arachni 0.4.7 → 1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (1585) hide show
  1. checksums.yaml +5 -13
  2. data/AUTHORS.md +1 -1
  3. data/CHANGELOG.md +211 -0
  4. data/CONTRIBUTORS.md +1 -0
  5. data/Gemfile +23 -2
  6. data/LICENSE.md +34 -1
  7. data/README.md +211 -127
  8. data/Rakefile +79 -67
  9. data/arachni.gemspec +54 -62
  10. data/bin/arachni +6 -18
  11. data/bin/arachni_console +5 -13
  12. data/bin/arachni_multi +6 -16
  13. data/bin/arachni_reporter +12 -0
  14. data/bin/arachni_restore +12 -0
  15. data/bin/arachni_rpc +6 -16
  16. data/bin/arachni_rpcd +6 -17
  17. data/bin/arachni_rpcd_monitor +6 -18
  18. data/bin/arachni_script +8 -19
  19. data/components/checks/active/code_injection.rb +123 -0
  20. data/components/checks/active/code_injection_php_input_wrapper.rb +99 -0
  21. data/components/checks/active/code_injection_timing.rb +106 -0
  22. data/components/checks/active/csrf.rb +218 -0
  23. data/components/checks/active/file_inclusion.rb +152 -0
  24. data/components/checks/active/ldap_injection.rb +109 -0
  25. data/{modules/audit/ldapi → components/checks/active/ldap_injection}/errors.txt +0 -0
  26. data/components/checks/active/no_sql_injection.rb +94 -0
  27. data/components/checks/active/no_sql_injection/patterns/mongodb +1 -0
  28. data/{extras/placeholder → components/checks/active/no_sql_injection/regexp_ignore.txt} +0 -0
  29. data/components/checks/active/no_sql_injection_differential.rb +78 -0
  30. data/components/checks/active/os_cmd_injection.rb +116 -0
  31. data/components/checks/active/os_cmd_injection_timing.rb +92 -0
  32. data/components/checks/active/path_traversal.rb +174 -0
  33. data/components/checks/active/response_splitting.rb +94 -0
  34. data/components/checks/active/rfi.rb +172 -0
  35. data/components/checks/active/session_fixation.rb +117 -0
  36. data/components/checks/active/source_code_disclosure.rb +177 -0
  37. data/components/checks/active/sql_injection.rb +123 -0
  38. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/access +0 -0
  39. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/coldfusion +0 -0
  40. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/db2 +0 -0
  41. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/emc +0 -0
  42. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/firebird +0 -0
  43. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/frontbase +0 -0
  44. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/hsqldb +0 -0
  45. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/informix +0 -0
  46. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/ingres +0 -0
  47. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/interbase +0 -0
  48. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/maxdb +0 -0
  49. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/mssql +0 -0
  50. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/mysql +0 -0
  51. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/oracle +0 -0
  52. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/pgsql +0 -0
  53. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/sqlite +0 -0
  54. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/sybase +0 -0
  55. data/{modules/audit/sqli → components/checks/active/sql_injection}/regexp_ignore.txt +0 -0
  56. data/components/checks/active/sql_injection_differential.rb +114 -0
  57. data/{modules/audit/sqli_blind_rdiff → components/checks/active/sql_injection_differential}/payloads.txt +0 -0
  58. data/components/checks/active/sql_injection_timing.rb +98 -0
  59. data/{modules/audit/sqli_blind_timing → components/checks/active/sql_injection_timing}/mssql.txt +0 -0
  60. data/{modules/audit/sqli_blind_timing → components/checks/active/sql_injection_timing}/mysql.txt +0 -0
  61. data/{modules/audit/sqli_blind_timing → components/checks/active/sql_injection_timing}/pgsql.txt +0 -0
  62. data/components/checks/active/trainer.rb +40 -0
  63. data/components/checks/active/unvalidated_redirect.rb +108 -0
  64. data/components/checks/active/xpath_injection.rb +87 -0
  65. data/{modules/audit/xpath → components/checks/active/xpath_injection}/errors.txt +0 -0
  66. data/components/checks/active/xss.rb +169 -0
  67. data/components/checks/active/xss_dom.rb +119 -0
  68. data/components/checks/active/xss_dom_inputs.rb +132 -0
  69. data/components/checks/active/xss_dom_script_context.rb +118 -0
  70. data/components/checks/active/xss_event.rb +165 -0
  71. data/components/checks/active/xss_path.rb +146 -0
  72. data/components/checks/active/xss_script_context.rb +207 -0
  73. data/components/checks/active/xss_tag.rb +135 -0
  74. data/components/checks/passive/allowed_methods.rb +92 -0
  75. data/components/checks/passive/backdoors.rb +79 -0
  76. data/{modules/recon → components/checks/passive}/backdoors/filenames.txt +0 -0
  77. data/components/checks/passive/backup_directories.rb +86 -0
  78. data/components/checks/passive/backup_directories/formats.txt +56 -0
  79. data/components/checks/passive/backup_files.rb +99 -0
  80. data/components/checks/passive/backup_files/formats.txt +106 -0
  81. data/components/checks/passive/common_directories.rb +81 -0
  82. data/{modules/recon → components/checks/passive}/common_directories/directories.txt +0 -0
  83. data/components/checks/passive/common_files.rb +73 -0
  84. data/components/checks/passive/common_files/filenames.txt +24 -0
  85. data/components/checks/passive/directory_listing.rb +129 -0
  86. data/components/checks/passive/grep/captcha.rb +73 -0
  87. data/components/checks/passive/grep/cookie_set_for_parent_domain.rb +71 -0
  88. data/components/checks/passive/grep/credit_card.rb +124 -0
  89. data/components/checks/passive/grep/cvs_svn_users.rb +75 -0
  90. data/components/checks/passive/grep/emails.rb +53 -0
  91. data/components/checks/passive/grep/form_upload.rb +75 -0
  92. data/components/checks/passive/grep/hsts.rb +74 -0
  93. data/components/checks/passive/grep/html_objects.rb +45 -0
  94. data/components/checks/passive/grep/http_only_cookies.rb +72 -0
  95. data/components/checks/passive/grep/insecure_cookies.rb +74 -0
  96. data/components/checks/passive/grep/mixed_resource.rb +109 -0
  97. data/components/checks/passive/grep/password_autocomplete.rb +80 -0
  98. data/components/checks/passive/grep/private_ip.rb +73 -0
  99. data/components/checks/passive/grep/ssn.rb +62 -0
  100. data/components/checks/passive/grep/unencrypted_password_forms.rb +88 -0
  101. data/components/checks/passive/htaccess_limit.rb +71 -0
  102. data/components/checks/passive/http_put.rb +91 -0
  103. data/components/checks/passive/interesting_responses.rb +88 -0
  104. data/components/checks/passive/localstart_asp.rb +88 -0
  105. data/components/checks/passive/origin_spoof_access_restriction_bypass.rb +83 -0
  106. data/components/checks/passive/webdav.rb +101 -0
  107. data/components/checks/passive/xst.rb +90 -0
  108. data/components/fingerprinters/frameworks/rack.rb +33 -0
  109. data/components/fingerprinters/languages/asp.rb +34 -0
  110. data/components/fingerprinters/languages/aspx.rb +55 -0
  111. data/components/fingerprinters/languages/jsp.rb +34 -0
  112. data/components/fingerprinters/languages/php.rb +35 -0
  113. data/components/fingerprinters/languages/python.rb +32 -0
  114. data/components/fingerprinters/languages/ruby.rb +33 -0
  115. data/components/fingerprinters/os/bsd.rb +28 -0
  116. data/components/fingerprinters/os/linux.rb +34 -0
  117. data/components/fingerprinters/os/solaris.rb +33 -0
  118. data/components/fingerprinters/os/unix.rb +28 -0
  119. data/components/fingerprinters/os/windows.rb +33 -0
  120. data/components/fingerprinters/servers/apache.rb +28 -0
  121. data/components/fingerprinters/servers/iis.rb +28 -0
  122. data/components/fingerprinters/servers/jetty.rb +28 -0
  123. data/components/fingerprinters/servers/nginx.rb +28 -0
  124. data/components/fingerprinters/servers/tomcat.rb +28 -0
  125. data/components/path_extractors/anchors.rb +29 -0
  126. data/components/path_extractors/areas.rb +29 -0
  127. data/components/path_extractors/comments.rb +21 -0
  128. data/components/path_extractors/forms.rb +29 -0
  129. data/components/path_extractors/frames.rb +29 -0
  130. data/components/path_extractors/generic.rb +76 -0
  131. data/components/path_extractors/links.rb +29 -0
  132. data/components/path_extractors/meta_refresh.rb +50 -0
  133. data/components/path_extractors/scripts.rb +31 -0
  134. data/components/plugins/autologin.rb +120 -0
  135. data/components/plugins/beep_notify.rb +43 -0
  136. data/components/plugins/content_types.rb +110 -0
  137. data/components/plugins/cookie_collector.rb +94 -0
  138. data/components/plugins/defaults/autothrottle.rb +73 -0
  139. data/components/plugins/defaults/healthmap.rb +79 -0
  140. data/components/plugins/defaults/meta/remedies/discovery.rb +122 -0
  141. data/components/plugins/defaults/meta/remedies/timing_attacks.rb +98 -0
  142. data/components/plugins/defaults/meta/uniformity.rb +55 -0
  143. data/components/plugins/email_notify.rb +112 -0
  144. data/components/plugins/form_dicattack.rb +128 -0
  145. data/components/plugins/http_dicattack.rb +102 -0
  146. data/components/plugins/proxy.rb +492 -0
  147. data/{plugins → components/plugins}/proxy/panel/403_forbidden.html.erb +0 -0
  148. data/{plugins → components/plugins}/proxy/panel/404_not_found.html.erb +0 -0
  149. data/{plugins → components/plugins}/proxy/panel/css/bootstrap-responsive.css +0 -0
  150. data/{plugins → components/plugins}/proxy/panel/css/bootstrap.min.css +0 -0
  151. data/{plugins → components/plugins}/proxy/panel/css/panel.css +0 -0
  152. data/{plugins → components/plugins}/proxy/panel/help.html.erb +0 -0
  153. data/{plugins → components/plugins}/proxy/panel/img/glyphicons-halflings-white.png +0 -0
  154. data/{plugins → components/plugins}/proxy/panel/img/glyphicons-halflings.png +0 -0
  155. data/{plugins → components/plugins}/proxy/panel/img/record.png +0 -0
  156. data/{plugins → components/plugins}/proxy/panel/inspect.html.erb +0 -0
  157. data/{plugins → components/plugins}/proxy/panel/js/bootstrap.min.js +0 -0
  158. data/{plugins → components/plugins}/proxy/panel/js/jquery.min.js +0 -0
  159. data/{plugins → components/plugins}/proxy/panel/js/panel.js +0 -0
  160. data/{plugins → components/plugins}/proxy/panel/layout.html.erb +0 -0
  161. data/components/plugins/proxy/panel/page_accordion.html.erb +67 -0
  162. data/{plugins → components/plugins}/proxy/panel/page_twin_accordion.html.erb +0 -0
  163. data/components/plugins/proxy/panel/panel.html.erb +69 -0
  164. data/{plugins → components/plugins}/proxy/panel/shutdown_message.html.erb +0 -0
  165. data/{plugins → components/plugins}/proxy/panel/sign_in.html.erb +0 -0
  166. data/{plugins → components/plugins}/proxy/panel/vectors.yml.erb +0 -0
  167. data/{plugins → components/plugins}/proxy/panel/verify_login_check.html.erb +0 -0
  168. data/{plugins → components/plugins}/proxy/panel/verify_login_final.html.erb +0 -0
  169. data/components/plugins/proxy/panel/verify_login_sequence.html.erb +45 -0
  170. data/components/plugins/proxy/template_scope.rb +130 -0
  171. data/components/plugins/script.rb +48 -0
  172. data/components/plugins/uncommon_headers.rb +92 -0
  173. data/components/plugins/vector_feed.rb +225 -0
  174. data/components/plugins/waf_detector.rb +169 -0
  175. data/components/reporters/ap.rb +38 -0
  176. data/components/reporters/html.rb +468 -0
  177. data/components/reporters/html/default.erb +68 -0
  178. data/components/reporters/html/default/configuration.erb +78 -0
  179. data/components/reporters/html/default/css/lib/bootstrap-theme.min.css +7 -0
  180. data/components/reporters/html/default/css/lib/bootstrap.min.css +7 -0
  181. data/components/reporters/html/default/css/lib/c3.css +203 -0
  182. data/components/reporters/html/default/css/lib/font-awesome.min.css +4 -0
  183. data/components/reporters/html/default/css/main.css +140 -0
  184. data/components/reporters/html/default/fonts/FontAwesome.otf +0 -0
  185. data/components/reporters/html/default/fonts/fontawesome-webfont.eot +0 -0
  186. data/components/reporters/html/default/fonts/fontawesome-webfont.svg +504 -0
  187. data/components/reporters/html/default/fonts/fontawesome-webfont.ttf +0 -0
  188. data/components/reporters/html/default/fonts/fontawesome-webfont.woff +0 -0
  189. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.eot +0 -0
  190. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.svg +229 -0
  191. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.ttf +0 -0
  192. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.woff +0 -0
  193. data/components/reporters/html/default/issue.erb +81 -0
  194. data/components/reporters/html/default/issue/details.erb +68 -0
  195. data/components/reporters/html/default/issue/info.erb +74 -0
  196. data/components/reporters/html/default/issue/page.erb +117 -0
  197. data/components/reporters/html/default/issue/page/body.erb +42 -0
  198. data/components/reporters/html/default/issue/page/sink/data_flow.erb +95 -0
  199. data/components/reporters/html/default/issue/page/sink/data_flow/arguments.erb +70 -0
  200. data/components/reporters/html/default/issue/page/sink/data_flow/source.erb +1 -0
  201. data/components/reporters/html/default/issue/page/sink/execution_flow.erb +63 -0
  202. data/components/reporters/html/default/issue/page/sink/frame/source.erb +32 -0
  203. data/components/reporters/html/default/issue/page/sink/trace/table.erb +127 -0
  204. data/components/reporters/html/default/issue/page/transitions.erb +86 -0
  205. data/components/reporters/html/default/issue/platform.erb +8 -0
  206. data/components/reporters/html/default/issue/remarks.erb +28 -0
  207. data/components/reporters/html/default/issue/vector.erb +40 -0
  208. data/components/reporters/html/default/issues.erb +46 -0
  209. data/components/reporters/html/default/issues/grouped.erb +147 -0
  210. data/components/reporters/html/default/js/charts.js.erb +117 -0
  211. data/components/reporters/html/default/js/configuration.js.erb +12 -0
  212. data/components/reporters/html/default/js/helpers.js +107 -0
  213. data/components/reporters/html/default/js/init.js.erb +23 -0
  214. data/components/reporters/html/default/js/lib/bootstrap.min.js +6 -0
  215. data/components/reporters/html/default/js/lib/c3.min.js +3 -0
  216. data/components/reporters/html/default/js/lib/d3.min.js +5 -0
  217. data/components/reporters/html/default/js/lib/jquery.min.js +4 -0
  218. data/components/reporters/html/default/navigation.erb +136 -0
  219. data/components/reporters/html/default/plugins.erb +30 -0
  220. data/components/reporters/html/default/shared/hash.erb +10 -0
  221. data/components/reporters/html/default/shared/hash_table.erb +22 -0
  222. data/components/reporters/html/default/sitemap.erb +29 -0
  223. data/components/reporters/html/default/summary.erb +34 -0
  224. data/components/reporters/html/default/summary/charts.erb +67 -0
  225. data/components/reporters/html/default/summary/issues.erb +129 -0
  226. data/components/reporters/json.rb +44 -0
  227. data/components/reporters/marshal.rb +38 -0
  228. data/components/reporters/plugin_formatters/html/autologin.rb +50 -0
  229. data/components/reporters/plugin_formatters/html/content_types.rb +59 -0
  230. data/components/reporters/plugin_formatters/html/cookie_collector.rb +46 -0
  231. data/components/reporters/plugin_formatters/html/form_dicattack.rb +36 -0
  232. data/components/reporters/plugin_formatters/html/healthmap.rb +88 -0
  233. data/components/reporters/plugin_formatters/html/http_dicattack.rb +36 -0
  234. data/components/reporters/plugin_formatters/html/uncommon_headers.rb +40 -0
  235. data/components/reporters/plugin_formatters/html/uniformity.rb +55 -0
  236. data/components/reporters/plugin_formatters/html/waf_detector.rb +69 -0
  237. data/components/reporters/plugin_formatters/stdout/autologin.rb +25 -0
  238. data/components/reporters/plugin_formatters/stdout/content_types.rb +39 -0
  239. data/components/reporters/plugin_formatters/stdout/cookie_collector.rb +31 -0
  240. data/components/reporters/plugin_formatters/stdout/form_dicattack.rb +24 -0
  241. data/components/reporters/plugin_formatters/stdout/healthmap.rb +41 -0
  242. data/components/reporters/plugin_formatters/stdout/http_dicattack.rb +24 -0
  243. data/components/reporters/plugin_formatters/stdout/uncommon_headers.rb +29 -0
  244. data/components/reporters/plugin_formatters/stdout/uniformity.rb +35 -0
  245. data/components/reporters/plugin_formatters/stdout/waf_detector.rb +21 -0
  246. data/components/reporters/plugin_formatters/xml/autologin.rb +28 -0
  247. data/components/reporters/plugin_formatters/xml/content_types.rb +36 -0
  248. data/components/reporters/plugin_formatters/xml/cookie_collector.rb +32 -0
  249. data/components/reporters/plugin_formatters/xml/form_dicattack.rb +22 -0
  250. data/components/reporters/plugin_formatters/xml/healthmap.rb +30 -0
  251. data/components/reporters/plugin_formatters/xml/http_dicattack.rb +22 -0
  252. data/components/reporters/plugin_formatters/xml/uncommon_headers.rb +29 -0
  253. data/components/reporters/plugin_formatters/xml/uniformity.rb +23 -0
  254. data/components/reporters/plugin_formatters/xml/waf_detector.rb +22 -0
  255. data/components/reporters/stdout.rb +226 -0
  256. data/components/reporters/txt.rb +50 -0
  257. data/components/reporters/xml.rb +285 -0
  258. data/components/reporters/xml/schema.xsd +664 -0
  259. data/components/reporters/yaml.rb +37 -0
  260. data/{rpcd_handlers → components/services}/placeholder +0 -0
  261. data/lib/arachni.rb +29 -18
  262. data/lib/arachni/banner.rb +5 -13
  263. data/lib/arachni/browser.rb +1292 -0
  264. data/lib/arachni/browser/element_locator.rb +137 -0
  265. data/lib/arachni/browser/javascript.rb +383 -0
