arachni 0.4.2 → 0.4.3

data/spec/reports/yaml_spec.rb

@@ -1,4 +1,4 @@
-require_relative '../spec_helper'
+require 'spec_helper'
 
 describe name_from_filename do
     include_examples 'report'

data/spec/spec_helper.rb

@@ -1,32 +1,33 @@
-# This file was generated by the `rspec --init` command. Conventionally, all
-# specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
-# Require this file using `require "spec_helper.rb"` to ensure that it is only
-# loaded once.
-#
-require_relative '../lib/arachni'
-#require_relative '../lib/arachni/ui/cli/output'
-require 'eventmachine'
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
 
-@@root = File.dirname( File.absolute_path( __FILE__ ) ) + '/'
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
 
-Dir.glob( @@root + 'shared/**/*.rb' ).each { |f| require f }
+# Uncomment to show output from the Framework.
+#require_relative '../lib/arachni/ui/cli/output'
+require_relative '../lib/arachni'
+require_relative '../lib/arachni/processes'
+require_relative '../lib/arachni/processes/helpers'
 
-require @@root + 'helpers/misc'
-Dir.glob( @@root + 'helpers/**/*.rb' ).each { |f| require f }
+require_relative 'support/helpers/paths'
+require_relative 'support/helpers/requires'
 
-@@server_pids ||= []
-@@servers     ||= {}
-Dir.glob( File.join( @@root + 'servers/**', "*.rb" ) ) do |path|
-    name = File.basename( path, '.rb' ).to_sym
-    next if name == :base
+Dir.glob( "#{support_path}/{lib,helpers,shared}/**/*.rb" ).each { |f| require f }
 
-    @@servers[name] = {
-        port: random_port,
-        path: path
-    }
-end
+# Uncomment to show output from spawned processes.
+#Arachni::Processes::Manager.preserve_output
 
-# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
 RSpec.configure do |config|
     config.treat_symbols_as_metadata_keys_with_true_values = true
     config.run_all_when_everything_filtered = true
@@ -37,17 +38,11 @@ RSpec.configure do |config|
         #Arachni::UI::Output.mute
         #Arachni::UI::Output.debug_on
 
-        kill_processes
-        kill_servers
-        kill_em
-
-        Arachni::Framework.reset
-        reset_options
-        Arachni::HTTP.reset
+        killall
+        reset_all
     end
 
     config.after( :suite ) do
-        kill_processes
-        kill_servers
+        killall
     end
 end

data/spec/support/fixtures/fingerprinters/test.rb

@@ -0,0 +1,36 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+module Arachni
+module Platform::Fingerprinters
+
+#
+# Identifies Apache web servers.
+#
+# @author Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
+#
+# @version 0.1
+#
+class Test < Platform::Fingerprinter
+
+    def run
+        platforms << :unix << :apache
+    end
+
+end
+
+end
+end

data/spec/{fixtures → support/fixtures}/plugins/spider_hook.rb

@@ -30,6 +30,7 @@ class Arachni::Plugins::SpiderHook < Arachni::Plugin::Base
     def clean_up
         framework.resume
         wait_while_framework_running
+        sleep 1 # emulate some latency to catch race conditions
         register_results( framework.self_url => @urls )
     end
 

data/spec/support/helpers/framework.rb

@@ -0,0 +1,19 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+def issues
+    Arachni::Module::Manager.results
+end

data/spec/support/helpers/misc.rb

@@ -0,0 +1,19 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+def available_port
+    Arachni::Utilities.available_port
+end

data/spec/support/helpers/paths.rb

@@ -0,0 +1,31 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+def name_from_filename
+    File.basename( caller.first.split( ':' ).first, '_spec.rb' )
+end
+
+def spec_path
+    File.expand_path( File.dirname( File.absolute_path( __FILE__ )  ) + '/../../' ) + '/'
+end
+
+def support_path
+    "#{spec_path}support/"
+end
+
+def fixtures_path
+    "#{support_path}fixtures/"
+end

