arachni 0.4.2 → 0.4.3

data/spec/fingerprinters/frameworks/rack_spec.rb

@@ -0,0 +1,41 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Rack do
+    include_examples 'fingerprinter'
+
+    context 'when there is a rack.session cookie' do
+        it 'identifies it as Rack' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new( 'http://stuff.com/blah',
+                                               'rack.session' => 'stuff' )]
+
+            )
+            platforms_for( page ).should include :ruby
+            platforms_for( page ).should include :rack
+        end
+    end
+
+    context 'when there is a Server header' do
+        it 'identifies it as Rack' do
+            page = Arachni::Page.new(
+                url: 'http://stuff.com/blah',
+                response_headers: { 'Server' => 'mod_rack' }
+            )
+            platforms_for( page ).should include :ruby
+            platforms_for( page ).should include :rack
+        end
+    end
+
+    context 'when there is an X-Powered-By header' do
+        it 'identifies it as Rack' do
+            page = Arachni::Page.new(
+                url: 'http://stuff.com/blah',
+                response_headers: { 'X-Powered-By' => 'mod_rack' }
+            )
+            platforms_for( page ).should include :ruby
+            platforms_for( page ).should include :rack
+        end
+    end
+
+end

data/spec/fingerprinters/languages/asp_spec.rb

@@ -0,0 +1,40 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::ASP do
+    include_examples 'fingerprinter'
+
+    context 'when the page has a .asp extension' do
+        it 'identifies it as ASP' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.asp' )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is a ASPSESSIONID query parameter' do
+        it 'identifies it as ASP' do
+            page = Arachni::Page.new(
+                url:        'http://stuff.com/blah?ASPSESSIONID=stuff',
+                query_vars: {
+                    'ASPSESSIONID' => 'stuff'
+                }
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is a ASPSESSIONID cookie' do
+        it 'identifies it as ASP' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new( 'http://stuff.com/blah',
+                                               'ASPSESSIONID' => 'stuff' )]
+
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :windows
+        end
+    end
+
+end

data/spec/fingerprinters/languages/aspx_spec.rb

@@ -0,0 +1,78 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::ASPX do
+    include_examples 'fingerprinter'
+
+    context 'when the page has a .aspx extension' do
+        it 'identifies it as ASPX' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.aspx' )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :aspx
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is a session ID in the path' do
+        it 'identifies it as ASPX' do
+            page = Arachni::Page.new(
+                url:        'http://blah.com/(S(yn5cby55lgzstcen0ng2b4iq))/stuff'
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :aspx
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is a ASP.NET_SessionId cookie' do
+        it 'identifies it as ASPX' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new( 'http://stuff.com/blah',
+                                               'ASP.NET_SessionId' => 'stuff' )]
+
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :aspx
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is an X-Powered-By header' do
+        it 'identifies it as ASPX' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'X-Powered-By' => 'ASP.NET'  }
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :aspx
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is an X-AspNet-Version header' do
+        it 'identifies it as ASPX' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'X-AspNet-Version' => '4.0.30319' }
+
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :aspx
+            platforms_for( page ).should include :windows
+        end
+    end
+
+    context 'when there is an X-AspNetMvc-Version header' do
+        it 'identifies it as ASPX' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'X-AspNetMvc-Version' => '2.0' }
+
+            )
+            platforms_for( page ).should include :asp
+            platforms_for( page ).should include :aspx
+            platforms_for( page ).should include :windows
+        end
+    end
+
+end

