arachni 0.4.0.4 → 0.4.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (688) hide show
  1. data/ACKNOWLEDGMENTS.md +2 -2
  2. data/AUTHORS.md +1 -4
  3. data/CHANGELOG.md +102 -3
  4. data/CONTRIBUTORS.md +4 -1
  5. data/EXPLOITATION.md +6 -6
  6. data/Gemfile +3 -0
  7. data/HACKING.md +29 -10
  8. data/LICENSE.md +176 -339
  9. data/NOTICE +12 -0
  10. data/README.md +160 -119
  11. data/Rakefile +83 -45
  12. data/arachni.gemspec +124 -0
  13. data/bin/arachni +14 -8
  14. data/bin/arachni_console +52 -0
  15. data/bin/arachni_rpc +14 -8
  16. data/bin/arachni_rpcd +15 -9
  17. data/bin/arachni_rpcd_monitor +14 -8
  18. data/bin/arachni_script +41 -0
  19. data/bin/arachni_web +18 -19
  20. data/bin/arachni_web_autostart +17 -18
  21. data/external/metasploit/plugins/arachni.rb +7 -9
  22. data/external/metasploit/{LICENSE → plugins/arachni/LICENSE} +0 -0
  23. data/external/metasploit/{modules → plugins/arachni/modules}/exploits/unix/webapp/arachni_exec.rb +1 -1
  24. data/external/metasploit/{modules → plugins/arachni/modules}/exploits/unix/webapp/arachni_path_traversal.rb +2 -2
  25. data/external/metasploit/{modules → plugins/arachni/modules}/exploits/unix/webapp/arachni_php_eval.rb +1 -1
  26. data/external/metasploit/{modules → plugins/arachni/modules}/exploits/unix/webapp/arachni_php_include.rb +1 -1
  27. data/external/metasploit/{modules → plugins/arachni/modules}/exploits/unix/webapp/arachni_sqlmap.rb +2 -2
  28. data/external/scripts/LICENSE.tpl +174 -0
  29. data/external/scripts/README.md +95 -0
  30. data/external/scripts/README.tpl +30 -0
  31. data/external/scripts/build.sh +631 -0
  32. data/external/scripts/build_all.sh +29 -0
  33. data/external/scripts/build_and_package.sh +100 -0
  34. data/external/scripts/cross_build_and_package.sh +20 -0
  35. data/external/scripts/installer.sh.tpl +166 -0
  36. data/external/scripts/lib/readlink_f.sh +40 -0
  37. data/external/scripts/package.sh +134 -0
  38. data/external/scripts/push_nightlies.sh +125 -0
  39. data/extras/placeholder +0 -0
  40. data/gfx/README.md +18 -0
  41. data/gfx/compiled/banner.png +0 -0
  42. data/gfx/compiled/favicon.ico +0 -0
  43. data/gfx/compiled/icon.png +0 -0
  44. data/gfx/compiled/logo.png +0 -0
  45. data/gfx/compiled/spider.png +0 -0
  46. data/gfx/font/Beneath_the_Surface.ttf +0 -0
  47. data/gfx/font/bts_readme.txt +14 -0
  48. data/gfx/source/banner.svg +999 -0
  49. data/gfx/source/icon.svg +627 -0
  50. data/gfx/source/logo.svg +672 -0
  51. data/gfx/source/spider.png +0 -0
  52. data/gfx/source/spider.svg +277 -0
  53. data/lib/arachni.rb +30 -5
  54. data/lib/arachni/audit_store.rb +111 -143
  55. data/lib/arachni/banner.rb +37 -0
  56. data/lib/arachni/bloom_filter.rb +74 -0
  57. data/lib/arachni/cache.rb +21 -0
  58. data/lib/arachni/cache/base.rb +170 -0
  59. data/lib/arachni/cache/least_cost_replacement.rb +89 -0
  60. data/lib/arachni/cache/least_recently_used.rb +73 -0
  61. data/lib/arachni/cache/random_replacement.rb +52 -0
  62. data/lib/arachni/component/manager.rb +391 -0
  63. data/lib/arachni/component/options.rb +38 -0
  64. data/lib/arachni/component/options/address.rb +41 -0
  65. data/lib/arachni/component/options/base.rb +126 -0
  66. data/lib/arachni/component/options/bool.rb +55 -0
  67. data/lib/arachni/component/options/enum.rb +51 -0
  68. data/lib/arachni/component/options/float.rb +45 -0
  69. data/lib/arachni/component/options/int.rb +44 -0
  70. data/lib/arachni/component/options/path.rb +36 -0
  71. data/lib/arachni/component/options/port.rb +37 -0
  72. data/lib/arachni/component/options/string.rb +44 -0
  73. data/lib/arachni/component/options/url.rb +42 -0
  74. data/lib/arachni/crypto/rsa_aes_cbc.rb +14 -8
  75. data/lib/arachni/database.rb +4 -4
  76. data/lib/arachni/database/base.rb +14 -8
  77. data/lib/arachni/database/hash.rb +21 -12
  78. data/lib/arachni/database/queue.rb +15 -9
  79. data/lib/arachni/element/base.rb +147 -0
  80. data/lib/arachni/element/capabilities/auditable.rb +623 -0
  81. data/lib/arachni/element/capabilities/auditable/rdiff.rb +243 -0
  82. data/lib/arachni/element/capabilities/auditable/taint.rb +141 -0
  83. data/lib/arachni/element/capabilities/auditable/timeout.rb +330 -0
  84. data/lib/arachni/element/capabilities/body.rb +19 -0
  85. data/lib/arachni/element/capabilities/mutable.rb +286 -0
  86. data/lib/arachni/element/capabilities/path.rb +19 -0
  87. data/lib/arachni/element/capabilities/refreshable.rb +48 -0
  88. data/lib/arachni/element/capabilities/server.rb +19 -0
  89. data/lib/arachni/element/cookie.rb +1043 -0
  90. data/lib/arachni/element/form.rb +1364 -0
  91. data/lib/arachni/element/header.rb +87 -0
  92. data/lib/arachni/element/link.rb +227 -0
  93. data/lib/arachni/exceptions.rb +12 -34
  94. data/lib/arachni/framework.rb +345 -436
  95. data/lib/arachni/http.rb +445 -409
  96. data/lib/arachni/http/cookie_jar.rb +163 -0
  97. data/lib/arachni/issue.rb +102 -65
  98. data/lib/arachni/mixins/observable.rb +25 -28
  99. data/lib/arachni/mixins/progress_bar.rb +11 -5
  100. data/lib/arachni/mixins/terminal.rb +17 -11
  101. data/lib/arachni/module.rb +4 -4
  102. data/lib/arachni/module/auditor.rb +270 -793
  103. data/lib/arachni/module/base.rb +107 -101
  104. data/lib/arachni/module/element_db.rb +54 -59
  105. data/lib/arachni/module/key_filler.rb +35 -35
  106. data/lib/arachni/module/manager.rb +178 -68
  107. data/lib/arachni/module/output.rb +25 -30
  108. data/lib/arachni/module/trainer.rb +85 -156
  109. data/lib/arachni/module/utilities.rb +29 -138
  110. data/lib/arachni/options.rb +496 -162
  111. data/lib/arachni/page.rb +186 -0
  112. data/lib/arachni/parser.rb +392 -2
  113. data/lib/arachni/plugin.rb +4 -4
  114. data/lib/arachni/plugin/base.rb +113 -44
  115. data/lib/arachni/plugin/manager.rb +120 -54
  116. data/lib/arachni/report.rb +4 -4
  117. data/lib/arachni/report/base.rb +59 -44
  118. data/lib/arachni/report/manager.rb +33 -32
  119. data/lib/arachni/rpc/client.rb +2 -0
  120. data/lib/arachni/rpc/client/base.rb +31 -18
  121. data/lib/arachni/rpc/client/dispatcher.rb +24 -11
  122. data/lib/arachni/rpc/client/instance.rb +24 -11
  123. data/lib/arachni/rpc/server/base.rb +12 -9
  124. data/lib/arachni/rpc/server/dispatcher.rb +161 -164
  125. data/lib/arachni/rpc/server/dispatcher/handler.rb +164 -0
  126. data/lib/arachni/rpc/server/{node.rb → dispatcher/node.rb} +86 -104
  127. data/lib/arachni/rpc/server/distributor.rb +432 -0
  128. data/lib/arachni/rpc/server/framework.rb +266 -758
  129. data/lib/arachni/rpc/server/instance.rb +38 -53
  130. data/lib/arachni/rpc/server/module/manager.rb +17 -20
  131. data/lib/arachni/rpc/server/output.rb +73 -179
  132. data/lib/arachni/rpc/server/plugin/manager.rb +58 -24
  133. data/lib/arachni/ruby.rb +6 -4
  134. data/lib/arachni/ruby/array.rb +30 -9
  135. data/lib/arachni/ruby/enumerable.rb +29 -0
  136. data/lib/arachni/ruby/object.rb +47 -12
  137. data/lib/arachni/ruby/string.rb +69 -24
  138. data/lib/arachni/ruby/webrick.rb +31 -0
  139. data/lib/arachni/session.rb +279 -0
  140. data/lib/arachni/spider.rb +295 -149
  141. data/lib/arachni/typhoeus/hydra.rb +18 -4
  142. data/lib/arachni/typhoeus/request.rb +52 -65
  143. data/lib/arachni/typhoeus/response.rb +62 -22
  144. data/lib/arachni/typhoeus/utils.rb +25 -0
  145. data/lib/arachni/ui/cli/cli.rb +331 -298
  146. data/lib/arachni/ui/cli/output.rb +105 -77
  147. data/lib/arachni/ui/foo/output.rb +116 -0
  148. data/lib/arachni/ui/rpc/dispatcher_monitor.rb +5 -12
  149. data/lib/arachni/ui/rpc/rpc.rb +43 -48
  150. data/lib/arachni/ui/web/addon_manager.rb +18 -13
  151. data/lib/arachni/ui/web/addons/sample.rb +14 -8
  152. data/lib/arachni/ui/web/addons/scheduler.rb +14 -8
  153. data/lib/arachni/ui/web/addons/scheduler/views/index.erb +1 -1
  154. data/lib/arachni/ui/web/addons/scheduler/views/options.erb +0 -3
  155. data/lib/arachni/ui/web/dispatcher_manager.rb +14 -9
  156. data/lib/arachni/ui/web/instance_manager.rb +14 -8
  157. data/lib/arachni/ui/web/log.rb +14 -10
  158. data/lib/arachni/ui/web/output_stream.rb +11 -5
  159. data/lib/arachni/ui/web/report_manager.rb +14 -10
  160. data/lib/arachni/ui/web/scheduler.rb +16 -11
  161. data/lib/arachni/ui/web/server.rb +62 -56
  162. data/lib/arachni/ui/web/server/public/style.css +1 -1
  163. data/lib/arachni/ui/web/server/views/addon.erb +1 -1
  164. data/lib/arachni/ui/web/server/views/dispatchers.erb +3 -3
  165. data/lib/arachni/ui/web/server/views/dispatchers_edit.erb +2 -2
  166. data/lib/arachni/ui/web/server/views/error.erb +1 -1
  167. data/lib/arachni/ui/web/server/views/home.erb +2 -2
  168. data/lib/arachni/ui/web/server/views/instance.erb +6 -6
  169. data/lib/arachni/ui/web/server/views/layout.erb +4 -4
  170. data/lib/arachni/ui/web/server/views/settings.erb +13 -8
  171. data/lib/arachni/ui/web/server/views/welcome.erb +1 -1
  172. data/lib/arachni/ui/web/utilities.rb +24 -35
  173. data/lib/arachni/uri.rb +619 -0
  174. data/lib/arachni/utilities.rb +316 -0
  175. data/lib/arachni/version.rb +12 -6
  176. data/lib/version +1 -0
  177. data/modules/audit/code_injection.rb +64 -81
  178. data/modules/audit/code_injection_timing.rb +57 -75
  179. data/modules/audit/csrf.rb +87 -185
  180. data/modules/audit/ldapi.rb +42 -67
  181. data/modules/audit/os_cmd_injection.rb +53 -71
  182. data/modules/audit/os_cmd_injection/payloads.txt +1 -1
  183. data/modules/audit/os_cmd_injection_timing.rb +54 -75
  184. data/modules/audit/os_cmd_injection_timing/payloads.txt +1 -3
  185. data/modules/audit/path_traversal.rb +84 -110
  186. data/modules/audit/response_splitting.rb +41 -53
  187. data/modules/audit/rfi.rb +68 -76
  188. data/modules/audit/session_fixation.rb +86 -0
  189. data/modules/audit/sqli.rb +51 -77
  190. data/modules/audit/sqli/regexp_ids.txt +5 -19
  191. data/modules/audit/sqli/regexp_ignore.txt +2 -0
  192. data/modules/audit/sqli_blind_rdiff.rb +51 -62
  193. data/modules/audit/sqli_blind_timing.rb +53 -73
  194. data/modules/audit/trainer.rb +21 -58
  195. data/modules/audit/unvalidated_redirect.rb +41 -51
  196. data/modules/audit/xpath.rb +38 -69
  197. data/modules/audit/xpath/errors.txt +2 -3
  198. data/modules/audit/xss.rb +65 -69
  199. data/modules/audit/xss_event.rb +50 -69
  200. data/modules/audit/xss_path.rb +63 -89
  201. data/modules/audit/xss_script_tag.rb +53 -66
  202. data/modules/audit/xss_tag.rb +46 -65
  203. data/modules/audit/xss_uri.rb +22 -24
  204. data/modules/recon/allowed_methods.rb +46 -62
  205. data/modules/recon/backdoors.rb +39 -66
  206. data/modules/recon/backup_files.rb +49 -79
  207. data/modules/recon/common_directories.rb +39 -63
  208. data/modules/recon/common_directories/directories.txt +0 -5
  209. data/modules/recon/common_files.rb +34 -63
  210. data/modules/recon/directory_listing.rb +66 -116
  211. data/modules/recon/grep/captcha.rb +34 -41
  212. data/modules/recon/grep/credit_card.rb +57 -68
  213. data/modules/recon/grep/cvs_svn_users.rb +40 -50
  214. data/modules/recon/grep/emails.rb +34 -41
  215. data/modules/recon/grep/html_objects.rb +30 -33
  216. data/modules/recon/grep/http_only_cookies.rb +57 -0
  217. data/modules/recon/grep/insecure_cookies.rb +55 -0
  218. data/modules/recon/grep/mixed_resource.rb +93 -0
  219. data/modules/recon/grep/private_ip.rb +34 -32
  220. data/modules/recon/grep/ssn.rb +33 -31
  221. data/modules/recon/grep/unencrypted_password_forms.rb +84 -0
  222. data/modules/recon/htaccess_limit.rb +38 -54
  223. data/modules/recon/http_put.rb +48 -62
  224. data/modules/recon/interesting_responses.rb +77 -79
  225. data/modules/recon/webdav.rb +53 -79
  226. data/modules/recon/xst.rb +44 -63
  227. data/modules/test2.rb +46 -0
  228. data/path_extractors/anchors.rb +17 -15
  229. data/path_extractors/forms.rb +17 -15
  230. data/path_extractors/frames.rb +17 -18
  231. data/path_extractors/generic.rb +52 -55
  232. data/path_extractors/links.rb +16 -14
  233. data/path_extractors/meta_refresh.rb +33 -18
  234. data/path_extractors/scripts.rb +17 -15
  235. data/plugins/autologin.rb +60 -85
  236. data/plugins/beep_notify.rb +25 -27
  237. data/plugins/cookie_collector.rb +28 -45
  238. data/plugins/defaults/autothrottle.rb +43 -51
  239. data/plugins/defaults/content_types.rb +63 -52
  240. data/plugins/defaults/healthmap.rb +45 -62
  241. data/plugins/defaults/{metamodules → meta}/remedies/discovery.rb +34 -69
  242. data/plugins/defaults/meta/remedies/manual_verification.rb +61 -0
  243. data/plugins/defaults/meta/remedies/timing_attacks.rb +108 -0
  244. data/plugins/defaults/meta/uniformity.rb +81 -0
  245. data/plugins/defaults/profiler.rb +68 -115
  246. data/plugins/defaults/resolver.rb +33 -28
  247. data/plugins/email_notify.rb +60 -62
  248. data/plugins/form_dicattack.rb +67 -121
  249. data/plugins/http_dicattack.rb +51 -65
  250. data/plugins/libnotify.rb +37 -41
  251. data/plugins/proxy.rb +407 -152
  252. data/plugins/proxy/panel/403_forbidden.html.erb +11 -0
  253. data/plugins/proxy/panel/404_not_found.html.erb +6 -0
  254. data/plugins/proxy/panel/css/bootstrap.min.css +9 -0
  255. data/plugins/proxy/panel/css/panel.css +30 -0
  256. data/plugins/proxy/panel/help.html.erb +66 -0
  257. data/plugins/proxy/panel/img/glyphicons-halflings-white.png +0 -0
  258. data/plugins/proxy/panel/img/glyphicons-halflings.png +0 -0
  259. data/plugins/proxy/panel/img/record.png +0 -0
  260. data/plugins/proxy/panel/inspect.html.erb +7 -0
  261. data/plugins/proxy/panel/js/bootstrap.min.js +6 -0
  262. data/plugins/proxy/panel/js/jquery.min.js +2 -0
  263. data/plugins/proxy/panel/js/panel.js +39 -0
  264. data/plugins/proxy/panel/layout.html.erb +25 -0
  265. data/plugins/proxy/panel/page_accordion.html.erb +67 -0
  266. data/plugins/proxy/panel/page_twin_accordion.html.erb +18 -0
  267. data/plugins/proxy/panel/panel.html.erb +63 -0
  268. data/plugins/proxy/panel/shutdown_message.html.erb +7 -0
  269. data/plugins/proxy/panel/verify_login_check.html.erb +31 -0
  270. data/plugins/proxy/panel/verify_login_final.html.erb +26 -0