data/spec/support/helpers/requires.rb

@@ -0,0 +1,24 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+def require_lib( path )
+    require Arachni::Options.dir['lib'] + path
+end
+
+def require_testee
+    require Kernel.caller.first.split( ':' ).first.
+                gsub( '/spec/arachni', '/lib/arachni' ).gsub( '_spec', '' )
+end

data/spec/support/helpers/resets.rb

@@ -0,0 +1,42 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+def reset_options
+    opts = Arachni::Options.instance
+    opts.reset
+    opts.rpc_address = 'localhost'
+
+    opts.dir['plugins']        = fixtures_path + 'plugins/'
+    opts.dir['modules']        = fixtures_path + 'modules/'
+    opts.dir['fingerprinters'] = fixtures_path + 'fingerprinters/'
+    opts.dir['logs']           = spec_path + 'support/logs/'
+
+    opts
+end
+
+def reset_all
+    Arachni::Framework.reset
+    reset_options
+    Arachni::HTTP.reset
+end
+
+def killall
+    instance_killall
+    dispatcher_killall
+    web_server_killall
+    process_killall
+    process_kill_em
+end

data/spec/support/helpers/web_server.rb

@@ -0,0 +1,27 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+def web_server_url_for( *args )
+    WebServerManager.url_for( *args )
+end
+
+def web_server_spawn( *args )
+    WebServerManager.spawn( *args )
+end
+
+def web_server_killall
+    WebServerManager.killall
+end

data/spec/support/lib/web_server_manager.rb

@@ -0,0 +1,120 @@
+=begin
+    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+=end
+
+require 'net/http'
+
+class WebServerManager
+    include Singleton
+    include Arachni::Utilities
+    attr_reader :lib
+
+    def initialize
+        @lib     = "#{support_path}/servers/"
+        @servers = {}
+
+        Dir.glob( File.join( @lib + '**', '*.rb' ) ) do |path|
+            @servers[normalize_name( File.basename( path, '.rb' ) )] = {
+                port: available_port,
+                path: path
+            }
+        end
+    end
+
+    def spawn( name, port = nil )
+        server_info        = data_for( name )
+        server_info[:port] = port if port
+        server_info[:pid] = process_quiet_fork {
+            exec 'ruby', server_info[:path], "-p #{server_info[:port]}"
+        }
+
+        begin
+            Timeout::timeout( 10 ) { sleep 0.1 while !up?( name ) }
+        rescue Timeout::Error
+            abort "Server '#{name}' never started!"
+        end
+
+        url_for( name, false )
+    end
+
+    def url_for( name, lazy_start = true )
+        spawn( name ) if lazy_start && !up?( name )
+
+        "#{protocol_for( name )}://#{address_for( name )}:#{port_for( name )}"
+    end
+
+    def address_for( name )
+        '127.0.0.2'
+    end
+
+    def port_for( name )
+        data_for( name )[:port]
+    end
+
+    def protocol_for( name )
+        'http'
+    end
+
+    def kill( name )
+        server_info = data_for( name )
+        return if !server_info[:pid]
+
+        r = process_kill( server_info[:pid] )
+        server_info.delete( :pid ) if r
+        r
+    end
+
+    def killall
+        @servers.keys.each { |name| kill name }
+    end
+
+    def up?( name )
+        begin
+            Net::HTTP.get_response( URI.parse( url_for( name, false ) ) )
+            true
+        rescue Errno::ECONNRESET
+            true
+        rescue
+            false
+        end
+    end
+
+    def self.method_missing( sym, *args, &block )
+        if instance.respond_to?( sym )
+            instance.send( sym, *args, &block )
+        elsif
+        super( sym, *args, &block )
+        end
+    end
+
+    def self.respond_to?( m )
+        super( m ) || instance.respond_to?( m )
+    end
+
+    private
+
+    def normalize_name( name )
+        name.to_s.to_sym
+    end
+
+    def data_for( name )
+        @servers[normalize_name( name )]
+    end
+
+    def set_data_for(name, data)
+        @servers[normalize_name(name)] = data
+    end
+
+end