data/spec/fingerprinters/languages/jsp_spec.rb

@@ -0,0 +1,58 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::JSP do
+    include_examples 'fingerprinter'
+
+    context 'when the page has a .jsp extension' do
+        it 'identifies it as JSP' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.jsp' )
+            platforms_for( page ).should include :jsp
+        end
+    end
+
+    context 'when there is a JSESSIONID query parameter' do
+        it 'identifies it as JSP' do
+            page = Arachni::Page.new(
+                url:        'http://stuff.com/blah?JSESSIONID=stuff',
+                query_vars: {
+                    'JSESSIONID' => 'stuff'
+                }
+            )
+            platforms_for( page ).should include :jsp
+        end
+    end
+
+    context 'when there is a JSESSIONID cookie' do
+        it 'identifies it as JSP' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new( 'http://stuff.com/blah',
+                                               'JSESSIONID' => 'stuff' )]
+
+            )
+            platforms_for( page ).should include :jsp
+        end
+    end
+
+    context 'when there is an X-Powered-By header with Servlet' do
+        it 'identifies it as JSP' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers:  { 'X-Powered-By' => 'Servlet/2.4' }
+
+            )
+            platforms_for( page ).should include :jsp
+        end
+    end
+
+    context 'when there is an X-Powered-By header with JSP' do
+        it 'identifies it as JSP' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers:  { 'X-Powered-By' => 'JSP/2.1' }
+
+            )
+            platforms_for( page ).should include :jsp
+        end
+    end
+end

data/spec/fingerprinters/languages/php_spec.rb

@@ -0,0 +1,61 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::PHP do
+    include_examples 'fingerprinter'
+
+    context 'when the page has a .php extension' do
+        it 'identifies it as PHP' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.php' )
+            platforms_for( page ).should include :php
+        end
+    end
+
+    context 'when the page has a .php/ rewrite' do
+        it 'identifies it as PHP' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.php/Stuff/1' )
+            platforms_for( page ).should include :php
+        end
+    end
+
+    context 'when the page has a .php5 (or similarly numbered) extension' do
+        it 'identifies it as PHP' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.php5' )
+            platforms_for( page ).should include :php
+        end
+    end
+
+    context 'when there is a PHPSESSID query parameter' do
+        it 'identifies it as PHP' do
+            page = Arachni::Page.new(
+                url:        'http://stuff.com/blah?PHPSESSID=stuff',
+                query_vars: {
+                    'PHPSESSID' => 'stuff'
+                }
+            )
+            platforms_for( page ).should include :php
+        end
+    end
+
+    context 'when there is a PHPSESSID cookie' do
+        it 'identifies it as PHP' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new( 'http://stuff.com/blah',
+                                               'PHPSESSID' => 'stuff' )]
+
+            )
+            platforms_for( page ).should include :php
+        end
+    end
+
+    context 'when there is an X-Powered-By header' do
+        it 'identifies it as PHP' do
+            page = Arachni::Page.new(
+                url: 'http://stuff.com/blah',
+                response_headers: { 'X-Powered-By' => 'PHP/5.1.2' }
+            )
+            platforms_for( page ).should include :php
+        end
+    end
+
+end

data/spec/fingerprinters/languages/python_spec.rb

@@ -0,0 +1,23 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Python do
+    include_examples 'fingerprinter'
+
+    context 'when the page has a .py extension' do
+        it 'identifies it as Python' do
+            page = Arachni::Page.new( url: 'http://stuff.com/blah.py' )
+            platforms_for( page ).should include :python
+        end
+    end
+
+    context 'when there is an X-Powered-By header' do
+        it 'identifies it as Python' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'X-Powered-By' => 'Python/stuff' }
+            )
+            platforms_for( page ).should include :python
+        end
+    end
+
+end

data/spec/fingerprinters/languages/ruby.rb

@@ -0,0 +1,34 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Ruby do
+    include_examples 'fingerprinter'
+
+    context 'when there is an Server header' do
+        described_class::IDs.each do |id|
+            context "and it contains #{id}" do
+                it 'identifies it as Ruby' do
+                    page = Arachni::Page.new(
+                        url:     'http://stuff.com/blah',
+                        response_headers: { 'Server' => "Apache/2.2.21 (#{id})" }
+                    )
+                    platforms_for( page ).should include :ruby
+                end
+            end
+        end
+    end
+
+    context 'when there is a X-Powered-By header' do
+        described_class::IDs.each do |id|
+            context "and it contains #{id}" do
+                it 'identifies it as Ruby' do
+                    page = Arachni::Page.new(
+                        url:     'http://stuff.com/blah',
+                        response_headers: { 'X-Powered-By' => "Apache/2.2.21 (#{id})" }
+                    )
+                    platforms_for( page ).should include :ruby
+                end
+            end
+        end
+    end
+
+end