  266. data/lib/arachni/browser/javascript/dom_monitor.rb +31 -0
  267. data/lib/arachni/browser/javascript/proxy.rb +92 -0
  268. data/lib/arachni/browser/javascript/proxy/stub.rb +90 -0
  269. data/lib/arachni/browser/javascript/scripts/dom_monitor.js +146 -0
  270. data/lib/arachni/browser/javascript/scripts/taint_tracer.js +486 -0
  271. data/lib/arachni/browser/javascript/taint_tracer.rb +101 -0
  272. data/lib/arachni/browser/javascript/taint_tracer/frame.rb +73 -0
  273. data/lib/arachni/browser/javascript/taint_tracer/frame/called_function.rb +78 -0
  274. data/lib/arachni/browser/javascript/taint_tracer/sink/base.rb +63 -0
  275. data/lib/arachni/browser/javascript/taint_tracer/sink/data_flow.rb +83 -0
  276. data/lib/arachni/browser/javascript/taint_tracer/sink/execution_flow.rb +30 -0
  277. data/lib/arachni/browser_cluster.rb +414 -0
  278. data/lib/arachni/browser_cluster/job.rb +193 -0
  279. data/lib/arachni/browser_cluster/job/result.rb +29 -0
  280. data/lib/arachni/browser_cluster/jobs/browser_provider.rb +27 -0
  281. data/lib/arachni/browser_cluster/jobs/resource_exploration.rb +60 -0
  282. data/lib/arachni/browser_cluster/jobs/resource_exploration/event_trigger.rb +43 -0
  283. data/lib/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result.rb +23 -0
  284. data/lib/arachni/browser_cluster/jobs/resource_exploration/result.rb +23 -0
  285. data/lib/arachni/browser_cluster/jobs/taint_trace.rb +48 -0
  286. data/lib/arachni/browser_cluster/jobs/taint_trace/event_trigger.rb +33 -0
  287. data/lib/arachni/browser_cluster/jobs/taint_trace/event_trigger/result.rb +23 -0
  288. data/lib/arachni/browser_cluster/jobs/taint_trace/result.rb +23 -0
  289. data/lib/arachni/browser_cluster/worker.rb +277 -0
  290. data/lib/arachni/check.rb +12 -0
  291. data/lib/arachni/check/auditor.rb +612 -0
  292. data/lib/arachni/check/base.rb +177 -0
  293. data/lib/arachni/check/manager.rb +137 -0
  294. data/lib/arachni/component.rb +11 -0
  295. data/lib/arachni/component/base.rb +62 -0
  296. data/lib/arachni/component/manager.rb +92 -90
  297. data/lib/arachni/component/options.rb +6 -28
  298. data/lib/arachni/component/options/address.rb +14 -30
  299. data/lib/arachni/component/options/base.rb +96 -81
  300. data/lib/arachni/component/options/bool.rb +20 -37
  301. data/lib/arachni/component/options/float.rb +12 -31
  302. data/lib/arachni/component/options/int.rb +14 -31
  303. data/lib/arachni/component/options/multiple_choice.rb +40 -0
  304. data/lib/arachni/component/options/object.rb +16 -0
  305. data/lib/arachni/component/options/path.rb +12 -25
  306. data/lib/arachni/component/options/port.rb +15 -25
  307. data/lib/arachni/component/options/string.rb +10 -32
  308. data/lib/arachni/component/options/url.rb +15 -30
  309. data/lib/arachni/component/output.rb +33 -0
  310. data/lib/arachni/component/utilities.rb +49 -0
  311. data/lib/arachni/data.rb +109 -0
  312. data/lib/arachni/data/framework.rb +160 -0
  313. data/lib/arachni/data/framework/rpc.rb +68 -0
  314. data/lib/arachni/data/issues.rb +227 -0
  315. data/lib/arachni/data/plugins.rb +109 -0
  316. data/lib/arachni/data/session.rb +48 -0
  317. data/lib/arachni/element/base.rb +131 -82
  318. data/lib/arachni/element/body.rb +43 -13
  319. data/lib/arachni/element/capabilities/analyzable.rb +46 -0
  320. data/lib/arachni/element/capabilities/analyzable/differential.rb +436 -0
  321. data/lib/arachni/element/capabilities/analyzable/taint.rb +218 -0
  322. data/lib/arachni/element/capabilities/analyzable/timeout.rb +433 -0
  323. data/lib/arachni/element/capabilities/auditable.rb +172 -577
  324. data/lib/arachni/element/capabilities/auditable/dom.rb +156 -0
  325. data/lib/arachni/element/capabilities/inputtable.rb +267 -0
  326. data/lib/arachni/element/capabilities/mutable.rb +197 -155
  327. data/lib/arachni/element/capabilities/refreshable.rb +31 -24
  328. data/lib/arachni/element/capabilities/submittable.rb +128 -0
  329. data/lib/arachni/element/capabilities/with_auditor.rb +60 -0
  330. data/lib/arachni/element/capabilities/with_auditor/output.rb +33 -0
  331. data/lib/arachni/element/capabilities/with_dom.rb +40 -0
  332. data/lib/arachni/element/capabilities/with_node.rb +52 -0
  333. data/lib/arachni/element/capabilities/with_scope.rb +25 -0
  334. data/lib/arachni/element/capabilities/with_scope/scope.rb +38 -0
  335. data/lib/arachni/element/cookie.rb +337 -862
  336. data/lib/arachni/element/cookie/dom.rb +67 -0
  337. data/lib/arachni/element/form.rb +326 -756
  338. data/lib/arachni/element/form/dom.rb +52 -0
  339. data/lib/arachni/element/generic_dom.rb +133 -0
  340. data/lib/arachni/element/header.rb +46 -46
  341. data/lib/arachni/element/link.rb +134 -172
  342. data/lib/arachni/element/link/dom.rb +128 -0
  343. data/lib/arachni/element/link_template.rb +268 -0
  344. data/lib/arachni/element/link_template/dom.rb +143 -0
  345. data/lib/arachni/element/path.rb +24 -13
  346. data/lib/arachni/element/server.rb +89 -13
  347. data/lib/arachni/element_filter.rb +101 -99
  348. data/lib/arachni/error.rb +5 -15
  349. data/lib/arachni/ethon/easy.rb +22 -0
  350. data/lib/arachni/framework.rb +841 -476
  351. data/lib/arachni/http.rb +6 -714
  352. data/lib/arachni/http/client.rb +801 -0
  353. data/lib/arachni/http/cookie_jar.rb +50 -51
  354. data/lib/arachni/http/headers.rb +122 -0
  355. data/lib/arachni/http/message.rb +76 -0
  356. data/lib/arachni/http/message/scope.rb +35 -0
  357. data/lib/arachni/http/proxy_server.rb +303 -0
  358. data/{plugins/proxy → lib/arachni/http/proxy_server}/ssl-interceptor-cert.pem +0 -0
  359. data/{plugins/proxy → lib/arachni/http/proxy_server}/ssl-interceptor-pkey.pem +0 -0
  360. data/lib/arachni/http/request.rb +471 -0
  361. data/lib/arachni/http/request/scope.rb +30 -0
  362. data/lib/arachni/http/response.rb +226 -0
  363. data/lib/arachni/http/response/scope.rb +67 -0
  364. data/lib/arachni/issue.rb +389 -223
  365. data/lib/arachni/issue/severity.rb +34 -0
  366. data/lib/arachni/issue/severity/base.rb +39 -0
  367. data/lib/arachni/option_group.rb +137 -0
  368. data/lib/arachni/option_groups.rb +13 -0
  369. data/lib/arachni/option_groups/audit.rb +226 -0
  370. data/lib/arachni/option_groups/browser_cluster.rb +50 -0
  371. data/lib/arachni/option_groups/datastore.rb +31 -0
  372. data/lib/arachni/option_groups/dispatcher.rb +132 -0
  373. data/lib/arachni/option_groups/http.rb +174 -0
  374. data/lib/arachni/option_groups/input.rb +156 -0
  375. data/lib/arachni/option_groups/output.rb +22 -0
  376. data/lib/arachni/option_groups/paths.rb +63 -0
  377. data/lib/arachni/option_groups/rpc.rb +87 -0
  378. data/lib/arachni/option_groups/scope.rb +233 -0
  379. data/lib/arachni/option_groups/session.rb +54 -0
  380. data/lib/arachni/option_groups/snapshot.rb +22 -0
  381. data/lib/arachni/options.rb +286 -1486
  382. data/lib/arachni/page.rb +504 -108
  383. data/lib/arachni/page/dom.rb +280 -0
  384. data/lib/arachni/page/dom/transition.rb +302 -0
  385. data/lib/arachni/page/scope.rb +53 -0
  386. data/lib/arachni/parser.rb +177 -210
  387. data/lib/arachni/platform.rb +5 -13
  388. data/lib/arachni/platform/fingerprinter.rb +24 -23
  389. data/lib/arachni/platform/list.rb +48 -27
  390. data/lib/arachni/platform/manager.rb +146 -83
  391. data/lib/arachni/plugin.rb +5 -13
  392. data/lib/arachni/plugin/base.rb +90 -110
  393. data/lib/arachni/plugin/formatter.rb +40 -0
  394. data/lib/arachni/plugin/manager.rb +129 -108
  395. data/lib/arachni/processes.rb +6 -14
  396. data/lib/arachni/processes/dispatchers.rb +51 -58
  397. data/lib/arachni/processes/executables/base.rb +9 -0
  398. data/lib/arachni/processes/executables/dispatcher.rb +6 -0
  399. data/lib/arachni/processes/executables/instance.rb +13 -0
  400. data/lib/arachni/processes/helpers.rb +4 -12
  401. data/lib/arachni/processes/helpers/dispatchers.rb +8 -12
  402. data/lib/arachni/processes/helpers/instances.rb +13 -13
  403. data/lib/arachni/processes/helpers/processes.rb +8 -28
  404. data/lib/arachni/processes/instances.rb +86 -63
  405. data/lib/arachni/processes/manager.rb +89 -52
  406. data/lib/arachni/report.rb +282 -15
  407. data/lib/arachni/reporter.rb +12 -0
  408. data/lib/arachni/reporter/base.rb +126 -0
  409. data/lib/arachni/reporter/formatter_manager.rb +20 -0
  410. data/lib/arachni/reporter/manager.rb +54 -0
  411. data/lib/arachni/reporter/options.rb +47 -0
  412. data/lib/arachni/rpc/client/base.rb +27 -35
  413. data/lib/arachni/rpc/client/dispatcher.rb +13 -21
  414. data/lib/arachni/rpc/client/instance.rb +45 -40
  415. data/lib/arachni/rpc/client/instance/framework.rb +88 -0
  416. data/lib/arachni/rpc/client/instance/service.rb +106 -0
  417. data/lib/arachni/rpc/serializer.rb +98 -0
  418. data/lib/arachni/rpc/server/active_options.rb +26 -42
  419. data/lib/arachni/rpc/server/base.rb +35 -26
  420. data/lib/arachni/rpc/server/check/manager.rb +38 -0
  421. data/lib/arachni/rpc/server/dispatcher.rb +125 -211
  422. data/lib/arachni/rpc/server/dispatcher/node.rb +36 -50
  423. data/lib/arachni/rpc/server/dispatcher/service.rb +153 -0
  424. data/lib/arachni/rpc/server/framework.rb +83 -176
  425. data/lib/arachni/rpc/server/framework/distributor.rb +292 -271
  426. data/lib/arachni/rpc/server/framework/master.rb +164 -296
  427. data/lib/arachni/rpc/server/framework/multi_instance.rb +96 -128
  428. data/lib/arachni/rpc/server/framework/slave.rb +79 -89
  429. data/lib/arachni/rpc/server/instance.rb +362 -413
  430. data/lib/arachni/rpc/server/output.rb +33 -147
  431. data/lib/arachni/rpc/server/plugin/manager.rb +18 -54
  432. data/lib/arachni/ruby.rb +5 -14
  433. data/lib/arachni/ruby/array.rb +4 -14
  434. data/lib/arachni/ruby/hash.rb +47 -15
  435. data/lib/arachni/ruby/io.rb +4 -14
  436. data/lib/arachni/ruby/object.rb +10 -52
  437. data/lib/arachni/ruby/set.rb +4 -12
  438. data/lib/arachni/ruby/string.rb +60 -40
  439. data/lib/arachni/ruby/webrick.rb +4 -12
  440. data/lib/arachni/ruby/webrick/cookie.rb +4 -12
  441. data/lib/arachni/ruby/webrick/httprequest.rb +4 -12
  442. data/lib/arachni/scope.rb +40 -0
  443. data/lib/arachni/selenium/webdriver/remote/http/typhoeus.rb +46 -0
  444. data/lib/arachni/session.rb +150 -173
  445. data/lib/arachni/snapshot.rb +181 -0
  446. data/lib/arachni/state.rb +122 -0
  447. data/lib/arachni/state/audit.rb +57 -0
  448. data/lib/arachni/state/element_filter.rb +67 -0
  449. data/lib/arachni/state/framework.rb +419 -0
  450. data/lib/arachni/state/framework/rpc.rb +63 -0
  451. data/lib/arachni/state/http.rb +60 -0
  452. data/lib/arachni/state/options.rb +39 -0
  453. data/lib/arachni/state/plugins.rb +94 -0
  454. data/lib/arachni/support.rb +6 -15
  455. data/lib/arachni/support/buffer.rb +5 -13
  456. data/lib/arachni/support/buffer/autoflush.rb +5 -15
  457. data/lib/arachni/support/buffer/base.rb +41 -70
  458. data/lib/arachni/support/cache.rb +5 -13
  459. data/lib/arachni/support/cache/base.rb +45 -50
  460. data/lib/arachni/support/cache/least_cost_replacement.rb +9 -19
  461. data/lib/arachni/support/cache/least_recently_used.rb +5 -15
  462. data/lib/arachni/support/cache/preference.rb +11 -20
  463. data/lib/arachni/support/cache/random_replacement.rb +10 -15
  464. data/lib/arachni/support/crypto.rb +5 -13
  465. data/lib/arachni/support/crypto/rsa_aes_cbc.rb +15 -27
  466. data/lib/arachni/support/database.rb +5 -13
  467. data/lib/arachni/support/database/base.rb +20 -37
  468. data/lib/arachni/support/database/hash.rb +265 -350
  469. data/lib/arachni/support/database/queue.rb +86 -27
  470. data/lib/arachni/support/lookup.rb +5 -13
  471. data/lib/arachni/support/lookup/base.rb +33 -26
  472. data/lib/arachni/support/lookup/hash_set.rb +11 -15
  473. data/lib/arachni/support/lookup/moolb.rb +9 -20
  474. data/lib/arachni/support/mixins.rb +14 -0
  475. data/lib/arachni/support/mixins/observable.rb +105 -0
  476. data/lib/arachni/support/mixins/terminal.rb +65 -0
  477. data/lib/arachni/support/profiler.rb +130 -0
  478. data/lib/arachni/support/signature.rb +37 -67
  479. data/lib/arachni/trainer.rb +57 -97
  480. data/lib/arachni/ui/foo/output.rb +31 -33
  481. data/lib/arachni/uri.rb +456 -462
  482. data/lib/arachni/uri/scope.rb +168 -0
  483. data/lib/arachni/utilities.rb +125 -147
  484. data/lib/arachni/version.rb +4 -12
  485. data/lib/arachni/watir/element.rb +17 -0
  486. data/lib/version +1 -1
  487. data/{spec/support/servers/modules/audit/sqli/jdbc → profiles/placeholder} +0 -0
  488. data/spec/arachni/browser/element_locator_spec.rb +228 -0
  489. data/spec/arachni/browser/javascript/dom_monitor_spec.rb +195 -0
  490. data/spec/arachni/browser/javascript/proxy/stub_spec.rb +106 -0
  491. data/spec/arachni/browser/javascript/proxy_spec.rb +144 -0
  492. data/spec/arachni/browser/javascript/taint_tracer/frame/called_function_spec.rb +72 -0
  493. data/spec/arachni/browser/javascript/taint_tracer/frame_spec.rb +46 -0
  494. data/spec/arachni/browser/javascript/taint_tracer/sink/data_flow_spec.rb +81 -0
  495. data/spec/arachni/browser/javascript/taint_tracer/sink/execution_flow_spec.rb +47 -0
  496. data/spec/arachni/browser/javascript/taint_tracer_spec.rb +1304 -0
  497. data/spec/arachni/browser/javascript_spec.rb +355 -0
  498. data/spec/arachni/browser_cluster/job/result_spec.rb +14 -0
  499. data/spec/arachni/browser_cluster/job_spec.rb +264 -0
  500. data/spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result_spec.rb +7 -0
  501. data/spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger_spec.rb +68 -0
  502. data/spec/arachni/browser_cluster/jobs/resource_exploration/result_spec.rb +7 -0
  503. data/spec/arachni/browser_cluster/jobs/resource_exploration_spec.rb +89 -0
  504. data/spec/arachni/browser_cluster/jobs/taint_tracer_spec.rb +149 -0
  505. data/spec/arachni/browser_cluster/worker_spec.rb +314 -0
  506. data/spec/arachni/browser_cluster_spec.rb +543 -0
  507. data/spec/arachni/browser_spec.rb +2368 -0
  508. data/spec/arachni/check/auditor_spec.rb +1089 -0
  509. data/spec/arachni/check/base_spec.rb +33 -0
  510. data/spec/arachni/check/manager_spec.rb +100 -0
  511. data/spec/arachni/component/base_spec.rb +64 -0
  512. data/spec/arachni/component/manager_spec.rb +37 -26
  513. data/spec/arachni/component/options/address_spec.rb +5 -11
  514. data/spec/arachni/component/options/base_spec.rb +29 -81
  515. data/spec/arachni/component/options/bool_spec.rb +16 -19
  516. data/spec/arachni/component/options/float_spec.rb +17 -16
  517. data/spec/arachni/component/options/int_spec.rb +17 -20
  518. data/spec/arachni/component/options/multiple_choice_spec.rb +82 -0
  519. data/spec/arachni/component/options/object_spec.rb +24 -0
  520. data/spec/arachni/component/options/path_spec.rb +8 -11
  521. data/spec/arachni/component/options/port_spec.rb +16 -15
  522. data/spec/arachni/component/options/string_spec.rb +8 -17
  523. data/spec/arachni/component/options/url_spec.rb +16 -14
  524. data/spec/arachni/component/utilities_spec.rb +30 -0
  525. data/spec/arachni/{module → component}/utilities_spec/read_file.txt +0 -0
  526. data/spec/arachni/data/framework/rpc_spec.rb +72 -0
  527. data/spec/arachni/data/framework_spec.rb +266 -0
  528. data/spec/arachni/data/issues_spec.rb +347 -0
  529. data/spec/arachni/data/plugins_spec.rb +102 -0
  530. data/spec/arachni/data/session_spec.rb +59 -0
  531. data/spec/arachni/data_spec.rb +71 -0
  532. data/spec/arachni/element/body_spec.rb +63 -4
  533. data/spec/arachni/element/capabilities/analyzable/differential_spec.rb +135 -0
  534. data/spec/arachni/element/capabilities/analyzable/taint_spec.rb +355 -0
  535. data/spec/arachni/element/capabilities/analyzable/timeout_spec.rb +386 -0
  536. data/spec/arachni/element/capabilities/with_scope/scope_spec.rb +25 -0
  537. data/spec/arachni/element/cookie/dom_spec.rb +145 -0
  538. data/spec/arachni/element/cookie_spec.rb +147 -108
  539. data/spec/arachni/element/form/dom_spec.rb +146 -0
  540. data/spec/arachni/element/form_spec.rb +519 -271
  541. data/spec/arachni/element/generic_dom_spec.rb +113 -0
  542. data/spec/arachni/element/header_spec.rb +68 -20
  543. data/spec/arachni/element/link/dom_spec.rb +206 -0
  544. data/spec/arachni/element/link_spec.rb +218 -130
  545. data/spec/arachni/element/link_template/dom_spec.rb +218 -0
  546. data/spec/arachni/element/link_template_spec.rb +403 -0
  547. data/spec/arachni/element/path_spec.rb +28 -4
  548. data/spec/arachni/element/server_spec.rb +171 -4
  549. data/spec/arachni/element_filter_spec.rb +227 -96
  550. data/spec/arachni/framework_spec.rb +1099 -759
  551. data/spec/arachni/http/client_spec.rb +1470 -0
  552. data/spec/arachni/http/cookie_jar_spec.rb +164 -130
  553. data/spec/arachni/http/headers_spec.rb +111 -0
  554. data/spec/arachni/http/message_spec.rb +5 -0
  555. data/spec/arachni/http/proxy_server_spec.rb +354 -0
  556. data/spec/arachni/http/request_spec.rb +602 -0
  557. data/spec/arachni/http/response/scope_spec.rb +135 -0
  558. data/spec/arachni/http/response_spec.rb +350 -0
  559. data/spec/arachni/issue/severity/base_spec.rb +15 -0
  560. data/spec/arachni/issue/severity_spec.rb +43 -0
  561. data/spec/arachni/issue_spec.rb +547 -284
  562. data/spec/arachni/option_groups/audit_spec.rb +298 -0
  563. data/spec/arachni/option_groups/browser_cluster_spec.rb +12 -0
  564. data/spec/arachni/option_groups/datastore_spec.rb +54 -0
  565. data/spec/arachni/option_groups/dispatcher_spec.rb +123 -0
  566. data/spec/arachni/option_groups/http_spec.rb +42 -0
  567. data/spec/arachni/option_groups/input_spec.rb +202 -0
  568. data/spec/arachni/option_groups/output_spec.rb +11 -0
  569. data/spec/arachni/option_groups/paths_spec.rb +34 -0
  570. data/spec/arachni/option_groups/rpc_spec.rb +13 -0
  571. data/spec/arachni/option_groups/scope_spec.rb +237 -0