  271. data/plugins/proxy/panel/verify_login_sequence.html.erb +45 -0
  272. data/plugins/proxy/server.rb +175 -47
  273. data/plugins/proxy/ssl-interceptor-cert.pem +34 -0
  274. data/plugins/proxy/ssl-interceptor-pkey.pem +51 -0
  275. data/plugins/rescan.rb +27 -28
  276. data/plugins/script.rb +53 -0
  277. data/plugins/vector_feed.rb +226 -0
  278. data/plugins/waf_detector.rb +70 -73
  279. data/reports/afr.rb +23 -24
  280. data/reports/ap.rb +25 -36
  281. data/reports/html.rb +109 -163
  282. data/reports/html/default.erb +13 -12
  283. data/reports/html/default/configuration.erb +21 -21
  284. data/reports/html/default/css/main.css +350 -350
  285. data/reports/html/default/issues.erb +1 -1
  286. data/reports/html/default/js/charts.js +2 -2
  287. data/reports/html/default/js/helpers.js +0 -42
  288. data/reports/html/default/js/init.js +0 -1
  289. data/reports/html/default/sitemap.erb +2 -2
  290. data/reports/html/default/summary.erb +4 -4
  291. data/reports/html/default/summary_issue.erb +1 -1
  292. data/reports/json.rb +26 -28
  293. data/reports/marshal.rb +23 -25
  294. data/reports/metareport.rb +65 -98
  295. data/reports/plugin_formatters/html/autologin.rb +34 -41
  296. data/reports/plugin_formatters/html/content_types.rb +46 -52
  297. data/reports/plugin_formatters/html/cookie_collector.rb +41 -47
  298. data/reports/plugin_formatters/html/discovery.rb +36 -41
  299. data/reports/plugin_formatters/html/form_dicattack.rb +28 -34
  300. data/reports/plugin_formatters/html/healthmap.rb +48 -55
  301. data/reports/plugin_formatters/html/http_dicattack.rb +28 -34
  302. data/reports/plugin_formatters/html/profiler.rb +26 -30
  303. data/reports/plugin_formatters/html/profiler/template.erb +7 -7
  304. data/reports/plugin_formatters/html/resolver.rb +44 -52
  305. data/reports/plugin_formatters/html/timing_attacks.rb +42 -44
  306. data/reports/plugin_formatters/html/uniformity.rb +37 -42
  307. data/reports/plugin_formatters/html/waf_detector.rb +26 -34
  308. data/reports/plugin_formatters/stdout/autologin.rb +28 -40
  309. data/reports/plugin_formatters/stdout/content_types.rb +36 -53
  310. data/reports/plugin_formatters/stdout/cookie_collector.rb +28 -41
  311. data/reports/plugin_formatters/stdout/discovery.rb +27 -37
  312. data/reports/plugin_formatters/stdout/form_dicattack.rb +22 -35
  313. data/reports/plugin_formatters/stdout/healthmap.rb +40 -57
  314. data/reports/plugin_formatters/stdout/http_dicattack.rb +22 -36
  315. data/reports/plugin_formatters/stdout/profiler.rb +55 -74
  316. data/reports/plugin_formatters/stdout/resolver.rb +18 -34
  317. data/reports/plugin_formatters/stdout/timing_attacks.rb +27 -39
  318. data/reports/plugin_formatters/stdout/uniformity.rb +32 -44
  319. data/reports/plugin_formatters/stdout/waf_detector.rb +20 -32
  320. data/reports/plugin_formatters/xml/autologin.rb +27 -49
  321. data/reports/plugin_formatters/xml/content_types.rb +41 -66
  322. data/reports/plugin_formatters/xml/cookie_collector.rb +29 -49
  323. data/reports/plugin_formatters/xml/discovery.rb +23 -41
  324. data/reports/plugin_formatters/xml/form_dicattack.rb +22 -40
  325. data/reports/plugin_formatters/xml/healthmap.rb +44 -63
  326. data/reports/plugin_formatters/xml/http_dicattack.rb +22 -41
  327. data/reports/plugin_formatters/xml/profiler.rb +65 -89
  328. data/reports/plugin_formatters/xml/resolver.rb +21 -41
  329. data/reports/plugin_formatters/xml/timing_attacks.rb +27 -45
  330. data/reports/plugin_formatters/xml/uniformity.rb +36 -55
  331. data/reports/plugin_formatters/xml/waf_detector.rb +23 -42
  332. data/reports/stdout.rb +120 -121
  333. data/reports/txt.rb +29 -45
  334. data/reports/xml.rb +109 -148
  335. data/reports/xml/buffer.rb +66 -79
  336. data/reports/yaml.rb +26 -28
  337. data/rpcd_handlers/placeholder +0 -0
  338. data/spec/arachni/audit_store_spec.rb +223 -0
  339. data/spec/arachni/bloom_filter_spec.rb +76 -0
  340. data/spec/arachni/cache/base_spec.rb +275 -0
  341. data/spec/arachni/cache/least_cost_replacement_spec.rb +58 -0
  342. data/spec/arachni/cache/least_recently_used_spec.rb +91 -0
  343. data/spec/arachni/cache/random_replacement_spec.rb +43 -0
  344. data/spec/arachni/component/manager_spec.rb +448 -0
  345. data/spec/arachni/component/options/address_spec.rb +32 -0
  346. data/spec/arachni/component/options/base_spec.rb +105 -0
  347. data/spec/arachni/component/options/bool_spec.rb +67 -0
  348. data/spec/arachni/component/options/enum_spec.rb +51 -0
  349. data/spec/arachni/component/options/float_spec.rb +42 -0
  350. data/spec/arachni/component/options/int_spec.rb +46 -0
  351. data/spec/arachni/component/options/path_spec.rb +32 -0
  352. data/spec/arachni/component/options/port_spec.rb +38 -0
  353. data/spec/arachni/component/options/string_spec.rb +38 -0
  354. data/spec/arachni/component/options/url_spec.rb +36 -0
  355. data/spec/arachni/crypto/rsa_aes_cbc_spec.rb +31 -0
  356. data/spec/arachni/database/hash_spec.rb +217 -0
  357. data/spec/arachni/database/queue_spec.rb +52 -0
  358. data/spec/arachni/element/base_spec.rb +127 -0
  359. data/spec/arachni/element/body_spec.rb +9 -0
  360. data/spec/arachni/element/capabilities/auditable/rdiff_spec.rb +47 -0
  361. data/spec/arachni/element/capabilities/auditable/taint_spec.rb +110 -0
  362. data/spec/arachni/element/capabilities/auditable/timeout_spec.rb +107 -0
  363. data/spec/arachni/element/capabilities/mutable_spec.rb +261 -0
  364. data/spec/arachni/element/cookie_spec.rb +362 -0
  365. data/spec/arachni/element/form_spec.rb +668 -0
  366. data/spec/arachni/element/header_spec.rb +49 -0
  367. data/spec/arachni/element/link_spec.rb +220 -0
  368. data/spec/arachni/element/path_spec.rb +9 -0
  369. data/spec/arachni/element/server_spec.rb +9 -0
  370. data/spec/arachni/framework_spec.rb +860 -0
  371. data/spec/arachni/http/cookie_jar_spec.rb +267 -0
  372. data/spec/arachni/http_spec.rb +991 -0
  373. data/spec/arachni/issue_spec.rb +307 -0
  374. data/spec/arachni/mixins/observable_spec.rb +59 -0
  375. data/spec/arachni/mixins/progress_bar_spec.rb +41 -0
  376. data/spec/arachni/module/auditor_spec.rb +506 -0
  377. data/spec/arachni/module/element_db_spec.rb +131 -0
  378. data/spec/arachni/module/key_filler.rb +15 -0
  379. data/spec/arachni/module/manager_spec.rb +154 -0
  380. data/spec/arachni/module/trainer_spec.rb +102 -0
  381. data/spec/arachni/module/utilities_spec.rb +30 -0
  382. data/spec/arachni/module/utilities_spec/read_file.txt +3 -0
  383. data/spec/arachni/options_spec.rb +555 -0
  384. data/spec/arachni/page_spec.rb +290 -0
  385. data/spec/arachni/parser_spec.rb +508 -0
  386. data/spec/arachni/plugin/manager_spec.rb +174 -0
  387. data/spec/arachni/report/base_spec.rb +53 -0
  388. data/spec/arachni/report/manager_spec.rb +82 -0
  389. data/spec/arachni/rpc/client/base_spec.rb +157 -0
  390. data/spec/arachni/rpc/client/dispatcher_spec.rb +40 -0
  391. data/spec/arachni/rpc/client/instance_spec.rb +92 -0
  392. data/spec/arachni/rpc/server/base_spec.rb +40 -0
  393. data/spec/arachni/rpc/server/dispatcher/handler.rb +120 -0
  394. data/spec/arachni/rpc/server/dispatcher/node_spec.rb +220 -0
  395. data/spec/arachni/rpc/server/dispatcher_spec.rb +136 -0
  396. data/spec/arachni/rpc/server/distributor_spec.rb +628 -0
  397. data/spec/arachni/rpc/server/framework_hpg_spec.rb +321 -0
  398. data/spec/arachni/rpc/server/framework_simple_spec.rb +453 -0
  399. data/spec/arachni/rpc/server/instance_spec.rb +81 -0
  400. data/spec/arachni/rpc/server/modules/manager_spec.rb +79 -0
  401. data/spec/arachni/rpc/server/options_spec.rb +124 -0
  402. data/spec/arachni/rpc/server/output_spec.rb +238 -0
  403. data/spec/arachni/rpc/server/plugin/manager_spec.rb +86 -0
  404. data/spec/arachni/ruby/array_spec.rb +103 -0
  405. data/spec/arachni/ruby/enumerable_spec.rb +37 -0
  406. data/spec/arachni/ruby/object_spec.rb +38 -0
  407. data/spec/arachni/ruby/string_spec.rb +77 -0
  408. data/spec/arachni/ruby/webrick_spec.rb +15 -0
  409. data/spec/arachni/session_spec.rb +308 -0
  410. data/spec/arachni/spider_spec.rb +383 -0
  411. data/spec/arachni/typhoeus/hydra_spec.rb +14 -0
  412. data/spec/arachni/typhoeus/requrest_spec.rb +58 -0
  413. data/spec/arachni/typhoeus/response_spec.rb +78 -0
  414. data/spec/arachni/uri_spec.rb +462 -0
  415. data/spec/arachni/utilities_spec.rb +297 -0
  416. data/spec/fixtures/auditstore.afr +2959 -0
  417. data/spec/fixtures/cookies.txt +9 -0
  418. data/spec/fixtures/modules/test.rb +58 -0
  419. data/spec/fixtures/modules/test2.rb +46 -0
  420. data/spec/fixtures/modules/test3.rb +46 -0
  421. data/spec/fixtures/passwords.txt +17 -0
  422. data/spec/fixtures/plugins/bad.rb +46 -0
  423. data/spec/fixtures/plugins/defaults/default.rb +45 -0
  424. data/spec/fixtures/plugins/distributable.rb +42 -0
  425. data/spec/fixtures/plugins/loop.rb +32 -0
  426. data/spec/fixtures/plugins/wait.rb +34 -0
  427. data/spec/fixtures/plugins/with_options.rb +31 -0
  428. data/spec/fixtures/reports/base_spec/plugin_formatters/with_formatters/foobar.rb +21 -0
  429. data/spec/fixtures/reports/base_spec/with_formatters.rb +23 -0
  430. data/spec/fixtures/reports/base_spec/with_outfile.rb +24 -0
  431. data/spec/fixtures/reports/base_spec/without_outfile.rb +20 -0
  432. data/spec/fixtures/reports/manager_spec/afr.rb +21 -0
  433. data/spec/fixtures/reports/manager_spec/foo.rb +26 -0
  434. data/spec/fixtures/rescan.afr.tpl +145 -0
  435. data/spec/fixtures/rpcd_handlers/echo.rb +68 -0
  436. data/spec/fixtures/run_mod/body.rb +58 -0
  437. data/spec/fixtures/run_mod/cookies.rb +58 -0
  438. data/spec/fixtures/run_mod/empty.rb +58 -0
  439. data/spec/fixtures/run_mod/flch.rb +63 -0
  440. data/spec/fixtures/run_mod/forms.rb +58 -0
  441. data/spec/fixtures/run_mod/headers.rb +58 -0
  442. data/spec/fixtures/run_mod/links.rb +58 -0
  443. data/spec/fixtures/run_mod/nil.rb +57 -0
  444. data/spec/fixtures/run_mod/path.rb +58 -0
  445. data/spec/fixtures/run_mod/server.rb +58 -0
  446. data/spec/fixtures/script_plugin.rb +1 -0
  447. data/spec/fixtures/taint_module/taint.rb +48 -0
  448. data/spec/fixtures/usernames.txt +13 -0
  449. data/spec/fixtures/wait_module/wait.rb +48 -0
  450. data/spec/helpers/auditor.rb +9 -0
  451. data/spec/helpers/misc.rb +41 -0
  452. data/spec/helpers/processes.rb +112 -0
  453. data/spec/helpers/requires.rb +8 -0
  454. data/spec/helpers/server.rb +54 -0
  455. data/spec/logs/Dispatcher - 2752-13830.log +49 -0
  456. data/spec/logs/Dispatcher - 2766-8238.log +35 -0
  457. data/spec/logs/Dispatcher - 2808-9029.log +31 -0
  458. data/spec/logs/Dispatcher - 2854-8571.log +26 -0
  459. data/spec/logs/Dispatcher - 2888-10411.log +20 -0
  460. data/spec/logs/Dispatcher - 2922-14464.log +13 -0
  461. data/spec/logs/Dispatcher - 2957-15255.log +19 -0
  462. data/spec/logs/Dispatcher - 3216-14203.log +35 -0
  463. data/spec/logs/Dispatcher - 3305-8622.log +43 -0
  464. data/spec/logs/Dispatcher - 3340-15426.log +35 -0
  465. data/spec/logs/Dispatcher - 3399-12586.log +40 -0
  466. data/spec/logs/Dispatcher - 3433-14149.log +26 -0
  467. data/spec/logs/Dispatcher - 3582-6198.log +27 -0
  468. data/spec/logs/Dispatcher - 3616-11169.log +13 -0
  469. data/spec/logs/Dispatcher - 3849-9016.log +7 -0
  470. data/spec/logs/output_spec.log +4 -0
  471. data/spec/logs/placeholder +0 -0
  472. data/spec/modules/audit/code_injection_spec.rb +25 -0
  473. data/spec/modules/audit/code_injection_timing_spec.rb +24 -0
  474. data/spec/modules/audit/csrf_spec.rb +38 -0
  475. data/spec/modules/audit/ldapi_spec.rb +19 -0
  476. data/spec/modules/audit/os_cmd_injection_spec.rb +24 -0
  477. data/spec/modules/audit/os_cmd_injection_timing_spec.rb +24 -0
  478. data/spec/modules/audit/path_traversal_spec.rb +23 -0
  479. data/spec/modules/audit/response_splitting_spec.rb +19 -0
  480. data/spec/modules/audit/rfi_spec.rb +19 -0
  481. data/spec/modules/audit/session_fixation_spec.rb +23 -0
  482. data/spec/modules/audit/sqli_blind_rdiff_spec.rb +19 -0
  483. data/spec/modules/audit/sqli_blind_timing_spec.rb +23 -0
  484. data/spec/modules/audit/sqli_spec.rb +24 -0
  485. data/spec/modules/audit/trainer_spec.rb +25 -0
  486. data/spec/modules/audit/unvalidated_redirect_spec.rb +24 -0
  487. data/spec/modules/audit/xpath_spec.rb +25 -0
  488. data/spec/modules/audit/xss_event_spec.rb +19 -0
  489. data/spec/modules/audit/xss_path_spec.rb +19 -0
  490. data/spec/modules/audit/xss_script_tag_spec.rb +19 -0
  491. data/spec/modules/audit/xss_spec.rb +24 -0
  492. data/spec/modules/audit/xss_tag_spec.rb +19 -0
  493. data/spec/modules/recon/allowed_methods_spec.rb +19 -0
  494. data/spec/modules/recon/backdoors_spec.rb +19 -0
  495. data/spec/modules/recon/backup_files_spec.rb +19 -0
  496. data/spec/modules/recon/common_directories_spec.rb +19 -0
  497. data/spec/modules/recon/common_files_spec.rb +19 -0
  498. data/spec/modules/recon/directory_listing_spec.rb +19 -0
  499. data/spec/modules/recon/grep/captcha_spec.rb +19 -0
  500. data/spec/modules/recon/grep/credit_card_spec.rb +19 -0
  501. data/spec/modules/recon/grep/cvs_svn_users_spec.rb +19 -0
  502. data/spec/modules/recon/grep/emails_spec.rb +19 -0
  503. data/spec/modules/recon/grep/html_objects_spec.rb +19 -0
  504. data/spec/modules/recon/grep/http_only_cookies_spec.rb +19 -0
  505. data/spec/modules/recon/grep/insecure_cookies_spec.rb +19 -0
  506. data/spec/modules/recon/grep/mixed_resource_spec.rb +20 -0
  507. data/spec/modules/recon/grep/private_ip_spec.rb +26 -0
  508. data/spec/modules/recon/grep/ssn_spec.rb +19 -0
  509. data/spec/modules/recon/grep/unencrypted_password_forms_spec.rb +19 -0
  510. data/spec/modules/recon/htaccess_limit_spec.rb +19 -0
  511. data/spec/modules/recon/http_put_spec.rb +19 -0
  512. data/spec/modules/recon/interesting_responses_spec.rb +27 -0
  513. data/spec/modules/recon/webdav_spec.rb +19 -0
  514. data/spec/modules/recon/xst_spec.rb +19 -0
  515. data/spec/path_extractors/anchors_spec.rb +19 -0
  516. data/spec/path_extractors/forms_spec.rb +19 -0
