arachni 0.3 → 0.4

data/lib/ui/web/addons/autodeploy/views/index.erb

@@ -1,124 +0,0 @@
-
-        <div>
-
-            <form action="<%=root%>/" method="post">
-                <h2>Perform a new deployment</h2>
-                <br/>
-
-                <fieldset>
-                    <legend>SSH options:</legend>
-                    Host: <input name="host" />
-                    Port: <input name="port" value="22" size="4" />
-                    Username: <input name="username" />
-                    Password (will not be stored): <input name="password" type="password" />
-                </fieldset>
-                <br/>
-
-                <fieldset>
-                    <legend>Dispatcher options:</legend>
-                    Port: <input name="dispatcher_port" value="7331" />
-                </fieldset>
-                <br/>
-
-                <%= csrf_tag %>
-                <input type="submit" value="Add" />
-            </form>
-
-            <% if show_output || !ret.empty? %>
-            <br/>
-            <h3>Output</h3>
-            <b>Status: <span id="status"><%=ret[:status]%></span></b>
-            <br/>
-            <pre id="output" style="max-height: 400px; overflow: scroll"><%=ret[:output]%></pre>
-            <% end %>
-
-        </div>
-
-
-        <% if !deployments.empty? %>
-        <br/>
-        <br/>
-
-        <i>(Shutting down a Dispatcher will terminate all its running scans.)</i>
-        <table>
-            <tr>
-                <th>ID</th>
-                <th>Host</th>
-                <th>SSH Port</th>
-                <th>Dispatcher port</th>
-                <th>Username</th>
-                <th>Password</th>
-                <th>Running?</th>
-                <th>Created at</th>
-                <th>Action</th>
-            </tr>
-        <% deployments.each do |dep| %>
-            <tr>
-
-                <form action="<%=root%>/<%=dep.id%>" method="post">
-                    <td><%=dep.id%></td>
-                    <td><%=dep.host%></td>
-                    <td><%=dep.port%></td>
-                    <td><%=dep.dispatcher_port%></td>
-                    <td><%=dep.user%></td>
-                    <td><input name="password" type="password" /></td>
-                    <td><%=is_alive = dispatchers.alive?( 'https://' + dep.host + ':' + dep.dispatcher_port )%></td>
-                    <td><%=dep.created_at%></td>
-                    <td>
-                        <%= csrf_tag %>
-                        <input type="hidden" name="id" value="<%=dep.id%>">
-
-                        <% if !is_alive%>
-                            <input type="radio" name="action" value="run"> Run <br/>
-                        <%else%>
-                            <input type="radio" name="action" value="shutdown"> Shutdown <br/>
-                        <%end%>
-                        <input type="radio" name="action" value="delete"> Uninstall & Delete <br/>
-
-                        <input type="submit" value="Submit">
-                    </td>
-                </form>
-            </tr>
-        <% end %>
-        </table>
-        <% else %>
-        <p class="notice">There are no deployments at the moment.</p>
-        <% end %>
-
-        <% if show_output%>
-        <script type="text/javascript">
-            //<![CDATA[
-
-            function updateOutput() {
-                if( !document.getElementById( 'output' ) ) return;
-
-                var output_url = "<%=root%>/channel/<%=channel%>";
-                $.getJSON( output_url, function(data) {
-                    if( data.status == 'finished' ) {
-                        window.location.replace( "<%=root%>/channel/<%=channel%>/finalize" );
-                    } if( data.status == 'failed' ) {
-                        document.getElementById( 'status' ).innerHTML = data.status;
-                        obj = document.getElementById( 'output' );
-                        obj.innerHTML = data.output;
-                    } else {
-
-                        document.getElementById( 'status' ).innerHTML = data.status;
-
-                        obj = document.getElementById( 'output' );
-                        obj.innerHTML = data.output;
-                        obj.scrollTop = obj.scrollHeight;
-                    }
-                });
-            }
-
-            $( document ).ready(function() {
-
-                updateOutput( );
-                setInterval( function() {
-                      updateOutput( );
-                }, 1500 );
-
-            })
-             //]]>
-        </script>
-        <%end%>