  572. data/spec/arachni/option_groups/session_spec.rb +51 -0
  573. data/spec/arachni/option_groups/snapshot_spec.rb +11 -0
  574. data/spec/arachni/options_spec.rb +202 -756
  575. data/spec/arachni/page/dom/transition_spec.rb +515 -0
  576. data/spec/arachni/page/dom_spec.rb +308 -0
  577. data/spec/arachni/page/scope_spec.rb +80 -0
  578. data/spec/arachni/page_spec.rb +789 -175
  579. data/spec/arachni/parser_spec.rb +308 -200
  580. data/spec/arachni/platform/fingerprinter_spec.rb +51 -52
  581. data/spec/arachni/platform/manager_spec.rb +146 -34
  582. data/spec/arachni/plugin/base_spec.rb +97 -0
  583. data/spec/arachni/plugin/manager_spec.rb +186 -80
  584. data/spec/arachni/report_spec.rb +275 -0
  585. data/spec/arachni/reporter/base_spec.rb +96 -0
  586. data/spec/arachni/reporter/manager_spec.rb +38 -0
  587. data/spec/arachni/reporter/options_spec.rb +48 -0
  588. data/spec/arachni/rpc/client/base_spec.rb +43 -45
  589. data/spec/arachni/rpc/client/dispatcher_spec.rb +3 -3
  590. data/spec/arachni/rpc/client/instance_spec.rb +18 -40
  591. data/spec/arachni/rpc/server/active_options_spec.rb +35 -296
  592. data/spec/arachni/rpc/server/base_spec.rb +12 -6
  593. data/spec/arachni/rpc/server/checks/manager_spec.rb +48 -0
  594. data/spec/arachni/rpc/server/dispatcher/node_spec.rb +47 -74
  595. data/spec/arachni/rpc/server/dispatcher/service_spec.rb +99 -0
  596. data/spec/arachni/rpc/server/dispatcher_spec.rb +77 -38
  597. data/spec/arachni/rpc/server/framework/distributor_spec.rb +356 -396
  598. data/spec/arachni/rpc/server/framework_multi_spec.rb +336 -0
  599. data/spec/arachni/rpc/server/framework_spec.rb +396 -0
  600. data/spec/arachni/rpc/server/instance_spec.rb +480 -281
  601. data/spec/arachni/rpc/server/output_spec.rb +9 -212
  602. data/spec/arachni/rpc/server/plugin/manager_spec.rb +6 -11
  603. data/spec/arachni/ruby/hash_spec.rb +30 -0
  604. data/spec/arachni/ruby/object_spec.rb +0 -16
  605. data/spec/arachni/ruby/string_spec.rb +98 -6
  606. data/spec/arachni/scope_spec.rb +13 -0
  607. data/spec/arachni/session_spec.rb +279 -251
  608. data/spec/arachni/snapshot_spec.rb +127 -0
  609. data/spec/arachni/state/audit_spec.rb +107 -0
  610. data/spec/arachni/state/element_filter_spec.rb +66 -0
  611. data/spec/arachni/state/framework/rpc_spec.rb +85 -0
  612. data/spec/arachni/state/framework_spec.rb +853 -0
  613. data/spec/arachni/state/http_spec.rb +63 -0
  614. data/spec/arachni/state/options_spec.rb +55 -0
  615. data/spec/arachni/state/plugins_spec.rb +76 -0
  616. data/spec/arachni/state_spec.rb +87 -0
  617. data/spec/arachni/support/cache/least_cost_replacement_spec.rb +30 -32
  618. data/spec/arachni/support/cache/least_recently_used_spec.rb +39 -40
  619. data/spec/arachni/support/cache/preference_spec.rb +17 -18
  620. data/spec/arachni/support/cache/random_replacement_spec.rb +19 -20
  621. data/spec/arachni/support/database/queue_spec.rb +200 -32
  622. data/spec/arachni/support/lookup/hash_set_spec.rb +74 -0
  623. data/spec/arachni/support/mixins/observable_spec.rb +81 -0
  624. data/spec/arachni/support/signature_spec.rb +9 -25
  625. data/spec/arachni/trainer_spec.rb +141 -124
  626. data/spec/arachni/uri/scope_spec.rb +416 -0
  627. data/spec/arachni/uri_spec.rb +187 -195
  628. data/spec/arachni/utilities_spec.rb +178 -525
  629. data/spec/components/checks/active/code_injection_spec.rb +26 -0
  630. data/spec/components/checks/active/code_injection_timing_spec.rb +26 -0
  631. data/spec/components/checks/active/csrf_spec.rb +44 -0
  632. data/spec/components/checks/active/file_inclusion_spec.rb +56 -0
  633. data/spec/components/checks/active/ldap_injection_spec.rb +16 -0
  634. data/spec/components/checks/active/no_sql_injection_differential_spec.rb +15 -0
  635. data/spec/components/checks/active/no_sql_injection_spec.rb +28 -0
  636. data/spec/components/checks/active/os_cmd_injection_spec.rb +26 -0
  637. data/spec/components/checks/active/os_cmd_injection_timing_spec.rb +26 -0
  638. data/spec/components/checks/active/path_traversal_spec.rb +42 -0
  639. data/spec/components/checks/active/response_splitting_spec.rb +22 -0
  640. data/spec/components/checks/active/rfi_spec.rb +20 -0
  641. data/spec/components/checks/active/session_fixation_spec.rb +20 -0
  642. data/spec/components/checks/active/source_code_disclosure_spec.rb +26 -0
  643. data/spec/components/checks/active/sql_injection_differential_spec.rb +15 -0
  644. data/spec/components/checks/active/sql_injection_spec.rb +142 -0
  645. data/spec/components/checks/active/sql_injection_timing_spec.rb +24 -0
  646. data/spec/components/checks/active/trainer_spec.rb +36 -0
  647. data/spec/components/checks/active/unvalidated_redirect_spec.rb +20 -0
  648. data/spec/components/checks/active/xpath_injection_spec.rb +16 -0
  649. data/spec/components/checks/active/xss_dom_inputs_spec.rb +32 -0
  650. data/spec/components/checks/active/xss_dom_script_context_spec.rb +63 -0
  651. data/spec/components/checks/active/xss_dom_spec.rb +67 -0
  652. data/spec/components/checks/active/xss_event_spec.rb +15 -0
  653. data/spec/components/checks/active/xss_path_spec.rb +15 -0
  654. data/spec/components/checks/active/xss_script_context_spec.rb +22 -0
  655. data/spec/components/checks/active/xss_spec.rb +22 -0
  656. data/spec/components/checks/active/xss_tag_spec.rb +15 -0
  657. data/spec/components/checks/passive/allowed_methods_spec.rb +15 -0
  658. data/spec/components/checks/passive/backdoors_spec.rb +15 -0
  659. data/spec/components/checks/passive/backup_directories_spec.rb +15 -0
  660. data/spec/components/checks/passive/backup_files_spec.rb +15 -0
  661. data/spec/components/checks/passive/common_directories_spec.rb +15 -0
  662. data/spec/components/checks/passive/common_files_spec.rb +15 -0
  663. data/spec/components/checks/passive/directory_listing_spec.rb +15 -0
  664. data/spec/components/checks/passive/grep/captcha_spec.rb +15 -0
  665. data/spec/components/checks/passive/grep/cookie_set_for_parent_domain_spec.rb +15 -0
  666. data/spec/components/checks/passive/grep/credit_card_spec.rb +15 -0
  667. data/spec/components/checks/passive/grep/cvs_svn_users_spec.rb +15 -0
  668. data/spec/components/checks/passive/grep/emails_spec.rb +15 -0
  669. data/spec/components/checks/passive/grep/form_upload_spec.rb +15 -0
  670. data/spec/components/checks/passive/grep/hsts_spec.rb +17 -0
  671. data/spec/components/checks/passive/grep/html_objects_spec.rb +15 -0
  672. data/spec/components/checks/passive/grep/http_only_cookies_spec.rb +15 -0
  673. data/spec/components/checks/passive/grep/insecure_cookies_spec.rb +15 -0
  674. data/spec/components/checks/passive/grep/mixed_resource_spec.rb +16 -0
  675. data/spec/components/checks/passive/grep/password_autocomplete_spec.rb +15 -0
  676. data/spec/components/checks/passive/grep/private_ip_spec.rb +22 -0
  677. data/spec/components/checks/passive/grep/ssn_spec.rb +15 -0
  678. data/spec/components/checks/passive/grep/unencrypted_password_forms_spec.rb +15 -0
  679. data/spec/components/checks/passive/htaccess_limit_spec.rb +15 -0
  680. data/spec/components/checks/passive/http_put_spec.rb +15 -0
  681. data/spec/components/checks/passive/interesting_responses_spec.rb +23 -0
  682. data/spec/components/checks/passive/localstart_asp_spec.rb +15 -0
  683. data/spec/components/checks/passive/origin_spoof_access_restriction_bypass_spec.rb +15 -0
  684. data/spec/components/checks/passive/webdav_spec.rb +15 -0
  685. data/spec/components/checks/passive/xst_spec.rb +15 -0
  686. data/spec/components/fingerprinters/frameworks/rack_spec.rb +42 -0
  687. data/spec/components/fingerprinters/languages/asp_spec.rb +38 -0
  688. data/spec/components/fingerprinters/languages/aspx_spec.rb +79 -0
  689. data/spec/components/fingerprinters/languages/jsp_spec.rb +56 -0
  690. data/spec/components/fingerprinters/languages/php_spec.rb +59 -0
  691. data/spec/components/fingerprinters/languages/python_spec.rb +23 -0
  692. data/spec/components/fingerprinters/languages/ruby.rb +34 -0
  693. data/spec/components/fingerprinters/os/bsd_spec.rb +26 -0
  694. data/spec/components/fingerprinters/os/linux_spec.rb +34 -0
  695. data/spec/components/fingerprinters/os/solaris_spec.rb +34 -0
  696. data/spec/components/fingerprinters/os/unix_spec.rb +26 -0
  697. data/spec/components/fingerprinters/os/windows_spec.rb +34 -0
  698. data/spec/components/fingerprinters/servers/apache_spec.rb +26 -0
  699. data/spec/components/fingerprinters/servers/iis_spec.rb +28 -0
  700. data/spec/components/fingerprinters/servers/jetty_spec.rb +28 -0
  701. data/spec/components/fingerprinters/servers/nginx_spec.rb +26 -0
  702. data/spec/components/fingerprinters/servers/tomcat_spec.rb +28 -0
  703. data/spec/{path_extractors → components/path_extractors}/anchors_spec.rb +0 -0
  704. data/spec/{path_extractors → components/path_extractors}/areas_spec.rb +0 -0
  705. data/spec/components/path_extractors/comments_spec.rb +23 -0
  706. data/spec/{path_extractors → components/path_extractors}/forms_spec.rb +0 -0
  707. data/spec/{path_extractors → components/path_extractors}/frames_spec.rb +0 -0
  708. data/spec/{path_extractors → components/path_extractors}/generic_spec.rb +0 -0
  709. data/spec/{path_extractors → components/path_extractors}/links_spec.rb +0 -0
  710. data/spec/{path_extractors → components/path_extractors}/meta_refresh_spec.rb +0 -0
  711. data/spec/components/path_extractors/scripts_spec.rb +30 -0
  712. data/spec/components/plugins/autologin_spec.rb +96 -0
  713. data/spec/components/plugins/autothrottle_spec.rb +56 -0
  714. data/spec/components/plugins/content_types_spec.rb +91 -0
  715. data/spec/components/plugins/cookie_collector_spec.rb +41 -0
  716. data/spec/components/plugins/form_dicattack_spec.rb +54 -0
  717. data/spec/components/plugins/healthmap_spec.rb +40 -0
  718. data/spec/components/plugins/http_dicattack_spec.rb +40 -0
  719. data/spec/components/plugins/meta/remedies/discovery_spec.rb +23 -0
  720. data/spec/components/plugins/meta/remedies/timing_attacks_spec.rb +31 -0
  721. data/spec/components/plugins/meta/uniformity_spec.rb +29 -0
  722. data/spec/components/plugins/script_spec.rb +13 -0
  723. data/spec/components/plugins/uncommon_headers_spec.rb +64 -0
  724. data/spec/components/plugins/vector_feed_spec.rb +169 -0
  725. data/spec/components/plugins/waf_detector_spec.rb +50 -0
  726. data/spec/components/reporters/ap_spec.rb +9 -0
  727. data/spec/components/reporters/html_spec.rb +9 -0
  728. data/spec/components/reporters/json_spec.rb +17 -0
  729. data/spec/components/reporters/marshal_spec.rb +13 -0
  730. data/spec/components/reporters/stdout_spec.rb +9 -0
  731. data/spec/components/reporters/txt_spec.rb +8 -0
  732. data/spec/components/reporters/xml_spec.rb +9 -0
  733. data/spec/components/reporters/yaml_spec.rb +14 -0
  734. data/spec/external/wavsep/active/lfi_spec.rb +1 -1
  735. data/spec/external/wavsep/active/obsolete_files_spec.rb +225 -0
  736. data/spec/external/wavsep/active/rfi_spec.rb +1 -1
  737. data/spec/external/wavsep/active/sqli_spec.rb +8 -6
  738. data/spec/external/wavsep/active/unvalidated_redirect_spec.rb +57 -0
  739. data/spec/external/wavsep/active/xss_dom_spec.rb +27 -0
  740. data/spec/external/wavsep/active/xss_spec.rb +13 -3
  741. data/spec/external/wavsep/false_positives/lfi_spec.rb +4 -16
  742. data/spec/external/wavsep/false_positives/obsolete_files_spec.rb +21 -0
  743. data/spec/external/wavsep/false_positives/rfi_spec.rb +2 -2
  744. data/spec/external/wavsep/false_positives/sqli_spec.rb +4 -15
  745. data/spec/external/wavsep/false_positives/unvalidated_redirect_spec.rb +21 -0
  746. data/spec/external/wavsep/false_positives/xss_spec.rb +2 -2
  747. data/spec/spec_helper.rb +17 -18
  748. data/spec/support/factories/browser/javascript/taint_tracer/frame.rb +10 -0
  749. data/spec/support/factories/browser/javascript/taint_tracer/frame/called_function.rb +11 -0
  750. data/spec/support/factories/browser/javascript/taint_tracer/sink/data_flow.rb +14 -0
  751. data/spec/support/factories/browser/javascript/taint_tracer/sink/execution_flow.rb +10 -0
  752. data/spec/support/factories/browser_cluster/job.rb +27 -0
  753. data/spec/support/factories/element/cookie.rb +7 -0
  754. data/spec/support/factories/element/form.rb +12 -0
  755. data/spec/support/factories/element/header.rb +5 -0
  756. data/spec/support/factories/element/link.rb +11 -0
  757. data/spec/support/factories/element/link_template.rb +11 -0
  758. data/spec/support/factories/http/request.rb +9 -0
  759. data/spec/support/factories/http/response.rb +42 -0
  760. data/spec/support/factories/issue.rb +67 -0
  761. data/spec/support/factories/page.rb +7 -0
  762. data/spec/support/factories/page/dom.rb +13 -0
  763. data/spec/support/factories/page/dom/transition.rb +21 -0
  764. data/spec/support/factories/scan_report.rb +35 -0
  765. data/spec/support/factories/vector.rb +32 -0
  766. data/spec/support/fixtures/check_with_invalid_platforms/with_invalid_platforms.rb +37 -0
  767. data/spec/support/fixtures/checks/test.rb +58 -0
  768. data/spec/support/fixtures/checks/test2.rb +41 -0
  769. data/spec/support/fixtures/checks/test3.rb +41 -0
  770. data/spec/support/fixtures/executables/node.rb +47 -0
  771. data/spec/support/fixtures/fingerprinters/test.rb +5 -13
  772. data/spec/support/fixtures/option_groups/input.yml +2 -0
  773. data/spec/support/fixtures/plugins/bad.rb +5 -13
  774. data/spec/support/fixtures/plugins/defaults/default.rb +6 -14
  775. data/spec/support/fixtures/plugins/distributable.rb +7 -15
  776. data/spec/support/fixtures/plugins/loop.rb +5 -13
  777. data/spec/support/fixtures/plugins/suspendable.rb +44 -0
  778. data/spec/support/fixtures/plugins/wait.rb +6 -14
  779. data/spec/support/fixtures/plugins/with_options.rb +20 -16
  780. data/spec/support/fixtures/plugins_with_priorities/p0.rb +17 -0
  781. data/spec/support/fixtures/plugins_with_priorities/p00.rb +17 -0
  782. data/spec/support/fixtures/plugins_with_priorities/p1.rb +17 -0
  783. data/spec/support/fixtures/plugins_with_priorities/p2.rb +17 -0
  784. data/spec/support/fixtures/plugins_with_priorities/p22.rb +17 -0
  785. data/spec/support/fixtures/plugins_with_priorities/p222.rb +17 -0
  786. data/spec/support/fixtures/plugins_with_priorities/p_nil.rb +16 -0
  787. data/spec/support/fixtures/plugins_with_priorities/p_nil2.rb +16 -0
  788. data/spec/support/fixtures/report.afr +0 -0
  789. data/spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb +13 -0
  790. data/spec/support/fixtures/reporters/base_spec/with_formatters.rb +15 -0
  791. data/spec/support/fixtures/reporters/base_spec/with_outfile.rb +16 -0
  792. data/spec/support/fixtures/reporters/base_spec/without_outfile.rb +12 -0
  793. data/spec/support/fixtures/reporters/manager_spec/afr.rb +13 -0
  794. data/spec/support/fixtures/reporters/manager_spec/foo.rb +18 -0
  795. data/spec/support/fixtures/rescan.afr.tpl +4 -5
  796. data/spec/support/fixtures/run_check/body.rb +48 -0
  797. data/spec/support/fixtures/run_check/cookies.rb +48 -0
  798. data/spec/support/fixtures/run_check/empty.rb +34 -0
  799. data/spec/support/fixtures/run_check/flch.rb +53 -0
  800. data/spec/support/fixtures/run_check/forms.rb +48 -0
  801. data/spec/support/fixtures/run_check/headers.rb +48 -0
  802. data/spec/support/fixtures/run_check/links.rb +48 -0
  803. data/spec/support/fixtures/run_check/nil.rb +47 -0
  804. data/spec/support/fixtures/run_check/path.rb +48 -0
  805. data/spec/support/fixtures/run_check/server.rb +48 -0
  806. data/spec/support/fixtures/services/echo.rb +64 -0
  807. data/spec/support/fixtures/taint_check/taint.rb +38 -0
  808. data/spec/support/fixtures/wait_check/wait.rb +38 -0
  809. data/spec/support/helpers/auditor.rb +18 -5
  810. data/spec/support/helpers/browser.rb +6 -0
  811. data/spec/support/helpers/browser_cluster/jobs/taint_tracer.rb +32 -0
  812. data/spec/support/helpers/framework.rb +5 -13
  813. data/spec/support/helpers/misc.rb +4 -12
  814. data/spec/support/helpers/pages.rb +18 -0
  815. data/spec/support/helpers/paths.rb +4 -12
  816. data/spec/support/helpers/requires.rb +5 -13
  817. data/spec/support/helpers/resets.rb +12 -19
  818. data/spec/support/helpers/web_server.rb +11 -15
  819. data/spec/support/lib/factory.rb +115 -0
  820. data/spec/support/lib/web_server_client.rb +49 -0
  821. data/spec/support/lib/web_server_dispatcher.rb +33 -0
  822. data/spec/support/lib/web_server_manager.rb +29 -32
  823. data/spec/support/pems/cacert.pem +35 -37
  824. data/spec/support/pems/client/cert.pem +35 -37
  825. data/spec/support/pems/client/key.pem +49 -49
  826. data/spec/support/pems/server/cert.pem +35 -37
  827. data/spec/support/pems/server/key.pem +49 -49
  828. data/spec/support/servers/arachni/browser.rb +836 -0
  829. data/spec/support/servers/arachni/browser/javascript.rb +7 -0
  830. data/spec/support/servers/arachni/browser/javascript/angular-1.2.8.js +20554 -0
  831. data/spec/support/servers/arachni/browser/javascript/angular-route.js +911 -0
  832. data/spec/support/servers/arachni/browser/javascript/dom_monitor.rb +90 -0
  833. data/spec/support/servers/arachni/browser/javascript/jquery-2.0.3.js +8829 -0
  834. data/spec/support/servers/arachni/browser/javascript/proxy.rb +17 -0
  835. data/spec/support/servers/arachni/browser/javascript/taint_tracer.rb +714 -0
  836. data/spec/support/servers/arachni/browser_cluster/jobs/event_trigger.rb +25 -0
  837. data/spec/support/servers/arachni/browser_https.rb +60 -0
  838. data/spec/support/servers/arachni/check/auditor.rb +247 -0
  839. data/spec/support/servers/arachni/element/body.rb +5 -0
  840. data/spec/support/servers/arachni/element/capabilities/analyzable/differential.rb +162 -0
  841. data/spec/support/servers/arachni/element/capabilities/{auditable → analyzable}/taint.rb +0 -0