  517. data/spec/path_extractors/frames_spec.rb +20 -0
  518. data/spec/path_extractors/generic_spec.rb +28 -0
  519. data/spec/path_extractors/links_spec.rb +19 -0
  520. data/spec/path_extractors/meta_refresh_spec.rb +24 -0
  521. data/spec/path_extractors/scripts_spec.rb +19 -0
  522. data/spec/pems/cacert.pem +39 -0
  523. data/spec/pems/client/cert.pem +39 -0
  524. data/spec/pems/client/foo-cert.pem +39 -0
  525. data/spec/pems/client/foo-key.pem +51 -0
  526. data/spec/pems/client/key.pem +51 -0
  527. data/spec/pems/server/cert.pem +39 -0
  528. data/spec/pems/server/key.pem +51 -0
  529. data/spec/plugins/autologin_spec.rb +76 -0
  530. data/spec/plugins/autothrottle_spec.rb +45 -0
  531. data/spec/plugins/content_types_spec.rb +93 -0
  532. data/spec/plugins/cookie_collector_spec.rb +32 -0
  533. data/spec/plugins/form_dicattack_spec.rb +60 -0
  534. data/spec/plugins/healthmap_spec.rb +40 -0
  535. data/spec/plugins/http_dicattack_spec.rb +40 -0
  536. data/spec/plugins/meta/remedies/discovery_spec.rb +15 -0
  537. data/spec/plugins/meta/remedies/manual_verification_spec.rb +28 -0
  538. data/spec/plugins/meta/remedies/timing_attacks_spec.rb +30 -0
  539. data/spec/plugins/meta/uniformity_spec.rb +83 -0
  540. data/spec/plugins/profiler_spec.rb +82 -0
  541. data/spec/plugins/rescan_spec.rb +26 -0
  542. data/spec/plugins/resolver_spec.rb +16 -0
  543. data/spec/plugins/script_spec.rb +12 -0
  544. data/spec/plugins/vector_feed_spec.rb +155 -0
  545. data/spec/plugins/waf_detector_spec.rb +41 -0
  546. data/spec/reports/afr_spec.rb +13 -0
  547. data/spec/reports/ap_spec.rb +9 -0
  548. data/spec/reports/html_spec.rb +13 -0
  549. data/spec/reports/json_spec.rb +17 -0
  550. data/spec/reports/marshal_spec.rb +13 -0
  551. data/spec/reports/stdout_spec.rb +9 -0
  552. data/spec/reports/txt_spec.rb +8 -0
  553. data/spec/reports/xml_spec.rb +13 -0
  554. data/spec/reports/yaml_spec.rb +13 -0
  555. data/spec/servers/arachni/element/capabilities/auditable/rdiff.rb +36 -0
  556. data/spec/servers/arachni/element/capabilities/auditable/taint.rb +10 -0
  557. data/spec/servers/arachni/element/capabilities/auditable/timeout.rb +30 -0
  558. data/spec/servers/arachni/element/cookie.rb +37 -0
  559. data/spec/servers/arachni/element/form.rb +93 -0
  560. data/spec/servers/arachni/element/header.rb +22 -0
  561. data/spec/servers/arachni/element/link.rb +26 -0
  562. data/spec/servers/arachni/framework.rb +54 -0
  563. data/spec/servers/arachni/http.rb +140 -0
  564. data/spec/servers/arachni/http_auth.rb +9 -0
  565. data/spec/servers/arachni/module/auditor.rb +135 -0
  566. data/spec/servers/arachni/module/trainer.rb +40 -0
  567. data/spec/servers/arachni/parser.rb +70 -0
  568. data/spec/servers/arachni/rpc/server/framework_hpg.rb +21 -0
  569. data/spec/servers/arachni/rpc/server/framework_simple.rb +30 -0
  570. data/spec/servers/arachni/session.rb +110 -0
  571. data/spec/servers/arachni/spider.rb +148 -0
  572. data/spec/servers/modules/audit/code_injection.rb +140 -0
  573. data/spec/servers/modules/audit/code_injection_timing.rb +110 -0
  574. data/spec/servers/modules/audit/csrf.rb +80 -0
  575. data/spec/servers/modules/audit/ldapi.rb +73 -0
  576. data/spec/servers/modules/audit/os_cmd_injection.rb +140 -0
  577. data/spec/servers/modules/audit/os_cmd_injection_timing.rb +111 -0
  578. data/spec/servers/modules/audit/path_traversal.rb +176 -0
  579. data/spec/servers/modules/audit/response_splitting.rb +114 -0
  580. data/spec/servers/modules/audit/rfi.rb +113 -0
  581. data/spec/servers/modules/audit/session_fixation.rb +87 -0
  582. data/spec/servers/modules/audit/sqli.rb +118 -0
  583. data/spec/servers/modules/audit/sqli/coldfusion +1 -0
  584. data/spec/servers/modules/audit/sqli/db2 +4 -0
  585. data/spec/servers/modules/audit/sqli/emc +2 -0
  586. data/spec/servers/modules/audit/sqli/informix +3 -0
  587. data/spec/servers/modules/audit/sqli/interbase +2 -0
  588. data/spec/servers/modules/audit/sqli/jdbc +0 -0
  589. data/spec/servers/modules/audit/sqli/mssql +26 -0
  590. data/spec/servers/modules/audit/sqli/mysql +13 -0
  591. data/spec/servers/modules/audit/sqli/oracle +6 -0
  592. data/spec/servers/modules/audit/sqli/postgresql +7 -0
  593. data/spec/servers/modules/audit/sqli/sqlite +4 -0
  594. data/spec/servers/modules/audit/sqli/sybase +0 -0
  595. data/spec/servers/modules/audit/sqli_blind_rdiff.rb +74 -0
  596. data/spec/servers/modules/audit/sqli_blind_timing.rb +121 -0
  597. data/spec/servers/modules/audit/trainer_module.rb +160 -0
  598. data/spec/servers/modules/audit/unvalidated_redirect.rb +115 -0
  599. data/spec/servers/modules/audit/xpath.rb +111 -0
  600. data/spec/servers/modules/audit/xpath/dotnet +5 -0
  601. data/spec/servers/modules/audit/xpath/general +13 -0
  602. data/spec/servers/modules/audit/xpath/java +3 -0
  603. data/spec/servers/modules/audit/xpath/libxml2 +2 -0
  604. data/spec/servers/modules/audit/xpath/php +2 -0
  605. data/spec/servers/modules/audit/xss.rb +152 -0
  606. data/spec/servers/modules/audit/xss_event.rb +80 -0
  607. data/spec/servers/modules/audit/xss_path.rb +44 -0
  608. data/spec/servers/modules/audit/xss_script_tag.rb +73 -0
  609. data/spec/servers/modules/audit/xss_tag.rb +139 -0
  610. data/spec/servers/modules/module_server.rb +14 -0
  611. data/spec/servers/modules/recon/allowed_methods.rb +5 -0
  612. data/spec/servers/modules/recon/backdoors.rb +4 -0
  613. data/spec/servers/modules/recon/backup_files.rb +28 -0
  614. data/spec/servers/modules/recon/common_directories.rb +6 -0
  615. data/spec/servers/modules/recon/common_files.rb +6 -0
  616. data/spec/servers/modules/recon/directory_listing.rb +30 -0
  617. data/spec/servers/modules/recon/grep/captcha.rb +27 -0
  618. data/spec/servers/modules/recon/grep/credit_card.rb +28 -0
  619. data/spec/servers/modules/recon/grep/cvs_svn_users.rb +23 -0
  620. data/spec/servers/modules/recon/grep/emails.rb +21 -0
  621. data/spec/servers/modules/recon/grep/html_objects.rb +7 -0
  622. data/spec/servers/modules/recon/grep/http_only_cookies.rb +21 -0
  623. data/spec/servers/modules/recon/grep/insecure_cookies.rb +21 -0
  624. data/spec/servers/modules/recon/grep/mixed_resource.rb +83 -0
  625. data/spec/servers/modules/recon/grep/private_ip.rb +18 -0
  626. data/spec/servers/modules/recon/grep/ssn.rb +5 -0
  627. data/spec/servers/modules/recon/grep/unencrypted_password_forms.rb +33 -0
  628. data/spec/servers/modules/recon/htaccess_limit.rb +8 -0
  629. data/spec/servers/modules/recon/http_put.rb +7 -0
  630. data/spec/servers/modules/recon/interesting_responses.rb +5 -0
  631. data/spec/servers/modules/recon/webdav.rb +25 -0
  632. data/spec/servers/modules/recon/xst.rb +6 -0
  633. data/spec/servers/plugins/autologin.rb +38 -0
  634. data/spec/servers/plugins/autothrottle.rb +8 -0
  635. data/spec/servers/plugins/content_types.rb +17 -0
  636. data/spec/servers/plugins/cookie_collector.rb +20 -0
  637. data/spec/servers/plugins/form_dicattack.rb +28 -0
  638. data/spec/servers/plugins/healthmap.rb +16 -0
  639. data/spec/servers/plugins/http_dicattack.rb +9 -0
  640. data/spec/servers/plugins/http_dicattack_secure.rb +9 -0
  641. data/spec/servers/plugins/http_dicattack_unprotected.rb +5 -0
  642. data/spec/servers/plugins/meta/remedies/discovery.rb +7 -0
  643. data/spec/servers/plugins/meta/remedies/timing_attacks.rb +29 -0
  644. data/spec/servers/plugins/profiler.rb +82 -0
  645. data/spec/servers/plugins/rescan.rb +31 -0
  646. data/spec/servers/plugins/waf_detector.rb +33 -0
  647. data/spec/shared/component.rb +43 -0
  648. data/spec/shared/element/capabilities/auditable.rb +729 -0
  649. data/spec/shared/element/capabilities/refreshable.rb +56 -0
  650. data/spec/shared/module.rb +162 -0
  651. data/spec/shared/path_extractor.rb +47 -0
  652. data/spec/shared/plugin.rb +50 -0
  653. data/spec/shared/reports.rb +47 -0
  654. data/spec/spec_helper.rb +53 -0
  655. metadata +870 -323
  656. data/extras/modules/recon/raft_dirs.rb +0 -108
  657. data/extras/modules/recon/raft_dirs/raft-large-directories.txt +0 -62290
  658. data/extras/modules/recon/raft_files.rb +0 -110
  659. data/extras/modules/recon/raft_files/raft-large-files.txt +0 -37037
  660. data/extras/modules/recon/svn_digger_dirs.rb +0 -108
  661. data/extras/modules/recon/svn_digger_dirs/Licence.txt +0 -674
  662. data/extras/modules/recon/svn_digger_dirs/ReadMe-Arachni.txt +0 -4
  663. data/extras/modules/recon/svn_digger_dirs/ReadMe.txt +0 -6
  664. data/extras/modules/recon/svn_digger_dirs/all-dirs.txt +0 -5960
  665. data/extras/modules/recon/svn_digger_files.rb +0 -114
  666. data/extras/modules/recon/svn_digger_files/Licence.txt +0 -674
  667. data/extras/modules/recon/svn_digger_files/ReadMe-Arachni.txt +0 -4
  668. data/extras/modules/recon/svn_digger_files/ReadMe.txt +0 -6
  669. data/extras/modules/recon/svn_digger_files/all-extensionless.txt +0 -25419
  670. data/extras/modules/recon/svn_digger_files/all.txt +0 -43135
  671. data/lib/arachni/component_manager.rb +0 -293
  672. data/lib/arachni/component_options.rb +0 -425
  673. data/lib/arachni/parser/auditable.rb +0 -606
  674. data/lib/arachni/parser/elements.rb +0 -315
  675. data/lib/arachni/parser/page.rb +0 -168
  676. data/lib/arachni/parser/parser.rb +0 -866
  677. data/lib/arachni/rpc/server/options.rb +0 -95
  678. data/lib/arachni/ui/web/addons/autodeploy.rb +0 -207
  679. data/lib/arachni/ui/web/addons/autodeploy/lib/manager.rb +0 -398
  680. data/lib/arachni/ui/web/addons/autodeploy/views/index.erb +0 -291
  681. data/modules/recon/mixed_resource.rb +0 -100
  682. data/modules/recon/unencrypted_password_forms.rb +0 -107
  683. data/path_extractors/sitemap.rb +0 -31
  684. data/plugins/defaults/metamodules/remedies/manual_verification.rb +0 -65
  685. data/plugins/defaults/metamodules/remedies/timing_attacks.rb +0 -134
  686. data/plugins/defaults/metamodules/uniformity.rb +0 -99
  687. data/reports/metareport/arachni_metareport.rb +0 -174
  688. data/reports/plugin_formatters/stdout/metamodules.rb +0 -82
@@ -0,0 +1,56 @@
1
+ shared_examples_for 'refreshable' do
2
+
3
+ let( :refreshable ) { described_class }
4
+ let( :url ) { @url + 'refreshable' }
5
+
6
+ describe '#refresh' do
7
+ context 'when called without a block' do
8
+ it 'should refresh the inputs of the form in blocking mode' do
9
+ res = Arachni::HTTP.get( url, async: false ).response
10
+ f = refreshable.from_response( res ).select do |f|
11
+ !!f.auditable['nonce']
12
+ end.first
13
+
14
+ nonce = f.auditable['nonce'].dup
15
+
16
+ updates = { 'new' => 'stuff', 'param_name' => 'other stuff' }
17
+ f.update updates
18
+
19
+ refreshed = f.refresh
20
+ refreshed.auditable['nonce'].should_not == nonce
21
+ refreshed.original['nonce'].should == nonce
22
+
23
+ updates['nonce'] = f.refresh.auditable['nonce']
24
+ f.auditable.should == updates
25
+ end
26
+ end
27
+ context 'when called with a block' do
28
+ it 'should refresh the inputs of the form in async mode' do
29
+ res = Arachni::HTTP.get( url, async: false ).response
30
+ f = refreshable.from_response( res ).select do |f|
31
+ !!f.auditable['nonce']
32
+ end.first
33
+
34
+ nonce = f.auditable['nonce'].dup
35
+
36
+ updates = { 'new' => 'stuff', 'param_name' => 'other stuff' }
37
+ f.update updates
38
+
39
+ ran = false
40
+ f.refresh do |form|
41
+ form.auditable['nonce'].should_not == nonce
42
+ form.original['nonce'].should == nonce
43
+
44
+ updates['nonce'] = form.refresh.auditable['nonce']
45
+ form.auditable.should == updates
46
+
47
+ ran = true
48
+ end
49
+
50
+ Arachni::HTTP.run
51
+ ran.should be_true
52
+ end
53
+ end
54
+ end
55
+
56
+ end
@@ -0,0 +1,162 @@
1
+ shared_examples_for "module" do
2
+ include_examples 'component'
3
+
4
+ module Format
5
+ include Arachni::Element::Capabilities::Mutable::Format
6
+ end
7
+
8
+ module Element
9
+ include Arachni::Element
10
+ end
11
+
12
+ module Severity
13
+ include Arachni::Severity
14
+ end
15
+
16
+ before( :all ) do
17
+ options.url = url
18
+ framework.modules.load name
19
+
20
+ # do not dedup, the module tests need to see everything
21
+ current_module.instance_eval do
22
+ define_method( :skip? ) do |elem|
23
+ return false
24
+ end
25
+ end
26
+
27
+ http.headers['User-Agent'] = 'default'
28
+
29
+ @issues = []
30
+ Arachni::Module::Manager.do_not_store
31
+ Arachni::Module::Manager.on_register_results_raw do |issues|
32
+ issues.each { |i| @issues << i }
33
+ end
34
+ end
35
+
36
+ after( :each ) do
37
+ Arachni::Module::ElementDB.reset
38
+ Arachni::Element::Capabilities::Auditable.reset
39
+ Arachni::Module::Manager.results.clear
40
+ Arachni::Module::Manager.do_not_store
41
+
42
+ @issues.clear
43
+
44
+ http.cookie_jar.clear
45
+
46
+ framework.reset_spider
47
+ framework.opts.dont_audit :links, :forms, :cookies, :headers
48
+ end
49
+
50
+ describe '.info' do
51
+ it 'should hold the right targets' do
52
+ if current_module.info[:targets]
53
+ current_module.info[:targets].sort.should == self.class.targets.sort
54
+ else
55
+ current_module.info[:targets].should == self.class.targets
56
+ end
57
+ end
58
+
59
+ it 'should hold the right elements' do
60
+ if current_module.info[:elements]
61
+ current_module.info[:elements].sort.should == self.class.elements.sort
62
+ else
63
+ current_module.info[:elements].should == self.class.elements
64
+ end
65
+
66
+ end
67
+ end
68
+
69
+ def self.easy_test( run_checks = true, &block )
70
+ targets = !self.targets || self.targets.empty? ? %w(Generic) : self.targets
71
+ elements = !self.elements || self.elements.empty? ? %w(Generic) : self.elements
72
+
73
+ context "when the target is" do
74
+ targets.each do |target|
75
+ context target do
76
+ before( :all ) do
77
+ if target.to_s.downcase != 'generic'
78
+ options.url = url + target.downcase
79
+ options.include = options.url
80
+ end
81
+ end
82
+
83
+ elements.each do |type|
84
+ it "should log vulnerable #{type}s" do
85
+ if !issue_count && !issue_count_per_target && !issue_count_per_element
86
+ raise 'No issue count provided via a suitable method.'
