arachni 0.4.7 → 1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (1585) hide show
  1. checksums.yaml +5 -13
  2. data/AUTHORS.md +1 -1
  3. data/CHANGELOG.md +211 -0
  4. data/CONTRIBUTORS.md +1 -0
  5. data/Gemfile +23 -2
  6. data/LICENSE.md +34 -1
  7. data/README.md +211 -127
  8. data/Rakefile +79 -67
  9. data/arachni.gemspec +54 -62
  10. data/bin/arachni +6 -18
  11. data/bin/arachni_console +5 -13
  12. data/bin/arachni_multi +6 -16
  13. data/bin/arachni_reporter +12 -0
  14. data/bin/arachni_restore +12 -0
  15. data/bin/arachni_rpc +6 -16
  16. data/bin/arachni_rpcd +6 -17
  17. data/bin/arachni_rpcd_monitor +6 -18
  18. data/bin/arachni_script +8 -19
  19. data/components/checks/active/code_injection.rb +123 -0
  20. data/components/checks/active/code_injection_php_input_wrapper.rb +99 -0
  21. data/components/checks/active/code_injection_timing.rb +106 -0
  22. data/components/checks/active/csrf.rb +218 -0
  23. data/components/checks/active/file_inclusion.rb +152 -0
  24. data/components/checks/active/ldap_injection.rb +109 -0
  25. data/{modules/audit/ldapi → components/checks/active/ldap_injection}/errors.txt +0 -0
  26. data/components/checks/active/no_sql_injection.rb +94 -0
  27. data/components/checks/active/no_sql_injection/patterns/mongodb +1 -0
  28. data/{extras/placeholder → components/checks/active/no_sql_injection/regexp_ignore.txt} +0 -0
  29. data/components/checks/active/no_sql_injection_differential.rb +78 -0
  30. data/components/checks/active/os_cmd_injection.rb +116 -0
  31. data/components/checks/active/os_cmd_injection_timing.rb +92 -0
  32. data/components/checks/active/path_traversal.rb +174 -0
  33. data/components/checks/active/response_splitting.rb +94 -0
  34. data/components/checks/active/rfi.rb +172 -0
  35. data/components/checks/active/session_fixation.rb +117 -0
  36. data/components/checks/active/source_code_disclosure.rb +177 -0
  37. data/components/checks/active/sql_injection.rb +123 -0
  38. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/access +0 -0
  39. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/coldfusion +0 -0
  40. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/db2 +0 -0
  41. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/emc +0 -0
  42. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/firebird +0 -0
  43. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/frontbase +0 -0
  44. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/hsqldb +0 -0
  45. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/informix +0 -0
  46. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/ingres +0 -0
  47. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/interbase +0 -0
  48. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/maxdb +0 -0
  49. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/mssql +0 -0
  50. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/mysql +0 -0
  51. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/oracle +0 -0
  52. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/pgsql +0 -0
  53. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/sqlite +0 -0
  54. data/{modules/audit/sqli → components/checks/active/sql_injection}/patterns/sybase +0 -0
  55. data/{modules/audit/sqli → components/checks/active/sql_injection}/regexp_ignore.txt +0 -0
  56. data/components/checks/active/sql_injection_differential.rb +114 -0
  57. data/{modules/audit/sqli_blind_rdiff → components/checks/active/sql_injection_differential}/payloads.txt +0 -0
  58. data/components/checks/active/sql_injection_timing.rb +98 -0
  59. data/{modules/audit/sqli_blind_timing → components/checks/active/sql_injection_timing}/mssql.txt +0 -0
  60. data/{modules/audit/sqli_blind_timing → components/checks/active/sql_injection_timing}/mysql.txt +0 -0
  61. data/{modules/audit/sqli_blind_timing → components/checks/active/sql_injection_timing}/pgsql.txt +0 -0
  62. data/components/checks/active/trainer.rb +40 -0
  63. data/components/checks/active/unvalidated_redirect.rb +108 -0
  64. data/components/checks/active/xpath_injection.rb +87 -0
  65. data/{modules/audit/xpath → components/checks/active/xpath_injection}/errors.txt +0 -0
  66. data/components/checks/active/xss.rb +169 -0
  67. data/components/checks/active/xss_dom.rb +119 -0
  68. data/components/checks/active/xss_dom_inputs.rb +132 -0
  69. data/components/checks/active/xss_dom_script_context.rb +118 -0
  70. data/components/checks/active/xss_event.rb +165 -0
  71. data/components/checks/active/xss_path.rb +146 -0
  72. data/components/checks/active/xss_script_context.rb +207 -0
  73. data/components/checks/active/xss_tag.rb +135 -0
  74. data/components/checks/passive/allowed_methods.rb +92 -0
  75. data/components/checks/passive/backdoors.rb +79 -0
  76. data/{modules/recon → components/checks/passive}/backdoors/filenames.txt +0 -0
  77. data/components/checks/passive/backup_directories.rb +86 -0
  78. data/components/checks/passive/backup_directories/formats.txt +56 -0
  79. data/components/checks/passive/backup_files.rb +99 -0
  80. data/components/checks/passive/backup_files/formats.txt +106 -0
  81. data/components/checks/passive/common_directories.rb +81 -0
  82. data/{modules/recon → components/checks/passive}/common_directories/directories.txt +0 -0
  83. data/components/checks/passive/common_files.rb +73 -0
  84. data/components/checks/passive/common_files/filenames.txt +24 -0
  85. data/components/checks/passive/directory_listing.rb +129 -0
  86. data/components/checks/passive/grep/captcha.rb +73 -0
  87. data/components/checks/passive/grep/cookie_set_for_parent_domain.rb +71 -0
  88. data/components/checks/passive/grep/credit_card.rb +124 -0
  89. data/components/checks/passive/grep/cvs_svn_users.rb +75 -0
  90. data/components/checks/passive/grep/emails.rb +53 -0
  91. data/components/checks/passive/grep/form_upload.rb +75 -0
  92. data/components/checks/passive/grep/hsts.rb +74 -0
  93. data/components/checks/passive/grep/html_objects.rb +45 -0
  94. data/components/checks/passive/grep/http_only_cookies.rb +72 -0
  95. data/components/checks/passive/grep/insecure_cookies.rb +74 -0
  96. data/components/checks/passive/grep/mixed_resource.rb +109 -0
  97. data/components/checks/passive/grep/password_autocomplete.rb +80 -0
  98. data/components/checks/passive/grep/private_ip.rb +73 -0
  99. data/components/checks/passive/grep/ssn.rb +62 -0
  100. data/components/checks/passive/grep/unencrypted_password_forms.rb +88 -0
  101. data/components/checks/passive/htaccess_limit.rb +71 -0
  102. data/components/checks/passive/http_put.rb +91 -0
  103. data/components/checks/passive/interesting_responses.rb +88 -0
  104. data/components/checks/passive/localstart_asp.rb +88 -0
  105. data/components/checks/passive/origin_spoof_access_restriction_bypass.rb +83 -0
  106. data/components/checks/passive/webdav.rb +101 -0
  107. data/components/checks/passive/xst.rb +90 -0
  108. data/components/fingerprinters/frameworks/rack.rb +33 -0
  109. data/components/fingerprinters/languages/asp.rb +34 -0
  110. data/components/fingerprinters/languages/aspx.rb +55 -0
  111. data/components/fingerprinters/languages/jsp.rb +34 -0
  112. data/components/fingerprinters/languages/php.rb +35 -0
  113. data/components/fingerprinters/languages/python.rb +32 -0
  114. data/components/fingerprinters/languages/ruby.rb +33 -0
  115. data/components/fingerprinters/os/bsd.rb +28 -0
  116. data/components/fingerprinters/os/linux.rb +34 -0
  117. data/components/fingerprinters/os/solaris.rb +33 -0
  118. data/components/fingerprinters/os/unix.rb +28 -0
  119. data/components/fingerprinters/os/windows.rb +33 -0
  120. data/components/fingerprinters/servers/apache.rb +28 -0
  121. data/components/fingerprinters/servers/iis.rb +28 -0
  122. data/components/fingerprinters/servers/jetty.rb +28 -0
  123. data/components/fingerprinters/servers/nginx.rb +28 -0
  124. data/components/fingerprinters/servers/tomcat.rb +28 -0
  125. data/components/path_extractors/anchors.rb +29 -0
  126. data/components/path_extractors/areas.rb +29 -0
  127. data/components/path_extractors/comments.rb +21 -0
  128. data/components/path_extractors/forms.rb +29 -0
  129. data/components/path_extractors/frames.rb +29 -0
  130. data/components/path_extractors/generic.rb +76 -0
  131. data/components/path_extractors/links.rb +29 -0
  132. data/components/path_extractors/meta_refresh.rb +50 -0
  133. data/components/path_extractors/scripts.rb +31 -0
  134. data/components/plugins/autologin.rb +120 -0
  135. data/components/plugins/beep_notify.rb +43 -0
  136. data/components/plugins/content_types.rb +110 -0
  137. data/components/plugins/cookie_collector.rb +94 -0
  138. data/components/plugins/defaults/autothrottle.rb +73 -0
  139. data/components/plugins/defaults/healthmap.rb +79 -0
  140. data/components/plugins/defaults/meta/remedies/discovery.rb +122 -0
  141. data/components/plugins/defaults/meta/remedies/timing_attacks.rb +98 -0
  142. data/components/plugins/defaults/meta/uniformity.rb +55 -0
  143. data/components/plugins/email_notify.rb +112 -0
  144. data/components/plugins/form_dicattack.rb +128 -0
  145. data/components/plugins/http_dicattack.rb +102 -0
  146. data/components/plugins/proxy.rb +492 -0
  147. data/{plugins → components/plugins}/proxy/panel/403_forbidden.html.erb +0 -0
  148. data/{plugins → components/plugins}/proxy/panel/404_not_found.html.erb +0 -0
  149. data/{plugins → components/plugins}/proxy/panel/css/bootstrap-responsive.css +0 -0
  150. data/{plugins → components/plugins}/proxy/panel/css/bootstrap.min.css +0 -0
  151. data/{plugins → components/plugins}/proxy/panel/css/panel.css +0 -0
  152. data/{plugins → components/plugins}/proxy/panel/help.html.erb +0 -0
  153. data/{plugins → components/plugins}/proxy/panel/img/glyphicons-halflings-white.png +0 -0
  154. data/{plugins → components/plugins}/proxy/panel/img/glyphicons-halflings.png +0 -0
  155. data/{plugins → components/plugins}/proxy/panel/img/record.png +0 -0
  156. data/{plugins → components/plugins}/proxy/panel/inspect.html.erb +0 -0
  157. data/{plugins → components/plugins}/proxy/panel/js/bootstrap.min.js +0 -0
  158. data/{plugins → components/plugins}/proxy/panel/js/jquery.min.js +0 -0
  159. data/{plugins → components/plugins}/proxy/panel/js/panel.js +0 -0
  160. data/{plugins → components/plugins}/proxy/panel/layout.html.erb +0 -0
  161. data/components/plugins/proxy/panel/page_accordion.html.erb +67 -0
  162. data/{plugins → components/plugins}/proxy/panel/page_twin_accordion.html.erb +0 -0
  163. data/components/plugins/proxy/panel/panel.html.erb +69 -0
  164. data/{plugins → components/plugins}/proxy/panel/shutdown_message.html.erb +0 -0
  165. data/{plugins → components/plugins}/proxy/panel/sign_in.html.erb +0 -0
  166. data/{plugins → components/plugins}/proxy/panel/vectors.yml.erb +0 -0
  167. data/{plugins → components/plugins}/proxy/panel/verify_login_check.html.erb +0 -0
  168. data/{plugins → components/plugins}/proxy/panel/verify_login_final.html.erb +0 -0
  169. data/components/plugins/proxy/panel/verify_login_sequence.html.erb +45 -0
  170. data/components/plugins/proxy/template_scope.rb +130 -0
  171. data/components/plugins/script.rb +48 -0
  172. data/components/plugins/uncommon_headers.rb +92 -0
  173. data/components/plugins/vector_feed.rb +225 -0
  174. data/components/plugins/waf_detector.rb +169 -0
  175. data/components/reporters/ap.rb +38 -0