  842. data/spec/support/servers/arachni/element/capabilities/analyzable/timeout.rb +37 -0
  843. data/spec/support/servers/arachni/element/cookie.rb +1 -1
  844. data/spec/support/servers/arachni/element/cookie/cookie_dom.rb +21 -0
  845. data/spec/support/servers/arachni/element/form.rb +6 -22
  846. data/spec/support/servers/arachni/element/form/form_dom.rb +50 -0
  847. data/spec/support/servers/arachni/element/header.rb +7 -8
  848. data/spec/support/servers/arachni/element/link.rb +15 -7
  849. data/spec/support/servers/arachni/element/link/link_dom.rb +49 -0
  850. data/spec/support/servers/arachni/element/link_template.rb +11 -0
  851. data/spec/support/servers/arachni/element/link_template/link_template_dom.rb +43 -0
  852. data/spec/support/servers/arachni/framework.rb +18 -0
  853. data/spec/support/servers/arachni/http/client.rb +176 -0
  854. data/spec/support/servers/arachni/http/proxy_server.rb +9 -0
  855. data/spec/support/servers/arachni/http/proxy_server_https.rb +25 -0
  856. data/spec/support/servers/arachni/page/page_dom.rb +83 -0
  857. data/spec/support/servers/arachni/parser.rb +4 -0
  858. data/spec/support/servers/arachni/rpc/server/{framework_hpg.rb → framework_multi.rb} +0 -0
  859. data/spec/support/servers/arachni/session.rb +43 -9
  860. data/spec/support/servers/arachni/trainer.rb +11 -7
  861. data/spec/support/servers/checks/active/code_injection.rb +163 -0
  862. data/spec/support/servers/checks/active/code_injection_timing.rb +134 -0
  863. data/spec/support/servers/{modules/audit → checks/active}/csrf.rb +0 -0
  864. data/spec/support/servers/checks/active/file_inclusion.rb +228 -0
  865. data/spec/support/servers/checks/active/ldap_injection.rb +88 -0
  866. data/spec/support/servers/checks/active/no_sql_injection.rb +134 -0
  867. data/spec/support/servers/checks/active/no_sql_injection/mongodb +1 -0
  868. data/spec/support/servers/checks/active/no_sql_injection_differential.rb +61 -0
  869. data/spec/support/servers/checks/active/os_cmd_injection.rb +172 -0
  870. data/spec/support/servers/checks/active/os_cmd_injection_timing.rb +118 -0
  871. data/spec/support/servers/checks/active/path_traversal.rb +219 -0
  872. data/spec/support/servers/checks/active/response_splitting.rb +138 -0
  873. data/spec/support/servers/{modules/audit → checks/active}/rfi.rb +0 -0
  874. data/spec/support/servers/checks/active/session_fixation.rb +111 -0
  875. data/spec/support/servers/checks/active/source_code_disclosure.rb +118 -0
  876. data/spec/support/servers/checks/active/sql_injection.rb +133 -0
  877. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/access +0 -0
  878. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/coldfusion +0 -0
  879. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/db2 +0 -0
  880. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/emc +0 -0
  881. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/firebird +0 -0
  882. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/frontbase +0 -0
  883. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/hsqldb +0 -0
  884. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/informix +0 -0
  885. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/ingres +0 -0
  886. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/interbase +0 -0
  887. data/spec/support/servers/checks/active/sql_injection/jdbc +0 -0
  888. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/maxdb +0 -0
  889. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/mssql +0 -0
  890. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/mysql +0 -0
  891. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/oracle +0 -0
  892. data/spec/support/servers/{modules/audit/sqli/postgresql → checks/active/sql_injection/pgsql} +0 -0
  893. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/sqlite +0 -0
  894. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/sybase +0 -0
  895. data/spec/support/servers/{modules/audit/sqli_blind_rdiff.rb → checks/active/sql_injection_differential.rb} +0 -0
  896. data/spec/support/servers/checks/active/sql_injection_timing.rb +145 -0
  897. data/spec/support/servers/{modules/audit/trainer_module.rb → checks/active/trainer_check.rb} +0 -0
  898. data/spec/support/servers/checks/active/unvalidated_redirect.rb +141 -0
  899. data/spec/support/servers/checks/active/xpath_injection.rb +121 -0
  900. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/dotnet +0 -0
  901. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/general +0 -0
  902. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/java +0 -0
  903. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/libxml2 +0 -0
  904. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/php +0 -0
  905. data/spec/support/servers/checks/active/xss.rb +239 -0
  906. data/spec/support/servers/checks/active/xss_dom.rb +133 -0
  907. data/spec/support/servers/checks/active/xss_dom_inputs.rb +35 -0
  908. data/spec/support/servers/checks/active/xss_dom_script_context.rb +139 -0
  909. data/spec/support/servers/checks/active/xss_event.rb +80 -0
  910. data/spec/support/servers/{modules/audit → checks/active}/xss_path.rb +0 -0
  911. data/spec/support/servers/checks/active/xss_script_context.rb +90 -0
  912. data/spec/support/servers/{modules/audit → checks/active}/xss_tag.rb +0 -0
  913. data/spec/support/servers/checks/check_server.rb +14 -0
  914. data/spec/support/servers/{modules/recon → checks/passive}/allowed_methods.rb +0 -0
  915. data/spec/support/servers/checks/passive/backdoors.rb +4 -0
  916. data/spec/support/servers/checks/passive/backup_directories.rb +15 -0
  917. data/spec/support/servers/checks/passive/backup_files.rb +15 -0
  918. data/spec/support/servers/checks/passive/common_directories.rb +6 -0
  919. data/spec/support/servers/checks/passive/common_files.rb +6 -0
  920. data/spec/support/servers/checks/passive/directory_listing.rb +30 -0
  921. data/spec/support/servers/{modules/recon → checks/passive}/grep/captcha.rb +0 -0
  922. data/spec/support/servers/checks/passive/grep/cookie_set_for_parent_domain.rb +21 -0
  923. data/spec/support/servers/{modules/recon → checks/passive}/grep/credit_card.rb +0 -0
  924. data/spec/support/servers/{modules/recon → checks/passive}/grep/cvs_svn_users.rb +0 -0
  925. data/spec/support/servers/checks/passive/grep/emails.rb +23 -0
  926. data/spec/support/servers/{modules/recon → checks/passive}/grep/form_upload.rb +0 -0
  927. data/spec/support/servers/checks/passive/grep/hsts_https.rb +37 -0
  928. data/spec/support/servers/{modules/recon → checks/passive}/grep/html_objects.rb +0 -0
  929. data/spec/support/servers/{modules/recon → checks/passive}/grep/http_only_cookies.rb +0 -0
  930. data/spec/support/servers/checks/passive/grep/insecure_cookies_https.rb +40 -0
  931. data/spec/support/servers/checks/passive/grep/mixed_resource_https.rb +69 -0
  932. data/spec/support/servers/checks/passive/grep/password_autocomplete.rb +33 -0
  933. data/spec/support/servers/{modules/recon → checks/passive}/grep/private_ip.rb +0 -0
  934. data/spec/support/servers/{modules/recon → checks/passive}/grep/ssn.rb +0 -0
  935. data/spec/support/servers/checks/passive/grep/unencrypted_password_forms.rb +33 -0
  936. data/spec/support/servers/{modules/recon → checks/passive}/htaccess_limit.rb +0 -0
  937. data/spec/support/servers/checks/passive/http_put.rb +7 -0
  938. data/spec/support/servers/checks/passive/interesting_responses.rb +5 -0
  939. data/spec/support/servers/{modules/recon → checks/passive}/localstart_asp.rb +0 -0
  940. data/spec/support/servers/checks/passive/origin_spoof_access_restriction_bypass.rb +30 -0
  941. data/spec/support/servers/checks/passive/webdav.rb +25 -0
  942. data/spec/support/servers/{modules/recon → checks/passive}/xst.rb +0 -0
  943. data/spec/support/servers/plugins/meta/remedies/discovery.rb +2 -2
  944. data/spec/support/servers/plugins/meta/remedies/timing_attacks.rb +2 -0
  945. data/spec/support/shared/browser/javascript/taint_tracer/sink/base.rb +36 -0
  946. data/spec/support/shared/check.rb +198 -0
  947. data/spec/support/shared/component.rb +15 -4
  948. data/spec/support/shared/component/options/base.rb +187 -0
  949. data/spec/support/shared/element/base.rb +131 -0
  950. data/spec/support/shared/element/capabilities/auditable.rb +371 -604
  951. data/spec/support/shared/element/capabilities/auditable/dom.rb +303 -0
  952. data/spec/support/shared/element/capabilities/inputtable.rb +499 -0
  953. data/spec/support/shared/element/capabilities/mutable.rb +362 -0
  954. data/spec/support/shared/element/capabilities/refreshable.rb +26 -26
  955. data/spec/support/shared/element/capabilities/submitable.rb +155 -0
  956. data/spec/support/shared/element/capabilities/with_auditor.rb +75 -0
  957. data/spec/support/shared/element/capabilities/with_dom.rb +39 -0
  958. data/spec/support/shared/element/capabilities/with_node.rb +42 -0
  959. data/spec/support/shared/element/capabilities/with_scope.rb +22 -0
  960. data/spec/support/shared/external/wavsep.rb +30 -9
  961. data/spec/support/shared/http/message.rb +72 -0
  962. data/spec/support/shared/option_group.rb +98 -0
  963. data/spec/support/shared/path_extractor.rb +1 -1
  964. data/spec/support/shared/plugin.rb +33 -16
  965. data/spec/support/shared/reporter.rb +41 -0
  966. data/spec/support/shared/support/cache.rb +341 -0
  967. data/spec/support/shared/support/lookup.rb +93 -13
  968. data/ui/cli/framework.rb +466 -0
  969. data/ui/cli/framework/option_parser.rb +628 -0
  970. data/ui/cli/option_parser.rb +104 -0
  971. data/ui/cli/output.rb +377 -0
  972. data/ui/cli/reporter.rb +52 -0
  973. data/ui/cli/reporter/option_parser.rb +102 -0
  974. data/ui/cli/restored_framework.rb +127 -0
  975. data/ui/cli/restored_framework/option_parser.rb +115 -0
  976. data/ui/cli/rpc/client/dispatcher_monitor.rb +157 -0
  977. data/ui/cli/rpc/client/dispatcher_monitor/option_parser.rb +41 -0
  978. data/ui/cli/rpc/client/instance.rb +294 -0
  979. data/ui/cli/rpc/client/local.rb +65 -0
  980. data/ui/cli/rpc/client/local/option_parser.rb +35 -0
  981. data/ui/cli/rpc/client/remote.rb +84 -0
  982. data/ui/cli/rpc/client/remote/option_parser.rb +99 -0
  983. data/ui/cli/rpc/server/dispatcher.rb +36 -0
  984. data/ui/cli/rpc/server/dispatcher/option_parser.rb +165 -0
  985. data/ui/cli/utilities.rb +228 -0
  986. metadata +1260 -1266
  987. data/EXPLOITATION.md +0 -431
  988. data/HACKING.md +0 -120
  989. data/NOTICE +0 -12
  990. data/data/crypto/public.pem +0 -9
  991. data/external/metasploit/LICENSE +0 -24
  992. data/external/metasploit/plugins/arachni.rb +0 -516
  993. data/external/metasploit/plugins/arachni/modules/auxiliary/arachni_sqlmap.rb +0 -91
  994. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_exec.rb +0 -142
  995. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_path_traversal.rb +0 -113
  996. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_eval.rb +0 -150
  997. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_include.rb +0 -141
  998. data/fingerprinters/frameworks/rack.rb +0 -41
  999. data/fingerprinters/languages/asp.rb +0 -42
  1000. data/fingerprinters/languages/aspx.rb +0 -63
  1001. data/fingerprinters/languages/jsp.rb +0 -42
  1002. data/fingerprinters/languages/php.rb +0 -43
  1003. data/fingerprinters/languages/python.rb +0 -40
  1004. data/fingerprinters/languages/ruby.rb +0 -41
  1005. data/fingerprinters/os/bsd.rb +0 -36
  1006. data/fingerprinters/os/linux.rb +0 -42
  1007. data/fingerprinters/os/solaris.rb +0 -41
  1008. data/fingerprinters/os/unix.rb +0 -36
  1009. data/fingerprinters/os/windows.rb +0 -41
  1010. data/fingerprinters/servers/apache.rb +0 -36
  1011. data/fingerprinters/servers/iis.rb +0 -36
  1012. data/fingerprinters/servers/jetty.rb +0 -36
  1013. data/fingerprinters/servers/nginx.rb +0 -36
  1014. data/fingerprinters/servers/tomcat.rb +0 -36
  1015. data/gfx/README.md +0 -18
  1016. data/gfx/compiled/banner.png +0 -0
  1017. data/gfx/compiled/favicon.ico +0 -0
  1018. data/gfx/compiled/icon.png +0 -0
  1019. data/gfx/compiled/logo.png +0 -0
  1020. data/gfx/compiled/spider.png +0 -0
  1021. data/gfx/font/Beneath_the_Surface.ttf +0 -0
  1022. data/gfx/font/bts_readme.txt +0 -14
  1023. data/gfx/source/banner.svg +0 -999
  1024. data/gfx/source/icon.svg +0 -627
  1025. data/gfx/source/logo.svg +0 -672
  1026. data/gfx/source/spider.png +0 -0
  1027. data/gfx/source/spider.svg +0 -277
  1028. data/lib/arachni/audit_store.rb +0 -321
  1029. data/lib/arachni/component/options/enum.rb +0 -51
  1030. data/lib/arachni/element/capabilities/auditable/rdiff.rb +0 -489
  1031. data/lib/arachni/element/capabilities/auditable/taint.rb +0 -238
  1032. data/lib/arachni/element/capabilities/auditable/timeout.rb +0 -469
  1033. data/lib/arachni/mixins/observable.rb +0 -91
  1034. data/lib/arachni/mixins/progress_bar.rb +0 -87
  1035. data/lib/arachni/mixins/terminal.rb +0 -112
  1036. data/lib/arachni/module.rb +0 -20
  1037. data/lib/arachni/module/auditor.rb +0 -618
  1038. data/lib/arachni/module/base.rb +0 -188
  1039. data/lib/arachni/module/manager.rb +0 -255
  1040. data/lib/arachni/module/output.rb +0 -68
  1041. data/lib/arachni/module/utilities.rb +0 -64
  1042. data/lib/arachni/report/base.rb +0 -201
  1043. data/lib/arachni/report/manager.rb +0 -86
  1044. data/lib/arachni/rpc/server/dispatcher/handler.rb +0 -166
  1045. data/lib/arachni/rpc/server/module/manager.rb +0 -46
  1046. data/lib/arachni/rpc/server/spider.rb +0 -404
  1047. data/lib/arachni/ruby/enumerable.rb +0 -29
  1048. data/lib/arachni/spider.rb +0 -477
  1049. data/lib/arachni/support/key_filler.rb +0 -68
  1050. data/lib/arachni/support/queue.rb +0 -18
  1051. data/lib/arachni/support/queue/disk.rb +0 -171
  1052. data/lib/arachni/typhoeus/hydra.rb +0 -56
  1053. data/lib/arachni/typhoeus/request.rb +0 -80
  1054. data/lib/arachni/typhoeus/response.rb +0 -103
  1055. data/lib/arachni/typhoeus/utils.rb +0 -25
  1056. data/lib/arachni/ui/cli/cli.rb +0 -469
  1057. data/lib/arachni/ui/cli/output.rb +0 -391
  1058. data/lib/arachni/ui/cli/rpc/dispatcher_monitor.rb +0 -188
  1059. data/lib/arachni/ui/cli/rpc/instance.rb +0 -407
  1060. data/lib/arachni/ui/cli/rpc/local.rb +0 -80
  1061. data/lib/arachni/ui/cli/rpc/remote.rb +0 -134
  1062. data/lib/arachni/ui/cli/utilities.rb +0 -509
  1063. data/modules/audit/code_injection.rb +0 -137
  1064. data/modules/audit/code_injection_php_input_wrapper.rb +0 -109
  1065. data/modules/audit/code_injection_timing.rb +0 -122
  1066. data/modules/audit/csrf.rb +0 -225
  1067. data/modules/audit/file_inclusion.rb +0 -156
  1068. data/modules/audit/ldapi.rb +0 -97
  1069. data/modules/audit/os_cmd_injection.rb +0 -109
  1070. data/modules/audit/os_cmd_injection_timing.rb +0 -98
  1071. data/modules/audit/path_traversal.rb +0 -170
  1072. data/modules/audit/response_splitting.rb +0 -99
  1073. data/modules/audit/rfi.rb +0 -181
  1074. data/modules/audit/session_fixation.rb +0 -117
  1075. data/modules/audit/source_code_disclosure.rb +0 -179
  1076. data/modules/audit/sqli.rb +0 -148
  1077. data/modules/audit/sqli_blind_rdiff.rb +0 -138
  1078. data/modules/audit/sqli_blind_timing.rb +0 -126
  1079. data/modules/audit/trainer.rb +0 -49
  1080. data/modules/audit/unvalidated_redirect.rb +0 -91
  1081. data/modules/audit/xpath.rb +0 -97
  1082. data/modules/audit/xss.rb +0 -154
  1083. data/modules/audit/xss_event.rb +0 -153
  1084. data/modules/audit/xss_path.rb +0 -152
  1085. data/modules/audit/xss_script_tag.rb +0 -137
  1086. data/modules/audit/xss_tag.rb +0 -137
  1087. data/modules/recon/allowed_methods.rb +0 -99
  1088. data/modules/recon/backdoors.rb +0 -82
  1089. data/modules/recon/backup_files.rb +0 -100
  1090. data/modules/recon/backup_files/extensions.txt +0 -28
  1091. data/modules/recon/common_directories.rb +0 -87
  1092. data/modules/recon/common_files.rb +0 -78
  1093. data/modules/recon/common_files/filenames.txt +0 -21
  1094. data/modules/recon/directory_listing.rb +0 -133
  1095. data/modules/recon/grep/captcha.rb +0 -74
  1096. data/modules/recon/grep/credit_card.rb +0 -128
  1097. data/modules/recon/grep/cvs_svn_users.rb +0 -81
  1098. data/modules/recon/grep/emails.rb +0 -73
  1099. data/modules/recon/grep/form_upload.rb +0 -86
  1100. data/modules/recon/grep/html_objects.rb +0 -56
  1101. data/modules/recon/grep/http_only_cookies.rb +0 -82
  1102. data/modules/recon/grep/insecure_cookies.rb +0 -82
  1103. data/modules/recon/grep/mixed_resource.rb +0 -113
  1104. data/modules/recon/grep/password_autocomplete.rb +0 -85
  1105. data/modules/recon/grep/private_ip.rb +0 -70
  1106. data/modules/recon/grep/ssn.rb +0 -66
  1107. data/modules/recon/grep/unencrypted_password_forms.rb +0 -103
  1108. data/modules/recon/htaccess_limit.rb +0 -76
  1109. data/modules/recon/http_put.rb +0 -95
  1110. data/modules/recon/interesting_responses.rb +0 -91
  1111. data/modules/recon/localstart_asp.rb +0 -97
  1112. data/modules/recon/webdav.rb +0 -106
  1113. data/modules/recon/x_forwarded_for_access_restriction_bypass.rb +0 -76
  1114. data/modules/recon/xst.rb +0 -103
  1115. data/path_extractors/anchors.rb +0 -37
  1116. data/path_extractors/areas.rb +0 -37
  1117. data/path_extractors/forms.rb +0 -37
  1118. data/path_extractors/frames.rb +0 -37
  1119. data/path_extractors/generic.rb +0 -84
  1120. data/path_extractors/links.rb +0 -37
  1121. data/path_extractors/meta_refresh.rb +0 -58
  1122. data/path_extractors/scripts.rb +0 -38
  1123. data/plugins/autologin.rb +0 -133
  1124. data/plugins/beep_notify.rb +0 -49
  1125. data/plugins/content_types.rb +0 -107
  1126. data/plugins/cookie_collector.rb +0 -85
  1127. data/plugins/defaults/autothrottle.rb +0 -78
  1128. data/plugins/defaults/healthmap.rb +0 -89
  1129. data/plugins/defaults/meta/remedies/discovery.rb +0 -138
  1130. data/plugins/defaults/meta/remedies/timing_attacks.rb +0 -117