87
+ end
88
+
89
+ audit type.to_sym, run_checks
90
+
91
+ if issue_count
92
+ issues.size.should == issue_count
93
+ end
94
+
95
+ if issue_count_per_target
96
+ issues.size.should == issue_count_per_target[target.downcase.to_sym]
97
+ end
98
+
99
+ if issue_count_per_element
100
+ issues.size.should == issue_count_per_element[type]
101
+ end
102
+
103
+ instance_eval &block if block_given?
104
+ end
105
+ end
106
+
107
+ end
108
+ end
109
+ end
110
+ end
111
+
112
+ def issues
113
+ @issues
114
+ end
115
+
116
+ def issue_count
117
+ end
118
+
119
+ def issue_count_per_target
120
+ end
121
+
122
+ def issue_count_per_element
123
+ end
124
+
125
+ def self.targets
126
+ end
127
+
128
+ def self.elements
129
+ end
130
+
131
+ def audit( element_type, logs_issues = true )
132
+ options.audit element_type
133
+ run
134
+
135
+ e = element_type.to_s
136
+ e << 's' if element_type.to_s[-1] != 's'
137
+
138
+ e = element_type.to_s
139
+ e = e[0...-1] if element_type.to_s[-1] == 's'
140
+
141
+ if logs_issues && element_type.to_s.downcase != 'generic'
142
+ # make sure we ONLY got results for the requested element type
143
+ c = Arachni::Element.const_get( e.upcase.to_sym )
144
+ issues.should be_any
145
+ issues.map { |i| i.elem }.uniq.should == [c]
146
+
147
+ if current_module.info[:issue]
148
+ issues.map { |i| i.severity }.uniq.should ==
149
+ [current_module.info[:issue][:severity]]
150
+ end
151
+ end
152
+ end
153
+
154
+ def current_module
155
+ framework.modules.values.first
156
+ end
157
+
158
+ def url
159
+ @url ||= (server_url_for( "#{name}_module" ) rescue server_url_for( name )) + '/'
160
+ end
161
+
162
+ end
@@ -0,0 +1,47 @@
1
+ shared_examples_for "path_extractor" do
2
+ include_examples 'component'
3
+
4
+ before( :each ) do
5
+ extractors.namespace.constants.each do |const|
6
+ next if const == :Base
7
+ extractors.namespace.send :remove_const, const
8
+ end
9
+ extractors.clear
10
+ end
11
+
12
+ def results
13
+ end
14
+
15
+ def text
16
+ end
17
+
18
+ def self.easy_test( &block )
19
+ it "should extract the expected paths" do
20
+ raise 'No paths provided via #results, use \':nil\' for \'nil\' results.' if !results
21
+
22
+ actual_results.sort.should == results.sort
23
+ instance_eval &block if block_given?
24
+ end
25
+ end
26
+
27
+ def doc
28
+ Nokogiri::HTML( text )
29
+ end
30
+
31
+ def actual_results
32
+ results_for( name )
33
+ end
34
+
35
+ def results_for( name )
36
+ paths = extractors[name].new.run( doc ) || []
37
+ paths.delete( 'http://www.w3.org/TR/REC-html40/loose.dtd' )
38
+ paths.compact.flatten
39
+ end
40
+
41
+ module Arachni::Parser::Extractors;end
42
+ def extractors
43
+ @path_extractors ||=
44
+ ::Arachni::Component::Manager.new( options.dir['path_extractors'], Arachni::Parser::Extractors )
45
+ end
46
+
47
+ end
@@ -0,0 +1,50 @@
1
+ shared_examples_for "plugin" do
2
+ include_examples 'component'
3
+
4
+ before( :all ) do
5
+ FileUtils.cp "#{fixtures_path}modules/test2.rb", options.dir['modules']
6
+ framework.modules.load :test2
7
+
8
+ framework.plugins.load name
9
+ end
10
+ before( :each ) do
11
+ framework.reset_spider
12
+ framework.plugins.reset
13
+ end
14
+
15
+ after( :all ) { FileUtils.rm "#{options.dir['modules']}test2.rb" }
16
+
17
+ def results
18
+ end
19
+
20
+ def self.easy_test( &block )
21
+ it "should log the expected results" do
22
+ raise 'No results provided via #results, use \':nil\' for \'nil\' results.' if !results
23
+
24
+ run
25
+ actual_results.should be_eql( expected_results )
26
+
27
+ instance_eval &block if block_given?
28
+ end
29
+ end
30
+
31
+ def actual_results
32
+ results_for( name )
33
+ end
34
+
35
+ def results_for( name )
36
+ (framework.plugins.results[name] || {})[:results]
37
+ end
38
+
39
+ def expected_results
40
+ return nil if results == :nil
41
+
42
+ (results.is_a?( String ) && results.include?( '__URL__' )) ?
43
+ yaml_load( results ) : results
44
+ end
45
+
46
+ def current_plugin
47
+ framework.plugins[name]
48
+ end
49
+
50
+ end
@@ -0,0 +1,47 @@
1
+ shared_examples_for "report" do
2
+ include_examples 'component'
3
+
4
+ before( :all ) { framework.reports.load name }
5
+ #before( :each ) { framework.reports.reset }
6
+
7
+ after( :each ) { File.delete( outfile ) rescue nil }
8
+
9
+ def self.test_with_full_report( &block )
10
+ it 'should be able to handle a full report' do
11
+ run( full_report )
12
+ instance_eval( &block ) if block_given?
13
+ end
14
+ end
15
+
16
+ def self.test_with_empty_report( &block )
17
+ it 'should be able to handle an empty report' do
18
+ run( empty_report )
19
+ instance_eval( &block ) if block_given?
20
+ end
21
+ end
22
+
23
+ def run( auditstore, opts = {} )
24
+ opts['outfile'] ||= outfile
25
+
26
+ #report_name = File.basename( caller.first.split( ':' ).first, '_spec.rb' )
27
+
28
+ framework.reports.run_one( name, auditstore, opts )
29
+ end
30
+
31
+ def full_report
32
+ Arachni::AuditStore.load( spec_path + 'fixtures/auditstore.afr' )
33
+ end
34
+
35
+ def empty_report
36
+ Arachni::AuditStore.new
37
+ end
38
+
39
+ def outfile
40
+ @outfile ||= (0..10).map{ rand( 9 ).to_s }.join
41
+ end
42
+
43
+ def reports
44
+ framework.reports
45
+ end
46
+
47
+ end
@@ -0,0 +1,53 @@
1
+ # This file was generated by the `rspec --init` command. Conventionally, all
2
+ # specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
3
+ # Require this file using `require "spec_helper.rb"` to ensure that it is only
4
+ # loaded once.
5
+ #
6
+ require_relative '../lib/arachni'
7
+ #require_relative '../lib/arachni/ui/cli/output'
8
+ require 'eventmachine'
9
+
10
+ @@root = File.dirname( File.absolute_path( __FILE__ ) ) + '/'
11
+
12
+ Dir.glob( @@root + 'shared/**/*.rb' ).each { |f| require f }
13
+
14
+ require @@root + 'helpers/misc'
15
+ Dir.glob( @@root + 'helpers/**/*.rb' ).each { |f| require f }
16
+
17
+ @@server_pids ||= []
18
+ @@servers ||= {}
19
+ Dir.glob( File.join( @@root + 'servers/**', "*.rb" ) ) do |path|
20
+ name = File.basename( path, '.rb' ).to_sym
21
+ next if name == :base
22
+
23
+ @@servers[name] = {
24
+ port: random_port,
25
+ path: path
26
+ }
27
+ end
28
+
29
+ # See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
30
+ RSpec.configure do |config|
31
+ config.treat_symbols_as_metadata_keys_with_true_values = true
32
+ config.run_all_when_everything_filtered = true
33
+ config.color = true
34
+ config.add_formatter :documentation
35
+
36
+ config.before( :all ) do
37
+ #Arachni::UI::Output.mute
38
+ #Arachni::UI::Output.debug_on
39
+
40
+ kill_processes
41
+ kill_servers
42
+ kill_em
43
+
44
+ Arachni::Framework.reset
45
+ reset_options
46
+ Arachni::HTTP.reset
47
+ end
48
+
49
+ config.after( :suite ) do
50
+ kill_processes
51
+ kill_servers
52
+ end
53
+ end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: arachni
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.4.0.4
4
+ version: 0.4.1
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -9,8 +9,24 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2012-06-08 00:00:00.000000000 Z
12
+ date: 2012-10-03 00:00:00.000000000 Z
13
13
  dependencies:
14
+ - !ruby/object:Gem::Dependency
15
+ name: bundler
16
+ requirement: !ruby/object:Gem::Requirement
17
+ none: false
18
+ requirements:
19
+ - - ! '>='
20
+ - !ruby/object:Gem::Version
21
+ version: 1.0.0
22
+ type: :runtime
23
+ prerelease: false
24
+ version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
26
+ requirements:
27
+ - - ! '>='
28
+ - !ruby/object:Gem::Version
29
+ version: 1.0.0
14
30
  - !ruby/object:Gem::Dependency
15
31
  name: typhoeus
16
32
  requirement: !ruby/object:Gem::Requirement
@@ -27,6 +43,22 @@ dependencies:
27
43
  - - ~>
28
44
  - !ruby/object:Gem::Version
29
45
  version: 0.3.3
46
+ - !ruby/object:Gem::Dependency
47
+ name: pony
48
+ requirement: !ruby/object:Gem::Requirement
49
+ none: false
50
+ requirements:
51
+ - - ! '>='
52
+ - !ruby/object:Gem::Version
53
+ version: '0'
54
+ type: :runtime
55
+ prerelease: false
56
+ version_requirements: !ruby/object:Gem::Requirement
57
+ none: false
58
+ requirements:
59
+ - - ! '>='
60
+ - !ruby/object:Gem::Version
61
+ version: '0'
30
62
  - !ruby/object:Gem::Dependency
31
63
  name: awesome_print
32
64
  requirement: !ruby/object:Gem::Requirement
@@ -59,6 +91,22 @@ dependencies:
59
91
  - - ! '>='
60
92
  - !ruby/object:Gem::Version
61
93
  version: '0'
94
+ - !ruby/object:Gem::Dependency
95
+ name: rb-readline
96
+ requirement: !ruby/object:Gem::Requirement
97
+ none: false
98
+ requirements:
99
+ - - ! '>='
100
+ - !ruby/object:Gem::Version
101
+ version: '0'
102
+ type: :runtime
103
+ prerelease: false
104
+ version_requirements: !ruby/object:Gem::Requirement
105
+ none: false
106
+ requirements:
107
+ - - ! '>='
108
+ - !ruby/object:Gem::Version
109
+ version: '0'
62
110
  - !ruby/object:Gem::Dependency
63
111
  name: nokogiri
64
112
  requirement: !ruby/object:Gem::Requirement
@@ -109,6 +157,22 @@ dependencies:
109
157
  version: 1.4.2
110
158
  - !ruby/object:Gem::Dependency
111
159
  name: sinatra
160
+ requirement: !ruby/object:Gem::Requirement
161
+ none: false
162
+ requirements:
163
+ - - ~>
164
+ - !ruby/object:Gem::Version
165
+ version: 1.3.2
166
+ type: :runtime
167
+ prerelease: false
168
+ version_requirements: !ruby/object:Gem::Requirement
169
+ none: false
170
+ requirements:
171
+ - - ~>
172
+ - !ruby/object:Gem::Version
173
+ version: 1.3.2
174
+ - !ruby/object:Gem::Dependency
175
+ name: sinatra-contrib
112
176
  requirement: !ruby/object:Gem::Requirement
113
177
  none: false
114
178
  requirements:
@@ -172,53 +236,53 @@ dependencies:
172
236
  - !ruby/object:Gem::Version
173
237
  version: 1.2.11
174
238
  - !ruby/object:Gem::Dependency
175
- name: data_objects
239
+ name: datamapper
176
240
  requirement: !ruby/object:Gem::Requirement
177
241
  none: false
178
242
  requirements:
179
- - - '='
243
+ - - ~>
180
244
  - !ruby/object:Gem::Version
181
- version: 0.10.8
245
+ version: 1.2.0
182
246
  type: :runtime
183
247
  prerelease: false
184
248
  version_requirements: !ruby/object:Gem::Requirement
185
249
  none: false
186
250
  requirements:
187
- - - '='
251
+ - - ~>
188
252
  - !ruby/object:Gem::Version
189
- version: 0.10.8
253
+ version: 1.2.0
190
254
  - !ruby/object:Gem::Dependency
191
- name: datamapper
255
+ name: data_objects
192
256
  requirement: !ruby/object:Gem::Requirement
193
257
  none: false
194
258
  requirements:
195
- - - '='
259
+ - - ~>
196
260
  - !ruby/object:Gem::Version
197
- version: 1.1.0
261
+ version: 0.10.8
198
262
  type: :runtime
199
263
  prerelease: false
200
264
  version_requirements: !ruby/object:Gem::Requirement
201
265
  none: false
202
266
  requirements:
203
- - - '='
267
+ - - ~>
204
268
  - !ruby/object:Gem::Version
205
- version: 1.1.0
269
+ version: 0.10.8
206
270
  - !ruby/object:Gem::Dependency
207
271
  name: dm-sqlite-adapter
208
272
  requirement: !ruby/object:Gem::Requirement
209
273
  none: false
210
274
  requirements:
211
- - - '='
275
+ - - ~>
212
276
  - !ruby/object:Gem::Version
213
- version: 1.1.0
277
+ version: 1.2.0
214
278
  type: :runtime
215
279
  prerelease: false
216
280
  version_requirements: !ruby/object:Gem::Requirement
217
281
  none: false
218
282
  requirements:
219
- - - '='
283
+ - - ~>
220
284
  - !ruby/object:Gem::Version
221
- version: 1.1.0
285
+ version: 1.2.0
222
286
  - !ruby/object:Gem::Dependency
223
287
  name: net-ssh
224
288
  requirement: !ruby/object:Gem::Requirement
@@ -288,38 +352,96 @@ dependencies:
288
352
  requirement: !ruby/object:Gem::Requirement
289
353
  none: false
290
354
  requirements:
291
- - - ! '>='
355
+ - - '='
292
356
  - !ruby/object:Gem::Version
293
- version: 0.1.1
357
+ version: 0.1.2
294
358
  type: :runtime
295
359
  prerelease: false
296
360
  version_requirements: !ruby/object:Gem::Requirement
297
361
  none: false
298
362
  requirements:
299
- - - ! '>='
363
+ - - '='
364
+ - !ruby/object:Gem::Version
365
+ version: 0.1.2
366
+ - !ruby/object:Gem::Dependency
367
+ name: rake
368
+ requirement: !ruby/object:Gem::Requirement
369
+ none: false
370
+ requirements:
371
+ - - ~>
372
+ - !ruby/object:Gem::Version
373
+ version: 0.9.2.2
374
+ type: :development
375
+ prerelease: false
376
+ version_requirements: !ruby/object:Gem::Requirement
377
+ none: false
378
+ requirements:
379
+ - - ~>
380
+ - !ruby/object:Gem::Version
381
+ version: 0.9.2.2
382
+ - !ruby/object:Gem::Dependency
383
+ name: rspec
384
+ requirement: !ruby/object:Gem::Requirement
385
+ none: false
386
+ requirements:
387
+ - - ~>
388
+ - !ruby/object:Gem::Version
389
+ version: '2.8'
390
+ type: :development
391
+ prerelease: false
392
+ version_requirements: !ruby/object:Gem::Requirement
393
+ none: false
394
+ requirements:
395
+ - - ~>
300
396
  - !ruby/object:Gem::Version
301
- version: 0.1.1
302
- description: ! " Arachni is a feature-full, modular, high-performance Ruby
303
- framework aimed towards\n helping penetration testers and administrators
304
- evaluate the security of web applications.\n\n Arachni is smart, it trains
305
- itself by learning from the HTTP responses it receives during the audit process\n
306
- \ and is able to perform meta-analysis using a number of factors in order
307
- to correctly assess the trustworthiness\n of results and intelligently identify
308
- false-positives.\n\n Unlike other scanners, it takes into account the dynamic
309
- nature of web applications, can detect changes caused while travelling\n through
310
- the paths of a web application's cyclomatic complexity and is able to adjust itself
311
- accordingly.\n This way attack/input vectors that would otherwise be undetectable
312
- by non-humans are seamlessly handled by Arachni.\n\n Moreover, Arachni yields
313
- great performance due to its asynchronous HTTP model (courtesy of Typhoeus) -- especially\n
314
- \ when combined with a High Performance Grid setup which allows you to combine
315
- the resources of multiple nodes for lightning fast scans.\n Thus, you'll
316
- only be limited by the responsiveness of the server under audit.\n\n Finally,
317
- it is versatile enough to cover a great deal of use cases, ranging from a simple\n
318
- \ command line scanner utility, to a global high performance grid of scanners,
319
- to a Ruby library allowing for scripted audits.\n\n Note: Despite the fact
320
- that Arachni is mostly targeted towards web application security,\n it can
321
- easily be used for general purpose scraping, data-mining, etc with the addition
322
- of custom modules.\n"
397
+ version: '2.8'
398
+ description: ! 'Arachni is a feature-full, modular, high-performance Ruby framework
399
+ aimed towards
400
+
401
+ helping penetration testers and administrators evaluate the security of web applications.
