arachni 0.4.0.4 → 0.4.1

data/reports/html/default.erb

@@ -17,7 +17,7 @@
 
       <script type="text/javascript">
       //<![CDATA[
-        <%=erb 'js/init.js', { :conf => conf, :graph_data => graph_data } %>
+        <%=erb 'js/init.js', { graph_data: graph_data } %>
       //]]>
       </script>
 
@@ -37,7 +37,7 @@
 
         <div id="contentreport">
             <header>
-                <h1>Report for <%=escapeHTML(audit_store.options['url'])%> (Generated on <strong><%=Time.now%></strong>)</h1>
+                <h1>Report for <%=escapeHTML(auditstore.options['url'])%> (Generated on <strong><%=Time.now%></strong>)</h1>
                 <span style="float: right">Found a false positive? <a href="<%=escapeHTML(ISSUES_URL)%>">Report it here</a>.</span>
             </header>
 
@@ -52,29 +52,30 @@
             </nav>
 
             <section class="tab" id="summary">
-                <%= erb :summary, { :audit_store => audit_store} %>
+                <%= erb :summary, { auditstore: auditstore } %>
             </section>
 
             <section class="tab" id="configuration">
-                <%= erb :configuration, { :audit_store => audit_store} %>
+                <%= erb :configuration, { auditstore: auditstore} %>
             </section>
 
             <section class="tab" id="issues">
                 <%= erb :issues, {
-                        :audit_store => audit_store,
-                        :filtered_hashes  => filtered_hashes,
-                        :anomalous_hashes => anomalous_hashes,
-                        :anomalous_meta_results => anomalous_meta_results,
-                        :crypto_issues => crypto_issues
-                    } %>
+                        auditstore:             auditstore,
+                        filtered_hashes:        filtered_hashes,
+                        anomalous_hashes:       anomalous_hashes,
+                        anomalous_meta_results: anomalous_meta_results,
+                        crypto_issues:          crypto_issues
+                    }
+                %>
             </section>
 
             <section class="tab" id="plugins">
-                <%= erb :plugins, { :audit_store => audit_store, :plugins => plugins } %>
+                <%= erb :plugins, { auditstore: auditstore, plugins: plugins } %>
             </section>
 
             <section class="tab" id="sitemap">
-                <%= erb :sitemap, { :audit_store => audit_store } %>
+                <%= erb :sitemap, { auditstore: auditstore } %>
             </section>
 
         </div>

data/reports/html/default/configuration.erb

@@ -7,17 +7,17 @@
 
                 <div id='configuration_list'>
 
-                <strong>Version</strong>: <%=audit_store.version%><br />
-                <strong>Revision</strong>: <%=audit_store.revision%><br />
-                <strong>Audit started on</strong>: <%=audit_store.start_datetime%><br />
-                <strong>Audit finished on</strong>: <%=audit_store.finish_datetime%><br />
-                <strong>Runtime</strong>: <%=audit_store.delta_time%><br />
+                <strong>Version</strong>: <%=auditstore.version%><br />
+                <strong>Revision</strong>: <%=auditstore.revision%><br />
+                <strong>Audit started on</strong>: <%=auditstore.start_datetime%><br />
+                <strong>Audit finished on</strong>: <%=auditstore.finish_datetime%><br />
+                <strong>Runtime</strong>: <%=auditstore.delta_time%><br />
 
                 <p>&nbsp;</p>
                 <h3>Runtime options</h3>
 
-                <strong>URL:</strong> <%=audit_store.options['url']%><br />
-                <strong>User agent:</strong> <%=escapeHTML( audit_store.options['user_agent'] )%><br />
+                <strong>URL:</strong> <%=auditstore.options['url']%><br />
+                <strong>User agent:</strong> <%=escapeHTML( auditstore.options['user_agent'] )%><br />
 
                 <p>&nbsp;</p>
 
@@ -32,19 +32,19 @@
                       <td>
                           <ul>
 
-                            <% if audit_store.options['audit_links']%>
+                            <% if auditstore.options['audit_links']%>
                             <li>Links</li>
                             <%end%>
 
-                            <% if audit_store.options['audit_forms']%>
+                            <% if auditstore.options['audit_forms']%>
                             <li>Forms</li>
                             <%end%>
 