  1131. data/plugins/defaults/meta/uniformity.rb +0 -82
  1132. data/plugins/defaults/resolver.rb +0 -60
  1133. data/plugins/email_notify.rb +0 -106
  1134. data/plugins/form_dicattack.rb +0 -123
  1135. data/plugins/http_dicattack.rb +0 -108
  1136. data/plugins/libnotify.rb +0 -82
  1137. data/plugins/profiler.rb +0 -179
  1138. data/plugins/proxy.rb +0 -502
  1139. data/plugins/proxy/panel/page_accordion.html.erb +0 -67
  1140. data/plugins/proxy/panel/panel.html.erb +0 -69
  1141. data/plugins/proxy/panel/verify_login_sequence.html.erb +0 -45
  1142. data/plugins/proxy/server.rb +0 -215
  1143. data/plugins/proxy/template_scope.rb +0 -138
  1144. data/plugins/rescan.rb +0 -59
  1145. data/plugins/script.rb +0 -53
  1146. data/plugins/uncommon_headers.rb +0 -92
  1147. data/plugins/vector_feed.rb +0 -226
  1148. data/plugins/waf_detector.rb +0 -167
  1149. data/profiles/full.afp +0 -48
  1150. data/reports/afr.rb +0 -44
  1151. data/reports/ap.rb +0 -46
  1152. data/reports/html.rb +0 -273
  1153. data/reports/html/default.erb +0 -82
  1154. data/reports/html/default/configuration.erb +0 -126
  1155. data/reports/html/default/css/jquery-ui.css +0 -570
  1156. data/reports/html/default/css/jquery.jqplot.min.css +0 -1
  1157. data/reports/html/default/css/main.css +0 -391
  1158. data/reports/html/default/headers.erb +0 -19
  1159. data/reports/html/default/issue.erb +0 -178
  1160. data/reports/html/default/issues.erb +0 -52
  1161. data/reports/html/default/js/charts.js +0 -147
  1162. data/reports/html/default/js/helpers.js +0 -53
  1163. data/reports/html/default/js/init.js +0 -72
  1164. data/reports/html/default/js/lib/jqplot.barRenderer.min.js +0 -57
  1165. data/reports/html/default/js/lib/jqplot.categoryAxisRenderer.min.js +0 -57
  1166. data/reports/html/default/js/lib/jqplot.cursor.min.js +0 -57
  1167. data/reports/html/default/js/lib/jqplot.pieRenderer.min.js +0 -57
  1168. data/reports/html/default/js/lib/jqplot.pointLabels.min.js +0 -57
  1169. data/reports/html/default/js/lib/jquery-ui.min.js +0 -404
  1170. data/reports/html/default/js/lib/jquery.jqplot.min.js +0 -57
  1171. data/reports/html/default/js/lib/jquery.min.js +0 -167
  1172. data/reports/html/default/plugins.erb +0 -22
  1173. data/reports/html/default/search.erb +0 -8
  1174. data/reports/html/default/sitemap.erb +0 -15
  1175. data/reports/html/default/summary.erb +0 -75
  1176. data/reports/html/default/summary_issue.erb +0 -20
  1177. data/reports/json.rb +0 -52
  1178. data/reports/marshal.rb +0 -46
  1179. data/reports/metareport.rb +0 -104
  1180. data/reports/plugin_formatters/html/autologin.rb +0 -45
  1181. data/reports/plugin_formatters/html/content_types.rb +0 -67
  1182. data/reports/plugin_formatters/html/cookie_collector.rb +0 -52
  1183. data/reports/plugin_formatters/html/discovery.rb +0 -45
  1184. data/reports/plugin_formatters/html/form_dicattack.rb +0 -40
  1185. data/reports/plugin_formatters/html/healthmap.rb +0 -60
  1186. data/reports/plugin_formatters/html/http_dicattack.rb +0 -40
  1187. data/reports/plugin_formatters/html/profiler.rb +0 -36
  1188. data/reports/plugin_formatters/html/profiler/template.erb +0 -84
  1189. data/reports/plugin_formatters/html/resolver.rb +0 -55
  1190. data/reports/plugin_formatters/html/timing_attacks.rb +0 -51
  1191. data/reports/plugin_formatters/html/uncommon_headers.rb +0 -47
  1192. data/reports/plugin_formatters/html/uniformity.rb +0 -54
  1193. data/reports/plugin_formatters/html/waf_detector.rb +0 -38
  1194. data/reports/plugin_formatters/stdout/autologin.rb +0 -38
  1195. data/reports/plugin_formatters/stdout/content_types.rb +0 -51
  1196. data/reports/plugin_formatters/stdout/cookie_collector.rb +0 -43
  1197. data/reports/plugin_formatters/stdout/discovery.rb +0 -37
  1198. data/reports/plugin_formatters/stdout/form_dicattack.rb +0 -34
  1199. data/reports/plugin_formatters/stdout/healthmap.rb +0 -49
  1200. data/reports/plugin_formatters/stdout/http_dicattack.rb +0 -34
  1201. data/reports/plugin_formatters/stdout/profiler.rb +0 -66
  1202. data/reports/plugin_formatters/stdout/resolver.rb +0 -29
  1203. data/reports/plugin_formatters/stdout/timing_attacks.rb +0 -37
  1204. data/reports/plugin_formatters/stdout/uncommon_headers.rb +0 -37
  1205. data/reports/plugin_formatters/stdout/uniformity.rb +0 -48
  1206. data/reports/plugin_formatters/stdout/waf_detector.rb +0 -31
  1207. data/reports/plugin_formatters/xml/autologin.rb +0 -41
  1208. data/reports/plugin_formatters/xml/content_types.rb +0 -61
  1209. data/reports/plugin_formatters/xml/cookie_collector.rb +0 -45
  1210. data/reports/plugin_formatters/xml/discovery.rb +0 -38
  1211. data/reports/plugin_formatters/xml/form_dicattack.rb +0 -34
  1212. data/reports/plugin_formatters/xml/healthmap.rb +0 -58
  1213. data/reports/plugin_formatters/xml/http_dicattack.rb +0 -33
  1214. data/reports/plugin_formatters/xml/profiler.rb +0 -80
  1215. data/reports/plugin_formatters/xml/resolver.rb +0 -33
  1216. data/reports/plugin_formatters/xml/timing_attacks.rb +0 -39
  1217. data/reports/plugin_formatters/xml/uncommon_headers.rb +0 -38
  1218. data/reports/plugin_formatters/xml/uniformity.rb +0 -54
  1219. data/reports/plugin_formatters/xml/waf_detector.rb +0 -34
  1220. data/reports/stdout.rb +0 -203
  1221. data/reports/txt.rb +0 -58
  1222. data/reports/xml.rb +0 -176
  1223. data/reports/xml/buffer.rb +0 -97
  1224. data/reports/yaml.rb +0 -46
  1225. data/spec/arachni/audit_store_spec.rb +0 -239
  1226. data/spec/arachni/component/options/enum_spec.rb +0 -51
  1227. data/spec/arachni/element/base_spec.rb +0 -138
  1228. data/spec/arachni/element/capabilities/auditable/rdiff_spec.rb +0 -134
  1229. data/spec/arachni/element/capabilities/auditable/taint_spec.rb +0 -409
  1230. data/spec/arachni/element/capabilities/auditable/timeout_spec.rb +0 -157
  1231. data/spec/arachni/element/capabilities/mutable_spec.rb +0 -284
  1232. data/spec/arachni/http_spec.rb +0 -962
  1233. data/spec/arachni/mixins/observable_spec.rb +0 -75
  1234. data/spec/arachni/mixins/progress_bar_spec.rb +0 -47
  1235. data/spec/arachni/module/auditor_spec.rb +0 -544
  1236. data/spec/arachni/module/manager_spec.rb +0 -150
  1237. data/spec/arachni/module/utilities_spec.rb +0 -30
  1238. data/spec/arachni/report/base_spec.rb +0 -61
  1239. data/spec/arachni/report/manager_spec.rb +0 -82
  1240. data/spec/arachni/rpc/server/dispatcher/handler_spec.rb +0 -102
  1241. data/spec/arachni/rpc/server/framework_hpg_spec.rb +0 -376
  1242. data/spec/arachni/rpc/server/framework_simple_spec.rb +0 -501
  1243. data/spec/arachni/rpc/server/modules/manager_spec.rb +0 -47
  1244. data/spec/arachni/rpc/server/spider_spec.rb +0 -68
  1245. data/spec/arachni/ruby/enumerable_spec.rb +0 -37
  1246. data/spec/arachni/spider_spec.rb +0 -539
  1247. data/spec/arachni/support/cache/base_spec.rb +0 -282
  1248. data/spec/arachni/support/key_filler.rb +0 -60
  1249. data/spec/arachni/support/queue/disk_spec.rb +0 -116
  1250. data/spec/arachni/typhoeus/requrest_spec.rb +0 -58
  1251. data/spec/arachni/typhoeus/response_spec.rb +0 -171
  1252. data/spec/fingerprinters/frameworks/rack_spec.rb +0 -41
  1253. data/spec/fingerprinters/languages/asp_spec.rb +0 -40
  1254. data/spec/fingerprinters/languages/aspx_spec.rb +0 -78
  1255. data/spec/fingerprinters/languages/jsp_spec.rb +0 -58
  1256. data/spec/fingerprinters/languages/php_spec.rb +0 -61
  1257. data/spec/fingerprinters/languages/python_spec.rb +0 -23
  1258. data/spec/fingerprinters/languages/ruby.rb +0 -34
  1259. data/spec/fingerprinters/os/bsd_spec.rb +0 -26
  1260. data/spec/fingerprinters/os/linux_spec.rb +0 -34
  1261. data/spec/fingerprinters/os/solaris_spec.rb +0 -34
  1262. data/spec/fingerprinters/os/unix_spec.rb +0 -26
  1263. data/spec/fingerprinters/os/windows_spec.rb +0 -34
  1264. data/spec/fingerprinters/servers/apache_spec.rb +0 -26
  1265. data/spec/fingerprinters/servers/iis_spec.rb +0 -28
  1266. data/spec/fingerprinters/servers/jetty_spec.rb +0 -28
  1267. data/spec/fingerprinters/servers/nginx_spec.rb +0 -26
  1268. data/spec/fingerprinters/servers/tomcat_spec.rb +0 -28
  1269. data/spec/modules/audit/code_injection_spec.rb +0 -25
  1270. data/spec/modules/audit/code_injection_timing_spec.rb +0 -24
  1271. data/spec/modules/audit/csrf_spec.rb +0 -45
  1272. data/spec/modules/audit/file_inclusion_spec.rb +0 -25
  1273. data/spec/modules/audit/ldapi_spec.rb +0 -19
  1274. data/spec/modules/audit/os_cmd_injection_spec.rb +0 -24
  1275. data/spec/modules/audit/os_cmd_injection_timing_spec.rb +0 -24
  1276. data/spec/modules/audit/path_traversal_spec.rb +0 -23
  1277. data/spec/modules/audit/response_splitting_spec.rb +0 -19
  1278. data/spec/modules/audit/rfi_spec.rb +0 -19
  1279. data/spec/modules/audit/session_fixation_spec.rb +0 -23
  1280. data/spec/modules/audit/source_code_disclosure_spec.rb +0 -24
  1281. data/spec/modules/audit/sqli_blind_rdiff_spec.rb +0 -19
  1282. data/spec/modules/audit/sqli_blind_timing_spec.rb +0 -23
  1283. data/spec/modules/audit/sqli_spec.rb +0 -25
  1284. data/spec/modules/audit/trainer_spec.rb +0 -35
  1285. data/spec/modules/audit/unvalidated_redirect_spec.rb +0 -24
  1286. data/spec/modules/audit/xpath_spec.rb +0 -25
  1287. data/spec/modules/audit/xss_event_spec.rb +0 -19
  1288. data/spec/modules/audit/xss_path_spec.rb +0 -19
  1289. data/spec/modules/audit/xss_script_tag_spec.rb +0 -27
  1290. data/spec/modules/audit/xss_spec.rb +0 -24
  1291. data/spec/modules/audit/xss_tag_spec.rb +0 -19
  1292. data/spec/modules/recon/allowed_methods_spec.rb +0 -19
  1293. data/spec/modules/recon/backdoors_spec.rb +0 -19
  1294. data/spec/modules/recon/backup_files_spec.rb +0 -19
  1295. data/spec/modules/recon/common_directories_spec.rb +0 -19
  1296. data/spec/modules/recon/common_files_spec.rb +0 -19
  1297. data/spec/modules/recon/directory_listing_spec.rb +0 -19
  1298. data/spec/modules/recon/grep/captcha_spec.rb +0 -19
  1299. data/spec/modules/recon/grep/credit_card_spec.rb +0 -19
  1300. data/spec/modules/recon/grep/cvs_svn_users_spec.rb +0 -19
  1301. data/spec/modules/recon/grep/emails_spec.rb +0 -19
  1302. data/spec/modules/recon/grep/form_upload_spec.rb +0 -19
  1303. data/spec/modules/recon/grep/html_objects_spec.rb +0 -19
  1304. data/spec/modules/recon/grep/http_only_cookies_spec.rb +0 -19
  1305. data/spec/modules/recon/grep/insecure_cookies_spec.rb +0 -19
  1306. data/spec/modules/recon/grep/mixed_resource_spec.rb +0 -20
  1307. data/spec/modules/recon/grep/password_autocomplete_spec.rb +0 -19
  1308. data/spec/modules/recon/grep/private_ip_spec.rb +0 -26
  1309. data/spec/modules/recon/grep/ssn_spec.rb +0 -19
  1310. data/spec/modules/recon/grep/unencrypted_password_forms_spec.rb +0 -19
  1311. data/spec/modules/recon/htaccess_limit_spec.rb +0 -19
  1312. data/spec/modules/recon/http_put_spec.rb +0 -19
  1313. data/spec/modules/recon/interesting_responses_spec.rb +0 -30
  1314. data/spec/modules/recon/localstart_asp_spec.rb +0 -19
  1315. data/spec/modules/recon/webdav_spec.rb +0 -19
  1316. data/spec/modules/recon/x_forwarded_for_access_restriction_bypass_spec.rb +0 -19
  1317. data/spec/modules/recon/xst_spec.rb +0 -19
  1318. data/spec/path_extractors/scripts_spec.rb +0 -19
  1319. data/spec/plugins/autologin_spec.rb +0 -94
  1320. data/spec/plugins/autothrottle_spec.rb +0 -45
  1321. data/spec/plugins/content_types_spec.rb +0 -93
  1322. data/spec/plugins/cookie_collector_spec.rb +0 -49
  1323. data/spec/plugins/form_dicattack_spec.rb +0 -60
  1324. data/spec/plugins/healthmap_spec.rb +0 -40
  1325. data/spec/plugins/http_dicattack_spec.rb +0 -40
  1326. data/spec/plugins/meta/remedies/discovery_spec.rb +0 -21
  1327. data/spec/plugins/meta/remedies/timing_attacks_spec.rb +0 -34
  1328. data/spec/plugins/meta/uniformity_spec.rb +0 -83
  1329. data/spec/plugins/profiler_spec.rb +0 -82
  1330. data/spec/plugins/rescan_spec.rb +0 -26
  1331. data/spec/plugins/resolver_spec.rb +0 -16
  1332. data/spec/plugins/script_spec.rb +0 -12
  1333. data/spec/plugins/uncommon_headers_spec.rb +0 -64
  1334. data/spec/plugins/vector_feed_spec.rb +0 -167
  1335. data/spec/plugins/waf_detector_spec.rb +0 -41
  1336. data/spec/reports/afr_spec.rb +0 -13
  1337. data/spec/reports/ap_spec.rb +0 -9
  1338. data/spec/reports/html_spec.rb +0 -13
  1339. data/spec/reports/json_spec.rb +0 -17
  1340. data/spec/reports/marshal_spec.rb +0 -13
  1341. data/spec/reports/stdout_spec.rb +0 -9
  1342. data/spec/reports/txt_spec.rb +0 -8
  1343. data/spec/reports/xml_spec.rb +0 -13
  1344. data/spec/reports/yaml_spec.rb +0 -13
  1345. data/spec/support/fixtures/auditstore.afr +0 -76074
  1346. data/spec/support/fixtures/modules/test.rb +0 -58
  1347. data/spec/support/fixtures/modules/test2.rb +0 -46
  1348. data/spec/support/fixtures/modules/test3.rb +0 -46
  1349. data/spec/support/fixtures/plugins/spider_hook.rb +0 -50
  1350. data/spec/support/fixtures/reports/base_spec/plugin_formatters/with_formatters/foobar.rb +0 -21
  1351. data/spec/support/fixtures/reports/base_spec/with_formatters.rb +0 -23
  1352. data/spec/support/fixtures/reports/base_spec/with_outfile.rb +0 -24
  1353. data/spec/support/fixtures/reports/base_spec/without_outfile.rb +0 -20
  1354. data/spec/support/fixtures/reports/manager_spec/afr.rb +0 -21
  1355. data/spec/support/fixtures/reports/manager_spec/foo.rb +0 -26
  1356. data/spec/support/fixtures/rpcd_handlers/echo.rb +0 -68
  1357. data/spec/support/fixtures/run_mod/body.rb +0 -58
  1358. data/spec/support/fixtures/run_mod/cookies.rb +0 -58
  1359. data/spec/support/fixtures/run_mod/empty.rb +0 -58
  1360. data/spec/support/fixtures/run_mod/flch.rb +0 -63
  1361. data/spec/support/fixtures/run_mod/forms.rb +0 -58
  1362. data/spec/support/fixtures/run_mod/headers.rb +0 -58
  1363. data/spec/support/fixtures/run_mod/links.rb +0 -58
  1364. data/spec/support/fixtures/run_mod/nil.rb +0 -57
  1365. data/spec/support/fixtures/run_mod/path.rb +0 -58
  1366. data/spec/support/fixtures/run_mod/server.rb +0 -58
  1367. data/spec/support/fixtures/taint_module/taint.rb +0 -48
  1368. data/spec/support/fixtures/wait_module/wait.rb +0 -48
  1369. data/spec/support/logs/Dispatcher - 1332-56847.log +0 -9
  1370. data/spec/support/logs/Dispatcher - 1361-63434.log +0 -21
  1371. data/spec/support/logs/Dispatcher - 1545-55308.log +0 -9
  1372. data/spec/support/logs/Dispatcher - 1559-18938.log +0 -19
  1373. data/spec/support/logs/Dispatcher - 1568-25013.log +0 -17
  1374. data/spec/support/logs/Dispatcher - 1577-55689.log +0 -13
  1375. data/spec/support/logs/Dispatcher - 1586-18577.log +0 -9
  1376. data/spec/support/logs/Dispatcher - 1595-49353.log +0 -9
  1377. data/spec/support/logs/Dispatcher - 1604-27831.log +0 -11
  1378. data/spec/support/logs/Dispatcher - 1617-57444.log +0 -11
  1379. data/spec/support/logs/Dispatcher - 1631-28737.log +0 -11
  1380. data/spec/support/logs/Dispatcher - 1644-21815.log +0 -33
  1381. data/spec/support/logs/Dispatcher - 1738-53470.log +0 -21
  1382. data/spec/support/logs/Dispatcher - 1747-64173.log +0 -21
  1383. data/spec/support/logs/Dispatcher - 1756-11866.log +0 -23
  1384. data/spec/support/logs/Dispatcher - 1798-12175.log +0 -19
  1385. data/spec/support/logs/Dispatcher - 1807-22790.log +0 -17
  1386. data/spec/support/logs/Dispatcher - 1816-57823.log +0 -15
  1387. data/spec/support/logs/Dispatcher - 1831-64825.log +0 -11
  1388. data/spec/support/logs/Dispatcher - 1845-27623.log +0 -9
  1389. data/spec/support/logs/Dispatcher - 1854-26066.log +0 -9
  1390. data/spec/support/logs/Dispatcher - 1863-37486.log +0 -9
  1391. data/spec/support/logs/Dispatcher - 1874-22463.log +0 -9
  1392. data/spec/support/logs/Dispatcher - 1883-41263.log +0 -11
  1393. data/spec/support/logs/Dispatcher - 1900-53660.log +0 -9
  1394. data/spec/support/logs/Dispatcher - 1909-44423.log +0 -9
  1395. data/spec/support/logs/Dispatcher - 1921-58931.log +0 -9
  1396. data/spec/support/logs/Dispatcher - 1993-6448.log +0 -63
  1397. data/spec/support/logs/Dispatcher - 2002-19206.log +0 -43
  1398. data/spec/support/logs/Dispatcher - 2011-11852.log +0 -39
  1399. data/spec/support/logs/Dispatcher - 2020-65055.log +0 -34
  1400. data/spec/support/logs/Dispatcher - 2029-48445.log +0 -28
  1401. data/spec/support/logs/Dispatcher - 2038-55271.log +0 -21
  1402. data/spec/support/logs/Dispatcher - 2047-45722.log +0 -13
  1403. data/spec/support/logs/Dispatcher - 2057-48194.log +0 -9
  1404. data/spec/support/logs/Dispatcher - 2189-39843.log +0 -19
  1405. data/spec/support/logs/Dispatcher - 2199-15985.log +0 -21
  1406. data/spec/support/logs/Dispatcher - 2208-22080.log +0 -15
  1407. data/spec/support/logs/Dispatcher - 2221-37690.log +0 -19
  1408. data/spec/support/logs/Dispatcher - 2230-47867.log +0 -21
  1409. data/spec/support/logs/Dispatcher - 2239-27060.log +0 -15
  1410. data/spec/support/logs/Dispatcher - 2358-8967.log +0 -17
  1411. data/spec/support/logs/Dispatcher - 2367-27103.log +0 -21
  1412. data/spec/support/logs/Dispatcher - 2376-16287.log +0 -13
  1413. data/spec/support/logs/Dispatcher - 2389-9109.log +0 -19
  1414. data/spec/support/logs/Dispatcher - 2398-62926.log +0 -21
  1415. data/spec/support/logs/Dispatcher - 2407-48685.log +0 -15
  1416. data/spec/support/logs/Dispatcher - 2459-62480.log +0 -17
  1417. data/spec/support/logs/Dispatcher - 2470-57894.log +0 -21
  1418. data/spec/support/logs/Dispatcher - 2479-51883.log +0 -13
  1419. data/spec/support/logs/Dispatcher - 2493-36944.log +0 -17
  1420. data/spec/support/logs/Dispatcher - 2503-59143.log +0 -21
  1421. data/spec/support/logs/Dispatcher - 2513-33084.log +0 -13
  1422. data/spec/support/logs/Dispatcher - 25430-46306.log +0 -9
  1423. data/spec/support/logs/Dispatcher - 25457-10711.log +0 -23
  1424. data/spec/support/logs/Dispatcher - 25603-48892.log +0 -9
  1425. data/spec/support/logs/Dispatcher - 25613-24775.log +0 -19