  176. data/components/reporters/html.rb +468 -0
  177. data/components/reporters/html/default.erb +68 -0
  178. data/components/reporters/html/default/configuration.erb +78 -0
  179. data/components/reporters/html/default/css/lib/bootstrap-theme.min.css +7 -0
  180. data/components/reporters/html/default/css/lib/bootstrap.min.css +7 -0
  181. data/components/reporters/html/default/css/lib/c3.css +203 -0
  182. data/components/reporters/html/default/css/lib/font-awesome.min.css +4 -0
  183. data/components/reporters/html/default/css/main.css +140 -0
  184. data/components/reporters/html/default/fonts/FontAwesome.otf +0 -0
  185. data/components/reporters/html/default/fonts/fontawesome-webfont.eot +0 -0
  186. data/components/reporters/html/default/fonts/fontawesome-webfont.svg +504 -0
  187. data/components/reporters/html/default/fonts/fontawesome-webfont.ttf +0 -0
  188. data/components/reporters/html/default/fonts/fontawesome-webfont.woff +0 -0
  189. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.eot +0 -0
  190. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.svg +229 -0
  191. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.ttf +0 -0
  192. data/components/reporters/html/default/fonts/glyphicons-halflings-regular.woff +0 -0
  193. data/components/reporters/html/default/issue.erb +81 -0
  194. data/components/reporters/html/default/issue/details.erb +68 -0
  195. data/components/reporters/html/default/issue/info.erb +74 -0
  196. data/components/reporters/html/default/issue/page.erb +117 -0
  197. data/components/reporters/html/default/issue/page/body.erb +42 -0
  198. data/components/reporters/html/default/issue/page/sink/data_flow.erb +95 -0
  199. data/components/reporters/html/default/issue/page/sink/data_flow/arguments.erb +70 -0
  200. data/components/reporters/html/default/issue/page/sink/data_flow/source.erb +1 -0
  201. data/components/reporters/html/default/issue/page/sink/execution_flow.erb +63 -0
  202. data/components/reporters/html/default/issue/page/sink/frame/source.erb +32 -0
  203. data/components/reporters/html/default/issue/page/sink/trace/table.erb +127 -0
  204. data/components/reporters/html/default/issue/page/transitions.erb +86 -0
  205. data/components/reporters/html/default/issue/platform.erb +8 -0
  206. data/components/reporters/html/default/issue/remarks.erb +28 -0
  207. data/components/reporters/html/default/issue/vector.erb +40 -0
  208. data/components/reporters/html/default/issues.erb +46 -0
  209. data/components/reporters/html/default/issues/grouped.erb +147 -0
  210. data/components/reporters/html/default/js/charts.js.erb +117 -0
  211. data/components/reporters/html/default/js/configuration.js.erb +12 -0
  212. data/components/reporters/html/default/js/helpers.js +107 -0
  213. data/components/reporters/html/default/js/init.js.erb +23 -0
  214. data/components/reporters/html/default/js/lib/bootstrap.min.js +6 -0
  215. data/components/reporters/html/default/js/lib/c3.min.js +3 -0
  216. data/components/reporters/html/default/js/lib/d3.min.js +5 -0
  217. data/components/reporters/html/default/js/lib/jquery.min.js +4 -0
  218. data/components/reporters/html/default/navigation.erb +136 -0
  219. data/components/reporters/html/default/plugins.erb +30 -0
  220. data/components/reporters/html/default/shared/hash.erb +10 -0
  221. data/components/reporters/html/default/shared/hash_table.erb +22 -0
  222. data/components/reporters/html/default/sitemap.erb +29 -0
  223. data/components/reporters/html/default/summary.erb +34 -0
  224. data/components/reporters/html/default/summary/charts.erb +67 -0
  225. data/components/reporters/html/default/summary/issues.erb +129 -0
  226. data/components/reporters/json.rb +44 -0
  227. data/components/reporters/marshal.rb +38 -0
  228. data/components/reporters/plugin_formatters/html/autologin.rb +50 -0
  229. data/components/reporters/plugin_formatters/html/content_types.rb +59 -0
  230. data/components/reporters/plugin_formatters/html/cookie_collector.rb +46 -0
  231. data/components/reporters/plugin_formatters/html/form_dicattack.rb +36 -0
  232. data/components/reporters/plugin_formatters/html/healthmap.rb +88 -0
  233. data/components/reporters/plugin_formatters/html/http_dicattack.rb +36 -0
  234. data/components/reporters/plugin_formatters/html/uncommon_headers.rb +40 -0
  235. data/components/reporters/plugin_formatters/html/uniformity.rb +55 -0
  236. data/components/reporters/plugin_formatters/html/waf_detector.rb +69 -0
  237. data/components/reporters/plugin_formatters/stdout/autologin.rb +25 -0
  238. data/components/reporters/plugin_formatters/stdout/content_types.rb +39 -0
  239. data/components/reporters/plugin_formatters/stdout/cookie_collector.rb +31 -0
  240. data/components/reporters/plugin_formatters/stdout/form_dicattack.rb +24 -0
  241. data/components/reporters/plugin_formatters/stdout/healthmap.rb +41 -0
  242. data/components/reporters/plugin_formatters/stdout/http_dicattack.rb +24 -0
  243. data/components/reporters/plugin_formatters/stdout/uncommon_headers.rb +29 -0
  244. data/components/reporters/plugin_formatters/stdout/uniformity.rb +35 -0
  245. data/components/reporters/plugin_formatters/stdout/waf_detector.rb +21 -0
  246. data/components/reporters/plugin_formatters/xml/autologin.rb +28 -0
  247. data/components/reporters/plugin_formatters/xml/content_types.rb +36 -0
  248. data/components/reporters/plugin_formatters/xml/cookie_collector.rb +32 -0
  249. data/components/reporters/plugin_formatters/xml/form_dicattack.rb +22 -0
  250. data/components/reporters/plugin_formatters/xml/healthmap.rb +30 -0
  251. data/components/reporters/plugin_formatters/xml/http_dicattack.rb +22 -0
  252. data/components/reporters/plugin_formatters/xml/uncommon_headers.rb +29 -0
  253. data/components/reporters/plugin_formatters/xml/uniformity.rb +23 -0
  254. data/components/reporters/plugin_formatters/xml/waf_detector.rb +22 -0
  255. data/components/reporters/stdout.rb +226 -0
  256. data/components/reporters/txt.rb +50 -0
  257. data/components/reporters/xml.rb +285 -0
  258. data/components/reporters/xml/schema.xsd +664 -0
  259. data/components/reporters/yaml.rb +37 -0
  260. data/{rpcd_handlers → components/services}/placeholder +0 -0
  261. data/lib/arachni.rb +29 -18
  262. data/lib/arachni/banner.rb +5 -13
  263. data/lib/arachni/browser.rb +1292 -0
  264. data/lib/arachni/browser/element_locator.rb +137 -0
  265. data/lib/arachni/browser/javascript.rb +383 -0
  266. data/lib/arachni/browser/javascript/dom_monitor.rb +31 -0
  267. data/lib/arachni/browser/javascript/proxy.rb +92 -0
  268. data/lib/arachni/browser/javascript/proxy/stub.rb +90 -0
  269. data/lib/arachni/browser/javascript/scripts/dom_monitor.js +146 -0
  270. data/lib/arachni/browser/javascript/scripts/taint_tracer.js +486 -0
  271. data/lib/arachni/browser/javascript/taint_tracer.rb +101 -0
  272. data/lib/arachni/browser/javascript/taint_tracer/frame.rb +73 -0
  273. data/lib/arachni/browser/javascript/taint_tracer/frame/called_function.rb +78 -0
  274. data/lib/arachni/browser/javascript/taint_tracer/sink/base.rb +63 -0
  275. data/lib/arachni/browser/javascript/taint_tracer/sink/data_flow.rb +83 -0
  276. data/lib/arachni/browser/javascript/taint_tracer/sink/execution_flow.rb +30 -0
  277. data/lib/arachni/browser_cluster.rb +414 -0
  278. data/lib/arachni/browser_cluster/job.rb +193 -0
  279. data/lib/arachni/browser_cluster/job/result.rb +29 -0
  280. data/lib/arachni/browser_cluster/jobs/browser_provider.rb +27 -0
  281. data/lib/arachni/browser_cluster/jobs/resource_exploration.rb +60 -0
  282. data/lib/arachni/browser_cluster/jobs/resource_exploration/event_trigger.rb +43 -0
  283. data/lib/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result.rb +23 -0
  284. data/lib/arachni/browser_cluster/jobs/resource_exploration/result.rb +23 -0
  285. data/lib/arachni/browser_cluster/jobs/taint_trace.rb +48 -0
  286. data/lib/arachni/browser_cluster/jobs/taint_trace/event_trigger.rb +33 -0
  287. data/lib/arachni/browser_cluster/jobs/taint_trace/event_trigger/result.rb +23 -0
  288. data/lib/arachni/browser_cluster/jobs/taint_trace/result.rb +23 -0
  289. data/lib/arachni/browser_cluster/worker.rb +277 -0
  290. data/lib/arachni/check.rb +12 -0
  291. data/lib/arachni/check/auditor.rb +612 -0
  292. data/lib/arachni/check/base.rb +177 -0
  293. data/lib/arachni/check/manager.rb +137 -0
  294. data/lib/arachni/component.rb +11 -0
  295. data/lib/arachni/component/base.rb +62 -0
  296. data/lib/arachni/component/manager.rb +92 -90
  297. data/lib/arachni/component/options.rb +6 -28
  298. data/lib/arachni/component/options/address.rb +14 -30
  299. data/lib/arachni/component/options/base.rb +96 -81
  300. data/lib/arachni/component/options/bool.rb +20 -37
  301. data/lib/arachni/component/options/float.rb +12 -31
  302. data/lib/arachni/component/options/int.rb +14 -31
  303. data/lib/arachni/component/options/multiple_choice.rb +40 -0
  304. data/lib/arachni/component/options/object.rb +16 -0
  305. data/lib/arachni/component/options/path.rb +12 -25
  306. data/lib/arachni/component/options/port.rb +15 -25
  307. data/lib/arachni/component/options/string.rb +10 -32
  308. data/lib/arachni/component/options/url.rb +15 -30
  309. data/lib/arachni/component/output.rb +33 -0
  310. data/lib/arachni/component/utilities.rb +49 -0
  311. data/lib/arachni/data.rb +109 -0
  312. data/lib/arachni/data/framework.rb +160 -0
  313. data/lib/arachni/data/framework/rpc.rb +68 -0
  314. data/lib/arachni/data/issues.rb +227 -0
  315. data/lib/arachni/data/plugins.rb +109 -0
  316. data/lib/arachni/data/session.rb +48 -0
  317. data/lib/arachni/element/base.rb +131 -82
  318. data/lib/arachni/element/body.rb +43 -13
  319. data/lib/arachni/element/capabilities/analyzable.rb +46 -0
  320. data/lib/arachni/element/capabilities/analyzable/differential.rb +436 -0
  321. data/lib/arachni/element/capabilities/analyzable/taint.rb +218 -0
  322. data/lib/arachni/element/capabilities/analyzable/timeout.rb +433 -0
  323. data/lib/arachni/element/capabilities/auditable.rb +172 -577
  324. data/lib/arachni/element/capabilities/auditable/dom.rb +156 -0
  325. data/lib/arachni/element/capabilities/inputtable.rb +267 -0
  326. data/lib/arachni/element/capabilities/mutable.rb +197 -155
  327. data/lib/arachni/element/capabilities/refreshable.rb +31 -24
  328. data/lib/arachni/element/capabilities/submittable.rb +128 -0
  329. data/lib/arachni/element/capabilities/with_auditor.rb +60 -0
  330. data/lib/arachni/element/capabilities/with_auditor/output.rb +33 -0
  331. data/lib/arachni/element/capabilities/with_dom.rb +40 -0
  332. data/lib/arachni/element/capabilities/with_node.rb +52 -0
  333. data/lib/arachni/element/capabilities/with_scope.rb +25 -0
  334. data/lib/arachni/element/capabilities/with_scope/scope.rb +38 -0
  335. data/lib/arachni/element/cookie.rb +337 -862
  336. data/lib/arachni/element/cookie/dom.rb +67 -0
  337. data/lib/arachni/element/form.rb +326 -756
  338. data/lib/arachni/element/form/dom.rb +52 -0
  339. data/lib/arachni/element/generic_dom.rb +133 -0
  340. data/lib/arachni/element/header.rb +46 -46
  341. data/lib/arachni/element/link.rb +134 -172
  342. data/lib/arachni/element/link/dom.rb +128 -0
  343. data/lib/arachni/element/link_template.rb +268 -0
  344. data/lib/arachni/element/link_template/dom.rb +143 -0
  345. data/lib/arachni/element/path.rb +24 -13
  346. data/lib/arachni/element/server.rb +89 -13