402
+
403
+
404
+ Arachni is smart, it trains itself by learning from the HTTP responses it receives
405
+ during the audit process
406
+
407
+ and is able to perform meta-analysis using a number of factors in order to correctly
408
+ assess the trustworthiness
409
+
410
+ of results and intelligently identify false-positives.
411
+
412
+
413
+ Unlike other scanners, it takes into account the dynamic nature of web applications,
414
+ can detect changes caused while travelling
415
+
416
+ through the paths of a web application''s cyclomatic complexity and is able to adjust
417
+ itself accordingly.
418
+
419
+ This way attack/input vectors that would otherwise be undetectable by non-humans
420
+ are seamlessly handled by Arachni.
421
+
422
+
423
+ Moreover, Arachni yields great performance due to its asynchronous HTTP model (courtesy
424
+ of Typhoeus) -- especially
425
+
426
+ when combined with a High Performance Grid setup which allows you to combine the
427
+ resources of multiple nodes for lightning fast scans.
428
+
429
+ Thus, you''ll only be limited by the responsiveness of the server under audit.
430
+
431
+
432
+ Finally, it is versatile enough to cover a great deal of use cases, ranging from
433
+ a simple
434
+
435
+ command line scanner utility, to a global high performance grid of scanners, to
436
+ a Ruby library allowing for scripted audits.
437
+
438
+
439
+ Note: Despite the fact that Arachni is mostly targeted towards web application security,
440
+
441
+ it can easily be used for general purpose scraping, data-mining, etc with the addition
442
+ of custom modules.
443
+
444
+ '
323
445
  email: tasos.laskos@gmail.com
324
446
  executables:
325
447
  - arachni
@@ -328,6 +450,8 @@ executables:
328
450
  - arachni_rpc
329
451
  - arachni_web
330
452
  - arachni_web_autostart
453
+ - arachni_console
454
+ - arachni_script
331
455
  extensions: []
332
456
  extra_rdoc_files:
333
457
  - README.md
@@ -338,356 +462,779 @@ extra_rdoc_files:
338
462
  - CONTRIBUTORS.md
339
463
  - EXPLOITATION.md
340
464
  - HACKING.md
465
+ - NOTICE
341
466
  files:
342
- - README.md
343
- - ACKNOWLEDGMENTS.md
344
- - Rakefile
345
- - LICENSE.md
346
- - AUTHORS.md
347
- - CHANGELOG.md
348
- - CONTRIBUTORS.md
349
- - EXPLOITATION.md
350
- - HACKING.md
467
+ - conf/README.webui.yaml.txt
468
+ - conf/webui.yaml
351
469
  - data/crypto/public.pem
352
- - lib/arachni/plugin.rb
353
- - lib/arachni/ruby.rb
354
- - lib/arachni/spider.rb
355
- - lib/arachni/version.rb
356
- - lib/arachni/options.rb
470
+ - external/scripts/README.tpl
471
+ - external/scripts/cross_build_and_package.sh
472
+ - external/scripts/installer.sh.tpl
473
+ - external/scripts/push_nightlies.sh
474
+ - external/scripts/LICENSE.tpl
475
+ - external/scripts/build_all.sh
476
+ - external/scripts/package.sh
477
+ - external/scripts/build.sh
478
+ - external/scripts/build_and_package.sh
479
+ - external/scripts/lib/readlink_f.sh
480
+ - external/scripts/README.md
481
+ - external/metasploit/plugins/arachni/LICENSE
482
+ - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_include.rb
483
+ - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_path_traversal.rb
484
+ - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_eval.rb
485
+ - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_sqlmap.rb
486
+ - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_exec.rb
487
+ - external/metasploit/plugins/arachni.rb
488
+ - extras/placeholder
489
+ - gfx/source/spider.png
490
+ - gfx/source/icon.svg
491
+ - gfx/source/banner.svg
492
+ - gfx/source/spider.svg
493
+ - gfx/source/logo.svg
494
+ - gfx/compiled/icon.png
495
+ - gfx/compiled/spider.png
496
+ - gfx/compiled/banner.png
497
+ - gfx/compiled/logo.png
498
+ - gfx/compiled/favicon.ico
499
+ - gfx/font/bts_readme.txt
500
+ - gfx/font/Beneath_the_Surface.ttf
501
+ - gfx/README.md
357
502
  - lib/arachni/report.rb
358
- - lib/arachni/plugin/base.rb
359
- - lib/arachni/plugin/manager.rb
360
- - lib/arachni/exceptions.rb
361
- - lib/arachni/rpc/client/instance.rb
362
- - lib/arachni/rpc/client/base.rb
363
- - lib/arachni/rpc/client/dispatcher.rb
364
- - lib/arachni/rpc/server/instance.rb
365
- - lib/arachni/rpc/server/options.rb
366
- - lib/arachni/rpc/server/base.rb
367
- - lib/arachni/rpc/server/plugin/manager.rb
368
- - lib/arachni/rpc/server/module/manager.rb
369
- - lib/arachni/rpc/server/framework.rb
370
- - lib/arachni/rpc/server/node.rb
371
- - lib/arachni/rpc/server/dispatcher.rb
372
- - lib/arachni/rpc/server/output.rb
503
+ - lib/arachni/database/hash.rb
504
+ - lib/arachni/database/base.rb
505
+ - lib/arachni/database/queue.rb
506
+ - lib/arachni/options.rb
507
+ - lib/arachni/mixins/observable.rb
373
508
  - lib/arachni/mixins/progress_bar.rb
374
509
  - lib/arachni/mixins/terminal.rb
375
- - lib/arachni/mixins/observable.rb
376
- - lib/arachni/crypto/rsa_aes_cbc.rb
377
- - lib/arachni/ruby/string.rb
378
- - lib/arachni/ruby/object.rb
379
- - lib/arachni/ruby/array.rb
380
- - lib/arachni/component_options.rb
381
- - lib/arachni/database.rb
510
+ - lib/arachni/banner.rb
511
+ - lib/arachni/framework.rb
512
+ - lib/arachni/spider.rb
513
+ - lib/arachni/page.rb
514
+ - lib/arachni/parser.rb
382
515
  - lib/arachni/module/element_db.rb
516
+ - lib/arachni/module/key_filler.rb
517
+ - lib/arachni/module/output.rb
383
518
  - lib/arachni/module/utilities.rb
384
519
  - lib/arachni/module/base.rb
385
520
  - lib/arachni/module/trainer.rb
386
521
  - lib/arachni/module/auditor.rb
387
- - lib/arachni/module/key_filler.rb
388
- - lib/arachni/module/output.rb
389
522
  - lib/arachni/module/manager.rb
390
- - lib/arachni/framework.rb
523
+ - lib/arachni/plugin/base.rb
524
+ - lib/arachni/plugin/manager.rb
525
+ - lib/arachni/version.rb
526
+ - lib/arachni/issue.rb
527
+ - lib/arachni/component/options.rb
528
+ - lib/arachni/component/options/int.rb
529
+ - lib/arachni/component/options/url.rb
530
+ - lib/arachni/component/options/port.rb
531
+ - lib/arachni/component/options/path.rb
532
+ - lib/arachni/component/options/bool.rb
533
+ - lib/arachni/component/options/base.rb
534
+ - lib/arachni/component/options/address.rb
535
+ - lib/arachni/component/options/float.rb
536
+ - lib/arachni/component/options/string.rb
537
+ - lib/arachni/component/options/enum.rb
538
+ - lib/arachni/component/manager.rb
539
+ - lib/arachni/element/capabilities/auditable/rdiff.rb
540
+ - lib/arachni/element/capabilities/auditable/taint.rb
541
+ - lib/arachni/element/capabilities/auditable/timeout.rb
542
+ - lib/arachni/element/capabilities/body.rb
543
+ - lib/arachni/element/capabilities/server.rb
544
+ - lib/arachni/element/capabilities/refreshable.rb
545
+ - lib/arachni/element/capabilities/path.rb
546
+ - lib/arachni/element/capabilities/mutable.rb
547
+ - lib/arachni/element/capabilities/auditable.rb
548
+ - lib/arachni/element/cookie.rb
549
+ - lib/arachni/element/link.rb
550
+ - lib/arachni/element/base.rb
551
+ - lib/arachni/element/header.rb
552
+ - lib/arachni/element/form.rb
553
+ - lib/arachni/uri.rb
554
+ - lib/arachni/plugin.rb
555
+ - lib/arachni/cache.rb
556
+ - lib/arachni/ruby.rb
557
+ - lib/arachni/ruby/object.rb
558
+ - lib/arachni/ruby/enumerable.rb
559
+ - lib/arachni/ruby/webrick.rb
560
+ - lib/arachni/ruby/array.rb
561
+ - lib/arachni/ruby/string.rb
562
+ - lib/arachni/bloom_filter.rb
563
+ - lib/arachni/session.rb
564
+ - lib/arachni/utilities.rb
565
+ - lib/arachni/http/cookie_jar.rb
566
+ - lib/arachni/crypto/rsa_aes_cbc.rb
567
+ - lib/arachni/typhoeus/response.rb
391
568
  - lib/arachni/typhoeus/request.rb
569
+ - lib/arachni/typhoeus/utils.rb
392
570
  - lib/arachni/typhoeus/hydra.rb
393
- - lib/arachni/typhoeus/response.rb
394
- - lib/arachni/ui/rpc/dispatcher_monitor.rb
395
- - lib/arachni/ui/rpc/rpc.rb
396
- - lib/arachni/ui/cli/cli.rb
397
- - lib/arachni/ui/cli/output.rb
398
- - lib/arachni/ui/web/scheduler.rb
399
- - lib/arachni/ui/web/utilities.rb
400
- - lib/arachni/ui/web/addons/scheduler.rb
401
- - lib/arachni/ui/web/addons/sample/views/index.erb
402
- - lib/arachni/ui/web/addons/sample.rb
403
- - lib/arachni/ui/web/addons/scheduler/views/options.erb
404
- - lib/arachni/ui/web/addons/scheduler/views/index.erb
405
- - lib/arachni/ui/web/addons/autodeploy.rb
406
- - lib/arachni/ui/web/addons/autodeploy/views/index.erb
407
- - lib/arachni/ui/web/addons/autodeploy/lib/manager.rb
571
+ - lib/arachni/http.rb
572
+ - lib/arachni/nokogiri/xml/node.rb
573
+ - lib/arachni/module.rb
574
+ - lib/arachni/cache/least_recently_used.rb
575
+ - lib/arachni/cache/least_cost_replacement.rb
576
+ - lib/arachni/cache/base.rb
577
+ - lib/arachni/cache/random_replacement.rb
408
578
  - lib/arachni/ui/web/dispatcher_manager.rb
409
- - lib/arachni/ui/web/addon_manager.rb
410
- - lib/arachni/ui/web/output_stream.rb
411
579
  - lib/arachni/ui/web/instance_manager.rb
580
+ - lib/arachni/ui/web/addon_manager.rb
412
581
  - lib/arachni/ui/web/report_manager.rb
413
- - lib/arachni/ui/web/server/public/bodybg.png
414
- - lib/arachni/ui/web/server/public/footer.jpg
415
- - lib/arachni/ui/web/server/public/nav-right.jpg
416
- - lib/arachni/ui/web/server/public/plugins/sample/style.css
417
- - lib/arachni/ui/web/server/public/css/smoothness/jquery-ui-1.8.9.custom.css
418
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_dadada_1x400.png
419
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_454545_256x240.png
420
- - lib/arachni/ui/web/server/public/css/smoothness/images/pbar-ani.gif
421
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png
422
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_2e83ff_256x240.png
423
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_cd0a0a_256x240.png
424
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_95_fef1ec_1x400.png
425
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_222222_256x240.png
426
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_e6e6e6_1x400.png
427
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_888888_256x240.png
428
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png
429
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_highlight-soft_75_cccccc_1x100.png
430
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_55_fbf9ee_1x400.png
431
- - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_flat_0_aaaaaa_40x100.png
432
- - lib/arachni/ui/web/server/public/js/jquery.easy-confirm-dialog.js
433
- - lib/arachni/ui/web/server/public/js/jquery-ui-timepicker.js
582
+ - lib/arachni/ui/web/server.rb
434
583
  - lib/arachni/ui/web/server/public/js/jquery-ui-1.8.9.custom.min.js
584
+ - lib/arachni/ui/web/server/public/js/jquery-ui-timepicker.js
585
+ - lib/arachni/ui/web/server/public/js/jquery.easy-confirm-dialog.js
435
586
  - lib/arachni/ui/web/server/public/js/jquery-1.4.4.min.js
436
- - lib/arachni/ui/web/server/public/nav-selected-left.jpg
437
587
  - lib/arachni/ui/web/server/public/sidebar-top.jpg
438
- - lib/arachni/ui/web/server/public/style.css
439
- - lib/arachni/ui/web/server/public/icons/info.png
440
- - lib/arachni/ui/web/server/public/icons/status.png
441
- - lib/arachni/ui/web/server/public/icons/bad.png
442
- - lib/arachni/ui/web/server/public/icons/error.png
443
- - lib/arachni/ui/web/server/public/icons/ok.png
444
588
  - lib/arachni/ui/web/server/public/reports/placeholder
445
- - lib/arachni/ui/web/server/public/banner.png
446
- - lib/arachni/ui/web/server/public/favicon.ico
589
+ - lib/arachni/ui/web/server/public/nav-left.jpg
447
590
  - lib/arachni/ui/web/server/public/spider.png
448
- - lib/arachni/ui/web/server/public/bodybg-small.png
591
+ - lib/arachni/ui/web/server/public/nav-selected-right.jpg
592
+ - lib/arachni/ui/web/server/public/plugins/sample/style.css
593
+ - lib/arachni/ui/web/server/public/nav-selected-left.jpg
594
+ - lib/arachni/ui/web/server/public/footer.jpg
449
595
  - lib/arachni/ui/web/server/public/sidebar-bottom.jpg
596
+ - lib/arachni/ui/web/server/public/banner.png
597
+ - lib/arachni/ui/web/server/public/icons/bad.png
598
+ - lib/arachni/ui/web/server/public/icons/ok.png
599
+ - lib/arachni/ui/web/server/public/icons/info.png
600
+ - lib/arachni/ui/web/server/public/icons/status.png
601
+ - lib/arachni/ui/web/server/public/icons/error.png
450
602
  - lib/arachni/ui/web/server/public/sidebar-h4.jpg
451
- - lib/arachni/ui/web/server/public/nav-selected-right.jpg
603
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_highlight-soft_75_cccccc_1x100.png
604
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_55_fbf9ee_1x400.png
605