  1426. data/spec/support/logs/Dispatcher - 25622-59684.log +0 -17
  1427. data/spec/support/logs/Dispatcher - 25631-23195.log +0 -13
  1428. data/spec/support/logs/Dispatcher - 25640-9810.log +0 -9
  1429. data/spec/support/logs/Dispatcher - 25649-52757.log +0 -9
  1430. data/spec/support/logs/Dispatcher - 25658-58550.log +0 -11
  1431. data/spec/support/logs/Dispatcher - 25671-30871.log +0 -11
  1432. data/spec/support/logs/Dispatcher - 25684-48620.log +0 -11
  1433. data/spec/support/logs/Dispatcher - 25697-18124.log +0 -37
  1434. data/spec/support/logs/Dispatcher - 25762-35321.log +0 -21
  1435. data/spec/support/logs/Dispatcher - 25771-64633.log +0 -21
  1436. data/spec/support/logs/Dispatcher - 25780-43558.log +0 -23
  1437. data/spec/support/logs/Dispatcher - 25821-43561.log +0 -19
  1438. data/spec/support/logs/Dispatcher - 25830-39112.log +0 -17
  1439. data/spec/support/logs/Dispatcher - 25839-44093.log +0 -15
  1440. data/spec/support/logs/Dispatcher - 25852-12057.log +0 -11
  1441. data/spec/support/logs/Dispatcher - 25866-49029.log +0 -9
  1442. data/spec/support/logs/Dispatcher - 25875-32179.log +0 -9
  1443. data/spec/support/logs/Dispatcher - 25884-62703.log +0 -9
  1444. data/spec/support/logs/Dispatcher - 25894-4228.log +0 -9
  1445. data/spec/support/logs/Dispatcher - 25903-6709.log +0 -11
  1446. data/spec/support/logs/Dispatcher - 25917-29651.log +0 -9
  1447. data/spec/support/logs/Dispatcher - 25926-12708.log +0 -9
  1448. data/spec/support/logs/Dispatcher - 25935-54092.log +0 -9
  1449. data/spec/support/logs/Dispatcher - 25990-26756.log +0 -63
  1450. data/spec/support/logs/Dispatcher - 25999-4016.log +0 -43
  1451. data/spec/support/logs/Dispatcher - 26008-52076.log +0 -39
  1452. data/spec/support/logs/Dispatcher - 26017-48497.log +0 -34
  1453. data/spec/support/logs/Dispatcher - 26026-28839.log +0 -28
  1454. data/spec/support/logs/Dispatcher - 26035-54215.log +0 -21
  1455. data/spec/support/logs/Dispatcher - 26044-27216.log +0 -13
  1456. data/spec/support/logs/Dispatcher - 26054-53464.log +0 -9
  1457. data/spec/support/logs/Dispatcher - 26163-65271.log +0 -19
  1458. data/spec/support/logs/Dispatcher - 26173-58105.log +0 -21
  1459. data/spec/support/logs/Dispatcher - 26182-40848.log +0 -15
  1460. data/spec/support/logs/Dispatcher - 26195-2855.log +0 -19
  1461. data/spec/support/logs/Dispatcher - 26204-35297.log +0 -21
  1462. data/spec/support/logs/Dispatcher - 26213-59588.log +0 -15
  1463. data/spec/support/logs/Dispatcher - 26333-40774.log +0 -17
  1464. data/spec/support/logs/Dispatcher - 26342-45541.log +0 -21
  1465. data/spec/support/logs/Dispatcher - 26351-3349.log +0 -13
  1466. data/spec/support/logs/Dispatcher - 26364-37456.log +0 -19
  1467. data/spec/support/logs/Dispatcher - 26373-37340.log +0 -21
  1468. data/spec/support/logs/Dispatcher - 26382-54864.log +0 -15
  1469. data/spec/support/logs/Dispatcher - 26434-3070.log +0 -17
  1470. data/spec/support/logs/Dispatcher - 26448-14295.log +0 -21
  1471. data/spec/support/logs/Dispatcher - 26474-30587.log +0 -13
  1472. data/spec/support/logs/Dispatcher - 26500-32529.log +0 -17
  1473. data/spec/support/logs/Dispatcher - 26509-16952.log +0 -21
  1474. data/spec/support/logs/Dispatcher - 26519-43332.log +0 -13
  1475. data/spec/support/logs/Dispatcher - 26750-61867.log +0 -19
  1476. data/spec/support/logs/Dispatcher - 26759-22532.log +0 -21
  1477. data/spec/support/logs/Dispatcher - 26768-18231.log +0 -15
  1478. data/spec/support/logs/Dispatcher - 26792-41661.log +0 -21
  1479. data/spec/support/logs/Dispatcher - 26801-14384.log +0 -25
  1480. data/spec/support/logs/Dispatcher - 26810-2591.log +0 -15
  1481. data/spec/support/logs/Dispatcher - 26846-14591.log +0 -17
  1482. data/spec/support/logs/Dispatcher - 26855-15708.log +0 -21
  1483. data/spec/support/logs/Dispatcher - 26864-2062.log +0 -13
  1484. data/spec/support/logs/Dispatcher - 26877-14471.log +0 -21
  1485. data/spec/support/logs/Dispatcher - 26886-49795.log +0 -25
  1486. data/spec/support/logs/Dispatcher - 26895-21093.log +0 -15
  1487. data/spec/support/logs/Dispatcher - 26931-30049.log +0 -17
  1488. data/spec/support/logs/Dispatcher - 26940-34273.log +0 -21
  1489. data/spec/support/logs/Dispatcher - 26949-30040.log +0 -13
  1490. data/spec/support/logs/Dispatcher - 26962-8152.log +0 -17
  1491. data/spec/support/logs/Dispatcher - 26971-53062.log +0 -21
  1492. data/spec/support/logs/Dispatcher - 26980-7548.log +0 -13
  1493. data/spec/support/logs/Dispatcher - 2737-20989.log +0 -19
  1494. data/spec/support/logs/Dispatcher - 2746-5423.log +0 -21
  1495. data/spec/support/logs/Dispatcher - 2755-53393.log +0 -15
  1496. data/spec/support/logs/Dispatcher - 27615-41812.log +0 -19
  1497. data/spec/support/logs/Dispatcher - 27624-43683.log +0 -21
  1498. data/spec/support/logs/Dispatcher - 27633-11593.log +0 -15
  1499. data/spec/support/logs/Dispatcher - 27658-12186.log +0 -21
  1500. data/spec/support/logs/Dispatcher - 27667-15575.log +0 -25
  1501. data/spec/support/logs/Dispatcher - 27676-17207.log +0 -15
  1502. data/spec/support/logs/Dispatcher - 27712-2233.log +0 -17
  1503. data/spec/support/logs/Dispatcher - 27721-3842.log +0 -21
  1504. data/spec/support/logs/Dispatcher - 27730-22695.log +0 -13
  1505. data/spec/support/logs/Dispatcher - 27743-8364.log +0 -21
  1506. data/spec/support/logs/Dispatcher - 27752-6140.log +0 -25
  1507. data/spec/support/logs/Dispatcher - 27761-25015.log +0 -15
  1508. data/spec/support/logs/Dispatcher - 27797-9270.log +0 -17
  1509. data/spec/support/logs/Dispatcher - 2780-58168.log +0 -21
  1510. data/spec/support/logs/Dispatcher - 27806-48623.log +0 -21
  1511. data/spec/support/logs/Dispatcher - 27815-58778.log +0 -13
  1512. data/spec/support/logs/Dispatcher - 27828-29742.log +0 -17
  1513. data/spec/support/logs/Dispatcher - 27837-46211.log +0 -21
  1514. data/spec/support/logs/Dispatcher - 27846-16143.log +0 -13
  1515. data/spec/support/logs/Dispatcher - 2789-29375.log +0 -25
  1516. data/spec/support/logs/Dispatcher - 2798-10983.log +0 -15
  1517. data/spec/support/logs/Dispatcher - 2836-2354.log +0 -17
  1518. data/spec/support/logs/Dispatcher - 2845-65341.log +0 -21
  1519. data/spec/support/logs/Dispatcher - 2854-18936.log +0 -13
  1520. data/spec/support/logs/Dispatcher - 2867-51979.log +0 -21
  1521. data/spec/support/logs/Dispatcher - 2876-21086.log +0 -25
  1522. data/spec/support/logs/Dispatcher - 2887-17393.log +0 -15
  1523. data/spec/support/logs/Dispatcher - 2930-37394.log +0 -17
  1524. data/spec/support/logs/Dispatcher - 2943-46737.log +0 -21
  1525. data/spec/support/logs/Dispatcher - 2956-37866.log +0 -13
  1526. data/spec/support/logs/Dispatcher - 2976-21012.log +0 -17
  1527. data/spec/support/logs/Dispatcher - 2990-48082.log +0 -21
  1528. data/spec/support/logs/Dispatcher - 2999-16391.log +0 -13
  1529. data/spec/support/logs/Instance - 2204-45164.error.log +0 -356
  1530. data/spec/support/logs/Instance - 2475-49789.error.log +0 -356
  1531. data/spec/support/logs/Instance - 2509-39450.error.log +0 -455
  1532. data/spec/support/logs/Instance - 2533-5785.error.log +0 -354
  1533. data/spec/support/logs/Instance - 2539-42941.error.log +0 -356
  1534. data/spec/support/logs/Instance - 26178-57631.error.log +0 -324
  1535. data/spec/support/logs/Instance - 26458-60253.error.log +0 -326
  1536. data/spec/support/logs/Instance - 26514-44685.error.log +0 -423
  1537. data/spec/support/logs/Instance - 26538-43093.error.log +0 -322
  1538. data/spec/support/logs/Instance - 26544-52217.error.log +0 -328
  1539. data/spec/support/logs/Instance - 26682-37056.error.log +0 -345
  1540. data/spec/support/logs/Instance - 2669-56818.error.log +0 -354
  1541. data/spec/support/logs/Instance - 27547-3928.error.log +0 -309
  1542. data/spec/support/servers/arachni/element/capabilities/auditable/rdiff.rb +0 -162
  1543. data/spec/support/servers/arachni/element/capabilities/auditable/timeout.rb +0 -34
  1544. data/spec/support/servers/arachni/http.rb +0 -127
  1545. data/spec/support/servers/arachni/http_auth.rb +0 -9
  1546. data/spec/support/servers/arachni/module/auditor.rb +0 -136
  1547. data/spec/support/servers/arachni/rpc/server/framework_simple.rb +0 -30
  1548. data/spec/support/servers/arachni/spider.rb +0 -234
  1549. data/spec/support/servers/arachni/spider_https.rb +0 -58
  1550. data/spec/support/servers/modules/audit/code_injection.rb +0 -139
  1551. data/spec/support/servers/modules/audit/code_injection_timing.rb +0 -110
  1552. data/spec/support/servers/modules/audit/file_inclusion.rb +0 -202
  1553. data/spec/support/servers/modules/audit/ldapi.rb +0 -73
  1554. data/spec/support/servers/modules/audit/os_cmd_injection.rb +0 -140
  1555. data/spec/support/servers/modules/audit/os_cmd_injection_timing.rb +0 -103
  1556. data/spec/support/servers/modules/audit/path_traversal.rb +0 -197
  1557. data/spec/support/servers/modules/audit/response_splitting.rb +0 -114
  1558. data/spec/support/servers/modules/audit/session_fixation.rb +0 -87
  1559. data/spec/support/servers/modules/audit/source_code_disclosure.rb +0 -95
  1560. data/spec/support/servers/modules/audit/sqli.rb +0 -118
  1561. data/spec/support/servers/modules/audit/sqli_blind_timing.rb +0 -121
  1562. data/spec/support/servers/modules/audit/unvalidated_redirect.rb +0 -115
  1563. data/spec/support/servers/modules/audit/xpath.rb +0 -111
  1564. data/spec/support/servers/modules/audit/xss.rb +0 -152
  1565. data/spec/support/servers/modules/audit/xss_event.rb +0 -80
  1566. data/spec/support/servers/modules/audit/xss_script_tag.rb +0 -73
  1567. data/spec/support/servers/modules/module_server.rb +0 -14
  1568. data/spec/support/servers/modules/recon/backdoors.rb +0 -4
  1569. data/spec/support/servers/modules/recon/backup_files.rb +0 -28
  1570. data/spec/support/servers/modules/recon/common_directories.rb +0 -6
  1571. data/spec/support/servers/modules/recon/common_files.rb +0 -6
  1572. data/spec/support/servers/modules/recon/directory_listing.rb +0 -30
  1573. data/spec/support/servers/modules/recon/grep/emails.rb +0 -21
  1574. data/spec/support/servers/modules/recon/grep/insecure_cookies.rb +0 -21
  1575. data/spec/support/servers/modules/recon/grep/mixed_resource.rb +0 -83
  1576. data/spec/support/servers/modules/recon/grep/password_autocomplete.rb +0 -33
  1577. data/spec/support/servers/modules/recon/grep/unencrypted_password_forms.rb +0 -33
  1578. data/spec/support/servers/modules/recon/http_put.rb +0 -7
  1579. data/spec/support/servers/modules/recon/interesting_responses.rb +0 -5
  1580. data/spec/support/servers/modules/recon/webdav.rb +0 -25
  1581. data/spec/support/servers/modules/recon/x_forwarded_for_access_restriction_bypass.rb +0 -16
  1582. data/spec/support/servers/plugins/profiler.rb +0 -82
  1583. data/spec/support/servers/plugins/rescan.rb +0 -31
  1584. data/spec/support/shared/module.rb +0 -162
  1585. data/spec/support/shared/reports.rb +0 -47
data/spec/support/pems/client/cert.pem CHANGED
@@ -1,39 +1,37 @@
1
1
  -----BEGIN CERTIFICATE-----
2
- MIIG5DCCBMygAwIBAgIBAjANBgkqhkiG9w0BAQUFADCBgDELMAkGA1UEBhMCR1Ix
3
- DzANBgNVBAgTBmF0dGlrYTEPMA0GA1UEBxMGbWFuZHJhMRAwDgYDVQQKEwdjb21w
4
- YW55MQwwCgYDVQQLEwNzZWMxETAPBgNVBAMTCHRlc3RuYW1lMRwwGgYJKoZIhvcN
5
- AQkBFg10ZXN0QHRlc3QuY29tMB4XDTExMDkyNjEwMzIwN1oXDTEyMDkyNTEwMzIw
6
- N1owfzELMAkGA1UEBhMCR1IxDzANBgNVBAgTBmF0dGlrYTEPMA0GA1UEBxMGbWFu
7
- ZHJhMRAwDgYDVQQKEwdjb21wYW55MQwwCgYDVQQLEwNzZWMxEDAOBgNVBAMTB3Rs
8
- YXNrb3MxHDAaBgkqhkiG9w0BCQEWDXRlc3RAdGVzdC5jb20wggIiMA0GCSqGSIb3
9
- DQEBAQUAA4ICDwAwggIKAoICAQDEXOX4I66dlxsepYxvrcpSLw14QfPN/sJ8s8FG
10
- ulkK0GxlqVnVhF5VV548DYe+iz8SvPGZZ5qto+M35nyxkcvaMaDTleNwaJkUbfeg
11
- QTThvNc4qesqhzUP9/iIItwbkDEEUjMeNwlLzoPiBvbLKlxVEIdnuqP8WlN/JVcl
12
- hWfyW0L3Rmaq+GdfTHLF6QafMGel8rh9+WlOQ+9wLmcHjT8x6NKnvc2TDx1/9+Zd
13
- FCwqOcQDpu0u8ViC4gnblWhwemSzUDHICu3DY/bXIvfehcfWbHKrWeB0lo71q6h8
14
- gVZiunAhdoLJ/698gL6poOeku4WScEMdcn3RBMy4kRC8e76pKxZhkL3cNmPikGiY
15
- mxMCUW1p49VOtt4kzZ2Iv3b8ImY7gYVBNzoh/nHgz6L7pgkHkbGZAoFeYGF5ZWii
16
- R9DmeCHoS1e6iHy6ozj+qfzQSvy0F0aAxAaRl9bLBqvXnPteCLysBs9IgtVOHFlq
17
- 2Pyr4EfvdP+ER3t4YwAFIQBmqsxDqMDm5rCSVmvwZlECH8+C6XnAvaT5wecrWx0d
18
- LoherWocR8Ee5DEFuKx7Fh/CeY24gxUxccSybrIf9TNq5XP83/xFlVCqnHUKx46O
19
- NWUvAHV5KUJ2js59KzVRyga8xSTNlzH1z6cmaKetFGR8X5hCHH6Hf1o7nVUa9141
20
- sA0hhwIDAQABo4IBZzCCAWMwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBLAw
21
- KwYJYIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYD
22
- VR0OBBYEFMn4pOJTh+76c4eSJY+oHNJyL8NYMIG1BgNVHSMEga0wgaqAFCoSg0J0
23
- skMlfuQzMzRXALZ6iFA5oYGGpIGDMIGAMQswCQYDVQQGEwJHUjEPMA0GA1UECBMG
24
- YXR0aWthMQ8wDQYDVQQHEwZtYW5kcmExEDAOBgNVBAoTB2NvbXBhbnkxDDAKBgNV
25
- BAsTA3NlYzERMA8GA1UEAxMIdGVzdG5hbWUxHDAaBgkqhkiG9w0BCQEWDXRlc3RA
26
- dGVzdC5jb22CCQCAHwDfoA+VRjAYBgNVHRIEETAPgQ10ZXN0QHRlc3QuY29tMBgG
27
- A1UdEQQRMA+BDXRlc3RAdGVzdC5jb20wCwYDVR0PBAQDAgWgMA0GCSqGSIb3DQEB
28
- BQUAA4ICAQBvuge1RlXwNAkUFb8UrX9J3xP1ZXA5gAxO08KOTBWP8g1CX1I0U9yR
29
- lPbfVhMx/9X1Qnmk3hGEGIX6QtGj4I68Zg35gwv3nR7hmpdZeM2u2u39YSrb5soH
30
- /Uid5D7VT7R643idIbCCHqvqoMrXFtLYxmjAOWH/y7dWATNkSv+mGrIuDTcIbt8m
31
- mt08NYbKsavcu8o7dsNniT1lnHYXFumJMjFJa53VgLig4GzG0TQ86Mc0OX5/Y0yN
32
- OCZYyamwEWFX/tiUyCm1Tg3A/Id8IlHqSxa5G+zAMdKau0EI/LCFtRy7jHxfizcq
33
- lW2nDt2hxkFJZKgn7HsCLYFUCRo+U9s7gTIoYgPDqlDzEi2cfAVnx8IH3F9CH3hI
34
- dPcDkt8MJOgytyqoMO6tbnG6AOLJVL6SBKYBUGIZojBiVil/jB2yvA4wVPpw3OPo
35
- EwDmKRZ4p3XQYjruBQpBWWZlfT1BES3b8btx4OuguOYwEMC5D28CncZyJ5/bEC5U
36
- 4XlY314srN6/QA43J3euifJfDutZAiH1FKi0MxmXhWKMILARNs9ZxsUkh2Wwi3uS
37
- boj272C501/KYGh/fuLZd9WSqW/FfWcmm/7Xk/sNxLOpquExpPQjmmjd2qZs7FZC
38
- l3yYaDLxhB4YmUxCJXBAq8LhAGIy3GsjEvxw/agLihVONQy8KkW09g==
2
+ MIIGazCCBFOgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBTMQswCQYDVQQGEwJHUjEY
3
+ MBYGA1UEAxMPQXJhY2huaS10ZXN0LUNBMSowKAYJKoZIhvcNAQkBFhthcmFjaG5p
4
+ QGFyYWNobmktc2Nhbm5lci5jb20wHhcNMTIxMTAyMTAyNDA4WhcNMjIxMDMwMTAy
5
+ NDA4WjBKMQswCQYDVQQGEwJHUjEPMA0GA1UEAxMGQ2xpZW50MSowKAYJKoZIhvcN
6
+ AQkBFhthcmFjaG5pQGFyYWNobmktc2Nhbm5lci5jb20wggIiMA0GCSqGSIb3DQEB
7
+ AQUAA4ICDwAwggIKAoICAQDEl91flpFH2Y1b2voSsjYDEiC70ArJWrmgm/UFdtXT
8
+ pCng9ACjJWuf/evBOa8SKmNFgM1NKMF7GaZghDid3npq4Pdz/C74Ci8Q3ORMPC25
9
+ Cq5T8oLYr7OGRQG7cmAqq7fP7MbPikEoaV3sg9CYdCqeK5WqT4+2eWvJGZ6t3z/g
10
+ A1WYoHMbhXS1MedPlJIboSUcUlvf2BEld4EzwjCAlF7IICAT37ijtlDqVZpByfii
11
+ xj47wP/fx7AtHe7tog9h1MgM0ciJgvH9TT3Kc/iSHYwrhS6jcnlwju7P1YkaRjjO
12
+ ODIt7HCf6ScMmK+XIJZRuI7I4zWSSUKI5vgj5BKtlyj71xHRcKX+wfUwhz92BwwE
13
+ 9kakl+0L4C11aWKHsYpT8J3NFH8soFpyUPmVQTDiNDcmbxQYHuZbSdWG5+XLYrLZ
14
+ MJ8am9HB7Z9uQugyZxki/AgQyT21eCJBrg83A0zd+SYezsDA/SVEZXCCrrO5/u/f
15
+ 6+RGYZcWXaIk+18uai5ax0HwksN9AnIIYyH19Fkq516a231Hy37/RKn2W/vH7A/J
16
+ YdleDe1wqeIApDC/jJncuO380BdzvvwbhTkp3KKjNcx0B9d917q+pguzotiVR19n
17
+ /MyIZ2/EU6r+AGyt1jxFZQhbgL6ayVlMgflyCTcsfgN7kC6dW+7L5gfBt3MwoXgK
18
+ lwIDAQABo4IBUTCCAU0wCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBLAwKwYJ
19
+ YIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0O
20
+ BBYEFNDF0OQgaYJqWYB9onMoDJrI6sEHMIGDBgNVHSMEfDB6gBTxU601RtmudtfS
21
+ BFYh2znJpP64LKFXpFUwUzELMAkGA1UEBhMCR1IxGDAWBgNVBAMTD0FyYWNobmkt
22
+ dGVzdC1DQTEqMCgGCSqGSIb3DQEJARYbYXJhY2huaUBhcmFjaG5pLXNjYW5uZXIu
23
+ Y29tggkA8FjCoCiD1/UwJgYDVR0SBB8wHYEbYXJhY2huaUBhcmFjaG5pLXNjYW5u
24
+ ZXIuY29tMCYGA1UdEQQfMB2BG2FyYWNobmlAYXJhY2huaS1zY2FubmVyLmNvbTAL
25
+ BgNVHQ8EBAMCBaAwDQYJKoZIhvcNAQEFBQADggIBAKOrRHhird4fhaVMHyNdTqQx
26
+ tMuqYWrPb+L4vir7Gu9bfNXlS/b5QBBeFbg5YwVeMx2KTdJR9u3XK9PaQQCC0+ak
27
+ tDy3beasiFvoThWmzaVLnPR2OpdRbbK9oFZuK7Y7Sdj6hFapbPcS3hG1M7uWtmiF
28
+ Cwd3hmXzvyOH7DToQ5wRAtS3kE2I5J9kH8OVP/pIZ/OTnfDTHOilznOMmlJ+LuFh
29
+ ECgxIFv9GRAb+J+AxFWBFNgm6yv6cGjAnT2rZR2B2WyKpmHs+mIxqmNSYldublKi
30
+ OBVl13M2ETH9NKRkvNjYbD4nsZGWO85zGiv0AVaZxwEfIHuXQdWfSIhxno3UQpxJ
31
+ UlCZTpGJ0wvHHrHC7GQZCCdr83Zq8MgcMgCuE78qNbYIE+rf6+MOhnxgg0sJ12Yr
32
+ +++VrQx5HDOoChr39rFISRpi2vFxz5QsJONoNLvH0uJoxQ5UDlOXqeq6TlJBBNUk
33
+ 77IkxGfqU7XmF9uT8nmcU4hx8yhKFJOZ5ORHX+U8+yaQN8RsxQadF7OzS1MMQXkl
34
+ UwIeFEQNNv0JOIkjZILIDHz++PL5Fa+5/lgAV24X68ZIQ5FkgoLoOIWgbcARlsj0
35
+ 62BJLPhrIbCUI7XDos+hTmMPWkzfGoIahL1mEMshlrKK/XGIFh9l1iKnI/4ze1bH
36
+ 9nvAl0/txVluZtYXlf2E
39
37
  -----END CERTIFICATE-----
data/spec/support/pems/client/key.pem CHANGED
@@ -1,51 +1,51 @@
1
1
  -----BEGIN RSA PRIVATE KEY-----
2
- MIIJKQIBAAKCAgEAxFzl+COunZcbHqWMb63KUi8NeEHzzf7CfLPBRrpZCtBsZalZ
3
- 1YReVVeePA2Hvos/ErzxmWearaPjN+Z8sZHL2jGg05XjcGiZFG33oEE04bzXOKnr
4
- Koc1D/f4iCLcG5AxBFIzHjcJS86D4gb2yypcVRCHZ7qj/FpTfyVXJYVn8ltC90Zm
5
- qvhnX0xyxekGnzBnpfK4fflpTkPvcC5nB40/MejSp73Nkw8df/fmXRQsKjnEA6bt
6
- LvFYguIJ25VocHpks1AxyArtw2P21yL33oXH1mxyq1ngdJaO9auofIFWYrpwIXaC
7
- yf+vfIC+qaDnpLuFknBDHXJ90QTMuJEQvHu+qSsWYZC93DZj4pBomJsTAlFtaePV
8
- TrbeJM2diL92/CJmO4GFQTc6If5x4M+i+6YJB5GxmQKBXmBheWVookfQ5ngh6EtX
9
- uoh8uqM4/qn80Er8tBdGgMQGkZfWywar15z7Xgi8rAbPSILVThxZatj8q+BH73T/
10
- hEd7eGMABSEAZqrMQ6jA5uawklZr8GZRAh/Pgul5wL2k+cHnK1sdHS6IXq1qHEfB
11
- HuQxBbisexYfwnmNuIMVMXHEsm6yH/UzauVz/N/8RZVQqpx1CseOjjVlLwB1eSlC
12
- do7OfSs1UcoGvMUkzZcx9c+nJminrRRkfF+YQhx+h39aO51VGvdeNbANIYcCAwEA
13
- AQKCAgAg7CJylCj2qxsU7FS7dLvzQ4hSnVwvMYOSPOEu5pd/RKqn8Njq/6KBVItn
14
- Li2QOPB+R8eKHODGNDAoczB85SD0mFWKpBraAe+IiVd3OveO0YaULYkMPFcdMkot
15
- KQsWY/qT6uQ/MKMSXrGl99zw+003xemt7pEIAmz1aGFQHSnsbHix1M/p4nQSelLT
16
- 89n0Xr1CCYv9MxAA20sN1/nWPkxWJd8L2Lra6THc/sdU28j722uN4TLrJ/PbHeLh
17
- Og+krCCuH8f47jwnAl+kemxslqmGvfAL4qnLYmLdtcYt+dFuBCxAsAoFrCTUDxHo
18
- ht3PtNEUWFYoXcXSgaeBWnEf6O9ySg1g4zD4rqhxFURNUMV0xp8RnWC+j3EHNlOH
19
- TInYW5cfpk39Dmc5OwOnw1keVkjlYoiNMRir8HJBw3f/00Ug3+F9URgnIv620+8C
20
- 7evYTxs1G522RPWxxEFxpJhtKEZ9kKRBb6iOEgYo5Lwqs/sxXI+HNFt0Qm206otY
21
- 5IBnoGUi43/TNiUHs9BXjZdWLdV1bE1z66aDnoid8vuJgOwBGaNsWqx8iR5sFOpW
22
- ZRUxGcAfc1XOe3/Muv8kSiGARJRT/NLECUwSy07zonBwwDZMGKhCodjhpqbDHI53
23
- GjlNzFcHTlXWgWV6MIQRmmN2q7TAFFAyW8dP/s6cgJOyhcdQwQKCAQEA9o2/8pIa
24
- Yym+3viTmvwnZpHMP+rwYJ3zeRaVWvClYqreIvg4X+aNljfU6vJDoNXnrrNaexPT
25
- mrEmkr1NWaQS73isJJTk3ZZw79uxT/L43Bziyqe15gd02ahTOb+RooSRwOzFvZM8
26