-                            <% if audit_store.options['audit_cookies']%>
+                            <% if auditstore.options['audit_cookies']%>
                             <li>Cookies</li>
                             <%end%>
 
-                            <% if audit_store.options['audit_headers']%>
+                            <% if auditstore.options['audit_headers']%>
                             <li>Headers</li>
                             <%end%>
 
@@ -53,7 +53,7 @@
 
                     <td>
                         <ul>
-                        <% audit_store.options['mods'].each do |mod|%>
+                        <% auditstore.options['mods'].each do |mod|%>
                             <li><%=mod%></li>
                         <%end%>
                         </ul>
@@ -64,8 +64,8 @@
 
                             <li>Exclude:
                                 <ul>
-                                <% if !audit_store.options['exclude'].empty?%>
-                                <% audit_store.options['exclude'].each do |rule|%>
+                                <% if !auditstore.options['exclude'].empty?%>
+                                <% auditstore.options['exclude'].each do |rule|%>
 
                                     <li><%=escapeHTML( rule )%></li>
 
@@ -79,8 +79,8 @@
                             <li>Include:
 
                                 <ul>
-                                <% if !audit_store.options['include'].empty?%>
-                                <% audit_store.options['include'].each do |rule|%>
+                                <% if !auditstore.options['include'].empty?%>
+                                <% auditstore.options['include'].each do |rule|%>
 
                                     <li><%=escapeHTML( rule )%></li>
 
@@ -94,10 +94,10 @@
                             <li>Redundant:
 
                                 <ul>
-                                <% if !audit_store.options['redundant'].empty?%>
-                                <% audit_store.options['redundant'].each do |rule|%>
+                                <% if !auditstore.options['redundant'].empty?%>
+                                <% auditstore.options['redundant'].each do |regexp, counter|%>
 
-                                    <li><%=escapeHTML( rule['regexp'] )%> - Count: <%=rule['count']%></li>
+                                    <li><%=escapeHTML( regexp )%> - Count: <%=counter%></li>
 
                                 <%end%>
                                 <% else %>
@@ -111,8 +111,8 @@
 
                         <td>
                             <ul>
-                            <% if audit_store.options['cookies'] && !audit_store.options['cookies'].empty?%>
-                            <% audit_store.options['cookies'].each_pair do |name, val|%>
+                            <% if auditstore.options['cookies'] && !auditstore.options['cookies'].empty?%>
+                            <% auditstore.options['cookies'].each_pair do |name, val|%>
                                 <li><%=escapeHTML( name )%> = <%=escapeHTML( val )%></li>
                             <%end%>
                             <% else %>