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_2e83ff_256x240.png
606
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_222222_256x240.png
607
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_95_fef1ec_1x400.png
608
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_cd0a0a_256x240.png
609
+ - lib/arachni/ui/web/server/public/css/smoothness/images/pbar-ani.gif
610
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_65_ffffff_1x400.png
611
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_dadada_1x400.png
612
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_454545_256x240.png
613
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-icons_888888_256x240.png
614
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_glass_75_e6e6e6_1x400.png
615
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_flat_75_ffffff_40x100.png
616
+ - lib/arachni/ui/web/server/public/css/smoothness/images/ui-bg_flat_0_aaaaaa_40x100.png
617
+ - lib/arachni/ui/web/server/public/css/smoothness/jquery-ui-1.8.9.custom.css
618
+ - lib/arachni/ui/web/server/public/nav-right.jpg
619
+ - lib/arachni/ui/web/server/public/style.css
452
620
  - lib/arachni/ui/web/server/public/logo.png
453
- - lib/arachni/ui/web/server/public/nav-left.jpg
454
- - lib/arachni/ui/web/server/db/placeholder
621
+ - lib/arachni/ui/web/server/public/bodybg.png
622
+ - lib/arachni/ui/web/server/public/bodybg-small.png
623
+ - lib/arachni/ui/web/server/public/favicon.ico
455
624
  - lib/arachni/ui/web/server/tmp/placeholder
456
- - lib/arachni/ui/web/server/views/settings.erb
457
- - lib/arachni/ui/web/server/views/options.erb
458
- - lib/arachni/ui/web/server/views/layout.erb
459
- - lib/arachni/ui/web/server/views/plugins.erb
460
- - lib/arachni/ui/web/server/views/module.erb
461
- - lib/arachni/ui/web/server/views/log.erb
462
- - lib/arachni/ui/web/server/views/error.erb
463
- - lib/arachni/ui/web/server/views/welcome.erb
625
+ - lib/arachni/ui/web/server/db/placeholder
464
626
  - lib/arachni/ui/web/server/views/js/home.erb
465
627
  - lib/arachni/ui/web/server/views/dispatchers.erb
466
- - lib/arachni/ui/web/server/views/home.erb
467
- - lib/arachni/ui/web/server/views/addons.erb
468
- - lib/arachni/ui/web/server/views/reports.erb
469
- - lib/arachni/ui/web/server/views/dispatchers_edit.erb
470
628
  - lib/arachni/ui/web/server/views/instance.erb
629
+ - lib/arachni/ui/web/server/views/flash.erb
630
+ - lib/arachni/ui/web/server/views/error.erb
631
+ - lib/arachni/ui/web/server/views/welcome.erb
471
632
  - lib/arachni/ui/web/server/views/output_results.erb
472
- - lib/arachni/ui/web/server/views/report_formats.erb
633
+ - lib/arachni/ui/web/server/views/reports.erb
473
634
  - lib/arachni/ui/web/server/views/modules.erb
474
635
  - lib/arachni/ui/web/server/views/dispatcher_error.erb
475
- - lib/arachni/ui/web/server/views/flash.erb
636
+ - lib/arachni/ui/web/server/views/addons.erb
637
+ - lib/arachni/ui/web/server/views/plugins.erb
638
+ - lib/arachni/ui/web/server/views/log.erb
639
+ - lib/arachni/ui/web/server/views/layout.erb
640
+ - lib/arachni/ui/web/server/views/home.erb
641
+ - lib/arachni/ui/web/server/views/module.erb
642
+ - lib/arachni/ui/web/server/views/options.erb
643
+ - lib/arachni/ui/web/server/views/settings.erb
476
644
  - lib/arachni/ui/web/server/views/addon.erb
645
+ - lib/arachni/ui/web/server/views/dispatchers_edit.erb
646
+ - lib/arachni/ui/web/server/views/report_formats.erb
647
+ - lib/arachni/ui/web/addons/sample/views/index.erb
648
+ - lib/arachni/ui/web/addons/scheduler/views/options.erb
649
+ - lib/arachni/ui/web/addons/scheduler/views/index.erb
650
+ - lib/arachni/ui/web/addons/sample.rb
651
+ - lib/arachni/ui/web/addons/scheduler.rb
652
+ - lib/arachni/ui/web/utilities.rb
653
+ - lib/arachni/ui/web/output_stream.rb
654
+ - lib/arachni/ui/web/scheduler.rb
477
655
  - lib/arachni/ui/web/log.rb
478
- - lib/arachni/ui/web/server.rb
656
+ - lib/arachni/ui/foo/output.rb
657
+ - lib/arachni/ui/cli/output.rb
658
+ - lib/arachni/ui/cli/cli.rb
659
+ - lib/arachni/ui/rpc/dispatcher_monitor.rb
660
+ - lib/arachni/ui/rpc/rpc.rb
661
+ - lib/arachni/exceptions.rb
479
662
  - lib/arachni/audit_store.rb
480
- - lib/arachni/parser.rb
481
- - lib/arachni/nokogiri/xml/node.rb
482
- - lib/arachni/component_manager.rb
483
- - lib/arachni/database/queue.rb
484
- - lib/arachni/database/base.rb
485
- - lib/arachni/database/hash.rb
486
- - lib/arachni/parser/auditable.rb
487
- - lib/arachni/parser/elements.rb
488
- - lib/arachni/parser/parser.rb
489
- - lib/arachni/parser/page.rb
663
+ - lib/arachni/rpc/client.rb
664
+ - lib/arachni/rpc/server/framework.rb
665
+ - lib/arachni/rpc/server/distributor.rb
666
+ - lib/arachni/rpc/server/module/manager.rb
667
+ - lib/arachni/rpc/server/plugin/manager.rb
668
+ - lib/arachni/rpc/server/instance.rb
669
+ - lib/arachni/rpc/server/dispatcher/handler.rb
670
+ - lib/arachni/rpc/server/dispatcher/node.rb
671
+ - lib/arachni/rpc/server/output.rb
672
+ - lib/arachni/rpc/server/base.rb
673
+ - lib/arachni/rpc/server/dispatcher.rb
674
+ - lib/arachni/rpc/client/instance.rb
675
+ - lib/arachni/rpc/client/base.rb
676
+ - lib/arachni/rpc/client/dispatcher.rb
677
+ - lib/arachni/database.rb
490
678
  - lib/arachni/report/base.rb
491
679
  - lib/arachni/report/manager.rb
492
- - lib/arachni/http.rb
493
- - lib/arachni/module.rb
494
- - lib/arachni/issue.rb
495
680
  - lib/arachni.rb
496
- - conf/README.webui.yaml.txt
497
- - conf/webui.yaml
498
- - external/metasploit/plugins/arachni.rb
499
- - external/metasploit/modules/exploits/unix/webapp/arachni_exec.rb
500
- - external/metasploit/modules/exploits/unix/webapp/arachni_php_eval.rb
501
- - external/metasploit/modules/exploits/unix/webapp/arachni_sqlmap.rb
502
- - external/metasploit/modules/exploits/unix/webapp/arachni_path_traversal.rb
503
- - external/metasploit/modules/exploits/unix/webapp/arachni_php_include.rb
504
- - external/metasploit/LICENSE
681
+ - lib/version
505
682
  - logs/placeholder
506
- - extras/modules/recon/svn_digger_files.rb
507
- - extras/modules/recon/svn_digger_files/Licence.txt
508
- - extras/modules/recon/svn_digger_files/all.txt
509
- - extras/modules/recon/svn_digger_files/all-extensionless.txt
510
- - extras/modules/recon/svn_digger_files/ReadMe.txt
511
- - extras/modules/recon/svn_digger_files/ReadMe-Arachni.txt
512
- - extras/modules/recon/raft_files/raft-large-files.txt
513
- - extras/modules/recon/svn_digger_dirs.rb
514
- - extras/modules/recon/raft_dirs/raft-large-directories.txt
515
- - extras/modules/recon/raft_files.rb
516
- - extras/modules/recon/svn_digger_dirs/Licence.txt
517
- - extras/modules/recon/svn_digger_dirs/all-dirs.txt
518
- - extras/modules/recon/svn_digger_dirs/ReadMe.txt
519
- - extras/modules/recon/svn_digger_dirs/ReadMe-Arachni.txt
520
- - extras/modules/recon/raft_dirs.rb
521
- - modules/recon/http_put.rb
522
- - modules/recon/backdoors/filenames.txt
523
- - modules/recon/interesting_responses.rb
524
- - modules/recon/directory_listing.rb
525
- - modules/recon/unencrypted_password_forms.rb
526
- - modules/recon/xst.rb
527
- - modules/recon/backdoors.rb
528
- - modules/recon/common_directories/directories.txt
529
- - modules/recon/backup_files.rb
530
- - modules/recon/common_directories.rb
531
- - modules/recon/grep/cvs_svn_users.rb
532
- - modules/recon/grep/html_objects.rb
533
- - modules/recon/grep/emails.rb
534
- - modules/recon/grep/credit_card.rb
535
- - modules/recon/grep/private_ip.rb
536
- - modules/recon/grep/captcha.rb
537
- - modules/recon/grep/ssn.rb
538
- - modules/recon/allowed_methods.rb
539
- - modules/recon/webdav.rb
540
- - modules/recon/htaccess_limit.rb
541
- - modules/recon/common_files/filenames.txt
542
- - modules/recon/mixed_resource.rb
543
- - modules/recon/backup_files/extensions.txt
544
- - modules/recon/common_files.rb
545
- - modules/audit/xss_tag.rb
546
- - modules/audit/rfi.rb
547
- - modules/audit/os_cmd_injection/payloads.txt
548
- - modules/audit/xss.rb
549
- - modules/audit/sqli_blind_timing.rb
683
+ - modules/test2.rb
684
+ - modules/audit/code_injection.rb
685
+ - modules/audit/path_traversal.rb
686
+ - modules/audit/sqli_blind_rdiff.rb
687
+ - modules/audit/xss_uri.rb
688
+ - modules/audit/sqli/regexp_ids.txt
689
+ - modules/audit/sqli/regexp_ignore.txt
550
690
  - modules/audit/code_injection_timing/payloads.txt
551
- - modules/audit/trainer.rb
691
+ - modules/audit/ldapi.rb
692
+ - modules/audit/rfi.rb
693
+ - modules/audit/session_fixation.rb
694
+ - modules/audit/response_splitting.rb
695
+ - modules/audit/sqli_blind_rdiff/payloads.txt
696
+ - modules/audit/ldapi/errors.txt
552
697
  - modules/audit/os_cmd_injection.rb
698
+ - modules/audit/os_cmd_injection/payloads.txt
553
699
  - modules/audit/sqli_blind_timing/payloads.txt
554
- - modules/audit/sqli.rb
555
- - modules/audit/code_injection.rb
556
- - modules/audit/path_traversal.rb
700
+ - modules/audit/os_cmd_injection_timing.rb
701
+ - modules/audit/sqli_blind_timing.rb
557
702
  - modules/audit/xpath.rb
558
- - modules/audit/unvalidated_redirect.rb
559
- - modules/audit/sqli_blind_rdiff/payloads.txt
560
- - modules/audit/xss_uri.rb
561
703
  - modules/audit/csrf.rb
562
- - modules/audit/xss_event.rb
563
- - modules/audit/response_splitting.rb
564
- - modules/audit/xss_script_tag.rb
565
- - modules/audit/xss_path.rb
566
- - modules/audit/sqli_blind_rdiff.rb
567
704
  - modules/audit/os_cmd_injection_timing/payloads.txt
568
705
  - modules/audit/code_injection_timing.rb
569
- - modules/audit/os_cmd_injection_timing.rb
706
+ - modules/audit/xss.rb
707
+ - modules/audit/trainer.rb
708
+ - modules/audit/xss_tag.rb
570
709
  - modules/audit/xpath/errors.txt
571
- - modules/audit/ldapi/errors.txt
572
- - modules/audit/ldapi.rb
573
- - modules/audit/sqli/regexp_ids.txt
574
- - path_extractors/generic.rb
575
- - path_extractors/anchors.rb
710
+ - modules/audit/xss_script_tag.rb
711
+ - modules/audit/sqli.rb
712
+ - modules/audit/unvalidated_redirect.rb
713
+ - modules/audit/xss_path.rb
714
+ - modules/audit/xss_event.rb
715
+ - modules/recon/common_files/filenames.txt
716
+ - modules/recon/xst.rb
717
+ - modules/recon/backup_files/extensions.txt
718
+ - modules/recon/htaccess_limit.rb
719
+ - modules/recon/http_put.rb
720
+ - modules/recon/webdav.rb
721
+ - modules/recon/allowed_methods.rb
722
+ - modules/recon/common_directories.rb
723
+ - modules/recon/interesting_responses.rb
724
+ - modules/recon/backdoors.rb
725
+ - modules/recon/common_directories/directories.txt
726
+ - modules/recon/backup_files.rb
727
+ - modules/recon/directory_listing.rb
728
+ - modules/recon/common_files.rb
729
+ - modules/recon/backdoors/filenames.txt
730
+ - modules/recon/grep/private_ip.rb
731
+ - modules/recon/grep/insecure_cookies.rb
732
+ - modules/recon/grep/unencrypted_password_forms.rb
733
+ - modules/recon/grep/ssn.rb
734
+ - modules/recon/grep/credit_card.rb
735
+ - modules/recon/grep/html_objects.rb
736
+ - modules/recon/grep/mixed_resource.rb
737
+ - modules/recon/grep/emails.rb
738
+ - modules/recon/grep/http_only_cookies.rb
739
+ - modules/recon/grep/captcha.rb
740
+ - modules/recon/grep/cvs_svn_users.rb
576
741
  - path_extractors/meta_refresh.rb
577
- - path_extractors/frames.rb
578
- - path_extractors/sitemap.rb
579
- - path_extractors/links.rb
580
742
  - path_extractors/forms.rb
743
+ - path_extractors/anchors.rb
744
+ - path_extractors/frames.rb
581
745
  - path_extractors/scripts.rb
582
- - plugins/form_dicattack.rb
583
- - plugins/beep_notify.rb
746
+ - path_extractors/generic.rb
747
+ - path_extractors/links.rb
748
+ - plugins/defaults/resolver.rb
749
+ - plugins/defaults/healthmap.rb
750
+ - plugins/defaults/profiler.rb
751
+ - plugins/defaults/meta/uniformity.rb
752
+ - plugins/defaults/meta/remedies/manual_verification.rb
753
+ - plugins/defaults/meta/remedies/timing_attacks.rb
754
+ - plugins/defaults/meta/remedies/discovery.rb
755
+ - plugins/defaults/autothrottle.rb
756
+ - plugins/defaults/content_types.rb
584
757
  - plugins/libnotify.rb
585
758
  - plugins/cookie_collector.rb
586
- - plugins/proxy/server.rb
587
- - plugins/waf_detector.rb
588
- - plugins/autologin.rb
589
- - plugins/http_dicattack.rb
590
- - plugins/rescan.rb
591
759
  - plugins/proxy.rb
760
+ - plugins/beep_notify.rb
761
+ - plugins/rescan.rb
762
+ - plugins/http_dicattack.rb
763
+ - plugins/proxy/server.rb
764
+ - plugins/proxy/ssl-interceptor-pkey.pem
765
+ - plugins/proxy/panel/verify_login_final.html.erb
766
+ - plugins/proxy/panel/page_twin_accordion.html.erb
767
+ - plugins/proxy/panel/js/bootstrap.min.js
768