  347. data/lib/arachni/element_filter.rb +101 -99
  348. data/lib/arachni/error.rb +5 -15
  349. data/lib/arachni/ethon/easy.rb +22 -0
  350. data/lib/arachni/framework.rb +841 -476
  351. data/lib/arachni/http.rb +6 -714
  352. data/lib/arachni/http/client.rb +801 -0
  353. data/lib/arachni/http/cookie_jar.rb +50 -51
  354. data/lib/arachni/http/headers.rb +122 -0
  355. data/lib/arachni/http/message.rb +76 -0
  356. data/lib/arachni/http/message/scope.rb +35 -0
  357. data/lib/arachni/http/proxy_server.rb +303 -0
  358. data/{plugins/proxy → lib/arachni/http/proxy_server}/ssl-interceptor-cert.pem +0 -0
  359. data/{plugins/proxy → lib/arachni/http/proxy_server}/ssl-interceptor-pkey.pem +0 -0
  360. data/lib/arachni/http/request.rb +471 -0
  361. data/lib/arachni/http/request/scope.rb +30 -0
  362. data/lib/arachni/http/response.rb +226 -0
  363. data/lib/arachni/http/response/scope.rb +67 -0
  364. data/lib/arachni/issue.rb +389 -223
  365. data/lib/arachni/issue/severity.rb +34 -0
  366. data/lib/arachni/issue/severity/base.rb +39 -0
  367. data/lib/arachni/option_group.rb +137 -0
  368. data/lib/arachni/option_groups.rb +13 -0
  369. data/lib/arachni/option_groups/audit.rb +226 -0
  370. data/lib/arachni/option_groups/browser_cluster.rb +50 -0
  371. data/lib/arachni/option_groups/datastore.rb +31 -0
  372. data/lib/arachni/option_groups/dispatcher.rb +132 -0
  373. data/lib/arachni/option_groups/http.rb +174 -0
  374. data/lib/arachni/option_groups/input.rb +156 -0
  375. data/lib/arachni/option_groups/output.rb +22 -0
  376. data/lib/arachni/option_groups/paths.rb +63 -0
  377. data/lib/arachni/option_groups/rpc.rb +87 -0
  378. data/lib/arachni/option_groups/scope.rb +233 -0
  379. data/lib/arachni/option_groups/session.rb +54 -0
  380. data/lib/arachni/option_groups/snapshot.rb +22 -0
  381. data/lib/arachni/options.rb +286 -1486
  382. data/lib/arachni/page.rb +504 -108
  383. data/lib/arachni/page/dom.rb +280 -0
  384. data/lib/arachni/page/dom/transition.rb +302 -0
  385. data/lib/arachni/page/scope.rb +53 -0
  386. data/lib/arachni/parser.rb +177 -210
  387. data/lib/arachni/platform.rb +5 -13
  388. data/lib/arachni/platform/fingerprinter.rb +24 -23
  389. data/lib/arachni/platform/list.rb +48 -27
  390. data/lib/arachni/platform/manager.rb +146 -83
  391. data/lib/arachni/plugin.rb +5 -13
  392. data/lib/arachni/plugin/base.rb +90 -110
  393. data/lib/arachni/plugin/formatter.rb +40 -0
  394. data/lib/arachni/plugin/manager.rb +129 -108
  395. data/lib/arachni/processes.rb +6 -14
  396. data/lib/arachni/processes/dispatchers.rb +51 -58
  397. data/lib/arachni/processes/executables/base.rb +9 -0
  398. data/lib/arachni/processes/executables/dispatcher.rb +6 -0
  399. data/lib/arachni/processes/executables/instance.rb +13 -0
  400. data/lib/arachni/processes/helpers.rb +4 -12
  401. data/lib/arachni/processes/helpers/dispatchers.rb +8 -12
  402. data/lib/arachni/processes/helpers/instances.rb +13 -13
  403. data/lib/arachni/processes/helpers/processes.rb +8 -28
  404. data/lib/arachni/processes/instances.rb +86 -63
  405. data/lib/arachni/processes/manager.rb +89 -52
  406. data/lib/arachni/report.rb +282 -15
  407. data/lib/arachni/reporter.rb +12 -0
  408. data/lib/arachni/reporter/base.rb +126 -0
  409. data/lib/arachni/reporter/formatter_manager.rb +20 -0
  410. data/lib/arachni/reporter/manager.rb +54 -0
  411. data/lib/arachni/reporter/options.rb +47 -0
  412. data/lib/arachni/rpc/client/base.rb +27 -35
  413. data/lib/arachni/rpc/client/dispatcher.rb +13 -21
  414. data/lib/arachni/rpc/client/instance.rb +45 -40
  415. data/lib/arachni/rpc/client/instance/framework.rb +88 -0
  416. data/lib/arachni/rpc/client/instance/service.rb +106 -0
  417. data/lib/arachni/rpc/serializer.rb +98 -0
  418. data/lib/arachni/rpc/server/active_options.rb +26 -42
  419. data/lib/arachni/rpc/server/base.rb +35 -26
  420. data/lib/arachni/rpc/server/check/manager.rb +38 -0
  421. data/lib/arachni/rpc/server/dispatcher.rb +125 -211
  422. data/lib/arachni/rpc/server/dispatcher/node.rb +36 -50
  423. data/lib/arachni/rpc/server/dispatcher/service.rb +153 -0
  424. data/lib/arachni/rpc/server/framework.rb +83 -176
  425. data/lib/arachni/rpc/server/framework/distributor.rb +292 -271
  426. data/lib/arachni/rpc/server/framework/master.rb +164 -296
  427. data/lib/arachni/rpc/server/framework/multi_instance.rb +96 -128
  428. data/lib/arachni/rpc/server/framework/slave.rb +79 -89
  429. data/lib/arachni/rpc/server/instance.rb +362 -413
  430. data/lib/arachni/rpc/server/output.rb +33 -147
  431. data/lib/arachni/rpc/server/plugin/manager.rb +18 -54
  432. data/lib/arachni/ruby.rb +5 -14
  433. data/lib/arachni/ruby/array.rb +4 -14
  434. data/lib/arachni/ruby/hash.rb +47 -15
  435. data/lib/arachni/ruby/io.rb +4 -14
  436. data/lib/arachni/ruby/object.rb +10 -52
  437. data/lib/arachni/ruby/set.rb +4 -12
  438. data/lib/arachni/ruby/string.rb +60 -40
  439. data/lib/arachni/ruby/webrick.rb +4 -12
  440. data/lib/arachni/ruby/webrick/cookie.rb +4 -12
  441. data/lib/arachni/ruby/webrick/httprequest.rb +4 -12
  442. data/lib/arachni/scope.rb +40 -0
  443. data/lib/arachni/selenium/webdriver/remote/http/typhoeus.rb +46 -0
  444. data/lib/arachni/session.rb +150 -173
  445. data/lib/arachni/snapshot.rb +181 -0
  446. data/lib/arachni/state.rb +122 -0
  447. data/lib/arachni/state/audit.rb +57 -0
  448. data/lib/arachni/state/element_filter.rb +67 -0
  449. data/lib/arachni/state/framework.rb +419 -0
  450. data/lib/arachni/state/framework/rpc.rb +63 -0
  451. data/lib/arachni/state/http.rb +60 -0
  452. data/lib/arachni/state/options.rb +39 -0
  453. data/lib/arachni/state/plugins.rb +94 -0
  454. data/lib/arachni/support.rb +6 -15
  455. data/lib/arachni/support/buffer.rb +5 -13
  456. data/lib/arachni/support/buffer/autoflush.rb +5 -15
  457. data/lib/arachni/support/buffer/base.rb +41 -70
  458. data/lib/arachni/support/cache.rb +5 -13
  459. data/lib/arachni/support/cache/base.rb +45 -50
  460. data/lib/arachni/support/cache/least_cost_replacement.rb +9 -19
  461. data/lib/arachni/support/cache/least_recently_used.rb +5 -15
  462. data/lib/arachni/support/cache/preference.rb +11 -20
  463. data/lib/arachni/support/cache/random_replacement.rb +10 -15
  464. data/lib/arachni/support/crypto.rb +5 -13
  465. data/lib/arachni/support/crypto/rsa_aes_cbc.rb +15 -27
  466. data/lib/arachni/support/database.rb +5 -13
  467. data/lib/arachni/support/database/base.rb +20 -37
  468. data/lib/arachni/support/database/hash.rb +265 -350
  469. data/lib/arachni/support/database/queue.rb +86 -27
  470. data/lib/arachni/support/lookup.rb +5 -13
  471. data/lib/arachni/support/lookup/base.rb +33 -26
  472. data/lib/arachni/support/lookup/hash_set.rb +11 -15
  473. data/lib/arachni/support/lookup/moolb.rb +9 -20
  474. data/lib/arachni/support/mixins.rb +14 -0
  475. data/lib/arachni/support/mixins/observable.rb +105 -0
  476. data/lib/arachni/support/mixins/terminal.rb +65 -0
  477. data/lib/arachni/support/profiler.rb +130 -0
  478. data/lib/arachni/support/signature.rb +37 -67
  479. data/lib/arachni/trainer.rb +57 -97
  480. data/lib/arachni/ui/foo/output.rb +31 -33
  481. data/lib/arachni/uri.rb +456 -462
  482. data/lib/arachni/uri/scope.rb +168 -0
  483. data/lib/arachni/utilities.rb +125 -147
  484. data/lib/arachni/version.rb +4 -12
  485. data/lib/arachni/watir/element.rb +17 -0
  486. data/lib/version +1 -1
  487. data/{spec/support/servers/modules/audit/sqli/jdbc → profiles/placeholder} +0 -0
  488. data/spec/arachni/browser/element_locator_spec.rb +228 -0
  489. data/spec/arachni/browser/javascript/dom_monitor_spec.rb +195 -0
  490. data/spec/arachni/browser/javascript/proxy/stub_spec.rb +106 -0
  491. data/spec/arachni/browser/javascript/proxy_spec.rb +144 -0
  492. data/spec/arachni/browser/javascript/taint_tracer/frame/called_function_spec.rb +72 -0
  493. data/spec/arachni/browser/javascript/taint_tracer/frame_spec.rb +46 -0
  494. data/spec/arachni/browser/javascript/taint_tracer/sink/data_flow_spec.rb +81 -0
  495. data/spec/arachni/browser/javascript/taint_tracer/sink/execution_flow_spec.rb +47 -0
  496. data/spec/arachni/browser/javascript/taint_tracer_spec.rb +1304 -0
  497. data/spec/arachni/browser/javascript_spec.rb +355 -0
  498. data/spec/arachni/browser_cluster/job/result_spec.rb +14 -0
  499. data/spec/arachni/browser_cluster/job_spec.rb +264 -0
  500. data/spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result_spec.rb +7 -0
  501. data/spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger_spec.rb +68 -0
  502. data/spec/arachni/browser_cluster/jobs/resource_exploration/result_spec.rb +7 -0
  503. data/spec/arachni/browser_cluster/jobs/resource_exploration_spec.rb +89 -0
  504. data/spec/arachni/browser_cluster/jobs/taint_tracer_spec.rb +149 -0
  505. data/spec/arachni/browser_cluster/worker_spec.rb +314 -0
  506. data/spec/arachni/browser_cluster_spec.rb +543 -0
  507. data/spec/arachni/browser_spec.rb +2368 -0
  508. data/spec/arachni/check/auditor_spec.rb +1089 -0
  509. data/spec/arachni/check/base_spec.rb +33 -0
  510. data/spec/arachni/check/manager_spec.rb +100 -0
  511. data/spec/arachni/component/base_spec.rb +64 -0
  512. data/spec/arachni/component/manager_spec.rb +37 -26
  513. data/spec/arachni/component/options/address_spec.rb +5 -11
  514. data/spec/arachni/component/options/base_spec.rb +29 -81
  515. data/spec/arachni/component/options/bool_spec.rb +16 -19
  516. data/spec/arachni/component/options/float_spec.rb +17 -16
  517. data/spec/arachni/component/options/int_spec.rb +17 -20
  518. data/spec/arachni/component/options/multiple_choice_spec.rb +82 -0
  519. data/spec/arachni/component/options/object_spec.rb +24 -0
  520. data/spec/arachni/component/options/path_spec.rb +8 -11
  521. data/spec/arachni/component/options/port_spec.rb +16 -15
  522. data/spec/arachni/component/options/string_spec.rb +8 -17
  523. data/spec/arachni/component/options/url_spec.rb +16 -14
  524. data/spec/arachni/component/utilities_spec.rb +30 -0
  525. data/spec/arachni/{module → component}/utilities_spec/read_file.txt +0 -0
  526. data/spec/arachni/data/framework/rpc_spec.rb +72 -0
  527. data/spec/arachni/data/framework_spec.rb +266 -0
  528. data/spec/arachni/data/issues_spec.rb +347 -0
  529. data/spec/arachni/data/plugins_spec.rb +102 -0
  530. data/spec/arachni/data/session_spec.rb +59 -0
  531. data/spec/arachni/data_spec.rb +71 -0
  532. data/spec/arachni/element/body_spec.rb +63 -4
  533. data/spec/arachni/element/capabilities/analyzable/differential_spec.rb +135 -0
  534. data/spec/arachni/element/capabilities/analyzable/taint_spec.rb +355 -0
  535. data/spec/arachni/element/capabilities/analyzable/timeout_spec.rb +386 -0
  536. data/spec/arachni/element/capabilities/with_scope/scope_spec.rb +25 -0
  537. data/spec/arachni/element/cookie/dom_spec.rb +145 -0
  538. data/spec/arachni/element/cookie_spec.rb +147 -108
  539. data/spec/arachni/element/form/dom_spec.rb +146 -0
  540. data/spec/arachni/element/form_spec.rb +519 -271
  541. data/spec/arachni/element/generic_dom_spec.rb +113 -0
  542. data/spec/arachni/element/header_spec.rb +68 -20
  543. data/spec/arachni/element/link/dom_spec.rb +206 -0
  544. data/spec/arachni/element/link_spec.rb +218 -130
  545. data/spec/arachni/element/link_template/dom_spec.rb +218 -0
  546. data/spec/arachni/element/link_template_spec.rb +403 -0
  547. data/spec/arachni/element/path_spec.rb +28 -4