data/reports/html/default/css/main.css

@@ -1,358 +1,358 @@
-    body {
-        background: #ddd;
-        margin:0;
-        padding:0;
-        font-family: Verdana, Geneva, sans-serif;
-        font-size: 12px;
-        color: #333;
-    }
-
-    .wrapper {
-        background: #ddd url('bodybg.png') repeat-x scroll top left;
-    }
-
-    .subpage {
-        background-image: url('bodybg-small.png');
-    }
-
-    * {
-        margin:0;
-        padding:0;
-    }
-
-    /** element defaults **/
-    table {
-        width: 100%;
-        text-align: left;
-    }
-
-    th, td {
-        padding: 10px 10px;
-    }
-
-    th {
-        color: #fff;
-        background: #2978A1 none repeat-x scroll -15px 0;
-    }
-
-    td {
-        color: #111;
-        vertical-align: top
-    }
-
-    code, blockquote {
-        display: block;
-        border-left: 5px solid #ddd;
-        padding: 10px;
-        margin-bottom: 20px;
-    }
-    code {
-        background-color: #ddd;
-        border: none;
-    }
-    blockquote {
-        border-left: 5px solid #333;
-    }
-
-    blockquote p {
-        font-style: italic;
-        font-family: Georgia, "Times New Roman", Times, serif;
-        margin: 0;
-        height: 1%;
-    }
-
-    p {
-        line-height: 1.9em;
-        margin-bottom: 20px;
-    }
-
-    a, .issue a {
-        color: #256F94;
-        text-decoration: none
-    }
-
-    a:hover, .issue a:hover {
-        color: #BC6637;
-    }
-
-    a:focus {
-        outline: none;
-    }
-
-    fieldset {
-        display: block;
-        border: none;
-        border-top: 1px solid #ccc;
-    }
-
-    fieldset legend {
-        font-weight: bold;
-        font-size: 13px;
-        padding-right: 10px;
-        color: #666;
-    }
-
-    fieldset form {
-        padding-top: 15px;
-    }
-
-    fieldset p label {
-        float: left;
-        width: 150px;
-    }
-
-    form input, form select, form textarea {
-        padding: 5px;
-        color: #333333;
-        border: 1px solid #999;
-        font-family: Arial, Helvetica, sans-serif;
-        font-size: 12px;
-        -moz-border-radius: 5px;
-        -webkit-border-radius: 5px;
-    }
-
-    form input.formbutton {
-        border: none;
-        background: #FFFFFF url(bodybg.png) repeat-x scroll 0 -160px;
-        color: #ffffff;
-        font-weight: bold;
-        padding: 5px 10px;
-        font-size: 12px;
-        font-family: Tahoma, Geneva, sans-serif;
-        letter-spacing: 1px;
-        width: auto;
-        overflow: visible;
-        -moz-border-radius: 5px;
-        -webkit-border-radius: 5px;
-    }
-
-    form.searchform p {
-        margin: 5px 0;
-    }
-
-    form.searchform input.s {
-        border: 1px solid #000;
-    }
-
-    form.settings input, textarea {
-        float: right;
-        margin-right: 10px
-    }
-
-    .options input, textarea {
-        float: right;
-        margin-right: 10px
-    }
-
-    form.reset input {
-        float: left;
-    }
-
-
-    span.required {
-        font-family: Verdana, Arial, Helvetica, sans-serif;
-        color: #ff0000;
-    }
-
-    h1 {
-        color: #1F5D7C;
-        font-family: Arial, Helvetica, sans-serif;
-        font-size: 35px;
-    }
-
-    h2 {
-        color: #111;
-        font-family: Arial, Helvetica, sans-serif;
-        font-size: 28px;
-        letter-spacing: -0.5px;
-        padding: 0 0 5px;
-        margin: 0;
-        font-weight: normal;
-    }
-
-    h3 {
-        color: #BC6637;
-        font-family: Arial, Helvetica, sans-serif;
-        font-size: 18px;
-        font-weight: bold;
-        margin-bottom: 10px;
-    }
-
-    h4 {
-        padding-bottom: 10px;
-        font-size: 15px;
-        color: #666;
-    }
-
-    h5 {
-        padding-bottom: 10px;
-        font-size: 13px;