data/spec/fingerprinters/os/bsd_spec.rb

@@ -0,0 +1,26 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::BSD do
+    include_examples 'fingerprinter'
+
+    context 'when there is an Server header' do
+        it 'identifies it as BSD' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'Server' => 'Apache/2.2.21 (FreeBSD)' }
+            )
+            platforms_for( page ).should include :bsd
+        end
+    end
+
+    context 'when there is a X-Powered-By header' do
+        it 'identifies it as BSD' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'X-Powered-By' => 'Stuf/0.4 (FreeBSD)' }
+            )
+            platforms_for( page ).should include :bsd
+        end
+    end
+
+end

data/spec/fingerprinters/os/linux_spec.rb

@@ -0,0 +1,34 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Linux do
+    include_examples 'fingerprinter'
+
+    context 'when there is an Server header' do
+        described_class::IDs.each do |id|
+            context "and it contains #{id}" do
+                it 'identifies it as Linux' do
+                    page = Arachni::Page.new(
+                        url:     'http://stuff.com/blah',
+                        response_headers: { 'Server' => "Apache/2.2.21 (#{id})" }
+                    )
+                    platforms_for( page ).should include :linux
+                end
+            end
+        end
+    end
+
+    context 'when there is a X-Powered-By header' do
+        described_class::IDs.each do |id|
+            context "and it contains #{id}" do
+                it 'identifies it as Linux' do
+                    page = Arachni::Page.new(
+                        url:     'http://stuff.com/blah',
+                        response_headers: { 'X-Powered-By' => "Apache/2.2.21 (#{id})" }
+                    )
+                    platforms_for( page ).should include :linux
+                end
+            end
+        end
+    end
+
+end

data/spec/fingerprinters/os/solaris_spec.rb

@@ -0,0 +1,34 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Solaris do
+    include_examples 'fingerprinter'
+
+    context 'when there is an Server header' do
+        described_class::IDs.each do |id|
+            context "and it contains #{id}" do
+                it 'identifies it as Solaris' do
+                    page = Arachni::Page.new(
+                        url:     'http://stuff.com/blah',
+                        response_headers: { 'Server' => "Apache/2.2.21 (#{id})" }
+                    )
+                    platforms_for( page ).should include :solaris
+                end
+            end
+        end
+    end
+
+    context 'when there is a X-Powered-By header' do
+        described_class::IDs.each do |id|
+            context "and it contains #{id}" do
+                it 'identifies it as Solaris' do
+                    page = Arachni::Page.new(
+                        url:     'http://stuff.com/blah',
+                        response_headers: { 'X-Powered-By' => "Apache/2.2.21 (#{id})" }
+                    )
+                    platforms_for( page ).should include :solaris
+                end
+            end
+        end
+    end
+
+end

data/spec/fingerprinters/os/unix_spec.rb

@@ -0,0 +1,26 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Unix do
+    include_examples 'fingerprinter'
+
+    context 'when there is an Server header' do
+        it 'identifies it as Unix' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'Server' => 'Apache/2.2.21 (Unix)' }
+            )
+            platforms_for( page ).should include :unix
+        end
+    end
+
+    context 'when there is a X-Powered-By header' do
+        it 'identifies it as Unix' do
+            page = Arachni::Page.new(
+                url:     'http://stuff.com/blah',
+                response_headers: { 'X-Powered-By' => 'Stuf/0.4 (Unix)' }
+            )
+            platforms_for( page ).should include :unix
+        end
+    end
+
+end