  548. data/spec/arachni/element/server_spec.rb +171 -4
  549. data/spec/arachni/element_filter_spec.rb +227 -96
  550. data/spec/arachni/framework_spec.rb +1099 -759
  551. data/spec/arachni/http/client_spec.rb +1470 -0
  552. data/spec/arachni/http/cookie_jar_spec.rb +164 -130
  553. data/spec/arachni/http/headers_spec.rb +111 -0
  554. data/spec/arachni/http/message_spec.rb +5 -0
  555. data/spec/arachni/http/proxy_server_spec.rb +354 -0
  556. data/spec/arachni/http/request_spec.rb +602 -0
  557. data/spec/arachni/http/response/scope_spec.rb +135 -0
  558. data/spec/arachni/http/response_spec.rb +350 -0
  559. data/spec/arachni/issue/severity/base_spec.rb +15 -0
  560. data/spec/arachni/issue/severity_spec.rb +43 -0
  561. data/spec/arachni/issue_spec.rb +547 -284
  562. data/spec/arachni/option_groups/audit_spec.rb +298 -0
  563. data/spec/arachni/option_groups/browser_cluster_spec.rb +12 -0
  564. data/spec/arachni/option_groups/datastore_spec.rb +54 -0
  565. data/spec/arachni/option_groups/dispatcher_spec.rb +123 -0
  566. data/spec/arachni/option_groups/http_spec.rb +42 -0
  567. data/spec/arachni/option_groups/input_spec.rb +202 -0
  568. data/spec/arachni/option_groups/output_spec.rb +11 -0
  569. data/spec/arachni/option_groups/paths_spec.rb +34 -0
  570. data/spec/arachni/option_groups/rpc_spec.rb +13 -0
  571. data/spec/arachni/option_groups/scope_spec.rb +237 -0
  572. data/spec/arachni/option_groups/session_spec.rb +51 -0
  573. data/spec/arachni/option_groups/snapshot_spec.rb +11 -0
  574. data/spec/arachni/options_spec.rb +202 -756
  575. data/spec/arachni/page/dom/transition_spec.rb +515 -0
  576. data/spec/arachni/page/dom_spec.rb +308 -0
  577. data/spec/arachni/page/scope_spec.rb +80 -0
  578. data/spec/arachni/page_spec.rb +789 -175
  579. data/spec/arachni/parser_spec.rb +308 -200
  580. data/spec/arachni/platform/fingerprinter_spec.rb +51 -52
  581. data/spec/arachni/platform/manager_spec.rb +146 -34
  582. data/spec/arachni/plugin/base_spec.rb +97 -0
  583. data/spec/arachni/plugin/manager_spec.rb +186 -80
  584. data/spec/arachni/report_spec.rb +275 -0
  585. data/spec/arachni/reporter/base_spec.rb +96 -0
  586. data/spec/arachni/reporter/manager_spec.rb +38 -0
  587. data/spec/arachni/reporter/options_spec.rb +48 -0
  588. data/spec/arachni/rpc/client/base_spec.rb +43 -45
  589. data/spec/arachni/rpc/client/dispatcher_spec.rb +3 -3
  590. data/spec/arachni/rpc/client/instance_spec.rb +18 -40
  591. data/spec/arachni/rpc/server/active_options_spec.rb +35 -296
  592. data/spec/arachni/rpc/server/base_spec.rb +12 -6
  593. data/spec/arachni/rpc/server/checks/manager_spec.rb +48 -0
  594. data/spec/arachni/rpc/server/dispatcher/node_spec.rb +47 -74
  595. data/spec/arachni/rpc/server/dispatcher/service_spec.rb +99 -0
  596. data/spec/arachni/rpc/server/dispatcher_spec.rb +77 -38
  597. data/spec/arachni/rpc/server/framework/distributor_spec.rb +356 -396
  598. data/spec/arachni/rpc/server/framework_multi_spec.rb +336 -0
  599. data/spec/arachni/rpc/server/framework_spec.rb +396 -0
  600. data/spec/arachni/rpc/server/instance_spec.rb +480 -281
  601. data/spec/arachni/rpc/server/output_spec.rb +9 -212
  602. data/spec/arachni/rpc/server/plugin/manager_spec.rb +6 -11
  603. data/spec/arachni/ruby/hash_spec.rb +30 -0
  604. data/spec/arachni/ruby/object_spec.rb +0 -16
  605. data/spec/arachni/ruby/string_spec.rb +98 -6
  606. data/spec/arachni/scope_spec.rb +13 -0
  607. data/spec/arachni/session_spec.rb +279 -251
  608. data/spec/arachni/snapshot_spec.rb +127 -0
  609. data/spec/arachni/state/audit_spec.rb +107 -0
  610. data/spec/arachni/state/element_filter_spec.rb +66 -0
  611. data/spec/arachni/state/framework/rpc_spec.rb +85 -0
  612. data/spec/arachni/state/framework_spec.rb +853 -0
  613. data/spec/arachni/state/http_spec.rb +63 -0
  614. data/spec/arachni/state/options_spec.rb +55 -0
  615. data/spec/arachni/state/plugins_spec.rb +76 -0
  616. data/spec/arachni/state_spec.rb +87 -0
  617. data/spec/arachni/support/cache/least_cost_replacement_spec.rb +30 -32
  618. data/spec/arachni/support/cache/least_recently_used_spec.rb +39 -40
  619. data/spec/arachni/support/cache/preference_spec.rb +17 -18
  620. data/spec/arachni/support/cache/random_replacement_spec.rb +19 -20
  621. data/spec/arachni/support/database/queue_spec.rb +200 -32
  622. data/spec/arachni/support/lookup/hash_set_spec.rb +74 -0
  623. data/spec/arachni/support/mixins/observable_spec.rb +81 -0
  624. data/spec/arachni/support/signature_spec.rb +9 -25
  625. data/spec/arachni/trainer_spec.rb +141 -124
  626. data/spec/arachni/uri/scope_spec.rb +416 -0
  627. data/spec/arachni/uri_spec.rb +187 -195
  628. data/spec/arachni/utilities_spec.rb +178 -525
  629. data/spec/components/checks/active/code_injection_spec.rb +26 -0
  630. data/spec/components/checks/active/code_injection_timing_spec.rb +26 -0
  631. data/spec/components/checks/active/csrf_spec.rb +44 -0
  632. data/spec/components/checks/active/file_inclusion_spec.rb +56 -0
  633. data/spec/components/checks/active/ldap_injection_spec.rb +16 -0
  634. data/spec/components/checks/active/no_sql_injection_differential_spec.rb +15 -0
  635. data/spec/components/checks/active/no_sql_injection_spec.rb +28 -0
  636. data/spec/components/checks/active/os_cmd_injection_spec.rb +26 -0
  637. data/spec/components/checks/active/os_cmd_injection_timing_spec.rb +26 -0
  638. data/spec/components/checks/active/path_traversal_spec.rb +42 -0
  639. data/spec/components/checks/active/response_splitting_spec.rb +22 -0
  640. data/spec/components/checks/active/rfi_spec.rb +20 -0
  641. data/spec/components/checks/active/session_fixation_spec.rb +20 -0
  642. data/spec/components/checks/active/source_code_disclosure_spec.rb +26 -0
  643. data/spec/components/checks/active/sql_injection_differential_spec.rb +15 -0
  644. data/spec/components/checks/active/sql_injection_spec.rb +142 -0
  645. data/spec/components/checks/active/sql_injection_timing_spec.rb +24 -0
  646. data/spec/components/checks/active/trainer_spec.rb +36 -0
  647. data/spec/components/checks/active/unvalidated_redirect_spec.rb +20 -0
  648. data/spec/components/checks/active/xpath_injection_spec.rb +16 -0
  649. data/spec/components/checks/active/xss_dom_inputs_spec.rb +32 -0
  650. data/spec/components/checks/active/xss_dom_script_context_spec.rb +63 -0
  651. data/spec/components/checks/active/xss_dom_spec.rb +67 -0
  652. data/spec/components/checks/active/xss_event_spec.rb +15 -0
  653. data/spec/components/checks/active/xss_path_spec.rb +15 -0
  654. data/spec/components/checks/active/xss_script_context_spec.rb +22 -0
  655. data/spec/components/checks/active/xss_spec.rb +22 -0
  656. data/spec/components/checks/active/xss_tag_spec.rb +15 -0
  657. data/spec/components/checks/passive/allowed_methods_spec.rb +15 -0
  658. data/spec/components/checks/passive/backdoors_spec.rb +15 -0
  659. data/spec/components/checks/passive/backup_directories_spec.rb +15 -0
  660. data/spec/components/checks/passive/backup_files_spec.rb +15 -0
  661. data/spec/components/checks/passive/common_directories_spec.rb +15 -0
  662. data/spec/components/checks/passive/common_files_spec.rb +15 -0
  663. data/spec/components/checks/passive/directory_listing_spec.rb +15 -0
  664. data/spec/components/checks/passive/grep/captcha_spec.rb +15 -0
  665. data/spec/components/checks/passive/grep/cookie_set_for_parent_domain_spec.rb +15 -0
  666. data/spec/components/checks/passive/grep/credit_card_spec.rb +15 -0
  667. data/spec/components/checks/passive/grep/cvs_svn_users_spec.rb +15 -0
  668. data/spec/components/checks/passive/grep/emails_spec.rb +15 -0
  669. data/spec/components/checks/passive/grep/form_upload_spec.rb +15 -0
  670. data/spec/components/checks/passive/grep/hsts_spec.rb +17 -0
  671. data/spec/components/checks/passive/grep/html_objects_spec.rb +15 -0
  672. data/spec/components/checks/passive/grep/http_only_cookies_spec.rb +15 -0
  673. data/spec/components/checks/passive/grep/insecure_cookies_spec.rb +15 -0
  674. data/spec/components/checks/passive/grep/mixed_resource_spec.rb +16 -0
  675. data/spec/components/checks/passive/grep/password_autocomplete_spec.rb +15 -0
  676. data/spec/components/checks/passive/grep/private_ip_spec.rb +22 -0
  677. data/spec/components/checks/passive/grep/ssn_spec.rb +15 -0
  678. data/spec/components/checks/passive/grep/unencrypted_password_forms_spec.rb +15 -0
  679. data/spec/components/checks/passive/htaccess_limit_spec.rb +15 -0
  680. data/spec/components/checks/passive/http_put_spec.rb +15 -0
  681. data/spec/components/checks/passive/interesting_responses_spec.rb +23 -0
  682. data/spec/components/checks/passive/localstart_asp_spec.rb +15 -0
  683. data/spec/components/checks/passive/origin_spoof_access_restriction_bypass_spec.rb +15 -0
  684. data/spec/components/checks/passive/webdav_spec.rb +15 -0
  685. data/spec/components/checks/passive/xst_spec.rb +15 -0
  686. data/spec/components/fingerprinters/frameworks/rack_spec.rb +42 -0
  687. data/spec/components/fingerprinters/languages/asp_spec.rb +38 -0
  688. data/spec/components/fingerprinters/languages/aspx_spec.rb +79 -0
  689. data/spec/components/fingerprinters/languages/jsp_spec.rb +56 -0
  690. data/spec/components/fingerprinters/languages/php_spec.rb +59 -0
  691. data/spec/components/fingerprinters/languages/python_spec.rb +23 -0
  692. data/spec/components/fingerprinters/languages/ruby.rb +34 -0
  693. data/spec/components/fingerprinters/os/bsd_spec.rb +26 -0
  694. data/spec/components/fingerprinters/os/linux_spec.rb +34 -0
  695. data/spec/components/fingerprinters/os/solaris_spec.rb +34 -0
  696. data/spec/components/fingerprinters/os/unix_spec.rb +26 -0
  697. data/spec/components/fingerprinters/os/windows_spec.rb +34 -0
  698. data/spec/components/fingerprinters/servers/apache_spec.rb +26 -0
  699. data/spec/components/fingerprinters/servers/iis_spec.rb +28 -0
  700. data/spec/components/fingerprinters/servers/jetty_spec.rb +28 -0
  701. data/spec/components/fingerprinters/servers/nginx_spec.rb +26 -0
  702. data/spec/components/fingerprinters/servers/tomcat_spec.rb +28 -0
  703. data/spec/{path_extractors → components/path_extractors}/anchors_spec.rb +0 -0
  704. data/spec/{path_extractors → components/path_extractors}/areas_spec.rb +0 -0
  705. data/spec/components/path_extractors/comments_spec.rb +23 -0
  706. data/spec/{path_extractors → components/path_extractors}/forms_spec.rb +0 -0
  707. data/spec/{path_extractors → components/path_extractors}/frames_spec.rb +0 -0
  708. data/spec/{path_extractors → components/path_extractors}/generic_spec.rb +0 -0
  709. data/spec/{path_extractors → components/path_extractors}/links_spec.rb +0 -0
  710. data/spec/{path_extractors → components/path_extractors}/meta_refresh_spec.rb +0 -0
  711. data/spec/components/path_extractors/scripts_spec.rb +30 -0
  712. data/spec/components/plugins/autologin_spec.rb +96 -0
  713. data/spec/components/plugins/autothrottle_spec.rb +56 -0
  714. data/spec/components/plugins/content_types_spec.rb +91 -0
  715. data/spec/components/plugins/cookie_collector_spec.rb +41 -0
  716. data/spec/components/plugins/form_dicattack_spec.rb +54 -0
  717. data/spec/components/plugins/healthmap_spec.rb +40 -0
  718. data/spec/components/plugins/http_dicattack_spec.rb +40 -0
  719. data/spec/components/plugins/meta/remedies/discovery_spec.rb +23 -0
  720. data/spec/components/plugins/meta/remedies/timing_attacks_spec.rb +31 -0