- ycxVpGi88Wyy3rmdgtCj/wTqHdzrQ8EISQWGEacFdR0jsBA/TaAA8/l8YcQibfs4
27
- 0RkVaoQLPK7aKx6L2021EF6nz2bGsvchW+BmEgrSiuexp0xIOkMPDmzq2B5PC+09
28
- 8771Zlifm/yfTsjivZmBFM4mE8l/Qld9yu7QfW4gJUvhMuMOHTqqd1hdkOQ3VJDn
29
- VV+IQn14mmlvvwKCAQEAy+LdzpZ3L727vlvsR4DfS7BGloi0QZJTo90F197Z1mPI
30
- CqOx+fzTckVZ6zF4wacoMbIcwUHPhbUeONxGORRoDy0TFiN4TvfztyR7LkQ4qErM
31
- M3xcR04TeK2hsItP7wJzZSAXBx1YXDW6bZIx9HjUYxubAv0wqhVHKIVW0NKcJmUX
32
- ab8MRC98m+to08E5tjxGa0/Yz3dyWtpIXcj1slm0F5PVzaGP5+Hm63PZ3UAn/X9B
33
- xdED0n6AG6WaYT71F+AyJ8SYOW01IXK623pC1IPEL5Gr5iBZq2I+mQPrrQuZbdf3
34
- Mp7pKRlMtlI5a+inVmqsU07brU9wSF1P/+SsdjzAOQKCAQEAjCi43aTA625n20lk
35
- X87Idz6a5hsg20vvhP6ZmUEEQ7ru3OJO6fWet661k3p1h5ESS/YZka4LtPzP+Ms0
36
- laj4OrpW4dTi5jUHrtMtUU3GuxqQsrP0a/gBLVrLNSD6IXFLimkPYF27SNyoMvZ3
37
- sqcgaA0MxbjmAatBjAhylem+VASX2qEgMRuHlicmVXKIGCnT06A0EmGmQvgHfK3j
38
- 1XNxAuIyj1D1hYDJ1NWQT1y90gUXAVq1pdFg5MIwrS5B+Olh98oDFbygY1hDGRN4
39
- aKyLw7Xfb/k7sCAg9U6u0X/7OsnYK/XWwF0KgGsjMuqOzZmmVx/ldGWLnLTaOTIq
40
- xVz68QKCAQAao7rdilVqXH0SY0pdEV6bsh2W/6elxau+BlwEF68YzxLNKRRRGJK8
41
- JImaLG2dx+x9icsuCR5HVyHqxgU64gqyqO4Mf3fxwX4LmO2rXuiUPKmvtHkOLApp
42
- Qy6UNa+tCAHx3Z6EpHXuHmsMdASo77y4clvvqQtZvcv9ZGayhEI41g6YF4lPw3Ch
43
- osGgoWecAwYkcVtfyDid3FWGQ4Ku2f+o8P0HkCuQXbjhXNLDkOVovt7mLOg18adl
44
- dV7Vg/dcNkP3ZD2Li1Rc2XPGx5PB1rGkkYEHYYS12vFY5uU9R/21F3nKGG9YmmCm
45
- ldnA2rY6mVeIzw3u+Ckwm1ifk85g6JEpAoIBAQDtscJiVYuCkuOtHTYzTkZx0sRb
46
- ZVkswbkleeQpG6qgoQXuqAYnLm5GGbix+/9DLtiz8PWOTQgZnCBWNxgIZXWBGhmG
47
- J9J3ss9HCXJoIo1DHZVqGMy4Rf5l5Pzq3gaUzHC/XQU67qatAyie2D8bFnFPb8LK
48
- J0ELcCb0XjEIEvt4TRiX6bnok45r42H7eRLvb4ex8zgiXBKoW903ZwvF9XrxAmyl
49
- lkSwQfmRVbxzainIgRs2YAa6+7+VWlhxzHqkPrEot9Eox0b59jWfOcMPtOlaaE2o
50
- yxrk1r0IspUPjYWSjCkDYCLrDBkSOw12CZcfbGSZ5u7mTMkHBHuDpmCXrILO
2
+ MIIJKAIBAAKCAgEAxJfdX5aRR9mNW9r6ErI2AxIgu9AKyVq5oJv1BXbV06Qp4PQA
3
+ oyVrn/3rwTmvEipjRYDNTSjBexmmYIQ4nd56auD3c/wu+AovENzkTDwtuQquU/KC
4
+ 2K+zhkUBu3JgKqu3z+zGz4pBKGld7IPQmHQqniuVqk+PtnlryRmerd8/4ANVmKBz
5
+ G4V0tTHnT5SSG6ElHFJb39gRJXeBM8IwgJReyCAgE9+4o7ZQ6lWaQcn4osY+O8D/
6
+ 38ewLR3u7aIPYdTIDNHIiYLx/U09ynP4kh2MK4Uuo3J5cI7uz9WJGkY4zjgyLexw
7
+ n+knDJivlyCWUbiOyOM1kklCiOb4I+QSrZco+9cR0XCl/sH1MIc/dgcMBPZGpJft
8
+ C+AtdWlih7GKU/CdzRR/LKBaclD5lUEw4jQ3Jm8UGB7mW0nVhufly2Ky2TCfGpvR
9
+ we2fbkLoMmcZIvwIEMk9tXgiQa4PNwNM3fkmHs7AwP0lRGVwgq6zuf7v3+vkRmGX
10
+ Fl2iJPtfLmouWsdB8JLDfQJyCGMh9fRZKudemtt9R8t+/0Sp9lv7x+wPyWHZXg3t
11
+ cKniAKQwv4yZ3Ljt/NAXc778G4U5KdyiozXMdAfXfde6vqYLs6LYlUdfZ/zMiGdv
12
+ xFOq/gBsrdY8RWUIW4C+mslZTIH5cgk3LH4De5AunVvuy+YHwbdzMKF4CpcCAwEA
13
+ AQKCAgBskz8VAtA78WAL4hWI69m+um1PrOe4Kx4oINoi6W3Q1HK4paoQcKNPGmrx
14
+ LY2OJ9Dp2ugH/EFXXmQwG/Y04mGT06l26kl6fg1eb9C6deX+s3JyNJalW+x3dHcv
15
+ ckzAZFRBRpDKoJ251u+jp202Nbov3vxqskQ50DeCOl8Twh/B9bV5dOv9wCgjxmrs
16
+ 3a4QCmC3kpjhOLDHk4fM8SveZ5MtTejJcR7Fc/SeZyapvQVPyNMoJ0Bp9BxN3qFN
17
+ ptp9+ol94wKxR5ukfNtqi8A12pHGm2iVpqyBSL+GE3YEB9JpukmkaVgOSTNi1pTr
18
+ j3jVq2tYcXvtzf4sI/vZvqW+L6TW8hGwCSORF9H7etCB+56jdUxPzWP2DJtFuD+N
19
+ cCuw4LaxmBJBOuwuyXpwoxvmJDeSYdUKayA3jgxSyuJ6DY5ENVa4k9yM7IfYFsgC
20
+ nT0mZJmnXzd3MMMTV7APlYjusdnEL2g7GhL2Jy3+RYgItgSPejraC+lPKJOxb93j
21
+ hcww9sRlCdp+jiNXUbmJcBiU0CLVoJmjmigAje5NmKDG5oM+puhW5G2oHVHtmL5D
22
+ 4myOr7KxGaId+UKqhEYjMYU0YOSlhpMgIdamZsQrz5Oy/NnjOCZf5c10LR+xBiEY
23
+ x1YaGvFdaiX+SOHf1OYLm/LLivyg2e16JY/AGlUizrlBvAnlwQKCAQEA5/NhJYtu
24
+ y4PU7XwfcOwz7hr1PHp/tFLEfQ/JpOogLNe9+xeUnznrrnprRtm36CDTp/KgSgIv
25
+ bwiwsKADcrmaepiytCHW7yFY3soQI+u+xdCvJjkD7dVlY4e1PxxPfghpvuz0ES60
26
+ 8TqiVAY3bmrie4oIPhU7T2fmaawTwmrDjHZQOBtHOGIYR5LSJNrS1t18PtK02CzD
27
+ HlYIzF0vpck7LzUnZhNoUvVlfuC3HCKY6WshC+kBJpeSqtBMUPDxbqmgSKmve1rI
28
+ MsGfEeo1Fqq/VY5gMDkwcrV24BTuHhXGInxmamhCf/0bAXyXR5LJ1nB/TjzFzPsO
29
+ VjurhFuzhb1+dwKCAQEA2Pn/s+Pd41aw9OVqmf7rnngiWVH5ZH2wRM1Q9A3Q7TO8
30
+ FmK5vYskszjotpm5vzaUAecYMSiWuQrjOKgtoUBHXSYSRxAfqih4UixeW7UbYLsI
31
+ 4ZJCgoLeH+mwiNowYPxhRrWWxSzpyWiK8Ho+oUJGnZSrTx2ZJutyPTLWDSeWcePW
32
+ hBCGIcBmqyUjgH1+8+W7WWbvdtJPr22R+c7SDNfr6x1CQbdxV65EV/ZA47iaRhWA
33
+ EK+2gXGrm/zPmbzmAoMT8e3Bw7IjziZLgmoGiBOubncZkRBFgg6kbiK5iq4hCvju
34
+ u3S7zw5flTKfNBdg6L3iECZdNnx7NhAa1x+pX/g84QKCAQAJ17UOn80Sy8RUU4kO
35
+ BKfrea9gYp5aq4x09h+LZPf6jykbp5OB8jZDECTPO9vm+MWigdQ1b8RNhOPiite6
36
+ nY+llic3J5x0R0j7Iz3uGEnfIQzdpVu6UuzbfV2+kNf6tCawmGN++ylodyF+SUk+
37
+ 4UA9F81jvQjoRLNtVoT8IgWsRzT+PIIYLWl0WBGcyMBbp8hm7hAIgFXDSslSyr2D
38
+ 3ncpeKr0VOx/YLRu3uBGTF2KwiYD2F5ZIeNyZiZm5OKJ3J7VloXAyUhnhvnWC8c2
39
+ 8AXwfnsscLDSnUqvFZRJKIlg20CJUWVJAxeLR5svyVXRSLLOQhvup9Si6iNMGYwT
40
+ p8ffAoIBACB933K6zsF6e+lQaZRB/lqutsYVZnlL8Rd8f4DsiLrcom/fvNzLd2V3
41
+ QjIF9zDRJXzbdF34LAntvXUAikS5cXZbeyU1HujGQq5bgo3NIxprJ7tPwbH1kvnI
42
+ bu0vb0s2wAJssvU38pJ8m0HDrJlNaXGzj6u7TPHtFCBh+nfh07+eVMNWDiADxdwf
43
+ JZ/aKyau4k1TAs0SVWh5ygBUnlPaCbQdn4xjwg9VQ1rAv5raTA/urEzTY0sjEIW9
44
+ aAEnrnH12wjBh+CcToxSY8BVzECYYeic4TE99IqzUqBDhvFjfgM8n9NmebFZ/6pB
45
+ +GE+lv6DYNT2ScMdBP5ljv9j+GMss0ECggEBANSEzoqtnYKN+Ar4Klfa4VGa8Yy5
46
+ v0EpIr5IqZ2dEMZWoXgxZthb1R68RD50tKI2X05Xrsw8gMlPGl5L0HkfCPdaGGhi
47
+ +Hrn4ckeUId+NlKfxxdc5bISARP9vV/jdlJ37QOtm7LlLdhHw97Y8tN24E+N6gN0
48
+ CjXGOEkAW/qT6wg7cFJvl8Ov6FTZrOCSxmzpwNaH04CM6G7lEWB/p/GiXSIULwZz
49
+ UEuwDbRl+UnDihtR2R5E2BKbXSExFumCm+/34cGIFsd0+vc2x/r74R1FXxoF8Iwc
50
+ OD6LesfpcEtvc1OckXup1WgQWdef3ESwkh+HRW+JhHCgsy7doLuJ4BfP5VA=
51
51
  -----END RSA PRIVATE KEY-----
data/spec/support/pems/server/cert.pem CHANGED
@@ -1,39 +1,37 @@
1
1
  -----BEGIN CERTIFICATE-----
2
- MIIG2jCCBMKgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBgDELMAkGA1UEBhMCR1Ix
3
- DzANBgNVBAgTBmF0dGlrYTEPMA0GA1UEBxMGbWFuZHJhMRAwDgYDVQQKEwdjb21w
4
- YW55MQwwCgYDVQQLEwNzZWMxETAPBgNVBAMTCHRlc3RuYW1lMRwwGgYJKoZIhvcN
5
- AQkBFg10ZXN0QHRlc3QuY29tMB4XDTExMDkyNjEwMzE0MFoXDTEyMDkyNTEwMzE0
6
- MFowgYExCzAJBgNVBAYTAkdSMQ8wDQYDVQQIEwZhdHRpa2ExDzANBgNVBAcTBm1h
7
- bmRyYTEQMA4GA1UEChMHY29tcGFueTEMMAoGA1UECxMDc2VjMRIwEAYDVQQDEwls
8
- b2NhbGhvc3QxHDAaBgkqhkiG9w0BCQEWDXRlc3RAdGVzdC5jb20wggIiMA0GCSqG
9
- SIb3DQEBAQUAA4ICDwAwggIKAoICAQC16MC9D4h/D/xHhuYaLD8WJU5X7h9Pc1sZ
10
- Gg5vSWDyadQ6lDor9sNd3qqSEClAwHyWtiltK9FW3Pozvan2NpENoJjlaCbfgPHU
11
- 5yPe6iccRjxdS06Rqh5R/sgAaOovojkYRFZdr7hO+LELWhDlxtSvgL/dTv/KhNXz
12
- gEY+uL97nSESVPSE+K68lrgcWwlh+UPqHz0/VgqvK/y9WOQajuErqbjc39DH0tLC
13
- BhkZXhHPzSECQUBNGIh27MVx1wp2jrYAJjeJD/z2ozgthJcta0vBmtNvLrn0q0pI
14
- 9eTnNxIpVryiANc2E1luazRozaPCHg5XlWjJOlr2d1Vms/oHVrSDCWgjBTLMvh7Q
15
- XXdqHmU9Rkcp/5uB8d0C5uINZt4uomjn6XEB0SH+7qlD1ID7FCgCIxu/F3d7+eBE
16
- pPsWNVCMp0bW1l1TYPlAwjaHF9BkB2BBG3u9PBT/miRpfCQAQZYYis7dp/XKUxGG
17
- W+ivoxKmp83ypspg1KUYxZcgyqOZ1mtfqT6XYV6MhXhuauHoXJFfKWN3+zwt1pnU
18
- Ox37NIN/MPHtkZsPqf8p0fXsq6qG8y1fdymIcuwLhxDQ5AAMktOUR746uft432QW
19
- A90bn/VfXAWT4Oq2I0qK1DXXgHJc4lXPRJKfYw0QIt6Ypfp1gtG5+oPUUDX0vg2d
20
- V2VJkOPZxwIDAQABo4IBWjCCAVYwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMC
21
- BkAwKwYJYIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUw
22
- HQYDVR0OBBYEFCQLW2R+pLLyZJS4tU0RgQBNytTqMIG1BgNVHSMEga0wgaqAFCoS
23
- g0J0skMlfuQzMzRXALZ6iFA5oYGGpIGDMIGAMQswCQYDVQQGEwJHUjEPMA0GA1UE
24
- CBMGYXR0aWthMQ8wDQYDVQQHEwZtYW5kcmExEDAOBgNVBAoTB2NvbXBhbnkxDDAK
25
- BgNVBAsTA3NlYzERMA8GA1UEAxMIdGVzdG5hbWUxHDAaBgkqhkiG9w0BCQEWDXRl
26
- c3RAdGVzdC5jb22CCQCAHwDfoA+VRjAYBgNVHRIEETAPgQ10ZXN0QHRlc3QuY29t
27
- MBgGA1UdEQQRMA+BDXRlc3RAdGVzdC5jb20wDQYJKoZIhvcNAQEFBQADggIBABTx
28
- PYivAmkFmW2edetrzsazE/fMNtdXUuns5ZRt95kYfdykkpJR2XS8vQ2PnOHhgpyr
29
- cfQ6UB8zjUgifqYf1Wy7doEGfSuv+aMAvGFOPGSrFBiJPCUIzBzsSQuJAWH5P8Zj
30
- MFTyAI5HvOndvEX2DM1iwTiHiDr3jAcEdgBf3i92QyYIp1XVjlF0VKhW2hte77Sp
31
- /10roR+3LAPbugYpGsNUogeuPL02qqTqvgJ45W+sw+zoVa5hjZT4Wnc9uEU+DsbG
32
- r/GnZCFsWdzITtYbZ7XFmWToSU12glk4hWw032OCmuCB07K6UfYfahl3rA49qdKT
33
- 1wH+gr5nC9KtWpRaowyJgwiupzZIuloMh2p5DIeCBIvTl2WoUKW9X2uZ1ADNOQyz
34
- QBeTyDoXQbHGt6al7x0EDiboWRn16zB9La4baGg/SRgjkv9gQjRQ7I5S3AUGLd3L
35
- nH1MM+qdBt0VPw9C4ZMC0cVnAv9dJMhz3ecJZV5OP+EbdfE6tWeqCkJ7crWFfcTW
36
- ERje9gog4iU/KL/R6V/0zO7SL80aUa6zsTtlq3R1V7i9KFJOSB8BYr0o+z27BeQc
37
- IggWJdbBkVokOypIiMGz1vmOTG47+bNdqmTKxn/y8MrGN8z3eU3wj0h95G1w2FZB
38
- 2qPMD7/RLy+iRIW0hTEhksjKs1cDedDVSPLqjmpy
2
+ MIIGYTCCBEmgAwIBAgIBBTANBgkqhkiG9w0BAQUFADBTMQswCQYDVQQGEwJHUjEY
3
+ MBYGA1UEAxMPQXJhY2huaS10ZXN0LUNBMSowKAYJKoZIhvcNAQkBFhthcmFjaG5p
4
+ QGFyYWNobmktc2Nhbm5lci5jb20wHhcNMTIxMTAyMTAzMzQxWhcNMjIxMDMwMTAz
5
+ MzQxWjBNMQswCQYDVQQGEwJHUjESMBAGA1UEAxMJbG9jYWxob3N0MSowKAYJKoZI
6
+ hvcNAQkBFhthcmFjaG5pQGFyYWNobmktc2Nhbm5lci5jb20wggIiMA0GCSqGSIb3
7
+ DQEBAQUAA4ICDwAwggIKAoICAQCz+OAzIMwVNujjweU3Zhvk0ZGYqTdJ73Jz5v7F
8
+ O5JE35hTzy1kf6EgMEqmZqKeBe95fviv+7UXcqtYoyxFPB/ssSLeUMyO0fUZZMMi
9
+ 8EfqtZZveB1j7f0EfzSEG7eL5tCjb/Q8tXQvM33+0QfjnwcrSOr2fPPwbEiWU1d1
10
+ cP1ZdRtgvAuo3a4Sga9xtJSFRe3iSpynJsQo482rSPpIcVfm5tArq8RVlztJPvXY
11
+ A76iIgNddhdOM/3fBg+a6iXqkC7X0WPRoNt7XiVniwBIP1t5/2S7JyhRsN50Crfu
12
+ 9N6lZd/fij0xwr5hLzl5lXKdUI5iYZZfTpNiIXnUICswFOUHwV/2W8XADu1HHLeX
13
+ a4knqnmX0h7c+bJm3UrXMiwU61tVENogjNc/vJP9fjy/Klfvgn5BXmpyTze7Xzlj
14
+ JcTt0VNNKUdieLjJsVKVF42j6RH9farshcHcCzd4701WkMEsbHZYncMUYNCBqUg7
15
+ 5SuIFHIZfZ4wq06i8BLRXJRHK+P+kDp/cyJyr/UqtlJwFJIgtWYOO0SMhynBK8gC
16
+ w/SE8Tlx0r/yIAyutyU6F4nE4wYfR3d8SyObzf5HD0rAtHBYUdPR5qFNePpEQlHR
17
+ Kepgl/pMpPZ2X6e4HYqIBrrahMI0mAns285Z/iBKpv6MyJR1npEMNa8I0eugeAGO
18
+ y0IcFQIDAQABo4IBRDCCAUAwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBkAw
19
+ KwYJYIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYD
20
+ VR0OBBYEFFQOlI4fxXxPl9UYd9MdoBsXt9ZWMIGDBgNVHSMEfDB6gBTxU601Rtmu
21
+ dtfSBFYh2znJpP64LKFXpFUwUzELMAkGA1UEBhMCR1IxGDAWBgNVBAMTD0FyYWNo
22
+ bmktdGVzdC1DQTEqMCgGCSqGSIb3DQEJARYbYXJhY2huaUBhcmFjaG5pLXNjYW5u
23
+ ZXIuY29tggkA8FjCoCiD1/UwJgYDVR0SBB8wHYEbYXJhY2huaUBhcmFjaG5pLXNj
24
+ YW5uZXIuY29tMCYGA1UdEQQfMB2BG2FyYWNobmlAYXJhY2huaS1zY2FubmVyLmNv
25
+ bTANBgkqhkiG9w0BAQUFAAOCAgEAeKLkpVjOdO9r5FcZPhemKsL9AFmnbqWmSeFA
26
+ Cmu7wyHwbDbgCS0tWnrq45qDbnAJxAqXQKzKS7QINxR80XMpgoaglx7qd1V5MEXK
27
+ LXn4G6BJ5tAgEbLY7HnsUHQnLMK/KWCzMODweM2gtPTauChF9kIKWrBJuizfldAo
28
+ ww8YOeZfPc77pEhC/vjttQOzfqcLjGvzpJJQVmd+i6JtH635hou9i0QXR//Nrf+l
29
+ ymrCuh7sil/Z1bJdmrQ1yPb2fNgqwHnWHqwPSFb8heEGExKC6vNCS2A+e08HGQTR
30
+ wNAQQYQRihtDC4lqNFcVdgZExXRypzbPE2l49RnDXCL/JOCisAErGd0kzBBj6SGD
31
+ Z7AKH87esH1mNThWFCZJTYXFTthVpNbOpPQ78UbXz9tFbfVdbWAcOn9enNbVeZa5
32
+ vbqIHQs7azy4I5NwQ2zK/+MO1egUbbCEhcUzoUgEx8NB3JeW2ziZDEzzyKqTcv0V
33
+ EH+suZefvhHxI3tGg2UmFD1+SBEVNw/1jv1HsduTclI7ckGHLcFjt7hG1CFLfLZ3
34
+ wEhN91GCsOrbckp8wBMsT1yiimasrVL2PKfa0ywUW0D6zRvBs5bgtGaWUPy1VX5W
35
+ 3LLbhwMZyaHnjT9GGw2cW1hea8TRWapj+/On4w2tRy6KtnkLBHgM3E+0E9DFwwVZ
36
+ jppXDh8=
39
37
  -----END CERTIFICATE-----
data/spec/support/pems/server/key.pem CHANGED
@@ -1,51 +1,51 @@
1
1
  -----BEGIN RSA PRIVATE KEY-----
2
- MIIJKAIBAAKCAgEAtejAvQ+Ifw/8R4bmGiw/FiVOV+4fT3NbGRoOb0lg8mnUOpQ6
3
- K/bDXd6qkhApQMB8lrYpbSvRVtz6M72p9jaRDaCY5Wgm34Dx1Ocj3uonHEY8XUtO
4
- kaoeUf7IAGjqL6I5GERWXa+4TvixC1oQ5cbUr4C/3U7/yoTV84BGPri/e50hElT0
5
- hPiuvJa4HFsJYflD6h89P1YKryv8vVjkGo7hK6m43N/Qx9LSwgYZGV4Rz80hAkFA
6
- TRiIduzFcdcKdo62ACY3iQ/89qM4LYSXLWtLwZrTby659KtKSPXk5zcSKVa8ogDX
7
- NhNZbms0aM2jwh4OV5VoyTpa9ndVZrP6B1a0gwloIwUyzL4e0F13ah5lPUZHKf+b
8
- gfHdAubiDWbeLqJo5+lxAdEh/u6pQ9SA+xQoAiMbvxd3e/ngRKT7FjVQjKdG1tZd
9
- U2D5QMI2hxfQZAdgQRt7vTwU/5okaXwkAEGWGIrO3af1ylMRhlvor6MSpqfN8qbK
10
- YNSlGMWXIMqjmdZrX6k+l2FejIV4bmrh6FyRXyljd/s8LdaZ1Dsd+zSDfzDx7ZGb
11
- D6n/KdH17KuqhvMtX3cpiHLsC4cQ0OQADJLTlEe+Orn7eN9kFgPdG5/1X1wFk+Dq
12
- tiNKitQ114ByXOJVz0SSn2MNECLemKX6dYLRufqD1FA19L4NnVdlSZDj2ccCAwEA
13
- AQKCAgEAhk8nn2/MlCQ1XIpZcpGgsrUwtvN14q+FX29BoSFIlzNUIzw2ByfW74Pr
14
- 5JRSISD93Dj7NUPY+I2HnpQ23TdEug8NVLQln3gRFeTjMz8nSVUCVM+5Xwt//4Ji
15
- IQtVfX4FMcmjCuEm8AfmkD8bosu/VSV2g+xEKD8TyQm4066MkrRdKq/XKiaCvXN6
16
- 1FTTBKeKYV5XVmAs21Fa9mKfaIx97EMP3uTRvfgG7IKcHYK7G/aUnJmY5FNszoHa
17
- 9kaTzx1ne4y8DFLlrySr4c+33y0NbhDmc3zIh8HAw0XqkFy06BjGhcahH6gBq+kz
18
- dP4AHt8aL8h86bZQWxGY2I+h17FI7QhkxSo+RdRUptH5QnGyrw88YnHEriW97OOe
19
- cVJa9O/ujuRIphwkCJZKgnNJPDXrHi2NIiYK2prEMi7IGQQ5gcMZ1dnZAXZGmR/Y
20
- W92LSsv/VaBYOlFhc/4DJXn/v376u7xrAeToydXZy0jHrqIrvwbEuthz2aAfjq8e
21
- IKZC2ZqjGYZiliBrBPl+/9g3yZLOhIXWVsT3YCKdTcPomnLliPXc60RQ6F6bz27X
22
- up5g6ce78v723zd14D0XwesgX2s3jaQ3Q8axBcynH751WxpSAKcknathatW3WIs5
23
- rqslCYe1JyokiVekEGihpjW/l/G3I+c+grfDhoS5BEN/5vKQOGECggEBANlCipCF
24
- CH0D+g7jYNJM29jr0ExCtNZvUSB++6rz7V/vvJXCWN1aC6FzBHnUm7Vm215dE3n2
25
- sXz8uES0mCV7ob+eo9fQcLhuPNukaMfGy99IuGfZh5mjHElLQxmc87jiCn2to/jC
26
- x9ka/lL8T/X/LyX0Q5HrpTRqOgcZG7h8x8cv5IqJyK+ib6Z5uxbaLybd7NMivy2T
27
- ZVGRGuSZC3wQWb7mD5xnkfOVoCU/W4Gq39XW/q3+3ffguE/8DQ6XF5WpyneYnim/
28
- HZSNfFTSnmGNfnMHn/t6lrpQKRE+0pVlrjumA9j5EZGR5fdIlkPUZaV9L6KwqW2S
29
- r4vJB9ONxxzsEs0CggEBANZYhl4EV1F+Ek8rnpTYXFaL/lpSY7TKhPdcKldvY/i/
30
- I1AAoUQk3r2hc52RpbJkL2DHIwnOaSdruPhrhwhuxyibLerFCFS9eCHROdBDnpf8
31
- m2PB5YF0QDiUZXwVx9OrYplbjrb+cwDf3E+BRkrvGoyaIASwFIzGjCI0YFd7XVIP
32
- H7vAO3k/JGbxBcfVAlqg7uVr7pn9qMlxr9RmrtxcvHZwK5MSHVIqZmIUCHc+UD1z
33
- 3SQcusjPT3mSr4t/zHyLXO81Vc6+sUQKUZ4rOBDmqsrJZwpJTKNwGHv0Jvwr3zGE
34
- ppSdJ39tc4lCrayLsgYtorWacTd3J/LjrUGfzCtX5uMCggEAEroSmYxuA+Cg4EGn
35
- KdloJdWFud0SG12y/3sSlFS8REW02q/K2yGU2RDB9QJnfYZlKEgbkqq5980M0RdD
36
- +g8jDRJOix6zaKJP6prMUVQIZLGu+3ybnJmbqZGsMfv+YhRR1S1vcdTQRx11iI+p
37
- EMozNTFN1bkbH158q/n1Erzmt3ugVnSz8LeuqgnaH4klAVOlwzk+g14uII7CY6vx
38
- ensqUTMha1jeEsH18N/6Mj4ZVyRWBYdveJtNJ8/RDE3nwYXGJvLnxy9rDE/5xJH3
39
- Bu+cU6v3lUSm015ve8YPfsMp9ohD0qL9aa/Kw7rlAOnA7TfSMFLL997p9MGaRBj3
40
- bb3HjQKCAQATDs3roBEvcrkoBuXTsCUNoObdmwO4eGU4JR6ypXnLDRuTqmqsR2by
41
- j19bPC7yXIwF287WuV6KHb7Vf6IC8u6MQrfjbt9dwXbj8tlkFg8Mzm32ga/pQa/Q
42
- GAmp7bnVrSBYKFbZGGibREwvWXwpf3bp125PXGSHW8Pr6qJCRPq4KBYXOHFRR3by
43
- HC36ZYsPCc4T4fPWB0KxnoUWqoaTmz86fKCzM+Idgx2VTNiv2X+C50FbS56j6iLT
44
- 2WH4UkWZMT7zGdfmSPgz54L4QDl87zVyUFP0Cy5gPcA/jSbGNxRiL7wr7IktgErM
45
- gnw0ojsS543W/cNhPhv0MaAe/JlHpUonAoIBAHSiCr6rXdo+KYetWUSixYM3nO85
46
- AdRGmvnvVZ10iX+9KTrsllF3QxZG5NTEWa8+hN8CsYLLEo9jB3KmZfunwOwkgnqw
47
- LbyC2OXmQrYFYCbnyXDmctQpybLSJDFYxKf3Eu9oXG3acR0I+UFzsmqci0E/HRCb
48
- eBPnYL6KwG7VjcrgwsVDbCJm7AJoFBF8VVq7HIb25/+1Ji7erhgarX0XIEdWzuOs
49
- AEpMJKsaY49LKiqEIJWmzzDGKxITyiLXjYrIHGiWRVnuLbatcfv0XEOc0urLm/YW
50
- z5OVXNRuzBr4ObLFEC/i38gUUVBJ4uyOncMIZEVBoWaOHcqmzoFibdTnocg=
2
+ MIIJKgIBAAKCAgEAs/jgMyDMFTbo48HlN2Yb5NGRmKk3Se9yc+b+xTuSRN+YU88t
3
+ ZH+hIDBKpmaingXveX74r/u1F3KrWKMsRTwf7LEi3lDMjtH1GWTDIvBH6rWWb3gd
4
+ Y+39BH80hBu3i+bQo2/0PLV0LzN9/tEH458HK0jq9nzz8GxIllNXdXD9WXUbYLwL
5
+ qN2uEoGvcbSUhUXt4kqcpybEKOPNq0j6SHFX5ubQK6vEVZc7ST712AO+oiIDXXYX
6
+ TjP93wYPmuol6pAu19Fj0aDbe14lZ4sASD9bef9kuycoUbDedAq37vTepWXf34o9
7
+ McK+YS85eZVynVCOYmGWX06TYiF51CArMBTlB8Ff9lvFwA7tRxy3l2uJJ6p5l9Ie
8
+ 3PmyZt1K1zIsFOtbVRDaIIzXP7yT/X48vypX74J+QV5qck83u185YyXE7dFTTSlH
9
+ Yni4ybFSlReNo+kR/X2q7IXB3As3eO9NVpDBLGx2WJ3DFGDQgalIO+UriBRyGX2e
10
+ MKtOovAS0VyURyvj/pA6f3Micq/1KrZScBSSILVmDjtEjIcpwSvIAsP0hPE5cdK/
11
+ 8iAMrrclOheJxOMGH0d3fEsjm83+Rw9KwLRwWFHT0eahTXj6REJR0SnqYJf6TKT2
12
+ dl+nuB2KiAa62oTCNJgJ7NvOWf4gSqb+jMiUdZ6RDDWvCNHroHgBjstCHBUCAwEA
13
+ AQKCAgEAomQ78QZz/+R3CiQH7w/8tWCALq7pi5Y6wOg7FL7nAax754u2mssrGT9Z
14
+ 7IIJ0+rpJcjzHuBRjCHVCHrb1HEnIUzIeK+RlIFQ1qP8C8eiLN/DKTvJ0USKHIen
15
+ XFkiKmOP+Rlo2Wqltn2Q/9+fbb0uG9mE4frnphYe/T2gWgElKZYoqQWkw6+bhWlt
16
+ ZH0b0pHBz4GhjpXFRFwhVZ/Y7osPVPMJ/Y3U76IxRatA67SdS/DC9o87Aj6Zoab3
17
+ Z8JFijyld+mhVyL9SHkv6RkcnRRGN3PCcbkogWXFpBGT3FMpnzaoZi13gDIH1Otm
18
+ whWewOJSR+VkaQUeqdoo8sZAEfeYm/14AgwJ0H7fX9iKNHfmbtji3iOcTMeeCas6
19
+ Z0ODTzmIQcqA5MgHBjRhs0EacWSEdeEC9iEzpN8dyjm6J2MSqJk12vIlRPKNl5Lx
20
+ 4bLFYZBGjSb2Q5SegnS2ktPKz9dsxb3zbaJ5PnrtMQ2TQNCK06F9NDFjeJuRpt2e
21
+ PlnLB5vA/CEQ866zdVpwfWmaP/lbvYQKfiP0qDrUL6ws+cRWvWVj4MTiU4+Mzqdb
22
+ 0hGTKMiAe2FIr7u73URabtMKlbPaiWuSQblikigRUDyEYwg7H/K+m8wsFm4Mc9AJ
23
+ sT2GJW9cJ2QXAzkdGrVXsbIDWcijdN8ziLpIyP8043sHWWCRMHUCggEBAObMIc+Y
24
+ MMurC7UFRNcn+hmJTRvhFsgYzds5jLhHHwNdFjvELbJYhOrRxOjzoKh65RDZ0U0T
25
+ G5TgTFlGQE6q3Pca8dqFG2zncFownkkDm+AwdmdPZ/047kc4OgTYXTdaopJCWJqD
26
+ sCYhnhVqE1+jpFyn+5KneBwJoCbSMDvdZAnXOVUY+aTkzmyd6IwWUPvlTtdwcNql
27
+ XUQQudP6PEgDCquvAhlzhdIUaVGr9y2jdB0c055z6hsaCZJNqsUQpVm/QZAavety
28
+ 2aDaU3/kuazFBtN6IviiSE1CSGDbVv7DuaBDeW32llwkGdD8WoNLLtwZXeYsWuz5
29
+ Vo4ZAKaXoIr8gaMCggEBAMef8NebwQSm9B5XEwGzxOwdVNpTm75ApH8NUavjbvyk
30
+ COOGSpLtdTkuRaUTOFJdjVTfOdzWzuMF+e2Y2BJe+1m32gYp5d4oGmf/LVrL75F3
31
+ mhpNxl26g4Hnp38Bpz9LJc7+kWsM/za7bRMPIab5eIUa+yg3oq4pJsFZ9pry1sHS
32
+ EZL0YDWHE1fiDKB7EW5iJeiKJz1CKjiQNdlEMo7nBigUiIaw8leNg+CSwf8RYBPt
33
+ xbcZuQ1ihm1EjTfnkMCruVbPI0Ot4p5E2U9ByjmiHSgfj7gYg5Z+hQ498iwGXxCI
34
+ PkCJkWZKeHp28ZCjKf3/46SZWgp5A7MBxygeBvY4ducCggEBAMaOi/ALIL+3kcTU
35
+ mZr426OoidwYU/8lx8R4yGWpWjcMmJomdqHeoctbWKqJHoiT4goTOouyiqIULdsI
36
+ Iz8KpDs6xSOYLDYPDoupFCQApNPFHbhXikFB/0zqRI/yjI+YvBBUX+HetWa4uUX3
37
+ El/PaxIDut06koycg1mirrhyCSSmMr7RU8TWy/iKCYyrjlSHvMKAC7cvWQO72ANU
38
+ XxQc+csmLwoyZsiLougOqAJtgvGg4TaKxrc2OVHS273aSkbh0cfmGco77psB+aAn
39
+ 6M2IXA0IIJoDE2zUP2yEh116iXIlWoyN/mGa9VLkKAKYZeIZOL1TH46MHDj3raWl
40
+ AQtRnT0CggEBAKx/SceWAIF7nyEEjxj+daCua99JNiB9jWd4Y+WLXyGSwVeSeKhj
41
+ 5tKlaGsPo7CQxIrdZgut1xKX3HLyi2u8hafuVcjTtZ11u/O3rkJyTS6/Uft+z3W4
42
+ sOC1A6idDh+EWUR398KwdWyfIs7AWY0Gr50dRoBnKv0h9CpKCe20/9x2INeCsgwv
43
+ D4j2fYDDN7nRt/4sO2IU5ZUBEHcRFjsj6M8Dh0IUbyU21Qle56H4KrSt1xa0dJLb
44
+ W1vaS8lOIWhMO5iG32shO90Vk06IhC2vJ1C/jRpAnJyT8XfwEW73hngrstdjyK/C
45
+ lD8GvxED3UpuLxDRrtuz3H13gNfqsotbGWsCggEAAnt56fTLGmTu9pdM3FtTEaLN
46
+ rmO9JbRDsxnXTN84hLci27HW0rU/AFGw+a6MHNiBNVfBqhMnZwPgAsNVf6TB//iE
47
+ FZTotJWcTHkbiBwpXvRHHQ0BwxKluDicLqzzvEW8fmiNVjDig2JeS/45r2x0S4M/
48
+ 3TVHK7A/vXQWvBgQi9a2ooViRjRXdhzlIkjNNsYieAwX7793Nw2KqZbHKXvelEOQ
49
+ I6nTIqNDZOZ7MmGKHnGpj4SIupCKdkalQgakkGFbpltsyKBC7gooHQuKjQsYnRgl
50
+ XzOy39QzIn0WF9AoyLg/W8yPsnhc1S5Ed6Lq8KL3HWV6a8n9QRSHVCX6dafBcg==
51
51
  -----END RSA PRIVATE KEY-----
data/spec/support/servers/arachni/browser.rb ADDED
@@ -0,0 +1,836 @@
1
+ require 'sinatra'
2
+ require 'sinatra/contrib'
3
+ require_relative '../../../../lib/arachni'
4
+
5
+ @@hit_count ||= 0
6
+
7
+ get '/' do
8
+ @@hit_count += 1
9
+
10
+ cookies['This name should be updated; and properly escaped'] =
11
+ 'This value should be updated; and properly escaped'
12
+
13
+ <<HTML
14
+ <html>
15
+ <head>
16
+ <title>My title!</title>
17
+ </head>
18
+
19
+ <body>
20
+ <div>
21
+ <script type="text/javascript">
22
+ document.write( navigator.userAgent );
23
+ </script>
24
+ </div>
25
+ </body>
26
