arachni 0.4.5.2 → 0.4.6

data/modules/recon/interesting_responses.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/modules/recon/localstart_asp.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.
@@ -18,11 +18,11 @@
 #
 # @author Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 #
-# @version 0.1
+# @version 0.1.1
 class Arachni::Modules::LocalstartASP < Arachni::Module::Base
 
     def run
-        return if page.platforms.os.any? && !page.platforms.os.include?( :windows )
+        return if page.platforms.languages.any? && !page.platforms.languages.include?( :asp )
 
         path = get_path( page.url )
         return if audited?( path )
@@ -31,7 +31,7 @@ class Arachni::Modules::LocalstartASP < Arachni::Module::Base
         http.get( "#{path}/#{seed}" ) do |response|
             # If it needs auth by default then don't bother checking because
             # we'll get an FP.
-            return if response.code == 401
+            next if response.code == 401
 
             url = "#{path}/localstart.asp"
 
@@ -52,7 +52,7 @@ class Arachni::Modules::LocalstartASP < Arachni::Module::Base
             description: %q{Checks for localstart.asp.},
             elements:    [ Element::SERVER ],
             author:      'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
-            version:     '0.1',
+            version:     '0.1.1',
             targets:     %w(Generic),
             issue:       {
                 name:            %q{Exposed localstart.asp page},

data/modules/recon/webdav.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/modules/recon/x_forwarded_for_access_restriction_bypass.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/modules/recon/xst.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/anchors.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/areas.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/forms.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/frames.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/generic.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/links.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/meta_refresh.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/path_extractors/scripts.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/autologin.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.
@@ -14,7 +14,6 @@
     limitations under the License.
 =end
 
-#
 # Automated login plugin.
 #
 # It looks for the login form in the user provided URL,
@@ -23,8 +22,7 @@
 #
 # @author Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 #
-# @version 0.1.5
-#
+# @version 0.1.6
 class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
 
     MSG_SUCCESS     = 'Form submitted successfully.'
@@ -38,6 +36,8 @@ class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
 
         @params   = form_parse_request_body( options['params'] )
         @verifier = Regexp.new( options['check'] )
+
+        @errored = false
     end
 
     def run
@@ -46,7 +46,8 @@ class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
 
         if !login_form
             register_results( code: 0, msg: MSG_FAILURE + options['url'] )
-            print_bad MSG_FAILURE + options['url']
+            print_error MSG_FAILURE + options['url']
+            @errored = true
             return
         end
 
@@ -58,7 +59,8 @@ class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
         res = login_form.submit( async: false, update_cookies: true, follow_location: false ).response
         if !res
             register_results( code: -1, msg: MSG_NO_RESPONSE )
-            print_bad MSG_NO_RESPONSE
+            print_error MSG_NO_RESPONSE
+            @errored = true
             return
         end
 
@@ -72,7 +74,8 @@ class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
 
         if !body.match( @verifier )
             register_results( code: -2, msg: MSG_NO_MATCH )
-            print_bad MSG_NO_MATCH
+            print_error MSG_NO_MATCH
+            @errored = true
             return
         end
 
@@ -89,6 +92,11 @@ class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
     end
 
     def clean_up
+        if @errored
+            print_info 'The scan will not progress, you can safely abort the process.'
+            return
+        end
+
         framework.resume
     end
 
@@ -100,7 +108,7 @@ class Arachni::Plugins::AutoLogin < Arachni::Plugin::Base
                 of the response and request as framework-wide cookies to be used by the spider later on.
             },
             author:      'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
-            version:     '0.1.5',
+            version:     '0.1.6',
             options:     [
                 Options::URL.new( 'url', [true, 'The URL that contains the login form.'] ),
                 Options::String.new( 'params', [true, 'Form parameters to submit. ( username=user&password=pass )'] ),

data/plugins/beep_notify.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/{defaults/content_types.rb → content_types.rb}

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/cookie_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.
@@ -14,24 +14,26 @@
     limitations under the License.
 =end
 