+ - plugins/proxy/panel/js/jquery.min.js
769
+ - plugins/proxy/panel/js/panel.js
770
+ - plugins/proxy/panel/verify_login_sequence.html.erb
771
+ - plugins/proxy/panel/img/glyphicons-halflings.png
772
+ - plugins/proxy/panel/img/record.png
773
+ - plugins/proxy/panel/img/glyphicons-halflings-white.png
774
+ - plugins/proxy/panel/verify_login_check.html.erb
775
+ - plugins/proxy/panel/inspect.html.erb
776
+ - plugins/proxy/panel/help.html.erb
777
+ - plugins/proxy/panel/page_accordion.html.erb
778
+ - plugins/proxy/panel/layout.html.erb
779
+ - plugins/proxy/panel/css/panel.css
780
+ - plugins/proxy/panel/css/bootstrap.min.css
781
+ - plugins/proxy/panel/panel.html.erb
782
+ - plugins/proxy/panel/403_forbidden.html.erb
783
+ - plugins/proxy/panel/404_not_found.html.erb
784
+ - plugins/proxy/panel/shutdown_message.html.erb
785
+ - plugins/proxy/ssl-interceptor-cert.pem
786
+ - plugins/vector_feed.rb
787
+ - plugins/script.rb
592
788
  - plugins/email_notify.rb
593
- - plugins/defaults/autothrottle.rb
594
- - plugins/defaults/metamodules/remedies/discovery.rb
595
- - plugins/defaults/metamodules/remedies/manual_verification.rb
596
- - plugins/defaults/metamodules/remedies/timing_attacks.rb
597
- - plugins/defaults/metamodules/uniformity.rb
598
- - plugins/defaults/healthmap.rb
599
- - plugins/defaults/profiler.rb
600
- - plugins/defaults/resolver.rb
601
- - plugins/defaults/content_types.rb
789
+ - plugins/autologin.rb
790
+ - plugins/waf_detector.rb
791
+ - plugins/form_dicattack.rb
602
792
  - profiles/full.afp
603
- - reports/metareport/arachni_metareport.rb
604
- - reports/html/default/search.erb
605
- - reports/html/default/plugins.erb
606
- - reports/html/default/summary.erb
607
- - reports/html/default/sitemap.erb
608
- - reports/html/default/issues.erb
609
- - reports/html/default/css/main.css
610
- - reports/html/default/css/jquery.jqplot.min.css
611
- - reports/html/default/css/jquery-ui.css
612
- - reports/html/default/js/init.js
613
- - reports/html/default/js/lib/jqplot.barRenderer.min.js
614
- - reports/html/default/js/lib/jqplot.cursor.min.js
615
- - reports/html/default/js/lib/jquery-ui.min.js
616
- - reports/html/default/js/lib/jqplot.categoryAxisRenderer.min.js
617
- - reports/html/default/js/lib/jqplot.pointLabels.min.js
618
- - reports/html/default/js/lib/jqplot.pieRenderer.min.js
619
- - reports/html/default/js/lib/jquery.min.js
620
- - reports/html/default/js/lib/jquery.jqplot.min.js
621
- - reports/html/default/js/helpers.js
622
- - reports/html/default/js/charts.js
623
- - reports/html/default/summary_issue.erb
624
- - reports/html/default/configuration.erb
625
- - reports/html/default/issue.erb
626
- - reports/html/default.erb
627
- - reports/stdout.rb
628
- - reports/metareport.rb
629
- - reports/html.rb
630
- - reports/json.rb
793
+ - reports/yaml.rb
631
794
  - reports/txt.rb
795
+ - reports/xml.rb
796
+ - reports/metareport.rb
632
797
  - reports/afr.rb
633
- - reports/marshal.rb
634
- - reports/yaml.rb
635
- - reports/plugin_formatters/stdout/discovery.rb
636
- - reports/plugin_formatters/stdout/form_dicattack.rb
637
- - reports/plugin_formatters/stdout/cookie_collector.rb
638
- - reports/plugin_formatters/stdout/metamodules.rb
639
- - reports/plugin_formatters/stdout/waf_detector.rb
640
- - reports/plugin_formatters/stdout/autologin.rb
641
- - reports/plugin_formatters/stdout/http_dicattack.rb
798
+ - reports/plugin_formatters/stdout/resolver.rb
642
799
  - reports/plugin_formatters/stdout/healthmap.rb
643
- - reports/plugin_formatters/stdout/profiler.rb
800
+ - reports/plugin_formatters/stdout/cookie_collector.rb
644
801
  - reports/plugin_formatters/stdout/timing_attacks.rb
645
- - reports/plugin_formatters/stdout/resolver.rb
646
- - reports/plugin_formatters/stdout/content_types.rb
802
+ - reports/plugin_formatters/stdout/discovery.rb
803
+ - reports/plugin_formatters/stdout/profiler.rb
647
804
  - reports/plugin_formatters/stdout/uniformity.rb
648
- - reports/plugin_formatters/html/discovery.rb
649
- - reports/plugin_formatters/html/form_dicattack.rb
650
- - reports/plugin_formatters/html/cookie_collector.rb
651
- - reports/plugin_formatters/html/waf_detector.rb
652
- - reports/plugin_formatters/html/autologin.rb
653
- - reports/plugin_formatters/html/http_dicattack.rb
805
+ - reports/plugin_formatters/stdout/http_dicattack.rb
806
+ - reports/plugin_formatters/stdout/content_types.rb
807
+ - reports/plugin_formatters/stdout/autologin.rb
808
+ - reports/plugin_formatters/stdout/waf_detector.rb
809
+ - reports/plugin_formatters/stdout/form_dicattack.rb
810
+ - reports/plugin_formatters/html/resolver.rb
654
811
  - reports/plugin_formatters/html/healthmap.rb
655
- - reports/plugin_formatters/html/profiler.rb
812
+ - reports/plugin_formatters/html/cookie_collector.rb
656
813
  - reports/plugin_formatters/html/timing_attacks.rb
814
+ - reports/plugin_formatters/html/discovery.rb
815
+ - reports/plugin_formatters/html/profiler.rb
657
816
  - reports/plugin_formatters/html/profiler/template.erb
658
- - reports/plugin_formatters/html/resolver.rb
659
- - reports/plugin_formatters/html/content_types.rb
660
817
  - reports/plugin_formatters/html/uniformity.rb
661
- - reports/plugin_formatters/xml/discovery.rb
662
- - reports/plugin_formatters/xml/form_dicattack.rb
663
- - reports/plugin_formatters/xml/cookie_collector.rb
664
- - reports/plugin_formatters/xml/waf_detector.rb
665
- - reports/plugin_formatters/xml/autologin.rb
666
- - reports/plugin_formatters/xml/http_dicattack.rb
818
+ - reports/plugin_formatters/html/http_dicattack.rb
819
+ - reports/plugin_formatters/html/content_types.rb
820
+ - reports/plugin_formatters/html/autologin.rb
821
+ - reports/plugin_formatters/html/waf_detector.rb
822
+ - reports/plugin_formatters/html/form_dicattack.rb
823
+ - reports/plugin_formatters/xml/resolver.rb
667
824
  - reports/plugin_formatters/xml/healthmap.rb
668
- - reports/plugin_formatters/xml/profiler.rb
825
+ - reports/plugin_formatters/xml/cookie_collector.rb
669
826
  - reports/plugin_formatters/xml/timing_attacks.rb
670
- - reports/plugin_formatters/xml/resolver.rb
671
- - reports/plugin_formatters/xml/content_types.rb
827
+ - reports/plugin_formatters/xml/discovery.rb
828
+ - reports/plugin_formatters/xml/profiler.rb
672
829
  - reports/plugin_formatters/xml/uniformity.rb
673
- - reports/xml.rb
830
+ - reports/plugin_formatters/xml/http_dicattack.rb
831
+ - reports/plugin_formatters/xml/content_types.rb
832
+ - reports/plugin_formatters/xml/autologin.rb
833
+ - reports/plugin_formatters/xml/waf_detector.rb
834
+ - reports/plugin_formatters/xml/form_dicattack.rb
835
+ - reports/html.rb
674
836
  - reports/ap.rb
837
+ - reports/marshal.rb
838
+ - reports/html/default.erb
839
+ - reports/html/default/js/charts.js
840
+ - reports/html/default/js/helpers.js
841
+ - reports/html/default/js/init.js
842
+ - reports/html/default/js/lib/jqplot.pointLabels.min.js
843
+ - reports/html/default/js/lib/jqplot.barRenderer.min.js
844
+ - reports/html/default/js/lib/jquery-ui.min.js
845
+ - reports/html/default/js/lib/jquery.jqplot.min.js
846
+ - reports/html/default/js/lib/jqplot.categoryAxisRenderer.min.js
847
+ - reports/html/default/js/lib/jquery.min.js
848
+ - reports/html/default/js/lib/jqplot.cursor.min.js
849
+ - reports/html/default/js/lib/jqplot.pieRenderer.min.js
850
+ - reports/html/default/issue.erb
851
+ - reports/html/default/sitemap.erb
852
+ - reports/html/default/summary_issue.erb
853
+ - reports/html/default/configuration.erb
854
+ - reports/html/default/search.erb
855
+ - reports/html/default/issues.erb
856
+ - reports/html/default/css/main.css
857
+ - reports/html/default/css/jquery-ui.css
858
+ - reports/html/default/css/jquery.jqplot.min.css
859
+ - reports/html/default/plugins.erb
860
+ - reports/html/default/summary.erb
861
+ - reports/json.rb
862
+ - reports/stdout.rb
675
863
  - reports/xml/buffer.rb
676
- - !binary |-
677
- YmluL2FyYWNobmk=
678
- - !binary |-
679
- YmluL2FyYWNobmlfcnBjZF9tb25pdG9y
680
- - !binary |-
681
- YmluL2FyYWNobmlfcnBjZA==
682
- - !binary |-
683
- YmluL2FyYWNobmlfcnBj
684
- - !binary |-
685
- YmluL2FyYWNobmlfd2Vi
686
- - !binary |-
687
- YmluL2FyYWNobmlfd2ViX2F1dG9zdGFydA==
688
- homepage: https://github.com/Zapotek/arachni
864
+ - rpcd_handlers/placeholder
865
+ - spec/shared/path_extractor.rb
866
+ - spec/shared/element/capabilities/refreshable.rb
867
+ - spec/shared/element/capabilities/auditable.rb
868
+ - spec/shared/plugin.rb
869
+ - spec/shared/component.rb
870
+ - spec/shared/reports.rb
871
+ - spec/shared/module.rb
872
+ - spec/reports/html_spec.rb
873
+ - spec/reports/stdout_spec.rb
874
+ - spec/reports/marshal_spec.rb
875
+ - spec/reports/yaml_spec.rb
876
+ - spec/reports/afr_spec.rb
877
+ - spec/reports/json_spec.rb
878
+ - spec/reports/xml_spec.rb
879
+ - spec/reports/txt_spec.rb
880
+ - spec/reports/ap_spec.rb
881
+ - spec/helpers/server.rb
882
+ - spec/helpers/requires.rb
883
+ - spec/helpers/misc.rb
884
+ - spec/helpers/processes.rb
885
+ - spec/helpers/auditor.rb
886
+ - spec/logs/output_spec.log
887
+ - spec/logs/Dispatcher - 3340-15426.log
888
+ - spec/logs/Dispatcher - 3399-12586.log
889
+ - spec/logs/Dispatcher - 2808-9029.log
890
+ - spec/logs/Dispatcher - 2766-8238.log
891
+ - spec/logs/placeholder
892
+ - spec/logs/Dispatcher - 2922-14464.log
893
+ - spec/logs/Dispatcher - 3433-14149.log
894
+ - spec/logs/Dispatcher - 2957-15255.log
895
+ - spec/logs/Dispatcher - 2752-13830.log
896
+ - spec/logs/Dispatcher - 2854-8571.log
897
+ - spec/logs/Dispatcher - 3305-8622.log
898
+ - spec/logs/Dispatcher - 3849-9016.log
899
+ - spec/logs/Dispatcher - 3616-11169.log
900
+ - spec/logs/Dispatcher - 3216-14203.log
901
+ - spec/logs/Dispatcher - 2888-10411.log
902
+ - spec/logs/Dispatcher - 3582-6198.log
903
+ - spec/pems/cacert.pem
904
+ - spec/pems/server/key.pem
905
+ - spec/pems/server/cert.pem
906
+ - spec/pems/client/foo-cert.pem
907
+ - spec/pems/client/foo-key.pem
908
+ - spec/pems/client/key.pem
909
+ - spec/pems/client/cert.pem
910
+ - spec/plugins/script_spec.rb
911
+ - spec/plugins/http_dicattack_spec.rb
912
+ - spec/plugins/vector_feed_spec.rb
913
+ - spec/plugins/rescan_spec.rb
914
+ - spec/plugins/autothrottle_spec.rb
915
+ - spec/plugins/form_dicattack_spec.rb
916
+ - spec/plugins/resolver_spec.rb
917
+ - spec/plugins/meta/uniformity_spec.rb
918
+ - spec/plugins/meta/remedies/timing_attacks_spec.rb
919
+ - spec/plugins/meta/remedies/discovery_spec.rb
920
+ - spec/plugins/meta/remedies/manual_verification_spec.rb
921
+ - spec/plugins/waf_detector_spec.rb
922
+ - spec/plugins/profiler_spec.rb
923
+ - spec/plugins/content_types_spec.rb
924
+ - spec/plugins/healthmap_spec.rb
925
+ - spec/plugins/autologin_spec.rb
926
+ - spec/plugins/cookie_collector_spec.rb
927
+ - spec/arachni/bloom_filter_spec.rb
928
+ - spec/arachni/database/queue_spec.rb
929
+ - spec/arachni/database/hash_spec.rb
930
+ - spec/arachni/mixins/observable_spec.rb
931
+ - spec/arachni/mixins/progress_bar_spec.rb
932
+ - spec/arachni/audit_store_spec.rb
933
+ - spec/arachni/module/auditor_spec.rb
934
+ - spec/arachni/module/element_db_spec.rb
935
+ - spec/arachni/module/key_filler.rb
936
+ - spec/arachni/module/manager_spec.rb
937
+ - spec/arachni/module/trainer_spec.rb
938
+ - spec/arachni/module/utilities_spec.rb
939
+ - spec/arachni/module/utilities_spec/read_file.txt
940
+ - spec/arachni/plugin/manager_spec.rb
941
+ - spec/arachni/component/manager_spec.rb
942
+ - spec/arachni/component/options/path_spec.rb
943
+ - spec/arachni/component/options/string_spec.rb
944
+ - spec/arachni/component/options/base_spec.rb
945
+ - spec/arachni/component/options/address_spec.rb
946
+ - spec/arachni/component/options/float_spec.rb
947
+ - spec/arachni/component/options/int_spec.rb
948
+ - spec/arachni/component/options/bool_spec.rb
949
+ - spec/arachni/component/options/enum_spec.rb
950
+ - spec/arachni/component/options/url_spec.rb
951
+ - spec/arachni/component/options/port_spec.rb
952
+ - spec/arachni/parser_spec.rb
953
+ - spec/arachni/element/link_spec.rb
954
+ - spec/arachni/element/capabilities/auditable/taint_spec.rb
955
+ - spec/arachni/element/capabilities/auditable/timeout_spec.rb
956
+ - spec/arachni/element/capabilities/auditable/rdiff_spec.rb
957
+ - spec/arachni/element/capabilities/mutable_spec.rb
958
+ - spec/arachni/element/path_spec.rb
959
+ - spec/arachni/element/body_spec.rb
960
+ - spec/arachni/element/base_spec.rb
961
+ - spec/arachni/element/form_spec.rb
962
+ - spec/arachni/element/server_spec.rb
963
+ - spec/arachni/element/header_spec.rb
964