+ </html>
27
+ HTML
28
+ end
29
+
30
+ get '/ajax_sleep' do
31
+ <<HTML
32
+ <html>
33
+ <head>
34
+ <script>
35
+ level1_ajax = new XMLHttpRequest();
36
+ level1_ajax.onreadystatechange = function() {
37
+ if( level1_ajax.readyState == 4 && level1_ajax.status == 200 ) {
38
+ document.getElementById( "sleep" ).innerHTML = level1_ajax.responseText;
39
+ }
40
+ }
41
+
42
+ level1_ajax.open( "GET", "/sleep?sleep=#{params[:sleep]}", true );
43
+ level1_ajax.send();
44
+ </script>
45
+ <head>
46
+
47
+ <body>
48
+ <div id="sleep">
49
+ </div>
50
+ </body>
51
+ </html>
52
+
53
+ HTML
54
+ end
55
+
56
+ get '/sleep' do
57
+ sleep params[:sleep].to_i
58
+ 'slept'
59
+ end
60
+
61
+ get '/load_delay' do
62
+ <<HTML
63
+ <script>
64
+ document.cookie = "timeout=pre"
65
+
66
+ setTimeout( function( name, value ){
67
+ document.cookie = name + "=post-" + value
68
+ }, 1000, 'timeout1', 1000 )
69
+
70
+ setTimeout( function( name, value ){
71
+ document.cookie = name + "=post-" + value
72
+ }, 2000, 'timeout3', 2000 )
73
+
74
+ setTimeout( function( name, value ){
75
+ document.cookie = name + "=post-" + value
76
+ }, 1500, 'timeout2', 1500 )
77
+ </script>
78
+ HTML
79
+ end
80
+
81
+ get '/snapshot_id/default' do
82
+ <<-EOHTML
83
+ <html>
84
+ <body>
85
+ </body>
86
+ </html>
87
+ EOHTML
88
+ end
89
+
90
+ get '/each_element_with_events/a/href/javascript' do
91
+ <<-EOHTML
92
+ <html>
93
+ <body>
94
+ <a href="javascript:doStuff()">Click me!</a>
95
+ </body>
96
+ </html>
97
+ EOHTML
98
+ end
99
+
100
+ get '/each_element_with_events/a/href/regular' do
101
+ <<-EOHTML
102
+ <html>
103
+ <body>
104
+ <a href="/">Click me!</a>
105
+ </body>
106
+ </html>
107
+ EOHTML
108
+ end
109
+
110
+ get '/each_element_with_events/a/href/out-of-scope' do
111
+ <<-EOHTML
112
+ <html>
113
+ <body>
114
+ <a href="http://google.com">Click me!</a>
115
+ </body>
116
+ </html>
117
+ EOHTML
118
+ end
119
+
120
+ get '/each_element_with_events/a/href/empty' do
121
+ <<-EOHTML
122
+ <html>
123
+ <body>
124
+ <a href="">Click me!</a>
125
+ </body>
126
+ </html>
127
+ EOHTML
128
+ end
129
+
130
+ get '/each_element_with_events/form/input/image' do
131
+ <<-EOHTML
132
+ <html>
133
+ <body>
134
+ <form>
135
+ <input type="text" name="stuff" value="blah">
136
+ <input type="image" name="myImageButton" src="/__sinatra__/404.png">
137
+ </form>
138
+ </body>
139
+ </html>
140
+ EOHTML
141
+ end
142
+
143
+ get '/each_element_with_events/form/action/javascript' do
144
+ <<-EOHTML
145
+ <html>
146
+ <body>
147
+ <form action="javascript:doStuff()">
148
+ <input type="text" name="stuff" value="blah">
149
+ </form>
150
+ </body>
151
+ </html>
152
+ EOHTML
153
+ end
154
+
155
+ get '/each_element_with_events/form/action/regular' do
156
+ <<-EOHTML
157
+ <html>
158
+ <body>
159
+ <form action="/">
160
+ <input type="text" name="stuff" value="blah">
161
+ </form>
162
+ </body>
163
+ </html>
164
+ EOHTML
165
+ end
166
+
167
+ get '/snapshot_id/form/default' do
168
+ <<-EOHTML
169
+ <html>
170
+ <body>
171
+ <input type="text" name="stuff" value="blah">
172
+ </body>
173
+ </html>
174
+ EOHTML
175
+ end
176
+
177
+ get '/each_element_with_events/form/action/out-of-scope' do
178
+ <<-EOHTML
179
+ <html>
180
+ <body>
181
+ <form action="http://google.com/">
182
+ <input type="text" name="stuff" value="blah">
183
+ </form>
184
+ </body>
185
+ </html>
186
+ EOHTML
187
+ end
188
+
189
+ get '/fire_event/form/disabled_inputs' do
190
+ <<-EOHTML
191
+ <html>
192
+ <script>
193
+ function submitForm() {
194
+ document.getElementById("container-name").innerHTML =
195
+ document.getElementsByName("name")[0].value;
196
+
197
+ document.getElementById("container-email").innerHTML =
198
+ document.getElementById("email").value;
199
+ }
200
+ </script>
201
+
202
+ <body>
203
+ <form onsubmit="submitForm();return false;">
204
+ <textarea name="name" ></textarea>
205
+ <input disabled id="email"/>
206
+ <input/>
207
+ </fom>
208
+
209
+ <div id="container-name">
210
+ </div>
211
+ <div id="container-email">
212
+ </div>
213
+ </body>
214
+ </html>
215
+ EOHTML
216
+ end
217
+
218
+ get '/fire_event/form/onsubmit' do
219
+ <<-EOHTML
220
+ <html>
221
+ <script>
222
+ function submitForm() {
223
+ document.getElementById("container-name").innerHTML =
224
+ document.getElementsByName("name")[0].value;
225
+
226
+ document.getElementById("container-email").innerHTML =
227
+ document.getElementById("email").value;
228
+ }
229
+ </script>
230
+
231
+ <body>
232
+ <form onsubmit="submitForm();return false;">
233
+ <textarea name="name" ></textarea>
234
+ <input id="email"/>
235
+ <input/>
236
+ </fom>
237
+
238
+ <div id="container-name">
239
+ </div>
240
+ <div id="container-email">
241
+ </div>
242
+ </body>
243
+ </html>
244
+ EOHTML
245
+ end
246
+
247
+ get '/fire_event/form/image-input' do
248
+ <<HTML
249
+ <html>
250
+ <form>
251
+ <input type="text" name="stuff" value="blah">
252
+ <input type="image" name="myImageButton" src="/__sinatra__/404.png">
253
+ </form>
254
+ </html>
255
+ HTML
256
+ end
257
+
258
+ Arachni::Browser::Javascript::EVENTS_PER_ELEMENT[:input].each do |event|
259
+ get "/fire_event/input/#{event}" do
260
+ <<-EOHTML
261
+ <html>
262
+ <script>
263
+ function call_#{event}() {
264
+ document.getElementById("container").innerHTML =
265
+ document.getElementById("name").value;
266
+ }
267
+ </script>
268
+
269
+ <body>
270
+ <input #{event}="call_#{event}();" id="name" />
271
+
272
+ <div id="container">
273
+ </div>
274
+ </body>
275
+ </html>
276
+ EOHTML
277
+ end
278
+
279
+ end
280
+
281
+ get '/lots_of_sinks' do
282
+ <<-EOHTML
283
+ <html>
284
+ <script>
285
+ function onClick( some, arguments, here ) {
286
+ #{params[:input]};
287
+ onClick3();
288
+ return false;
289
+ }
290
+
291
+ function onClick2( some, arguments, here ) {
292
+ onClick( 1, 2 );
293
+ }
294
+
295
+ function onClick3( some, arguments, here ) {
296
+ #{params[:input]};
297
+ }
298
+ </script>
299
+
300
+ <a href="#" onmouseover="onClick2('blah1', 'blah2', 'blah3');">Blah</a>
301
+
302
+ <form id="my_form" onsubmit="onClick('some-arg', 'arguments-arg', 'here-arg'); return false;">
303
+ </form>
304
+ </html>
305
+ EOHTML
306
+ end
307
+
308
+ get '/script_sink' do
309
+ <<-EOHTML
310
+ <html>
311
+ <script>
312
+ #{params[:input]};
313
+ </script>
314
+ </html>
315
+ EOHTML
316
+ end
317
+
318
+ get '/skip-invisible-elements' do
319
+ <<HTML
320
+ <html>
321
+ <body>
322
+ <script type="text/javascript">
323
+ function doStuff() {
324
+ document.write( navigator.userAgent );
325
+ }
326
+ </script>
327
+
328
+ <button id="my-button" onclick="doStuff();">Stuff</button>
329
+ </body>
330
+ </html>
331
+ HTML
332
+ end
333
+
334
+ get '/form-with-image-button' do
335
+ <<HTML
336
+ <html>
337
+ <form>
338
+ <input type="text" name="stuff" value="blah">
339
+ <input type="image" name="myImageButton" src="/__sinatra__/404.png">
340
+ </form>
341
+ </html>
342
+ HTML
343
+ end
344
+
345
+ get '/event-tracker' do
346
+ <<HTML
347
+ <script>
348
+ window.addEventListener( "load", handlerLoad, false );
349
+
350
+ function handlerLoad() {
351
+ document.getElementById( "button" ).addEventListener( "click", handlerClick, false )
352
+ }
353
+
354
+ function handlerClick() {
355
+ document.getElementById( "console" ).innerHMTL += 'Clicked!'
356
+ }
357
+ </script>
358
+
359
+ <button onmouseover="doStuff();" id="button">click me</button>
360
+
361
+ <div id='console'></div>
362
+ HTML
363
+ end
364
+
365
+ get '/ever-changing' do
366
+ <<HTML
367
+ <html>
368
+ <head>
369
+ <title>My title!</title>
370
+ </head>
371
+
372
+ <body>
373
+ <div>
374
+ #{Time.now.to_i}
375
+ </div>
376
+ </body>
377
+ </html>
378
+ HTML
379
+ end
380
+
381
+ get '/ever-changing-via-js' do
382
+ <<HTML
383
+ <html>
384
+ <head>
385
+ <title>My title!</title>
386
+ </head>
387
+
388
+ <body>
389
+ <div>
390
+ <script type="text/javascript">
391
+ document.write( new Date() );
392
+ </script>
393
+ </div>
394
+ </body>
395
+ </html>
396
+ HTML
397
+ end
398
+
399
+ get '/set-javascript-cookie' do
400
+ <<HTML
401
+ <script>
402
+ document.cookie = "js-cookie-name=js-cookie-value"
403
+ </script>
404
+ HTML
405
+ end
406
+
407
+ get '/play-transitions' do
408
+ <<HTML
409
+ <html>
410
+ <head>
411
+ <script>
412
+ function writeUserAgent(){
413
+ document.getElementById( "transition1" ).innerHTML = navigator.userAgent;
414
+ }
415
+
416
+ function writeButton(){
417
+ document.getElementById( "transition1" ).innerHTML =
418
+ "<button onclick='writeUserAgent();'>Write user agent</button>";
419
+ }
420
+
421
+ level1_ajax = new XMLHttpRequest();
422
+ level1_ajax.onreadystatechange = function() {
423
+ if( level1_ajax.readyState == 4 && level1_ajax.status == 200 ) {
424
+ document.getElementById( "transition1" ).innerHTML = level1_ajax.responseText;
425
+ }
426
+ }
427
+
428
+ level1_ajax.open( "GET", "/transition1", true );
429
+ level1_ajax.send();
430
+ </script>
431
+ <head>
432
+
433
+ <body>
434
+ <div id="transition1">
435
+ </div>
436
+ </body>
437
+ </html>
438
+
439
+ HTML
440
+ end
441
+
442
+ get '/transition1' do
443
+ <<HTML
444
+ <a blah="stuff" href="javascript:writeButton();">Click to write button</a>
445
+ HTML
446
+ end
447
+
448
+ get '/deep-dom' do
449
+ <<HTML
450
+ <html>
451
+ <head>
452
+ <script>
453
+ function writeUserAgent(){
454
+ document.getElementById( "level2" ).innerHTML = navigator.userAgent;
455
+ }
456
+
457
+ function writeButton(){
458
+ document.getElementById( "level2" ).innerHTML =
459
+ "<button onclick='writeUserAgent();'>Write user agent</button>";
460
+ }
461
+
462
+ function level3() {
463
+ ajax = new XMLHttpRequest();
464
+ ajax.onreadystatechange = function() {
465
+ if( ajax.readyState == 4 && ajax.status == 200 ) {
466
+ document.getElementById( "level3" ).innerHTML = ajax.responseText;
467
+ }
468
+ }
469
+
470
+ ajax.open( "GET", "/level4", true );
471
+ ajax.send();
472
+ }
473
+
474
+ function level6() {
475
+ ajax = new XMLHttpRequest();
476
+ ajax.onreadystatechange = function() {
477
+ if( ajax.readyState == 4 && ajax.status == 200 ) {
478
+ document.getElementById( "level6" ).innerHTML = ajax.responseText;
479
+ }
480
+ }
481
+
482
+ ajax.open( "GET", "/level6", true );
483
+ ajax.send();
484
+ }
485
+
486
+
487
+ level1_ajax = new XMLHttpRequest();
488
+ level1_ajax.onreadystatechange = function() {
489
+ if( level1_ajax.readyState == 4 && level1_ajax.status == 200 ) {
490
+ document.getElementById( "level1" ).innerHTML = level1_ajax.responseText;
491
+ }
492
+ }
493
+
494
+ level1_ajax.open( "GET", "/level2", true );
495
+ level1_ajax.send();
496
+ </script>
497
+ <head>
498
+
499
+ <body>
500
+ <div id="level1">
501
+ </div>
502
+ </body>
503
+ </html>
504
+ HTML
505
+ end
506
+
507
+ get '/level2' do
508
+ <<HTML
509
+ <div id="level2">
510
+ <div id="level3">
511
+ </div>
512
+
513
+ <a onmouseover="writeButton();" href="javascript:level3();">level3 link</a>
514
+ </div>
515
+ HTML
516
+ end
517
+
518
+ get '/level4' do
519
+ <<HTML
520
+ <div id="level4">
521
+ <div id="level6">
522
+ </div>
523
+
524
+ <div onclick="level6();" id="level5">
525
+ Level 5 div
526
+ </div>
527
+ </div>
528
+ HTML
529
+ end
530
+
531
+ get '/level6' do
532
+ <<HTML
533
+ <form>
534
+ <input name="by-ajax">
535
+ </form>
536
+ HTML
537
+ end
538
+
539
+ get '/with-ajax' do
540
+ <<HTML
541
+ <html>
542
+ <head>
543
+ <script>
544
+ get_ajax = new XMLHttpRequest();
545
+ get_ajax.onreadystatechange = function() {
546
+ if( get_ajax.readyState == 4 && get_ajax.status == 200 ) {
547
+ document.getElementById( "my-div" ).innerHTML = get_ajax.responseText;
548
+ }
549
+ }
550
+
551
+ get_ajax.open( "GET", "/get-ajax?ajax-token=my-token", true );
552
+ get_ajax.send();
553
+
554
+ post_ajax = new XMLHttpRequest();
555
+ post_ajax.open( "POST", "/post-ajax", true );
556
+ post_ajax.send( "post-name=post-value" );
557
+ </script>
558
+ <head>
559
+
560
+ <body>
561
+ <div id="my-div">
562
+ </div>
563
+ </body>
564
+ </html>
565
+ HTML
566
+ end
567
+
568
+ get '/get-ajax' do
569
+ return if params['ajax-token'] != 'my-token'
570
+
571
+ <<HTML
572
+ <form>
573
+ <input name="by-ajax">
574
+ </form>
575
+ HTML
576
+ end
577
+
578
+ get '/cookie-test' do
579
+ <<HTML
580
+ <div id="cookies">#{cookies.to_hash}</div>
581
+ HTML
582
+ end
583
+
584
+ get '/update-cookies' do
585
+ cookies[:update] = 'this'
586
+ end
587
+
588
+ get '/with-image' do
589
+ @@image_hit = false
590
+ <<HTML
591
+ <img src="/image.png" />
592
+ HTML
593
+ end
594
+
595
+ get '/image.png' do
596
+ @@image_hit = true
597
+ end
598
+
599
+ get '/image-hit' do
600
+ @@image_hit.to_s
601
+ end
602
+
603
+ get '/explore' do
604
+ <<HTML
605
+ <html>
606
+ <head>
607
+ <script>
608
+ function addForm() {
609
+ get_ajax = new XMLHttpRequest();
610
+ get_ajax.onreadystatechange = function() {
611
+ if( get_ajax.readyState == 4 && get_ajax.status == 200 ) {
612
+ document.getElementById( "my-div" ).innerHTML = get_ajax.responseText;
613
+ }
614
+ }
615
+
616
+ get_ajax.open( "GET", "/get-ajax?ajax-token=my-token", true );
617
+ get_ajax.send();
618
+ }
619
+
620
+ function makePOST() {
621
+ post_ajax = new XMLHttpRequest();
622
+ post_ajax.open( "POST", "/post-ajax", true );
623
+ post_ajax.send( "post-name=post-value" );
624
+ }
625
+
626
+ function inHref() {
627
+ post_ajax = new XMLHttpRequest();
628
+ post_ajax.onreadystatechange = function() {
629
+ if( post_ajax.readyState == 4 && post_ajax.status == 200 ) {
630
+ document.getElementById( "my-div2" ).innerHTML = post_ajax.responseText;
631
+ }
632
+ }
633
+
634
+ post_ajax.open( "POST", "/href-ajax", true );
635
+ post_ajax.send( "href-post-name=href-post-value" );
636
+ }
637
+ </script>
638
+ <head>
639
+
640
+ <body onmouseover="makePOST();">
641
+
642
+ <div id="my-div" onclick="addForm();">
643
+ Test
644
+ </div>
645
+
646
+ <div id="my-div2">
647
+ Test2
648
+ </div>
649
+
650
+ <a href="javascript:inHref();">Stuff</a>
651
+ </body>
652
+ </html>
653
+ HTML
654
+ end
655
+
656
+ get '/explore-new-window' do
657
+ <<HTML
658
+ <html>
659
+ <head>
660
+ <script>
661
+ function oldWindowEvent() {
662
+ post_ajax = new XMLHttpRequest();
663
+ post_ajax.open( "POST", "/post-ajax", true );
664
+ post_ajax.send( "in-old-window=post-value" );
665
+ }
666
+ </script>
667
+ <head>
668
+
669
+ <body>
670
+
671
+ <div id="my-div" onclick="oldWindowEvent();">
672
+ </div>
673
+
674
+ <a href="javascript:window.open( '/new-window', 'new-window', 'resizable=yes,width=500,height=400');">
675
+ Open new window
676
+ </a>
677
+ </body>
678
+ </html>
679
+ HTML
680
+ end
681
+
682
+ get '/new-window' do
683
+ <<HTML
684
+ <form>
685
+ <input name="in-new-window" />
686
+ </form>
687
+ HTML
688
+ end
689
+
690
+ get '/visit_links' do
691
+ <<HTML
692
+ <html>
693
+ <head>
694
+ <script>
695
+ function inHref() {
696
+ post_ajax = new XMLHttpRequest();
697
+
698
+ post_ajax.onreadystatechange = function() {
699
+ if( post_ajax.readyState == 4 && post_ajax.status == 200 ) {
700
+ document.getElementById( "my-div" ).innerHTML = post_ajax.responseText;
701
+ }
702
+ }
703
+
704
+
705
+ post_ajax.open( "POST", "/href-ajax", true );
706
+ post_ajax.send( "href-post-name=href-post-value" );
707
+ }
708
+ </script>
709
+ <head>
710
+
711
+ <body>
712
+ <div id="my-div">
713
+ Test
714
+ </div>
715
+
716
+ <a href="javascript:inHref();">Stuff</a>
717
+ </body>
718
+ </html>
719
+ HTML
720
+ end
721
+
722
+ post '/href-ajax' do
723
+
724
+ <<HTML
725
+ <form>
726
+ <input name="from-post-ajax">
727
+ </form>
728
+ HTML
729
+ end
730
+
731
+ get '/visit_links-sleep' do
732
+ <<HTML
733
+ <html>
734
+ <head>
735
+ <script>
736
+ function inHref() {
737
+ post_ajax = new XMLHttpRequest();
738
+ post_ajax.open( "POST", "/href-ajax-sleep", true );
739
+ post_ajax.send( "href-post-name-sleep=href-post-value" );
740
+ }
741
+ </script>
742
+ <head>
743
+
744
+ <body>
745
+ <a href="javascript:inHref();">Stuff</a>
746
+ </body>
747
+ </html>
748
+ HTML
749
+ end
750
+
751
+ post '/href-ajax-sleep' do
752
+ sleep 4
753
+ end
754
+
755
+ get '/trigger_events' do
756
+ <<HTML
757
+ <html>
758
+ <head>
759
+ <script>
760
+ function addForm() {
761
+ get_ajax = new XMLHttpRequest();
762
+ get_ajax.onreadystatechange = function() {
763
+ if( get_ajax.readyState == 4 && get_ajax.status == 200 ) {
764
+ document.getElementById( "my-div" ).innerHTML = get_ajax.responseText;
765
+ }
766
+ }
767
+
768
+ get_ajax.open( "GET", "/get-ajax?ajax-token=my-token", true );
769
+ get_ajax.send();
770
+ }
771
+
772
+ function makePOST() {
773
+ post_ajax = new XMLHttpRequest();
774
+ post_ajax.open( "POST", "/post-ajax", true );
775
+ post_ajax.send( "post-name=post-value" );
776
+ }
777
+ </script>
778
+ <head>
779
+
780
+ <body onmouseover="makePOST();">
781
+
782
+ <div id="my-div" onclick="addForm();">
783
+ Test
784
+ </div>
785
+ </body>
786
+ </html>
787
+ HTML
788
+ end
789
+
790
+
791
+ get '/trigger_events-wait-for-ajax' do
792
+ <<HTML
793
+ <html>
794
+ <head>
795
+ <script>
796
+ function addForm() {
797
+ get_ajax = new XMLHttpRequest();
798
+ get_ajax.onreadystatechange = function() {
799
+ if( get_ajax.readyState == 4 && get_ajax.status == 200 ) {
800
+ document.getElementById( "my-div" ).innerHTML = get_ajax.responseText;
801
+ }
802
+ }
803
+
804
+ get_ajax.open( "GET", "/get-ajax-with-sleep?ajax-token=my-token", true );
805
+ get_ajax.send();
806
+ }
807
+ </script>
808
+ <head>
809
+
810
+ <body>
811
+ <div id="my-div" onclick="addForm();">
812
+ Test
813
+ </div>
814
+ </body>
815
+ </html>
816
+ HTML
817
+ end
818
+
819
+ get '/get-ajax-with-sleep' do
820
+ return if params['ajax-token'] != 'my-token'
821
+
822
+ sleep 4
823
+ <<HTML
824
+ <form>
825
+ <input name="by-ajax">
826
+ </form>
827
+ HTML
828
+ end
829
+
830
+ get '/hit-count' do
831
+ @@hit_count.to_s
832
+ end
833
+
834
+ get '/clear-hit-count' do
835
+ @@hit_count = 0
836
+ end