-        color: #666;
-    }
-
-    ul, ol {
-        margin: 0 0 35px 35px;
-    }
-
-    li {
-        padding-bottom: 5px;
-    }
-
-    li ol, li ul {
-        font-size: 1.0em;
-        margin-bottom: 0;
-        padding-top: 5px;
-    }
-
-    iframe {
-        border: 1px solid
-    }
-
-    .clear {
-        clear: both;
-    }
-
-    .notice {
-      color: #222;
-      background: #e3e4e3;
-      border: 1px solid #d5d5d5;
-      padding: 7px 10px;
-      display: block;
-      text-align: left
-      -moz-border-radius: 5px;
-      -webkit-border-radius: 5px;
-    }
-
-    .left {
-        float: left;
-        width: 49%;
-        padding-right: 5px
-    }
-
-    .right {
-        float: right;
-        width: 50%;
-        border-left: 1px
-    }
-
-    .variation{
-        display: none;
-        padding: 20px;
-        padding-left: 40px;
-        padding-top: 0px
-    }
-
-    .hidden {
-        display: none
-    }
-
-    .separator {
-        min-width: 100%;
-        border-bottom: 1px solid #333333
-    }
-
-    .ui-widget-bg { border-top: 1px dotted #aed0ea; font-size:9px;   }
-    .ui-widget-bar {position:absolute;zIndex:10;bottom:0;font-size:10px; }
-
-    .graphs li{
-         list-style-type:none;
-    }
-
-    /* Security Reports Style */
-
-    header, nav, article, section, footer, address {display:block;}
-
-    header{
-        height: 38px;
-        overflow:hidden;
-        background:#e1e1e1;
-        background:-webkit-gradient(linear, left top, left bottom, from(#cccccc), to(#e1e1e1));
-        background:-moz-linear-gradient(top,  #cccccc,  #e1e1e1);
-        padding:0 5px;
-        }
-    header h1{
-        line-height:32px;
-        font-size:14px;
-        text-shadow:#fff 0 1px 0;
-        text-align:center;
-        display: inline
-        }
-
-    nav{
-        height:34px;
-        overflow:hidden;
-        }
-    nav ul{
-        margin:0;
-        padding:0 5px;
-        width:100%;
-        height:34px;
-        -moz-box-shadow:inset -2px 2px 2px #999;
-        -webkit-box-shadow:inset -2px 2px 2px #999;
-        box-shadow:inset -2px 0px 2px #999;
-        background:#ddd;
-        }
-    nav li{
-        list-style:none;
-        float:left;
-        height:24px;
-        line-height:24px;
-        -moz-box-shadow:0 0 3px #888;
-        -webkit-box-shadow:0 0 3px #888;
-        box-shadow:0 0 3px #888;
-        -webkit-border-bottom-right-radius:3px;
-        -webkit-border-bottom-left-radius:3px;
-        -moz-border-radius-bottomright:3px;
-        -moz-border-radius-bottomleft:3px;
-        border-bottom-right-radius:3px;
-        border-bottom-left-radius:3px;
-        margin:0 2px;
-        width:200px;
-        overflow:hidden;
-        position:relative;
-        background:#ccc;
-        background:-webkit-gradient(linear, left top, left bottom, from(#ccc), to(#aaa));
-        background:-moz-linear-gradient(top,  #ccc,  #aaa);
-        }
-    nav li a, nav li a:visited, nav li a:hover{
-        list-style:none;
-        display:block;
-        position:absolute;
-        top:0;
-        left:-2px;
-        height:24px;
-        line-height:24px;
-        width:204px;
-        text-align:center;
-        color:#333;
-        font-size:13px;
-        text-shadow:#e8e8e8 0 1px 0;
-        -moz-box-shadow:inset 0 1px 1px #888;
-        -webkit-box-shadow:inset 0 1px 1px #888;
-        box-shadow:inset 0 1px 1px #888;
-        }
-    nav li.selected {background:#e1e1e1;background:-webkit-gradient(linear, left top, left bottom, from(#e1e1e1), to(#d1d1d1));background:-moz-linear-gradient(top,  #e1e1e1,  #d1d1d1);}
-    nav li.selected a {-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;}
-    nav li a:focus {outline:none;}
-
-    /* style your sections here */
-    section {padding:20px;background:#ddd;}