  721. data/spec/components/plugins/meta/uniformity_spec.rb +29 -0
  722. data/spec/components/plugins/script_spec.rb +13 -0
  723. data/spec/components/plugins/uncommon_headers_spec.rb +64 -0
  724. data/spec/components/plugins/vector_feed_spec.rb +169 -0
  725. data/spec/components/plugins/waf_detector_spec.rb +50 -0
  726. data/spec/components/reporters/ap_spec.rb +9 -0
  727. data/spec/components/reporters/html_spec.rb +9 -0
  728. data/spec/components/reporters/json_spec.rb +17 -0
  729. data/spec/components/reporters/marshal_spec.rb +13 -0
  730. data/spec/components/reporters/stdout_spec.rb +9 -0
  731. data/spec/components/reporters/txt_spec.rb +8 -0
  732. data/spec/components/reporters/xml_spec.rb +9 -0
  733. data/spec/components/reporters/yaml_spec.rb +14 -0
  734. data/spec/external/wavsep/active/lfi_spec.rb +1 -1
  735. data/spec/external/wavsep/active/obsolete_files_spec.rb +225 -0
  736. data/spec/external/wavsep/active/rfi_spec.rb +1 -1
  737. data/spec/external/wavsep/active/sqli_spec.rb +8 -6
  738. data/spec/external/wavsep/active/unvalidated_redirect_spec.rb +57 -0
  739. data/spec/external/wavsep/active/xss_dom_spec.rb +27 -0
  740. data/spec/external/wavsep/active/xss_spec.rb +13 -3
  741. data/spec/external/wavsep/false_positives/lfi_spec.rb +4 -16
  742. data/spec/external/wavsep/false_positives/obsolete_files_spec.rb +21 -0
  743. data/spec/external/wavsep/false_positives/rfi_spec.rb +2 -2
  744. data/spec/external/wavsep/false_positives/sqli_spec.rb +4 -15
  745. data/spec/external/wavsep/false_positives/unvalidated_redirect_spec.rb +21 -0
  746. data/spec/external/wavsep/false_positives/xss_spec.rb +2 -2
  747. data/spec/spec_helper.rb +17 -18
  748. data/spec/support/factories/browser/javascript/taint_tracer/frame.rb +10 -0
  749. data/spec/support/factories/browser/javascript/taint_tracer/frame/called_function.rb +11 -0
  750. data/spec/support/factories/browser/javascript/taint_tracer/sink/data_flow.rb +14 -0
  751. data/spec/support/factories/browser/javascript/taint_tracer/sink/execution_flow.rb +10 -0
  752. data/spec/support/factories/browser_cluster/job.rb +27 -0
  753. data/spec/support/factories/element/cookie.rb +7 -0
  754. data/spec/support/factories/element/form.rb +12 -0
  755. data/spec/support/factories/element/header.rb +5 -0
  756. data/spec/support/factories/element/link.rb +11 -0
  757. data/spec/support/factories/element/link_template.rb +11 -0
  758. data/spec/support/factories/http/request.rb +9 -0
  759. data/spec/support/factories/http/response.rb +42 -0
  760. data/spec/support/factories/issue.rb +67 -0
  761. data/spec/support/factories/page.rb +7 -0
  762. data/spec/support/factories/page/dom.rb +13 -0
  763. data/spec/support/factories/page/dom/transition.rb +21 -0
  764. data/spec/support/factories/scan_report.rb +35 -0
  765. data/spec/support/factories/vector.rb +32 -0
  766. data/spec/support/fixtures/check_with_invalid_platforms/with_invalid_platforms.rb +37 -0
  767. data/spec/support/fixtures/checks/test.rb +58 -0
  768. data/spec/support/fixtures/checks/test2.rb +41 -0
  769. data/spec/support/fixtures/checks/test3.rb +41 -0
  770. data/spec/support/fixtures/executables/node.rb +47 -0
  771. data/spec/support/fixtures/fingerprinters/test.rb +5 -13
  772. data/spec/support/fixtures/option_groups/input.yml +2 -0
  773. data/spec/support/fixtures/plugins/bad.rb +5 -13
  774. data/spec/support/fixtures/plugins/defaults/default.rb +6 -14
  775. data/spec/support/fixtures/plugins/distributable.rb +7 -15
  776. data/spec/support/fixtures/plugins/loop.rb +5 -13
  777. data/spec/support/fixtures/plugins/suspendable.rb +44 -0
  778. data/spec/support/fixtures/plugins/wait.rb +6 -14
  779. data/spec/support/fixtures/plugins/with_options.rb +20 -16
  780. data/spec/support/fixtures/plugins_with_priorities/p0.rb +17 -0
  781. data/spec/support/fixtures/plugins_with_priorities/p00.rb +17 -0
  782. data/spec/support/fixtures/plugins_with_priorities/p1.rb +17 -0
  783. data/spec/support/fixtures/plugins_with_priorities/p2.rb +17 -0
  784. data/spec/support/fixtures/plugins_with_priorities/p22.rb +17 -0
  785. data/spec/support/fixtures/plugins_with_priorities/p222.rb +17 -0
  786. data/spec/support/fixtures/plugins_with_priorities/p_nil.rb +16 -0
  787. data/spec/support/fixtures/plugins_with_priorities/p_nil2.rb +16 -0
  788. data/spec/support/fixtures/report.afr +0 -0
  789. data/spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb +13 -0
  790. data/spec/support/fixtures/reporters/base_spec/with_formatters.rb +15 -0
  791. data/spec/support/fixtures/reporters/base_spec/with_outfile.rb +16 -0
  792. data/spec/support/fixtures/reporters/base_spec/without_outfile.rb +12 -0
  793. data/spec/support/fixtures/reporters/manager_spec/afr.rb +13 -0
  794. data/spec/support/fixtures/reporters/manager_spec/foo.rb +18 -0
  795. data/spec/support/fixtures/rescan.afr.tpl +4 -5
  796. data/spec/support/fixtures/run_check/body.rb +48 -0
  797. data/spec/support/fixtures/run_check/cookies.rb +48 -0
  798. data/spec/support/fixtures/run_check/empty.rb +34 -0
  799. data/spec/support/fixtures/run_check/flch.rb +53 -0
  800. data/spec/support/fixtures/run_check/forms.rb +48 -0
  801. data/spec/support/fixtures/run_check/headers.rb +48 -0
  802. data/spec/support/fixtures/run_check/links.rb +48 -0
  803. data/spec/support/fixtures/run_check/nil.rb +47 -0
  804. data/spec/support/fixtures/run_check/path.rb +48 -0
  805. data/spec/support/fixtures/run_check/server.rb +48 -0
  806. data/spec/support/fixtures/services/echo.rb +64 -0
  807. data/spec/support/fixtures/taint_check/taint.rb +38 -0
  808. data/spec/support/fixtures/wait_check/wait.rb +38 -0
  809. data/spec/support/helpers/auditor.rb +18 -5
  810. data/spec/support/helpers/browser.rb +6 -0
  811. data/spec/support/helpers/browser_cluster/jobs/taint_tracer.rb +32 -0
  812. data/spec/support/helpers/framework.rb +5 -13
  813. data/spec/support/helpers/misc.rb +4 -12
  814. data/spec/support/helpers/pages.rb +18 -0
  815. data/spec/support/helpers/paths.rb +4 -12
  816. data/spec/support/helpers/requires.rb +5 -13
  817. data/spec/support/helpers/resets.rb +12 -19
  818. data/spec/support/helpers/web_server.rb +11 -15
  819. data/spec/support/lib/factory.rb +115 -0
  820. data/spec/support/lib/web_server_client.rb +49 -0
  821. data/spec/support/lib/web_server_dispatcher.rb +33 -0
  822. data/spec/support/lib/web_server_manager.rb +29 -32
  823. data/spec/support/pems/cacert.pem +35 -37
  824. data/spec/support/pems/client/cert.pem +35 -37
  825. data/spec/support/pems/client/key.pem +49 -49
  826. data/spec/support/pems/server/cert.pem +35 -37
  827. data/spec/support/pems/server/key.pem +49 -49
  828. data/spec/support/servers/arachni/browser.rb +836 -0
  829. data/spec/support/servers/arachni/browser/javascript.rb +7 -0
  830. data/spec/support/servers/arachni/browser/javascript/angular-1.2.8.js +20554 -0
  831. data/spec/support/servers/arachni/browser/javascript/angular-route.js +911 -0
  832. data/spec/support/servers/arachni/browser/javascript/dom_monitor.rb +90 -0
  833. data/spec/support/servers/arachni/browser/javascript/jquery-2.0.3.js +8829 -0
  834. data/spec/support/servers/arachni/browser/javascript/proxy.rb +17 -0
  835. data/spec/support/servers/arachni/browser/javascript/taint_tracer.rb +714 -0
  836. data/spec/support/servers/arachni/browser_cluster/jobs/event_trigger.rb +25 -0
  837. data/spec/support/servers/arachni/browser_https.rb +60 -0
  838. data/spec/support/servers/arachni/check/auditor.rb +247 -0
  839. data/spec/support/servers/arachni/element/body.rb +5 -0
  840. data/spec/support/servers/arachni/element/capabilities/analyzable/differential.rb +162 -0
  841. data/spec/support/servers/arachni/element/capabilities/{auditable → analyzable}/taint.rb +0 -0
  842. data/spec/support/servers/arachni/element/capabilities/analyzable/timeout.rb +37 -0
  843. data/spec/support/servers/arachni/element/cookie.rb +1 -1
  844. data/spec/support/servers/arachni/element/cookie/cookie_dom.rb +21 -0
  845. data/spec/support/servers/arachni/element/form.rb +6 -22
  846. data/spec/support/servers/arachni/element/form/form_dom.rb +50 -0
  847. data/spec/support/servers/arachni/element/header.rb +7 -8
  848. data/spec/support/servers/arachni/element/link.rb +15 -7
  849. data/spec/support/servers/arachni/element/link/link_dom.rb +49 -0
  850. data/spec/support/servers/arachni/element/link_template.rb +11 -0
  851. data/spec/support/servers/arachni/element/link_template/link_template_dom.rb +43 -0
  852. data/spec/support/servers/arachni/framework.rb +18 -0
  853. data/spec/support/servers/arachni/http/client.rb +176 -0
  854. data/spec/support/servers/arachni/http/proxy_server.rb +9 -0
  855. data/spec/support/servers/arachni/http/proxy_server_https.rb +25 -0
  856. data/spec/support/servers/arachni/page/page_dom.rb +83 -0
  857. data/spec/support/servers/arachni/parser.rb +4 -0
  858. data/spec/support/servers/arachni/rpc/server/{framework_hpg.rb → framework_multi.rb} +0 -0
  859. data/spec/support/servers/arachni/session.rb +43 -9
  860. data/spec/support/servers/arachni/trainer.rb +11 -7
  861. data/spec/support/servers/checks/active/code_injection.rb +163 -0
  862. data/spec/support/servers/checks/active/code_injection_timing.rb +134 -0
  863. data/spec/support/servers/{modules/audit → checks/active}/csrf.rb +0 -0
  864. data/spec/support/servers/checks/active/file_inclusion.rb +228 -0
  865. data/spec/support/servers/checks/active/ldap_injection.rb +88 -0
  866. data/spec/support/servers/checks/active/no_sql_injection.rb +134 -0
  867. data/spec/support/servers/checks/active/no_sql_injection/mongodb +1 -0
  868. data/spec/support/servers/checks/active/no_sql_injection_differential.rb +61 -0
  869. data/spec/support/servers/checks/active/os_cmd_injection.rb +172 -0
  870. data/spec/support/servers/checks/active/os_cmd_injection_timing.rb +118 -0
  871. data/spec/support/servers/checks/active/path_traversal.rb +219 -0
  872. data/spec/support/servers/checks/active/response_splitting.rb +138 -0
  873. data/spec/support/servers/{modules/audit → checks/active}/rfi.rb +0 -0
  874. data/spec/support/servers/checks/active/session_fixation.rb +111 -0
  875. data/spec/support/servers/checks/active/source_code_disclosure.rb +118 -0
  876. data/spec/support/servers/checks/active/sql_injection.rb +133 -0
  877. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/access +0 -0
  878. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/coldfusion +0 -0
  879. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/db2 +0 -0
  880. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/emc +0 -0
  881. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/firebird +0 -0
  882. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/frontbase +0 -0
  883. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/hsqldb +0 -0
  884. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/informix +0 -0
  885. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/ingres +0 -0
  886. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/interbase +0 -0
  887. data/spec/support/servers/checks/active/sql_injection/jdbc +0 -0
  888. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/maxdb +0 -0
  889. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/mssql +0 -0
  890. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/mysql +0 -0