+ - spec/arachni/element/cookie_spec.rb
965
+ - spec/arachni/spider_spec.rb
966
+ - spec/arachni/page_spec.rb
967
+ - spec/arachni/ruby/enumerable_spec.rb
968
+ - spec/arachni/ruby/string_spec.rb
969
+ - spec/arachni/ruby/webrick_spec.rb
970
+ - spec/arachni/ruby/array_spec.rb
971
+ - spec/arachni/ruby/object_spec.rb
972
+ - spec/arachni/http/cookie_jar_spec.rb
973
+ - spec/arachni/crypto/rsa_aes_cbc_spec.rb
974
+ - spec/arachni/typhoeus/requrest_spec.rb
975
+ - spec/arachni/typhoeus/response_spec.rb
976
+ - spec/arachni/typhoeus/hydra_spec.rb
977
+ - spec/arachni/options_spec.rb
978
+ - spec/arachni/session_spec.rb
979
+ - spec/arachni/cache/random_replacement_spec.rb
980
+ - spec/arachni/cache/least_cost_replacement_spec.rb
981
+ - spec/arachni/cache/base_spec.rb
982
+ - spec/arachni/cache/least_recently_used_spec.rb
983
+ - spec/arachni/framework_spec.rb
984
+ - spec/arachni/issue_spec.rb
985
+ - spec/arachni/rpc/server/framework_simple_spec.rb
986
+ - spec/arachni/rpc/server/base_spec.rb
987
+ - spec/arachni/rpc/server/plugin/manager_spec.rb
988
+ - spec/arachni/rpc/server/dispatcher/handler.rb
989
+ - spec/arachni/rpc/server/dispatcher/node_spec.rb
990
+ - spec/arachni/rpc/server/distributor_spec.rb
991
+ - spec/arachni/rpc/server/options_spec.rb
992
+ - spec/arachni/rpc/server/modules/manager_spec.rb
993
+ - spec/arachni/rpc/server/dispatcher_spec.rb
994
+ - spec/arachni/rpc/server/framework_hpg_spec.rb
995
+ - spec/arachni/rpc/server/instance_spec.rb
996
+ - spec/arachni/rpc/server/output_spec.rb
997
+ - spec/arachni/rpc/client/base_spec.rb
998
+ - spec/arachni/rpc/client/dispatcher_spec.rb
999
+ - spec/arachni/rpc/client/instance_spec.rb
1000
+ - spec/arachni/http_spec.rb
1001
+ - spec/arachni/utilities_spec.rb
1002
+ - spec/arachni/uri_spec.rb
1003
+ - spec/arachni/report/base_spec.rb
1004
+ - spec/arachni/report/manager_spec.rb
1005
+ - spec/spec_helper.rb
1006
+ - spec/modules/audit/unvalidated_redirect_spec.rb
1007
+ - spec/modules/audit/xss_script_tag_spec.rb
1008
+ - spec/modules/audit/os_cmd_injection_spec.rb
1009
+ - spec/modules/audit/code_injection_timing_spec.rb
1010
+ - spec/modules/audit/sqli_spec.rb
1011
+ - spec/modules/audit/session_fixation_spec.rb
1012
+ - spec/modules/audit/xss_path_spec.rb
1013
+ - spec/modules/audit/path_traversal_spec.rb
1014
+ - spec/modules/audit/csrf_spec.rb
1015
+ - spec/modules/audit/xpath_spec.rb
1016
+ - spec/modules/audit/xss_event_spec.rb
1017
+ - spec/modules/audit/sqli_blind_rdiff_spec.rb
1018
+ - spec/modules/audit/os_cmd_injection_timing_spec.rb
1019
+ - spec/modules/audit/rfi_spec.rb
1020
+ - spec/modules/audit/response_splitting_spec.rb
1021
+ - spec/modules/audit/trainer_spec.rb
1022
+ - spec/modules/audit/sqli_blind_timing_spec.rb
1023
+ - spec/modules/audit/xss_tag_spec.rb
1024
+ - spec/modules/audit/xss_spec.rb
1025
+ - spec/modules/audit/code_injection_spec.rb
1026
+ - spec/modules/audit/ldapi_spec.rb
1027
+ - spec/modules/recon/common_files_spec.rb
1028
+ - spec/modules/recon/allowed_methods_spec.rb
1029
+ - spec/modules/recon/xst_spec.rb
1030
+ - spec/modules/recon/directory_listing_spec.rb
1031
+ - spec/modules/recon/http_put_spec.rb
1032
+ - spec/modules/recon/backdoors_spec.rb
1033
+ - spec/modules/recon/common_directories_spec.rb
1034
+ - spec/modules/recon/interesting_responses_spec.rb
1035
+ - spec/modules/recon/htaccess_limit_spec.rb
1036
+ - spec/modules/recon/webdav_spec.rb
1037
+ - spec/modules/recon/backup_files_spec.rb
1038
+ - spec/modules/recon/grep/emails_spec.rb
1039
+ - spec/modules/recon/grep/ssn_spec.rb
1040
+ - spec/modules/recon/grep/html_objects_spec.rb
1041
+ - spec/modules/recon/grep/unencrypted_password_forms_spec.rb
1042
+ - spec/modules/recon/grep/cvs_svn_users_spec.rb
1043
+ - spec/modules/recon/grep/insecure_cookies_spec.rb
1044
+ - spec/modules/recon/grep/http_only_cookies_spec.rb
1045
+ - spec/modules/recon/grep/credit_card_spec.rb
1046
+ - spec/modules/recon/grep/captcha_spec.rb
1047
+ - spec/modules/recon/grep/mixed_resource_spec.rb
1048
+ - spec/modules/recon/grep/private_ip_spec.rb
1049
+ - spec/path_extractors/forms_spec.rb
1050
+ - spec/path_extractors/frames_spec.rb
1051
+ - spec/path_extractors/generic_spec.rb
1052
+ - spec/path_extractors/scripts_spec.rb
1053
+ - spec/path_extractors/meta_refresh_spec.rb
1054
+ - spec/path_extractors/links_spec.rb
1055
+ - spec/path_extractors/anchors_spec.rb
1056
+ - spec/fixtures/rescan.afr.tpl
1057
+ - spec/fixtures/script_plugin.rb
1058
+ - spec/fixtures/usernames.txt
1059
+ - spec/fixtures/wait_module/wait.rb
1060
+ - spec/fixtures/reports/manager_spec/foo.rb
1061
+ - spec/fixtures/reports/manager_spec/afr.rb
1062
+ - spec/fixtures/reports/base_spec/with_formatters.rb
1063
+ - spec/fixtures/reports/base_spec/without_outfile.rb
1064
+ - spec/fixtures/reports/base_spec/plugin_formatters/with_formatters/foobar.rb
1065
+ - spec/fixtures/reports/base_spec/with_outfile.rb
1066
+ - spec/fixtures/rpcd_handlers/echo.rb
1067
+ - spec/fixtures/plugins/defaults/default.rb
1068
+ - spec/fixtures/plugins/loop.rb
1069
+ - spec/fixtures/plugins/bad.rb
1070
+ - spec/fixtures/plugins/with_options.rb
1071
+ - spec/fixtures/plugins/distributable.rb
1072
+ - spec/fixtures/plugins/wait.rb
1073
+ - spec/fixtures/auditstore.afr
1074
+ - spec/fixtures/modules/test2.rb
1075
+ - spec/fixtures/modules/test3.rb
1076
+ - spec/fixtures/modules/test.rb
1077
+ - spec/fixtures/passwords.txt
1078
+ - spec/fixtures/taint_module/taint.rb
1079
+ - spec/fixtures/cookies.txt
1080
+ - spec/fixtures/run_mod/headers.rb
1081
+ - spec/fixtures/run_mod/flch.rb
1082
+ - spec/fixtures/run_mod/body.rb
1083
+ - spec/fixtures/run_mod/forms.rb
1084
+ - spec/fixtures/run_mod/server.rb
1085
+ - spec/fixtures/run_mod/nil.rb
1086
+ - spec/fixtures/run_mod/cookies.rb
1087
+ - spec/fixtures/run_mod/path.rb
1088
+ - spec/fixtures/run_mod/empty.rb
1089
+ - spec/fixtures/run_mod/links.rb
1090
+ - spec/servers/plugins/http_dicattack_unprotected.rb
1091
+ - spec/servers/plugins/healthmap.rb
1092
+ - spec/servers/plugins/cookie_collector.rb
1093
+ - spec/servers/plugins/http_dicattack_secure.rb
1094
+ - spec/servers/plugins/profiler.rb
1095
+ - spec/servers/plugins/rescan.rb
1096
+ - spec/servers/plugins/http_dicattack.rb
1097
+ - spec/servers/plugins/meta/remedies/timing_attacks.rb
1098
+ - spec/servers/plugins/meta/remedies/discovery.rb
1099
+ - spec/servers/plugins/autothrottle.rb
1100
+ - spec/servers/plugins/content_types.rb
1101
+ - spec/servers/plugins/autologin.rb
1102
+ - spec/servers/plugins/waf_detector.rb
1103
+ - spec/servers/plugins/form_dicattack.rb
1104
+ - spec/servers/arachni/http_auth.rb
1105
+ - spec/servers/arachni/framework.rb
1106
+ - spec/servers/arachni/spider.rb
1107
+ - spec/servers/arachni/parser.rb
1108
+ - spec/servers/arachni/module/trainer.rb
1109
+ - spec/servers/arachni/module/auditor.rb
1110
+ - spec/servers/arachni/element/capabilities/auditable/rdiff.rb
1111
+ - spec/servers/arachni/element/capabilities/auditable/taint.rb
1112
+ - spec/servers/arachni/element/capabilities/auditable/timeout.rb
1113
+ - spec/servers/arachni/element/cookie.rb
1114
+ - spec/servers/arachni/element/link.rb
1115
+ - spec/servers/arachni/element/header.rb
1116
+ - spec/servers/arachni/element/form.rb
1117
+ - spec/servers/arachni/session.rb
1118
+ - spec/servers/arachni/http.rb
1119
+ - spec/servers/arachni/rpc/server/framework_simple.rb
1120
+ - spec/servers/arachni/rpc/server/framework_hpg.rb
1121
+ - spec/servers/modules/audit/code_injection.rb
1122
+ - spec/servers/modules/audit/path_traversal.rb
1123
+ - spec/servers/modules/audit/sqli_blind_rdiff.rb
1124
+ - spec/servers/modules/audit/sqli/oracle
1125
+ - spec/servers/modules/audit/sqli/emc
1126
+ - spec/servers/modules/audit/sqli/sqlite
1127
+ - spec/servers/modules/audit/sqli/sybase
1128
+ - spec/servers/modules/audit/sqli/jdbc
1129
+ - spec/servers/modules/audit/sqli/mssql
1130
+ - spec/servers/modules/audit/sqli/informix
1131
+ - spec/servers/modules/audit/sqli/db2
1132
+ - spec/servers/modules/audit/sqli/interbase
1133
+ - spec/servers/modules/audit/sqli/mysql
1134
+ - spec/servers/modules/audit/sqli/postgresql
1135
+ - spec/servers/modules/audit/sqli/coldfusion
1136
+ - spec/servers/modules/audit/ldapi.rb
1137
+ - spec/servers/modules/audit/rfi.rb
1138
+ - spec/servers/modules/audit/session_fixation.rb
1139
+ - spec/servers/modules/audit/response_splitting.rb
1140
+ - spec/servers/modules/audit/os_cmd_injection.rb
1141
+ - spec/servers/modules/audit/os_cmd_injection_timing.rb
1142
+ - spec/servers/modules/audit/trainer_module.rb
1143
+ - spec/servers/modules/audit/sqli_blind_timing.rb
1144
+ - spec/servers/modules/audit/xpath.rb
1145
+ - spec/servers/modules/audit/csrf.rb
1146
+ - spec/servers/modules/audit/code_injection_timing.rb
1147
+ - spec/servers/modules/audit/xss.rb
1148
+ - spec/servers/modules/audit/xss_tag.rb
1149
+ - spec/servers/modules/audit/xpath/dotnet
1150
+ - spec/servers/modules/audit/xpath/libxml2
1151
+ - spec/servers/modules/audit/xpath/php
1152
+ - spec/servers/modules/audit/xpath/java
1153
+ - spec/servers/modules/audit/xpath/general
1154
+ - spec/servers/modules/audit/xss_script_tag.rb
1155
+ - spec/servers/modules/audit/sqli.rb
1156
+ - spec/servers/modules/audit/unvalidated_redirect.rb
1157
+ - spec/servers/modules/audit/xss_path.rb
1158
+ - spec/servers/modules/audit/xss_event.rb
1159
+ - spec/servers/modules/module_server.rb
1160
+ - spec/servers/modules/recon/xst.rb
1161
+ - spec/servers/modules/recon/htaccess_limit.rb
1162
+ - spec/servers/modules/recon/http_put.rb
1163
+ - spec/servers/modules/recon/webdav.rb
1164
+ - spec/servers/modules/recon/allowed_methods.rb
1165
+ - spec/servers/modules/recon/common_directories.rb
1166
+ - spec/servers/modules/recon/interesting_responses.rb
1167
+ - spec/servers/modules/recon/backdoors.rb
1168
+ - spec/servers/modules/recon/backup_files.rb
1169
+ - spec/servers/modules/recon/directory_listing.rb
1170
+ - spec/servers/modules/recon/common_files.rb
1171
+ - spec/servers/modules/recon/grep/private_ip.rb
1172
+ - spec/servers/modules/recon/grep/insecure_cookies.rb
1173
+ - spec/servers/modules/recon/grep/unencrypted_password_forms.rb
1174
+ - spec/servers/modules/recon/grep/ssn.rb
1175
+ - spec/servers/modules/recon/grep/credit_card.rb
1176
+ - spec/servers/modules/recon/grep/html_objects.rb
1177
+ - spec/servers/modules/recon/grep/mixed_resource.rb
1178
+ - spec/servers/modules/recon/grep/emails.rb
1179
+ - spec/servers/modules/recon/grep/http_only_cookies.rb
1180
+ - spec/servers/modules/recon/grep/captcha.rb
1181
+ - spec/servers/modules/recon/grep/cvs_svn_users.rb
1182
+ - Gemfile
1183
+ - Rakefile
1184
+ - arachni.gemspec
1185
+ - README.md
1186
+ - ACKNOWLEDGMENTS.md
1187
+ - LICENSE.md
1188
+ - AUTHORS.md
1189
+ - CHANGELOG.md
1190
+ - CONTRIBUTORS.md
1191
+ - EXPLOITATION.md
1192
+ - HACKING.md
1193
+ - NOTICE
1194
+ - bin/arachni
1195
+ - bin/arachni_rpcd_monitor
1196
+ - bin/arachni_rpcd
1197
+ - bin/arachni_rpc
1198
+ - bin/arachni_web
1199
+ - bin/arachni_web_autostart
1200
+ - bin/arachni_console
1201
+ - bin/arachni_script
1202
+ homepage: https://github.com/Arachni/arachni
689
1203
  licenses: []
690
- post_install_message:
1204
+ post_install_message: ! '
1205
+
1206
+ Thank you for installing Arachni, here are some resources which should
1207
+
1208
+ help you make the best of it:
1209
+
1210
+
1211
+ Homepage - http://arachni-scanner.com
1212
+
1213
+ Blog - http://arachni-scanner.com/blog
1214
+
1215
+ Documentation - http://arachni-scanner.com/wiki
1216
+
1217
+ Support - http://support.arachni-scanner.com
1218
+
1219
+ GitHub page - http://github.com/Arachni/arachni
1220
+
1221
+ Code Documentation - http://rubydoc.info/github/Arachni/arachni
1222
+
1223
+ Author - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
1224
+
1225
+ Twitter - http://twitter.com/ArachniScanner
1226
+
1227
+ Copyright - 2010-2012 Tasos Laskos
1228
+
1229
+ License - Apache License v2
1230
+
1231
+
1232
+ Please do not hesitate to ask for assistance (via the support portal)
1233
+
1234
+ or report a bug (via GitHub Issues) if you come across any problem.
1235
+
1236
+
1237
+ '
691
1238
  rdoc_options:
692
1239
  - --charset=UTF-8
693
1240
  require_paths:
@@ -697,7 +1244,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
697
1244
  requirements:
698
1245
  - - ! '>='
699
1246
  - !ruby/object:Gem::Version
700
- version: '0'
1247
+ version: 1.9.2
701
1248
  required_rubygems_version: !ruby/object:Gem::Requirement
702
1249
  none: false
703
1250
  requirements: