.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/pbar-ani.gif
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_cd0a0a_256x240.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_454545_256x240.png
+- lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_e6e6e6_1x400.png
+- lib/arachni/ui/web/server/public/nav-left.jpg
+- lib/arachni/ui/web/server/public/sidebar-bottom.jpg
+- lib/arachni/ui/web/server/public/nav-selected-left.jpg
+- lib/arachni/ui/web/server/public/js/jquery-1.4.4.min.js
+- lib/arachni/ui/web/server/public/js/jquery-ui-timepicker.js
+- lib/arachni/ui/web/server/public/js/jquery-ui-1.8.9.custom.min.js
+- lib/arachni/ui/web/server/public/spider.png
+- lib/arachni/ui/web/server/public/banner.png
+- lib/arachni/ui/web/server/public/bodybg-small.png
+- lib/arachni/ui/web/server/public/reports/placeholder
+- lib/arachni/ui/web/server/public/icons/status.png
+- lib/arachni/ui/web/server/public/icons/info.png
+- lib/arachni/ui/web/server/public/icons/error.png
+- lib/arachni/ui/web/server/public/icons/bad.png
+- lib/arachni/ui/web/server/public/icons/ok.png
+- lib/arachni/ui/web/server/public/sidebar-h4.jpg
+- lib/arachni/ui/web/server/public/plugins/sample/style.css
+- lib/arachni/ui/web/server/public/footer.jpg
+- lib/arachni/ui/web/server/tmp/placeholder
+- lib/arachni/ui/web/server/db/placeholder
+- lib/arachni/ui/web/server/views/dispatcher_error.erb
+- lib/arachni/ui/web/server/views/instance.erb
+- lib/arachni/ui/web/server/views/log.erb
+- lib/arachni/ui/web/server/views/flash.erb
+- lib/arachni/ui/web/server/views/report_formats.erb
+- lib/arachni/ui/web/server/views/modules.erb
+- lib/arachni/ui/web/server/views/addons.erb
+- lib/arachni/ui/web/server/views/plugins.erb
+- lib/arachni/ui/web/server/views/layout.erb
+- lib/arachni/ui/web/server/views/module.erb
+- lib/arachni/ui/web/server/views/output_results.erb
+- lib/arachni/ui/web/server/views/options.erb
+- lib/arachni/ui/web/server/views/dispatchers.erb
+- lib/arachni/ui/web/server/views/error.erb
+- lib/arachni/ui/web/server/views/home.erb
+- lib/arachni/ui/web/server/views/js/home.erb
+- lib/arachni/ui/web/server/views/welcome.erb
+- lib/arachni/ui/web/server/views/reports.erb
+- lib/arachni/ui/web/server/views/addon.erb
+- lib/arachni/ui/web/server/views/dispatchers_edit.erb
+- lib/arachni/ui/web/server/views/settings.erb
+- lib/arachni/ui/web/scheduler.rb
+- lib/arachni/ui/web/utilities.rb
+- lib/arachni/ui/web/addons/autodeploy.rb
+- lib/arachni/ui/web/addons/scheduler.rb
+- lib/arachni/ui/web/addons/scheduler/views/options.erb
+- lib/arachni/ui/web/addons/scheduler/views/index.erb
+- lib/arachni/ui/web/addons/sample/views/index.erb
+- lib/arachni/ui/web/addons/autodeploy/lib/manager.rb
+- lib/arachni/ui/web/addons/autodeploy/views/index.erb
+- lib/arachni/ui/web/addons/sample.rb
+- lib/arachni/ui/web/report_manager.rb
+- lib/arachni/ui/web/server.rb
+- lib/arachni/ui/web/log.rb
+- lib/arachni/ui/web/dispatcher_manager.rb
+- lib/arachni/ui/web/output_stream.rb
+- lib/arachni/ui/web/instance_manager.rb
+- lib/arachni/ui/web/addon_manager.rb
+- lib/arachni/parser/auditable.rb
+- lib/arachni/parser/parser.rb
+- lib/arachni/parser/page.rb
+- lib/arachni/parser/elements.rb
+- lib/arachni/report/base.rb
+- lib/arachni/report/manager.rb
+- lib/arachni/plugin.rb
+- lib/arachni/typhoeus/response.rb
+- lib/arachni/typhoeus/hydra.rb
+- lib/arachni/typhoeus/request.rb
+- lib/arachni/ruby.rb
 - conf/webui.yaml
 - conf/README.webui.yaml.txt