  891. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/oracle +0 -0
  892. data/spec/support/servers/{modules/audit/sqli/postgresql → checks/active/sql_injection/pgsql} +0 -0
  893. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/sqlite +0 -0
  894. data/spec/support/servers/{modules/audit/sqli → checks/active/sql_injection}/sybase +0 -0
  895. data/spec/support/servers/{modules/audit/sqli_blind_rdiff.rb → checks/active/sql_injection_differential.rb} +0 -0
  896. data/spec/support/servers/checks/active/sql_injection_timing.rb +145 -0
  897. data/spec/support/servers/{modules/audit/trainer_module.rb → checks/active/trainer_check.rb} +0 -0
  898. data/spec/support/servers/checks/active/unvalidated_redirect.rb +141 -0
  899. data/spec/support/servers/checks/active/xpath_injection.rb +121 -0
  900. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/dotnet +0 -0
  901. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/general +0 -0
  902. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/java +0 -0
  903. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/libxml2 +0 -0
  904. data/spec/support/servers/{modules/audit/xpath → checks/active/xpath_injection}/php +0 -0
  905. data/spec/support/servers/checks/active/xss.rb +239 -0
  906. data/spec/support/servers/checks/active/xss_dom.rb +133 -0
  907. data/spec/support/servers/checks/active/xss_dom_inputs.rb +35 -0
  908. data/spec/support/servers/checks/active/xss_dom_script_context.rb +139 -0
  909. data/spec/support/servers/checks/active/xss_event.rb +80 -0
  910. data/spec/support/servers/{modules/audit → checks/active}/xss_path.rb +0 -0
  911. data/spec/support/servers/checks/active/xss_script_context.rb +90 -0
  912. data/spec/support/servers/{modules/audit → checks/active}/xss_tag.rb +0 -0
  913. data/spec/support/servers/checks/check_server.rb +14 -0
  914. data/spec/support/servers/{modules/recon → checks/passive}/allowed_methods.rb +0 -0
  915. data/spec/support/servers/checks/passive/backdoors.rb +4 -0
  916. data/spec/support/servers/checks/passive/backup_directories.rb +15 -0
  917. data/spec/support/servers/checks/passive/backup_files.rb +15 -0
  918. data/spec/support/servers/checks/passive/common_directories.rb +6 -0
  919. data/spec/support/servers/checks/passive/common_files.rb +6 -0
  920. data/spec/support/servers/checks/passive/directory_listing.rb +30 -0
  921. data/spec/support/servers/{modules/recon → checks/passive}/grep/captcha.rb +0 -0
  922. data/spec/support/servers/checks/passive/grep/cookie_set_for_parent_domain.rb +21 -0
  923. data/spec/support/servers/{modules/recon → checks/passive}/grep/credit_card.rb +0 -0
  924. data/spec/support/servers/{modules/recon → checks/passive}/grep/cvs_svn_users.rb +0 -0
  925. data/spec/support/servers/checks/passive/grep/emails.rb +23 -0
  926. data/spec/support/servers/{modules/recon → checks/passive}/grep/form_upload.rb +0 -0
  927. data/spec/support/servers/checks/passive/grep/hsts_https.rb +37 -0
  928. data/spec/support/servers/{modules/recon → checks/passive}/grep/html_objects.rb +0 -0
  929. data/spec/support/servers/{modules/recon → checks/passive}/grep/http_only_cookies.rb +0 -0
  930. data/spec/support/servers/checks/passive/grep/insecure_cookies_https.rb +40 -0
  931. data/spec/support/servers/checks/passive/grep/mixed_resource_https.rb +69 -0
  932. data/spec/support/servers/checks/passive/grep/password_autocomplete.rb +33 -0
  933. data/spec/support/servers/{modules/recon → checks/passive}/grep/private_ip.rb +0 -0
  934. data/spec/support/servers/{modules/recon → checks/passive}/grep/ssn.rb +0 -0
  935. data/spec/support/servers/checks/passive/grep/unencrypted_password_forms.rb +33 -0
  936. data/spec/support/servers/{modules/recon → checks/passive}/htaccess_limit.rb +0 -0
  937. data/spec/support/servers/checks/passive/http_put.rb +7 -0
  938. data/spec/support/servers/checks/passive/interesting_responses.rb +5 -0
  939. data/spec/support/servers/{modules/recon → checks/passive}/localstart_asp.rb +0 -0
  940. data/spec/support/servers/checks/passive/origin_spoof_access_restriction_bypass.rb +30 -0
  941. data/spec/support/servers/checks/passive/webdav.rb +25 -0
  942. data/spec/support/servers/{modules/recon → checks/passive}/xst.rb +0 -0
  943. data/spec/support/servers/plugins/meta/remedies/discovery.rb +2 -2
  944. data/spec/support/servers/plugins/meta/remedies/timing_attacks.rb +2 -0
  945. data/spec/support/shared/browser/javascript/taint_tracer/sink/base.rb +36 -0
  946. data/spec/support/shared/check.rb +198 -0
  947. data/spec/support/shared/component.rb +15 -4
  948. data/spec/support/shared/component/options/base.rb +187 -0
  949. data/spec/support/shared/element/base.rb +131 -0
  950. data/spec/support/shared/element/capabilities/auditable.rb +371 -604
  951. data/spec/support/shared/element/capabilities/auditable/dom.rb +303 -0
  952. data/spec/support/shared/element/capabilities/inputtable.rb +499 -0
  953. data/spec/support/shared/element/capabilities/mutable.rb +362 -0
  954. data/spec/support/shared/element/capabilities/refreshable.rb +26 -26
  955. data/spec/support/shared/element/capabilities/submitable.rb +155 -0
  956. data/spec/support/shared/element/capabilities/with_auditor.rb +75 -0
  957. data/spec/support/shared/element/capabilities/with_dom.rb +39 -0
  958. data/spec/support/shared/element/capabilities/with_node.rb +42 -0
  959. data/spec/support/shared/element/capabilities/with_scope.rb +22 -0
  960. data/spec/support/shared/external/wavsep.rb +30 -9
  961. data/spec/support/shared/http/message.rb +72 -0
  962. data/spec/support/shared/option_group.rb +98 -0
  963. data/spec/support/shared/path_extractor.rb +1 -1
  964. data/spec/support/shared/plugin.rb +33 -16
  965. data/spec/support/shared/reporter.rb +41 -0
  966. data/spec/support/shared/support/cache.rb +341 -0
  967. data/spec/support/shared/support/lookup.rb +93 -13
  968. data/ui/cli/framework.rb +466 -0
  969. data/ui/cli/framework/option_parser.rb +628 -0
  970. data/ui/cli/option_parser.rb +104 -0
  971. data/ui/cli/output.rb +377 -0
  972. data/ui/cli/reporter.rb +52 -0
  973. data/ui/cli/reporter/option_parser.rb +102 -0
  974. data/ui/cli/restored_framework.rb +127 -0
  975. data/ui/cli/restored_framework/option_parser.rb +115 -0
  976. data/ui/cli/rpc/client/dispatcher_monitor.rb +157 -0
  977. data/ui/cli/rpc/client/dispatcher_monitor/option_parser.rb +41 -0
  978. data/ui/cli/rpc/client/instance.rb +294 -0
  979. data/ui/cli/rpc/client/local.rb +65 -0
  980. data/ui/cli/rpc/client/local/option_parser.rb +35 -0
  981. data/ui/cli/rpc/client/remote.rb +84 -0
  982. data/ui/cli/rpc/client/remote/option_parser.rb +99 -0
  983. data/ui/cli/rpc/server/dispatcher.rb +36 -0
  984. data/ui/cli/rpc/server/dispatcher/option_parser.rb +165 -0
  985. data/ui/cli/utilities.rb +228 -0
  986. metadata +1260 -1266
  987. data/EXPLOITATION.md +0 -431
  988. data/HACKING.md +0 -120
  989. data/NOTICE +0 -12
  990. data/data/crypto/public.pem +0 -9
  991. data/external/metasploit/LICENSE +0 -24
  992. data/external/metasploit/plugins/arachni.rb +0 -516
  993. data/external/metasploit/plugins/arachni/modules/auxiliary/arachni_sqlmap.rb +0 -91
  994. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_exec.rb +0 -142
  995. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_path_traversal.rb +0 -113
  996. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_eval.rb +0 -150
  997. data/external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_include.rb +0 -141
  998. data/fingerprinters/frameworks/rack.rb +0 -41
  999. data/fingerprinters/languages/asp.rb +0 -42
  1000. data/fingerprinters/languages/aspx.rb +0 -63
  1001. data/fingerprinters/languages/jsp.rb +0 -42
  1002. data/fingerprinters/languages/php.rb +0 -43
  1003. data/fingerprinters/languages/python.rb +0 -40
  1004. data/fingerprinters/languages/ruby.rb +0 -41
  1005. data/fingerprinters/os/bsd.rb +0 -36
  1006. data/fingerprinters/os/linux.rb +0 -42
  1007. data/fingerprinters/os/solaris.rb +0 -41
  1008. data/fingerprinters/os/unix.rb +0 -36
  1009. data/fingerprinters/os/windows.rb +0 -41
  1010. data/fingerprinters/servers/apache.rb +0 -36
  1011. data/fingerprinters/servers/iis.rb +0 -36
  1012. data/fingerprinters/servers/jetty.rb +0 -36
  1013. data/fingerprinters/servers/nginx.rb +0 -36
  1014. data/fingerprinters/servers/tomcat.rb +0 -36
  1015. data/gfx/README.md +0 -18
  1016. data/gfx/compiled/banner.png +0 -0
  1017. data/gfx/compiled/favicon.ico +0 -0
  1018. data/gfx/compiled/icon.png +0 -0
  1019. data/gfx/compiled/logo.png +0 -0
  1020. data/gfx/compiled/spider.png +0 -0
  1021. data/gfx/font/Beneath_the_Surface.ttf +0 -0
  1022. data/gfx/font/bts_readme.txt +0 -14
  1023. data/gfx/source/banner.svg +0 -999
  1024. data/gfx/source/icon.svg +0 -627
  1025. data/gfx/source/logo.svg +0 -672
  1026. data/gfx/source/spider.png +0 -0
  1027. data/gfx/source/spider.svg +0 -277
  1028. data/lib/arachni/audit_store.rb +0 -321
  1029. data/lib/arachni/component/options/enum.rb +0 -51
  1030. data/lib/arachni/element/capabilities/auditable/rdiff.rb +0 -489
  1031. data/lib/arachni/element/capabilities/auditable/taint.rb +0 -238
  1032. data/lib/arachni/element/capabilities/auditable/timeout.rb +0 -469
  1033. data/lib/arachni/mixins/observable.rb +0 -91
  1034. data/lib/arachni/mixins/progress_bar.rb +0 -87
  1035. data/lib/arachni/mixins/terminal.rb +0 -112
  1036. data/lib/arachni/module.rb +0 -20
  1037. data/lib/arachni/module/auditor.rb +0 -618
  1038. data/lib/arachni/module/base.rb +0 -188
  1039. data/lib/arachni/module/manager.rb +0 -255
  1040. data/lib/arachni/module/output.rb +0 -68
  1041. data/lib/arachni/module/utilities.rb +0 -64
  1042. data/lib/arachni/report/base.rb +0 -201
  1043. data/lib/arachni/report/manager.rb +0 -86
  1044. data/lib/arachni/rpc/server/dispatcher/handler.rb +0 -166
  1045. data/lib/arachni/rpc/server/module/manager.rb +0 -46
  1046. data/lib/arachni/rpc/server/spider.rb +0 -404
  1047. data/lib/arachni/ruby/enumerable.rb +0 -29
  1048. data/lib/arachni/spider.rb +0 -477
  1049. data/lib/arachni/support/key_filler.rb +0 -68
  1050. data/lib/arachni/support/queue.rb +0 -18
  1051. data/lib/arachni/support/queue/disk.rb +0 -171
  1052. data/lib/arachni/typhoeus/hydra.rb +0 -56
  1053. data/lib/arachni/typhoeus/request.rb +0 -80
  1054. data/lib/arachni/typhoeus/response.rb +0 -103
  1055. data/lib/arachni/typhoeus/utils.rb +0 -25
  1056. data/lib/arachni/ui/cli/cli.rb +0 -469
  1057. data/lib/arachni/ui/cli/output.rb +0 -391
  1058. data/lib/arachni/ui/cli/rpc/dispatcher_monitor.rb +0 -188
  1059. data/lib/arachni/ui/cli/rpc/instance.rb +0 -407
  1060. data/lib/arachni/ui/cli/rpc/local.rb +0 -80
  1061. data/lib/arachni/ui/cli/rpc/remote.rb +0 -134
  1062. data/lib/arachni/ui/cli/utilities.rb +0 -509
  1063. data/modules/audit/code_injection.rb +0 -137
  1064. data/modules/audit/code_injection_php_input_wrapper.rb +0 -109
  1065. data/modules/audit/code_injection_timing.rb +0 -122
  1066. data/modules/audit/csrf.rb +0 -225
  1067. data/modules/audit/file_inclusion.rb +0 -156
  1068. data/modules/audit/ldapi.rb +0 -97
  1069. data/modules/audit/os_cmd_injection.rb +0 -109
  1070. data/modules/audit/os_cmd_injection_timing.rb +0 -98
  1071. data/modules/audit/path_traversal.rb +0 -170
  1072. data/modules/audit/response_splitting.rb +0 -99
  1073. data/modules/audit/rfi.rb +0 -181
  1074. data/modules/audit/session_fixation.rb +0 -117