-    section hr {margin:10px 0;}
-    section h2 {border-bottom:1px solid #444;margin:0 0 20px 0;padding:0 0 10px 0;}
-    section p.notice {
-      white-space: -moz-pre-wrap !important;  /* Mozilla, since 1999 */
-      white-space: -pre-wrap;      /* Opera 4-6 */
-      white-space: -o-pre-wrap;    /* Opera 7 */
-      white-space: pre-wrap;       /* css-3 */
-      word-wrap: break-word;       /* Internet Explorer 5.5+ */
-    }
-    section div.variations form input {cursor:pointer;}
+body {
+    background: #ddd;
+    margin:0;
+    padding:0;
+    font-family: Verdana, Geneva, sans-serif;
+    font-size: 12px;
+    color: #333;
+}
+
+.wrapper {
+    background: #ddd url('bodybg.png') repeat-x scroll top left;
+}
+
+.subpage {
+    background-image: url('bodybg-small.png');
+}
+
+* {
+    margin:0;
+    padding:0;
+}
+
+/** element defaults **/
+table {
+    width: 100%;
+    text-align: left;
+}
+
+th, td {
+    padding: 10px 10px;
+}
+
+th {
+    color: #fff;
+    background: #2978A1 none repeat-x scroll -15px 0;
+}
+
+td {
+    color: #111;
+    vertical-align: top
+}
+
+code, blockquote {
+    display: block;
+    border-left: 5px solid #ddd;
+    padding: 10px;
+    margin-bottom: 20px;
+}
+code {
+    background-color: #ddd;
+    border: none;
+}
+blockquote {
+    border-left: 5px solid #333;
+}
+
+blockquote p {
+    font-style: italic;
+    font-family: Georgia, "Times New Roman", Times, serif;
+    margin: 0;
+    height: 1%;
+}
+
+p {
+    line-height: 1.9em;
+    margin-bottom: 20px;
+}
+
+a, .issue a {
+    color: #256F94;
+    text-decoration: none
+}
+
+a:hover, .issue a:hover {
+    color: #BC6637;
+}
+
+a:focus {
+    outline: none;
+}
+
+fieldset {
+    display: block;
+    border: none;
+    border-top: 1px solid #ccc;
+}
+
+fieldset legend {
+    font-weight: bold;
+    font-size: 13px;
+    padding-right: 10px;
+    color: #666;
+}
+
+fieldset form {
+    padding-top: 15px;
+}
+
+fieldset p label {
+    float: left;
+    width: 150px;
+}
+
+form input, form select, form textarea {
+    padding: 5px;
+    color: #333333;
+    border: 1px solid #999;
+    font-family: Arial, Helvetica, sans-serif;
+    font-size: 12px;
+    -moz-border-radius: 5px;
+    -webkit-border-radius: 5px;
+}
+
+form input.formbutton {
+    border: none;
+    background: #FFFFFF url(bodybg.png) repeat-x scroll 0 -160px;
+    color: #ffffff;
+    font-weight: bold;
+    padding: 5px 10px;
+    font-size: 12px;
+    font-family: Tahoma, Geneva, sans-serif;
+    letter-spacing: 1px;
+    width: auto;
+    overflow: visible;
+    -moz-border-radius: 5px;
+    -webkit-border-radius: 5px;
+}
+
+form.searchform p {
+    margin: 5px 0;
+}
+
+form.searchform input.s {
+    border: 1px solid #000;
+}
+
+form.settings input, textarea {
+    float: right;
+    margin-right: 10px
+}
+
+.options input, textarea {
+    float: right;
+    margin-right: 10px
+}
+
+form.reset input {
+    float: left;
+}
+
+
+span.required {
+    font-family: Verdana, Arial, Helvetica, sans-serif;
+    color: #ff0000;
+}
+
+h1 {
+    color: #1F5D7C;
+    font-family: Arial, Helvetica, sans-serif;
+    font-size: 35px;
+}
+
+h2 {
+    color: #111;
+    font-family: Arial, Helvetica, sans-serif;
+    font-size: 28px;
+    letter-spacing: -0.5px;
+    padding: 0 0 5px;
+    margin: 0;
+    font-weight: normal;
+}
+
+h3 {
+    color: #BC6637;
+    font-family: Arial, Helvetica, sans-serif;
+    font-size: 18px;
+    font-weight: bold;
+    margin-bottom: 10px;
+}
+
+h4 {
+    padding-bottom: 10px;
+    font-size: 15px;
+    color: #666;
+}
+
+h5 {
+    padding-bottom: 10px;
+    font-size: 13px;
+    color: #666;
+}
+
+ul, ol {
+    margin: 0 0 35px 35px;
+}
+
+li {
+    padding-bottom: 5px;
+}
+
+li ol, li ul {
+    font-size: 1.0em;
+    margin-bottom: 0;