-- metamodules/timeout_notice.rb
-- metamodules/autothrottle.rb
-- metamodules/uniformity.rb
 - external/metasploit/modules/exploits/unix/webapp/arachni_php_include.rb
 - external/metasploit/modules/exploits/unix/webapp/arachni_path_traversal.rb
 - external/metasploit/modules/exploits/unix/webapp/arachni_exec.rb
@@ -322,9 +412,25 @@ files:
 - external/metasploit/LICENSE
 - external/metasploit/plugins/arachni.rb
 - logs/placeholder
+- extras/modules/recon/svn_digger_dirs/Licence.txt
+- extras/modules/recon/svn_digger_dirs/ReadMe-Arachni.txt
+- extras/modules/recon/svn_digger_dirs/all-dirs.txt
+- extras/modules/recon/svn_digger_dirs/ReadMe.txt
+- extras/modules/recon/raft_dirs/raft-large-directories.txt
+- extras/modules/recon/svn_digger_files/Licence.txt
+- extras/modules/recon/svn_digger_files/all-extensionless.txt
+- extras/modules/recon/svn_digger_files/ReadMe-Arachni.txt
+- extras/modules/recon/svn_digger_files/all.txt
+- extras/modules/recon/svn_digger_files/ReadMe.txt
+- extras/modules/recon/raft_dirs.rb
+- extras/modules/recon/raft_files.rb
+- extras/modules/recon/svn_digger_files.rb
+- extras/modules/recon/svn_digger_dirs.rb
+- extras/modules/recon/raft_files/raft-large-files.txt
 - modules/recon/backup_files/extensions.txt
 - modules/recon/interesting_responses.rb
 - modules/recon/common_files.rb
+- modules/recon/mixed_resource.rb
 - modules/recon/xst.rb
 - modules/recon/http_put.rb
 - modules/recon/webdav.rb
@@ -382,96 +488,131 @@ files:
 - path_extractors/meta_refresh.rb
 - path_extractors/forms.rb
 - path_extractors/sitemap.rb
+- plugins/beep_notify.rb
 - plugins/proxy/server.rb
-- plugins/metamodules.rb
-- plugins/healthmap.rb
+- plugins/rescan.rb
 - plugins/cookie_collector.rb
 - plugins/http_dicattack.rb
-- plugins/content_types.rb
-- plugins/profiler.rb
 - plugins/waf_detector.rb
+- plugins/libnotify.rb
+- plugins/email_notify.rb
 - plugins/form_dicattack.rb
 - plugins/autologin.rb
 - plugins/proxy.rb
-- profiles/comprehensive.afp
+- plugins/defaults/healthmap.rb
+- plugins/defaults/metamodules/remedies/timing_attacks.rb
+- plugins/defaults/metamodules/remedies/discovery.rb
+- plugins/defaults/metamodules/remedies/manual_verification.rb
+- plugins/defaults/metamodules/uniformity.rb
+- plugins/defaults/resolver.rb
+- plugins/defaults/content_types.rb
+- plugins/defaults/profiler.rb
+- plugins/defaults/autothrottle.rb
 - profiles/full.afp
+- reports/json.rb
 - reports/html.rb
 - reports/plugin_formatters/stdout/metamodules.rb
 - reports/plugin_formatters/stdout/healthmap.rb
+- reports/plugin_formatters/stdout/timing_attacks.rb
 - reports/plugin_formatters/stdout/cookie_collector.rb
+- reports/plugin_formatters/stdout/resolver.rb
 - reports/plugin_formatters/stdout/http_dicattack.rb
 - reports/plugin_formatters/stdout/content_types.rb
 - reports/plugin_formatters/stdout/profiler.rb
 - reports/plugin_formatters/stdout/waf_detector.rb
+- reports/plugin_formatters/stdout/discovery.rb
 - reports/plugin_formatters/stdout/form_dicattack.rb
-- reports/plugin_formatters/stdout/metaformatters/timeout_notice.rb
-- reports/plugin_formatters/stdout/metaformatters/uniformity.rb
 - reports/plugin_formatters/stdout/autologin.rb
-- reports/plugin_formatters/xml/metamodules.rb
+- reports/plugin_formatters/stdout/uniformity.rb
 - reports/plugin_formatters/xml/healthmap.rb
+- reports/plugin_formatters/xml/timing_attacks.rb
 - reports/plugin_formatters/xml/cookie_collector.rb
+- reports/plugin_formatters/xml/resolver.rb