data/lib/ui/web/dispatcher_manager.rb

@@ -1,165 +0,0 @@
-=begin
-                  Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
-
-  This is free software; you can copy and distribute and modify
-  this program under the term of the GPL v2.0 License
-  (See LICENSE file for details)
-
-=end
-
-require 'datamapper'
-
-module Arachni
-module UI
-module Web
-
-#
-# Provides methods for dispatcher management.
-#
-# @author: Tasos "Zapotek" Laskos
-#                                      <tasos.laskos@gmail.com>
-#                                      <zapotek@segfault.gr>
-# @version: 0.1
-#
-class DispatcherManager
-
-    class Dispatcher
-        include DataMapper::Resource
-
-        property :id,           Serial
-        property :url,          String
-    end
-
-
-    def initialize( opts, settings )
-        @opts     = opts
-        @settings = settings
-
-        DataMapper::setup( :default, "sqlite3://#{@settings.db}/default.db" )
-        DataMapper.finalize
-
-        Dispatcher.auto_upgrade!
-    end
-
-    #
-    # Puts a new dispatcher in the DB.
-    #
-    # @param    [String]    url     URL of the dispatcher
-    #
-    def new( url )
-        Dispatcher.first_or_create( :url => url )
-    end
-
-    #
-    # Provides an easy way to connect to a dispatcher and caches connections
-    # to reduce overhead.
-    #
-    # @param    [String]   url
-    #
-    # @return   [Arachni::RPC::XML::Client::Dispatcher]
-    #
-    def connect( url )
-        @@cache ||= {}
-
-        begin
-            if @@cache[url] && @@cache[url].alive?
-                return @@cache[url]
-            elsif ( tmp = Arachni::RPC::XML::Client::Dispatcher.new( @opts, url ) ) &&
-                  tmp.alive?
-                return @@cache[url] = tmp
-            end
-        rescue Exception => e
-            # ap e
-            # ap e.backtrace
-            return nil
-        end
-    end
-
-    #
-    # Checks wether the dispatcher is alive.
-    #
-    # @param    [String]    url     URL of the dispatcher
-    #
-    def alive?( url, tries = 5 )
-        tries.times {
-            begin
-                return connect( url ).alive?
-            rescue Exception => e
-                # ap e
-                # ap e.backtrace
-            end
-        }
-
-        return false
-    end
-
-    def first_alive
-        all.each {
-            |dispatcher|
-            return dispatcher if alive?( dispatcher.url )
-        }
-
-        return nil
-    end
-
-    #
-    # Provides statistics about running jobs etc using the dispatcher
-    #
-    # @return   [Hash]
-    #
-    def stats
-        stats_h = {}
-        all.each {
-            |dispatcher|
-
-            begin
-                stats_h[dispatcher['url']] = connect( dispatcher['url'] ).stats
-                stats_h[dispatcher['url']]['running_jobs'].each {
-                    |job|
-                    begin
-                        instance = @settings.instances.port_to_url( job['port'], dispatcher['url'] )
-                        job['paused'] = @settings.instances.connect( instance ).framework.paused?
-                    rescue
-                    end
-                }
-            rescue
-            end
-        }
-
-        return stats_h
-    end
-
-    #
-    # Returns all dispatchers stored in the DB.
-    #
-    # @return    [Array]
-    #
-    def all( *args )
-        Dispatcher.all( *args )
-    end
-
-    #
-    # Removed all dispatchers from the DB.
-    #
-    def delete_all
-        all.each {
-            |report|
-            delete( report.id )
-        }
-        all.destroy
-    end
-
-    #
-    # Removed a dispatcher from the DB.
-    #
-    # @param    [Integer]   id
-    #
-    def delete( id )
-        Dispatcher.get( id ).destroy
-    end
-
-end
-end
-end
-end