  1075. data/modules/audit/source_code_disclosure.rb +0 -179
  1076. data/modules/audit/sqli.rb +0 -148
  1077. data/modules/audit/sqli_blind_rdiff.rb +0 -138
  1078. data/modules/audit/sqli_blind_timing.rb +0 -126
  1079. data/modules/audit/trainer.rb +0 -49
  1080. data/modules/audit/unvalidated_redirect.rb +0 -91
  1081. data/modules/audit/xpath.rb +0 -97
  1082. data/modules/audit/xss.rb +0 -154
  1083. data/modules/audit/xss_event.rb +0 -153
  1084. data/modules/audit/xss_path.rb +0 -152
  1085. data/modules/audit/xss_script_tag.rb +0 -137
  1086. data/modules/audit/xss_tag.rb +0 -137
  1087. data/modules/recon/allowed_methods.rb +0 -99
  1088. data/modules/recon/backdoors.rb +0 -82
  1089. data/modules/recon/backup_files.rb +0 -100
  1090. data/modules/recon/backup_files/extensions.txt +0 -28
  1091. data/modules/recon/common_directories.rb +0 -87
  1092. data/modules/recon/common_files.rb +0 -78
  1093. data/modules/recon/common_files/filenames.txt +0 -21
  1094. data/modules/recon/directory_listing.rb +0 -133
  1095. data/modules/recon/grep/captcha.rb +0 -74
  1096. data/modules/recon/grep/credit_card.rb +0 -128
  1097. data/modules/recon/grep/cvs_svn_users.rb +0 -81
  1098. data/modules/recon/grep/emails.rb +0 -73
  1099. data/modules/recon/grep/form_upload.rb +0 -86
  1100. data/modules/recon/grep/html_objects.rb +0 -56
  1101. data/modules/recon/grep/http_only_cookies.rb +0 -82
  1102. data/modules/recon/grep/insecure_cookies.rb +0 -82
  1103. data/modules/recon/grep/mixed_resource.rb +0 -113
  1104. data/modules/recon/grep/password_autocomplete.rb +0 -85
  1105. data/modules/recon/grep/private_ip.rb +0 -70
  1106. data/modules/recon/grep/ssn.rb +0 -66
  1107. data/modules/recon/grep/unencrypted_password_forms.rb +0 -103
  1108. data/modules/recon/htaccess_limit.rb +0 -76
  1109. data/modules/recon/http_put.rb +0 -95
  1110. data/modules/recon/interesting_responses.rb +0 -91
  1111. data/modules/recon/localstart_asp.rb +0 -97
  1112. data/modules/recon/webdav.rb +0 -106
  1113. data/modules/recon/x_forwarded_for_access_restriction_bypass.rb +0 -76
  1114. data/modules/recon/xst.rb +0 -103
  1115. data/path_extractors/anchors.rb +0 -37
  1116. data/path_extractors/areas.rb +0 -37
  1117. data/path_extractors/forms.rb +0 -37
  1118. data/path_extractors/frames.rb +0 -37
  1119. data/path_extractors/generic.rb +0 -84
  1120. data/path_extractors/links.rb +0 -37
  1121. data/path_extractors/meta_refresh.rb +0 -58
  1122. data/path_extractors/scripts.rb +0 -38
  1123. data/plugins/autologin.rb +0 -133
  1124. data/plugins/beep_notify.rb +0 -49
  1125. data/plugins/content_types.rb +0 -107
  1126. data/plugins/cookie_collector.rb +0 -85
  1127. data/plugins/defaults/autothrottle.rb +0 -78
  1128. data/plugins/defaults/healthmap.rb +0 -89
  1129. data/plugins/defaults/meta/remedies/discovery.rb +0 -138
  1130. data/plugins/defaults/meta/remedies/timing_attacks.rb +0 -117
  1131. data/plugins/defaults/meta/uniformity.rb +0 -82
  1132. data/plugins/defaults/resolver.rb +0 -60
  1133. data/plugins/email_notify.rb +0 -106
  1134. data/plugins/form_dicattack.rb +0 -123
  1135. data/plugins/http_dicattack.rb +0 -108
  1136. data/plugins/libnotify.rb +0 -82
  1137. data/plugins/profiler.rb +0 -179
  1138. data/plugins/proxy.rb +0 -502
  1139. data/plugins/proxy/panel/page_accordion.html.erb +0 -67
  1140. data/plugins/proxy/panel/panel.html.erb +0 -69
  1141. data/plugins/proxy/panel/verify_login_sequence.html.erb +0 -45
  1142. data/plugins/proxy/server.rb +0 -215
  1143. data/plugins/proxy/template_scope.rb +0 -138
  1144. data/plugins/rescan.rb +0 -59
  1145. data/plugins/script.rb +0 -53
  1146. data/plugins/uncommon_headers.rb +0 -92
  1147. data/plugins/vector_feed.rb +0 -226
  1148. data/plugins/waf_detector.rb +0 -167
  1149. data/profiles/full.afp +0 -48
  1150. data/reports/afr.rb +0 -44
  1151. data/reports/ap.rb +0 -46
  1152. data/reports/html.rb +0 -273
  1153. data/reports/html/default.erb +0 -82
  1154. data/reports/html/default/configuration.erb +0 -126
  1155. data/reports/html/default/css/jquery-ui.css +0 -570
  1156. data/reports/html/default/css/jquery.jqplot.min.css +0 -1
  1157. data/reports/html/default/css/main.css +0 -391
  1158. data/reports/html/default/headers.erb +0 -19
  1159. data/reports/html/default/issue.erb +0 -178
  1160. data/reports/html/default/issues.erb +0 -52
  1161. data/reports/html/default/js/charts.js +0 -147
  1162. data/reports/html/default/js/helpers.js +0 -53
  1163. data/reports/html/default/js/init.js +0 -72
  1164. data/reports/html/default/js/lib/jqplot.barRenderer.min.js +0 -57
  1165. data/reports/html/default/js/lib/jqplot.categoryAxisRenderer.min.js +0 -57
  1166. data/reports/html/default/js/lib/jqplot.cursor.min.js +0 -57
  1167. data/reports/html/default/js/lib/jqplot.pieRenderer.min.js +0 -57
  1168. data/reports/html/default/js/lib/jqplot.pointLabels.min.js +0 -57
  1169. data/reports/html/default/js/lib/jquery-ui.min.js +0 -404
  1170. data/reports/html/default/js/lib/jquery.jqplot.min.js +0 -57
  1171. data/reports/html/default/js/lib/jquery.min.js +0 -167
  1172. data/reports/html/default/plugins.erb +0 -22
  1173. data/reports/html/default/search.erb +0 -8
  1174. data/reports/html/default/sitemap.erb +0 -15
  1175. data/reports/html/default/summary.erb +0 -75
  1176. data/reports/html/default/summary_issue.erb +0 -20
  1177. data/reports/json.rb +0 -52
  1178. data/reports/marshal.rb +0 -46
  1179. data/reports/metareport.rb +0 -104
  1180. data/reports/plugin_formatters/html/autologin.rb +0 -45
  1181. data/reports/plugin_formatters/html/content_types.rb +0 -67
  1182. data/reports/plugin_formatters/html/cookie_collector.rb +0 -52
  1183. data/reports/plugin_formatters/html/discovery.rb +0 -45
  1184. data/reports/plugin_formatters/html/form_dicattack.rb +0 -40
  1185. data/reports/plugin_formatters/html/healthmap.rb +0 -60
  1186. data/reports/plugin_formatters/html/http_dicattack.rb +0 -40
  1187. data/reports/plugin_formatters/html/profiler.rb +0 -36
  1188. data/reports/plugin_formatters/html/profiler/template.erb +0 -84
  1189. data/reports/plugin_formatters/html/resolver.rb +0 -55
  1190. data/reports/plugin_formatters/html/timing_attacks.rb +0 -51
  1191. data/reports/plugin_formatters/html/uncommon_headers.rb +0 -47
  1192. data/reports/plugin_formatters/html/uniformity.rb +0 -54
  1193. data/reports/plugin_formatters/html/waf_detector.rb +0 -38
  1194. data/reports/plugin_formatters/stdout/autologin.rb +0 -38
  1195. data/reports/plugin_formatters/stdout/content_types.rb +0 -51
  1196. data/reports/plugin_formatters/stdout/cookie_collector.rb +0 -43
  1197. data/reports/plugin_formatters/stdout/discovery.rb +0 -37
  1198. data/reports/plugin_formatters/stdout/form_dicattack.rb +0 -34
  1199. data/reports/plugin_formatters/stdout/healthmap.rb +0 -49
  1200. data/reports/plugin_formatters/stdout/http_dicattack.rb +0 -34
  1201. data/reports/plugin_formatters/stdout/profiler.rb +0 -66
  1202. data/reports/plugin_formatters/stdout/resolver.rb +0 -29
  1203. data/reports/plugin_formatters/stdout/timing_attacks.rb +0 -37
  1204. data/reports/plugin_formatters/stdout/uncommon_headers.rb +0 -37
  1205. data/reports/plugin_formatters/stdout/uniformity.rb +0 -48
  1206. data/reports/plugin_formatters/stdout/waf_detector.rb +0 -31
  1207. data/reports/plugin_formatters/xml/autologin.rb +0 -41
  1208. data/reports/plugin_formatters/xml/content_types.rb +0 -61
  1209. data/reports/plugin_formatters/xml/cookie_collector.rb +0 -45
  1210. data/reports/plugin_formatters/xml/discovery.rb +0 -38
  1211. data/reports/plugin_formatters/xml/form_dicattack.rb +0 -34
  1212. data/reports/plugin_formatters/xml/healthmap.rb +0 -58
  1213. data/reports/plugin_formatters/xml/http_dicattack.rb +0 -33
  1214. data/reports/plugin_formatters/xml/profiler.rb +0 -80
  1215. data/reports/plugin_formatters/xml/resolver.rb +0 -33
  1216. data/reports/plugin_formatters/xml/timing_attacks.rb +0 -39
  1217. data/reports/plugin_formatters/xml/uncommon_headers.rb +0 -38
  1218. data/reports/plugin_formatters/xml/uniformity.rb +0 -54
  1219. data/reports/plugin_formatters/xml/waf_detector.rb +0 -34
  1220. data/reports/stdout.rb +0 -203
  1221. data/reports/txt.rb +0 -58
  1222. data/reports/xml.rb +0 -176
  1223. data/reports/xml/buffer.rb +0 -97
  1224. data/reports/yaml.rb +0 -46
  1225. data/spec/arachni/audit_store_spec.rb +0 -239
  1226. data/spec/arachni/component/options/enum_spec.rb +0 -51
  1227. data/spec/arachni/element/base_spec.rb +0 -138
  1228. data/spec/arachni/element/capabilities/auditable/rdiff_spec.rb +0 -134
  1229. data/spec/arachni/element/capabilities/auditable/taint_spec.rb +0 -409
  1230. data/spec/arachni/element/capabilities/auditable/timeout_spec.rb +0 -157
  1231. data/spec/arachni/element/capabilities/mutable_spec.rb +0 -284
  1232. data/spec/arachni/http_spec.rb +0 -962
  1233. data/spec/arachni/mixins/observable_spec.rb +0 -75
  1234. data/spec/arachni/mixins/progress_bar_spec.rb +0 -47
  1235. data/spec/arachni/module/auditor_spec.rb +0 -544
  1236. data/spec/arachni/module/manager_spec.rb +0 -150
  1237. data/spec/arachni/module/utilities_spec.rb +0 -30
  1238. data/spec/arachni/report/base_spec.rb +0 -61
  1239. data/spec/arachni/report/manager_spec.rb +0 -82
  1240. data/spec/arachni/rpc/server/dispatcher/handler_spec.rb +0 -102
  1241. data/spec/arachni/rpc/server/framework_hpg_spec.rb +0 -376
  1242. data/spec/arachni/rpc/server/framework_simple_spec.rb +0 -501
  1243. data/spec/arachni/rpc/server/modules/manager_spec.rb +0 -47
  1244. data/spec/arachni/rpc/server/spider_spec.rb +0 -68
  1245. data/spec/arachni/ruby/enumerable_spec.rb +0 -37
  1246. data/spec/arachni/spider_spec.rb +0 -539
  1247. data/spec/arachni/support/cache/base_spec.rb +0 -282
  1248. data/spec/arachni/support/key_filler.rb +0 -60
  1249. data/spec/arachni/support/queue/disk_spec.rb +0 -116
  1250. data/spec/arachni/typhoeus/requrest_spec.rb +0 -58
  1251. data/spec/arachni/typhoeus/response_spec.rb +0 -171
  1252. data/spec/fingerprinters/frameworks/rack_spec.rb +0 -41
  1253. data/spec/fingerprinters/languages/asp_spec.rb +0 -40
  1254. data/spec/fingerprinters/languages/aspx_spec.rb +0 -78
  1255. data/spec/fingerprinters/languages/jsp_spec.rb +0 -58
  1256. data/spec/fingerprinters/languages/php_spec.rb +0 -61
  1257. data/spec/fingerprinters/languages/python_spec.rb +0 -23
  1258. data/spec/fingerprinters/languages/ruby.rb +0 -34
  1259. data/spec/fingerprinters/os/bsd_spec.rb +0 -26
  1260. data/spec/fingerprinters/os/linux_spec.rb +0 -34
  1261. data/spec/fingerprinters/os/solaris_spec.rb +0 -34
  1262. data/spec/fingerprinters/os/unix_spec.rb +0 -26
  1263. data/spec/fingerprinters/os/windows_spec.rb +0 -34
  1264. data/spec/fingerprinters/servers/apache_spec.rb +0 -26
  1265. data/spec/fingerprinters/servers/iis_spec.rb +0 -28
  1266. data/spec/fingerprinters/servers/jetty_spec.rb +0 -28
  1267. data/spec/fingerprinters/servers/nginx_spec.rb +0 -26
  1268. data/spec/fingerprinters/servers/tomcat_spec.rb +0 -28
  1269. data/spec/modules/audit/code_injection_spec.rb +0 -25
  1270. data/spec/modules/audit/code_injection_timing_spec.rb +0 -24
  1271. data/spec/modules/audit/csrf_spec.rb +0 -45
  1272. data/spec/modules/audit/file_inclusion_spec.rb +0 -25
  1273. data/spec/modules/audit/ldapi_spec.rb +0 -19
  1274. data/spec/modules/audit/os_cmd_injection_spec.rb +0 -24
  1275. data/spec/modules/audit/os_cmd_injection_timing_spec.rb +0 -24