 - reports/plugin_formatters/xml/http_dicattack.rb
 - reports/plugin_formatters/xml/content_types.rb
 - reports/plugin_formatters/xml/profiler.rb
 - reports/plugin_formatters/xml/waf_detector.rb
+- reports/plugin_formatters/xml/discovery.rb
 - reports/plugin_formatters/xml/form_dicattack.rb
-- reports/plugin_formatters/xml/metaformatters/timeout_notice.rb
-- reports/plugin_formatters/xml/metaformatters/uniformity.rb
 - reports/plugin_formatters/xml/autologin.rb
-- reports/plugin_formatters/html/metamodules.rb
+- reports/plugin_formatters/xml/uniformity.rb
 - reports/plugin_formatters/html/healthmap.rb
+- reports/plugin_formatters/html/timing_attacks.rb
 - reports/plugin_formatters/html/cookie_collector.rb
+- reports/plugin_formatters/html/resolver.rb
 - reports/plugin_formatters/html/profiler/template.erb
 - reports/plugin_formatters/html/http_dicattack.rb
 - reports/plugin_formatters/html/content_types.rb
 - reports/plugin_formatters/html/profiler.rb
 - reports/plugin_formatters/html/waf_detector.rb
+- reports/plugin_formatters/html/discovery.rb
 - reports/plugin_formatters/html/form_dicattack.rb
-- reports/plugin_formatters/html/metaformatters/timeout_notice.rb
-- reports/plugin_formatters/html/metaformatters/uniformity.rb
 - reports/plugin_formatters/html/autologin.rb
+- reports/plugin_formatters/html/uniformity.rb
 - reports/metareport/arachni_metareport.rb
+- reports/marshal.rb
+- reports/yaml.rb
 - reports/txt.rb
 - reports/xml/buffer.rb
 - reports/metareport.rb
 - reports/stdout.rb
+- reports/html/default/plugins.erb
+- reports/html/default/summary.erb
+- reports/html/default/issue.erb
+- reports/html/default/summary_issue.erb
+- reports/html/default/css/jquery-ui.css
+- reports/html/default/css/main.css
+- reports/html/default/css/jquery.jqplot.min.css
+- reports/html/default/js/init.js
+- reports/html/default/js/lib/jquery.jqplot.min.js
+- reports/html/default/js/lib/jqplot.barRenderer.min.js
+- reports/html/default/js/lib/jquery.min.js
+- reports/html/default/js/lib/jqplot.pieRenderer.min.js
+- reports/html/default/js/lib/jqplot.categoryAxisRenderer.min.js
+- reports/html/default/js/lib/jqplot.pointLabels.min.js
+- reports/html/default/js/lib/jquery-ui.min.js
+- reports/html/default/js/lib/jqplot.cursor.min.js
+- reports/html/default/js/helpers.js
+- reports/html/default/js/charts.js
+- reports/html/default/sitemap.erb
+- reports/html/default/issues.erb
+- reports/html/default/search.erb
+- reports/html/default/configuration.erb
 - reports/html/default.erb
 - reports/xml.rb
 - reports/afr.rb
 - reports/ap.rb
 - bin/arachni
-- bin/arachni_xmlrpcd_monitor
-- bin/arachni_xmlrpcd
-- bin/arachni_xmlrpc
+- bin/arachni_rpcd_monitor
+- bin/arachni_rpcd
+- bin/arachni_rpc
 - bin/arachni_web
 - bin/arachni_web_autostart
-has_rdoc: true
 homepage: https://github.com/Zapotek/arachni
 licenses: []
-
 post_install_message: 
-rdoc_options: 
+rdoc_options:
 - --charset=UTF-8
-require_paths: 
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
+required_ruby_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      version: "0"
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-
 rubyforge_project: 
-rubygems_version: 1.6.2
+rubygems_version: 1.8.10
 signing_key: 
 specification_version: 3
-summary: Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.
+summary: Arachni is a feature-full, modular, high-performance Ruby framework aimed
+  towards helping penetration testers and administrators evaluate the security of
+  web applications.
 test_files: []
-