+    padding-top: 5px;
+}
+
+iframe {
+    border: 1px solid
+}
+
+.clear {
+    clear: both;
+}
+
+.notice {
+    color: #222;
+    background: #e3e4e3;
+    border: 1px solid #d5d5d5;
+    padding: 7px 10px;
+    display: block;
+    text-align: left;
+    -moz-border-radius: 5px;
+    -webkit-border-radius: 5px;
+}
+
+.left {
+    float: left;
+    width: 49%;
+    padding-right: 5px
+}
+
+.right {
+    float: right;
+    width: 50%;
+    border-left: 1px
+}
+
+.variation{
+    display: none;
+    padding: 20px;
+    padding-left: 40px;
+    padding-top: 0px
+}
+
+.hidden {
+    display: none
+}
+
+.separator {
+    min-width: 100%;
+    border-bottom: 1px solid #333333
+}
+
+.ui-widget-bg { border-top: 1px dotted #aed0ea; font-size:9px;   }
+.ui-widget-bar {position:absolute;zIndex:10;bottom:0;font-size:10px; }
+
+.graphs li{
+    list-style-type:none;
+}
+
+/* Security Reports Style */
+
+header, nav, article, section, footer, address {display:block;}
+
+header{
+    height: 38px;
+    overflow:hidden;
+    background:#e1e1e1;
+    background:-webkit-gradient(linear, left top, left bottom, from(#cccccc), to(#e1e1e1));
+    background:-moz-linear-gradient(top,  #cccccc,  #e1e1e1);
+    padding:0 5px;
+}
+header h1{
+    line-height:32px;
+    font-size:14px;
+    text-shadow:#fff 0 1px 0;
+    text-align:center;
+    display: inline
+}
+
+nav{
+    height:34px;
+    overflow:hidden;
+}
+nav ul{
+    margin:0;
+    padding:0 5px;
+    width:100%;
+    height:34px;
+    -moz-box-shadow:inset -2px 2px 2px #999;
+    -webkit-box-shadow:inset -2px 2px 2px #999;
+    box-shadow:inset -2px 0px 2px #999;
+    background:#ddd;
+}
+nav li{
+    list-style:none;
+    float:left;
+    height:24px;
+    line-height:24px;
+    -moz-box-shadow:0 0 3px #888;
+    -webkit-box-shadow:0 0 3px #888;
+    box-shadow:0 0 3px #888;
+    -webkit-border-bottom-right-radius:3px;
+    -webkit-border-bottom-left-radius:3px;
+    -moz-border-radius-bottomright:3px;
+    -moz-border-radius-bottomleft:3px;
+    border-bottom-right-radius:3px;
+    border-bottom-left-radius:3px;
+    margin:0 2px;
+    width:200px;
+    overflow:hidden;
+    position:relative;
+    background:#ccc;
+    background:-webkit-gradient(linear, left top, left bottom, from(#ccc), to(#aaa));
+    background:-moz-linear-gradient(top,  #ccc,  #aaa);
+}
+nav li a, nav li a:visited, nav li a:hover{
+    list-style:none;
+    display:block;
+    position:absolute;
+    top:0;
+    left:-2px;
+    height:24px;
+    line-height:24px;
+    width:204px;
+    text-align:center;
+    color:#333;
+    font-size:13px;
+    text-shadow:#e8e8e8 0 1px 0;
+    -moz-box-shadow:inset 0 1px 1px #888;
+    -webkit-box-shadow:inset 0 1px 1px #888;
+    box-shadow:inset 0 1px 1px #888;
+}
+nav li.selected {background:#e1e1e1;background:-webkit-gradient(linear, left top, left bottom, from(#e1e1e1), to(#d1d1d1));background:-moz-linear-gradient(top,  #e1e1e1,  #d1d1d1);}
+nav li.selected a {-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;}
+nav li a:focus {outline:none;}
+
+/* style your sections here */
+section {padding:20px;background:#ddd;}
+section hr {margin:10px 0;}
+section h2 {border-bottom:1px solid #444;margin:0 0 20px 0;padding:0 0 10px 0;}
+section p.notice {
+    white-space: -moz-pre-wrap !important;  /* Mozilla, since 1999 */
+    white-space: -pre-wrap;      /* Opera 4-6 */
+    white-space: -o-pre-wrap;    /* Opera 7 */
+    white-space: pre-wrap;       /* css-3 */
+    word-wrap: break-word;       /* Internet Explorer 5.5+ */
+}
+section div.variations form input {cursor:pointer;}
 
 #graphs div {
     -moz-border-radius: 5px;
     -webkit-border-radius: 5px;
     background-color: rgb( 204, 204, 204 );
-    color: rgb( 62, 87, 111 ),
+    color: rgb( 62, 87, 111 );
     font-family: Verdana, sans-serif;
 }