data/lib/ui/web/instance_manager.rb

@@ -1,87 +0,0 @@
-=begin
-                  Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
-
-  This is free software; you can copy and distribute and modify
-  this program under the term of the GPL v2.0 License
-  (See LICENSE file for details)
-
-=end
-
-require Arachni::Options.instance.dir['lib'] + 'rpc/xml/client/instance'
-require Arachni::Options.instance.dir['lib'] + 'ui/web/utilities'
-
-module Arachni
-module UI
-module Web
-
-#
-# Provides methods for instance management.
-#
-# @author: Tasos "Zapotek" Laskos
-#                                      <tasos.laskos@gmail.com>
-#                                      <zapotek@segfault.gr>
-# @version: 0.1
-#
-class InstanceManager
-
-    include Utilities
-
-    def initialize( opts, settings )
-        @opts     = opts
-        @settings = settings
-    end
-
-    #
-    # Provides an easy way to connect to an instance and caches connections
-    # to reduce overhead.
-    #
-    # @param    [String]   url
-    # @param    [Hash]     session  session of the current user (optional)
-    # @param    [String]   token    authentication token (optional)
-    #
-    # @return   [Arachni::RPC::XML::Client::Instance]
-    #
-    def connect( url, session = nil, token = nil )
-        url = 'https://' + url if !url.include?( 'https' )
-
-        @@connections ||= {}
-
-        begin
-            if @@connections[url] && @@connections[url].alive?
-              return @@connections[url]
-            end
-        rescue
-        end
-
-        begin
-
-            #
-            # Sync up the session authentication tokens with the ones in the
-            # class variables.
-            #
-            # This will allow users to still connect to instances even if they
-            # shutdown the WebUI or removed their cookies.
-            #
-
-            @@tokens ||= {}
-            session['tokens'] ||= {} if session
-            @@tokens[url] = token if token
-
-            session['tokens'].merge!( @@tokens ) if session
-            @@tokens.merge!( session['tokens'] ) if session
-            session['tokens'].merge!( @@tokens ) if session
-
-            tmp_token = session ? session['tokens'][url] : @@tokens[url]
-
-            return @@connections[url] =
-                Arachni::RPC::XML::Client::Instance.new( @opts, url, tmp_token )
-        rescue Exception => e
-            raise "Instance at #{url} has shutdown."
-        end
-    end
-
-end
-end
-end
-end

data/lib/ui/web/output_stream.rb

@@ -1,94 +0,0 @@
-=begin
-                  Arachni
-  Copyright (c) 2010-2011 Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
-
-  This is free software; you can copy and distribute and modify
-  this program under the term of the GPL v2.0 License
-  (See LICENSE file for details)
-
-=end
-
-module Arachni
-module UI
-module Web
-
-    #
-    # Lame hack to make XMLRPC output appear stream-ish to Sinatra
-    # in order to send it back to the browser.
-    #
-    class OutputStream
-
-        #
-        #
-        # @param    [Arachni::RPC::XML::Client::Instance]   instance
-        # @param    [Integer]   lines   number of lines to output between refreshes
-        #
-        def initialize( instance, lines, &block )
-
-            @lines    = lines
-            @instance = instance
-            @buffer  = []
-
-            @icon_whitelist = {}
-            [ 'status', 'ok', 'error', 'info' ].each {
-                |icon|
-                @icon_whitelist[icon] = "<img src='/icons/#{icon}.png' />"
-            }
-
-        end
-
-        #
-        # @param    [Array<Hash>]   output
-        #
-        def <<( output )
-            @buffer << output.reverse
-            @buffer.flatten!
-        end
-
-        def data
-            data = ''
-            each {
-                |line|
-                data << line
-            }
-
-            data
-        end
-
-        #
-        # Sinatra (or Rack, not sure) expects the output to respond to "each" so we oblige.
-        #
-        def each
-
-            self << @instance.service.output
-
-            @last_output ||= ''
-            cnt = 0
-
-            if @buffer.empty?
-                yield @last_output
-            else
-                @last_output = ''
-            end
-
-            while( ( out = @buffer.pop ) && ( ( cnt += 1 ) < @lines ) )
-
-                type = out.keys[0]
-                msg  = out.values[0]
-
-                next if out.values[0].empty?
-
-                icon = @icon_whitelist[type] || ''
-                str = icon + CGI.escapeHTML( " #{out.values[0]}" ) + "<br/>"
-                @last_output << str
-                yield str
-
-            end
-
-            self << @instance.service.output
-        end
-
-    end
-end
-end
-end