-#
 # Simple cookie collector
 #
 # @author Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
-#
-# @version 0.1.5
-#
+# @version 0.1.6
 class Arachni::Plugins::CookieCollector < Arachni::Plugin::Base
 
     is_distributable
 
     def prepare
         @cookies = []
+
+        if options['filter']
+            @filter = Regexp.new( options['filter'] )
+        end
     end
 
     def run
         framework.http.add_on_new_cookies do |cookies, res|
-            update( cookies.inject({}) { |h, c| h.merge!( c.simple ); h }, res )
+            cookies_hash = cookies.inject({}) { |h, c| h.merge!( c.simple ); h }
+            update( filter( cookies_hash ), res )
         end
     end
 
@@ -55,20 +57,28 @@ class Arachni::Plugins::CookieCollector < Arachni::Plugin::Base
         register_results( @cookies )
     end
 
+    def filter( cookies )
+        return cookies if !@filter
+        cookies.select { |name, _| name =~ @filter }
+    end
+
     def self.merge( results )
         results.flatten
     end
 
     def self.info
         {
-            :name => 'Cookie collector',
-            :description => %q{Monitors and collects cookies while establishing a timeline of changes.
+            name:        'Cookie collector',
+            description: %q{Monitors and collects cookies while establishing a timeline of changes.
 
                 WARNING: Highly discouraged when the audit includes cookies.
                     It will log thousands of results leading to a huge report,
-                    highly increased memory and CPU usage.},
-            :author => 'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
-            :version => '0.1.5'
+                    highly increased memory consumption and CPU usage.},
+            author:      'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
+            version:     '0.1.6',
+            options:     [
+                Options::String.new( 'filter', [false, 'Pattern to use to determine which cookies to log, based on cookie name.'] )
+            ]
         }
     end
 

data/plugins/defaults/autothrottle.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/defaults/healthmap.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/defaults/meta/remedies/discovery.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/defaults/meta/remedies/timing_attacks.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.
@@ -14,14 +14,12 @@
     limitations under the License.
 =end
 
-#
 # Provides a notice for issues uncovered by timing attacks when the affected audited
 # pages returned unusually high response times to begin with.
 #
 # @author Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
 #
-# @version 0.1.5
-#
+# @version 0.1.7
 class Arachni::Plugins::TimingAttacks < Arachni::Plugin::Base
 
     is_distributable
@@ -49,7 +47,7 @@ class Arachni::Plugins::TimingAttacks < Arachni::Plugin::Base
             # let's hope for a proper and clean parse but be prepared for
             # all hell to break loose too...
             begin
-                url = uri_parse( res.effective_url ).up_to_path
+                url = uri_parse( res.effective_url ).up_to_path.hash
             rescue => e
                 next
             end
@@ -57,7 +55,7 @@ class Arachni::Plugins::TimingAttacks < Arachni::Plugin::Base
             @counter[url] ||= @times[url] ||= 0
 
             # add up all request times for a specific path
-            @times[url] += res.start_transfer_time
+            @times[url] += res.time
 
             # add up all requests for each path
             @counter[url] += 1
@@ -73,7 +71,7 @@ class Arachni::Plugins::TimingAttacks < Arachni::Plugin::Base
         @times.each_pair { |url, time| avg[url] = time / @counter[url] }
 
         inconclusive = framework.modules.issues.map.with_index do |issue, idx|
-            response_time = avg[ uri_parse( issue.url ).up_to_path ]
+            response_time = avg[uri_parse( issue.url ).up_to_path.hash]
 
             next if !issue.tags || !issue.tags.includes_tags?( TAG ) ||
                 !response_time || response_time < TIME_THRESHOLD
@@ -111,7 +109,7 @@ class Arachni::Plugins::TimingAttacks < Arachni::Plugin::Base
                 Pages with high response times usually include heavy-duty processing
                 which makes them prime targets for Denial-of-Service attacks.},
             author:      'Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>',
-            version:     '0.1.5',
+            version:     '0.1.7',
             tags:        %w(anomaly timing attacks meta)
         }
     end

data/plugins/defaults/meta/uniformity.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/defaults/resolver.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/email_notify.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/form_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/http_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/libnotify.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.

data/plugins/profiler.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <tasos.laskos@gmail.com>
+    Copyright 2010-2014 Tasos Laskos <tasos.laskos@gmail.com>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.