  1276. data/spec/modules/audit/path_traversal_spec.rb +0 -23
  1277. data/spec/modules/audit/response_splitting_spec.rb +0 -19
  1278. data/spec/modules/audit/rfi_spec.rb +0 -19
  1279. data/spec/modules/audit/session_fixation_spec.rb +0 -23
  1280. data/spec/modules/audit/source_code_disclosure_spec.rb +0 -24
  1281. data/spec/modules/audit/sqli_blind_rdiff_spec.rb +0 -19
  1282. data/spec/modules/audit/sqli_blind_timing_spec.rb +0 -23
  1283. data/spec/modules/audit/sqli_spec.rb +0 -25
  1284. data/spec/modules/audit/trainer_spec.rb +0 -35
  1285. data/spec/modules/audit/unvalidated_redirect_spec.rb +0 -24
  1286. data/spec/modules/audit/xpath_spec.rb +0 -25
  1287. data/spec/modules/audit/xss_event_spec.rb +0 -19
  1288. data/spec/modules/audit/xss_path_spec.rb +0 -19
  1289. data/spec/modules/audit/xss_script_tag_spec.rb +0 -27
  1290. data/spec/modules/audit/xss_spec.rb +0 -24
  1291. data/spec/modules/audit/xss_tag_spec.rb +0 -19
  1292. data/spec/modules/recon/allowed_methods_spec.rb +0 -19
  1293. data/spec/modules/recon/backdoors_spec.rb +0 -19
  1294. data/spec/modules/recon/backup_files_spec.rb +0 -19
  1295. data/spec/modules/recon/common_directories_spec.rb +0 -19
  1296. data/spec/modules/recon/common_files_spec.rb +0 -19
  1297. data/spec/modules/recon/directory_listing_spec.rb +0 -19
  1298. data/spec/modules/recon/grep/captcha_spec.rb +0 -19
  1299. data/spec/modules/recon/grep/credit_card_spec.rb +0 -19
  1300. data/spec/modules/recon/grep/cvs_svn_users_spec.rb +0 -19
  1301. data/spec/modules/recon/grep/emails_spec.rb +0 -19
  1302. data/spec/modules/recon/grep/form_upload_spec.rb +0 -19
  1303. data/spec/modules/recon/grep/html_objects_spec.rb +0 -19
  1304. data/spec/modules/recon/grep/http_only_cookies_spec.rb +0 -19
  1305. data/spec/modules/recon/grep/insecure_cookies_spec.rb +0 -19
  1306. data/spec/modules/recon/grep/mixed_resource_spec.rb +0 -20
  1307. data/spec/modules/recon/grep/password_autocomplete_spec.rb +0 -19
  1308. data/spec/modules/recon/grep/private_ip_spec.rb +0 -26
  1309. data/spec/modules/recon/grep/ssn_spec.rb +0 -19
  1310. data/spec/modules/recon/grep/unencrypted_password_forms_spec.rb +0 -19
  1311. data/spec/modules/recon/htaccess_limit_spec.rb +0 -19
  1312. data/spec/modules/recon/http_put_spec.rb +0 -19
  1313. data/spec/modules/recon/interesting_responses_spec.rb +0 -30
  1314. data/spec/modules/recon/localstart_asp_spec.rb +0 -19
  1315. data/spec/modules/recon/webdav_spec.rb +0 -19
  1316. data/spec/modules/recon/x_forwarded_for_access_restriction_bypass_spec.rb +0 -19
  1317. data/spec/modules/recon/xst_spec.rb +0 -19
  1318. data/spec/path_extractors/scripts_spec.rb +0 -19
  1319. data/spec/plugins/autologin_spec.rb +0 -94
  1320. data/spec/plugins/autothrottle_spec.rb +0 -45
  1321. data/spec/plugins/content_types_spec.rb +0 -93
  1322. data/spec/plugins/cookie_collector_spec.rb +0 -49
  1323. data/spec/plugins/form_dicattack_spec.rb +0 -60
  1324. data/spec/plugins/healthmap_spec.rb +0 -40
  1325. data/spec/plugins/http_dicattack_spec.rb +0 -40
  1326. data/spec/plugins/meta/remedies/discovery_spec.rb +0 -21
  1327. data/spec/plugins/meta/remedies/timing_attacks_spec.rb +0 -34
  1328. data/spec/plugins/meta/uniformity_spec.rb +0 -83
  1329. data/spec/plugins/profiler_spec.rb +0 -82
  1330. data/spec/plugins/rescan_spec.rb +0 -26
  1331. data/spec/plugins/resolver_spec.rb +0 -16
  1332. data/spec/plugins/script_spec.rb +0 -12
  1333. data/spec/plugins/uncommon_headers_spec.rb +0 -64
  1334. data/spec/plugins/vector_feed_spec.rb +0 -167
  1335. data/spec/plugins/waf_detector_spec.rb +0 -41
  1336. data/spec/reports/afr_spec.rb +0 -13
  1337. data/spec/reports/ap_spec.rb +0 -9
  1338. data/spec/reports/html_spec.rb +0 -13
  1339. data/spec/reports/json_spec.rb +0 -17
  1340. data/spec/reports/marshal_spec.rb +0 -13
  1341. data/spec/reports/stdout_spec.rb +0 -9
  1342. data/spec/reports/txt_spec.rb +0 -8
  1343. data/spec/reports/xml_spec.rb +0 -13
  1344. data/spec/reports/yaml_spec.rb +0 -13
  1345. data/spec/support/fixtures/auditstore.afr +0 -76074
  1346. data/spec/support/fixtures/modules/test.rb +0 -58
  1347. data/spec/support/fixtures/modules/test2.rb +0 -46
  1348. data/spec/support/fixtures/modules/test3.rb +0 -46
  1349. data/spec/support/fixtures/plugins/spider_hook.rb +0 -50
  1350. data/spec/support/fixtures/reports/base_spec/plugin_formatters/with_formatters/foobar.rb +0 -21
  1351. data/spec/support/fixtures/reports/base_spec/with_formatters.rb +0 -23
  1352. data/spec/support/fixtures/reports/base_spec/with_outfile.rb +0 -24
  1353. data/spec/support/fixtures/reports/base_spec/without_outfile.rb +0 -20
  1354. data/spec/support/fixtures/reports/manager_spec/afr.rb +0 -21
  1355. data/spec/support/fixtures/reports/manager_spec/foo.rb +0 -26
  1356. data/spec/support/fixtures/rpcd_handlers/echo.rb +0 -68
  1357. data/spec/support/fixtures/run_mod/body.rb +0 -58
  1358. data/spec/support/fixtures/run_mod/cookies.rb +0 -58
  1359. data/spec/support/fixtures/run_mod/empty.rb +0 -58
  1360. data/spec/support/fixtures/run_mod/flch.rb +0 -63
  1361. data/spec/support/fixtures/run_mod/forms.rb +0 -58
  1362. data/spec/support/fixtures/run_mod/headers.rb +0 -58
  1363. data/spec/support/fixtures/run_mod/links.rb +0 -58
  1364. data/spec/support/fixtures/run_mod/nil.rb +0 -57
  1365. data/spec/support/fixtures/run_mod/path.rb +0 -58
  1366. data/spec/support/fixtures/run_mod/server.rb +0 -58
  1367. data/spec/support/fixtures/taint_module/taint.rb +0 -48
  1368. data/spec/support/fixtures/wait_module/wait.rb +0 -48
  1369. data/spec/support/logs/Dispatcher - 1332-56847.log +0 -9
  1370. data/spec/support/logs/Dispatcher - 1361-63434.log +0 -21
  1371. data/spec/support/logs/Dispatcher - 1545-55308.log +0 -9
  1372. data/spec/support/logs/Dispatcher - 1559-18938.log +0 -19
  1373. data/spec/support/logs/Dispatcher - 1568-25013.log +0 -17
  1374. data/spec/support/logs/Dispatcher - 1577-55689.log +0 -13
  1375. data/spec/support/logs/Dispatcher - 1586-18577.log +0 -9
  1376. data/spec/support/logs/Dispatcher - 1595-49353.log +0 -9
  1377. data/spec/support/logs/Dispatcher - 1604-27831.log +0 -11
  1378. data/spec/support/logs/Dispatcher - 1617-57444.log +0 -11
  1379. data/spec/support/logs/Dispatcher - 1631-28737.log +0 -11
  1380. data/spec/support/logs/Dispatcher - 1644-21815.log +0 -33
  1381. data/spec/support/logs/Dispatcher - 1738-53470.log +0 -21
  1382. data/spec/support/logs/Dispatcher - 1747-64173.log +0 -21
  1383. data/spec/support/logs/Dispatcher - 1756-11866.log +0 -23
  1384. data/spec/support/logs/Dispatcher - 1798-12175.log +0 -19
  1385. data/spec/support/logs/Dispatcher - 1807-22790.log +0 -17
  1386. data/spec/support/logs/Dispatcher - 1816-57823.log +0 -15
  1387. data/spec/support/logs/Dispatcher - 1831-64825.log +0 -11
  1388. data/spec/support/logs/Dispatcher - 1845-27623.log +0 -9
  1389. data/spec/support/logs/Dispatcher - 1854-26066.log +0 -9
  1390. data/spec/support/logs/Dispatcher - 1863-37486.log +0 -9
  1391. data/spec/support/logs/Dispatcher - 1874-22463.log +0 -9
  1392. data/spec/support/logs/Dispatcher - 1883-41263.log +0 -11
  1393. data/spec/support/logs/Dispatcher - 1900-53660.log +0 -9
  1394. data/spec/support/logs/Dispatcher - 1909-44423.log +0 -9
  1395. data/spec/support/logs/Dispatcher - 1921-58931.log +0 -9
  1396. data/spec/support/logs/Dispatcher - 1993-6448.log +0 -63
  1397. data/spec/support/logs/Dispatcher - 2002-19206.log +0 -43
  1398. data/spec/support/logs/Dispatcher - 2011-11852.log +0 -39
  1399. data/spec/support/logs/Dispatcher - 2020-65055.log +0 -34
  1400. data/spec/support/logs/Dispatcher - 2029-48445.log +0 -28
  1401. data/spec/support/logs/Dispatcher - 2038-55271.log +0 -21
  1402. data/spec/support/logs/Dispatcher - 2047-45722.log +0 -13
  1403. data/spec/support/logs/Dispatcher - 2057-48194.log +0 -9
  1404. data/spec/support/logs/Dispatcher - 2189-39843.log +0 -19
  1405. data/spec/support/logs/Dispatcher - 2199-15985.log +0 -21
  1406. data/spec/support/logs/Dispatcher - 2208-22080.log +0 -15
  1407. data/spec/support/logs/Dispatcher - 2221-37690.log +0 -19
  1408. data/spec/support/logs/Dispatcher - 2230-47867.log +0 -21
  1409. data/spec/support/logs/Dispatcher - 2239-27060.log +0 -15
  1410. data/spec/support/logs/Dispatcher - 2358-8967.log +0 -17
  1411. data/spec/support/logs/Dispatcher - 2367-27103.log +0 -21
  1412. data/spec/support/logs/Dispatcher - 2376-16287.log +0 -13
  1413. data/spec/support/logs/Dispatcher - 2389-9109.log +0 -19
  1414. data/spec/support/logs/Dispatcher - 2398-62926.log +0 -21
  1415. data/spec/support/logs/Dispatcher - 2407-48685.log +0 -15
  1416. data/spec/support/logs/Dispatcher - 2459-62480.log +0 -17
  1417. data/spec/support/logs/Dispatcher - 2470-57894.log +0 -21
  1418. data/spec/support/logs/Dispatcher - 2479-51883.log +0 -13
  1419. data/spec/support/logs/Dispatcher - 2493-36944.log +0 -17
  1420. data/spec/support/logs/Dispatcher - 2503-59143.log +0 -21
  1421. data/spec/support/logs/Dispatcher - 2513-33084.log +0 -13
  1422. data/spec/support/logs/Dispatcher - 25430-46306.log +0 -9
  1423. data/spec/support/logs/Dispatcher - 25457-10711.log +0 -23
  1424. data/spec/support/logs/Dispatcher - 25603-48892.log +0 -9
  1425. data/spec/support/logs/Dispatcher - 25613-24775.log +0 -19
  1426. data/spec/support/logs/Dispatcher - 25622-59684.log +0 -17
  1427. data/spec/support/logs/Dispatcher - 25631-23195.log +0 -13
  1428. data/spec/support/logs/Dispatcher - 25640-9810.log +0 -9
  1429. data/spec/support/logs/Dispatcher - 25649-52757.log +0 -9
  1430. data/spec/support/logs/Dispatcher - 25658-58550.log +0 -11
  1431. data/spec/support/logs/Dispatcher - 25671-30871.log +0 -11
  1432. data/spec/support/logs/Dispatcher - 25684-48620.log +0 -11
  1433. data/spec/support/logs/Dispatcher - 25697-18124.log +0 -37
  1434. data/spec/support/logs/Dispatcher - 25762-35321.log +0 -21
  1435. data/spec/support/logs/Dispatcher - 25771-64633.log +0 -21
  1436. data/spec/support/logs/Dispatcher - 25780-43558.log +0 -23
  1437. data/spec/support/logs/Dispatcher - 25821-43561.log +0 -19
  1438. data/spec/support/logs/Dispatcher - 25830-39112.log +0 -17
  1439. data/spec/support/logs/Dispatcher - 25839-44093.log +0 -15
  1440. data/spec/support/logs/Dispatcher - 25852-12057.log +0 -11
  1441. data/spec/support/logs/Dispatcher - 25866-49029.log +0 -9
  1442. data/spec/support/logs/Dispatcher - 25875-32179.log +0 -9
  1443. data/spec/support/logs/Dispatcher - 25884-62703.log +0 -9
  1444. data/spec/support/logs/Dispatcher - 25894-4228.log +0 -9
  1445. data/spec/support/logs/Dispatcher - 25903-6709.log +0 -11
  1446. data/spec/support/logs/Dispatcher - 25917-29651.log +0 -9
  1447. data/spec/support/logs/Dispatcher - 25926-12708.log +0 -9
  1448. data/spec/support/logs/Dispatcher - 25935-54092.log +0 -9
  1449. data/spec/support/logs/Dispatcher - 25990-26756.log +0 -63
  1450. data/spec/support/logs/Dispatcher - 25999-4016.log +0 -43
  1451. data/spec/support/logs/Dispatcher - 26008-52076.log +0 -39
  1452. data/spec/support/logs/Dispatcher - 26017-48497.log +0 -34
  1453. data/spec/support/logs/Dispatcher - 26026-28839.log +0 -28
  1454. data/spec/support/logs/Dispatcher - 26035-54215.log +0 -21
  1455. data/spec/support/logs/Dispatcher - 26044-27216.log +0 -13
  1456. data/spec/support/logs/Dispatcher - 26054-53464.log +0 -9
  1457. data/spec/support/logs/Dispatcher - 26163-65271.log +0 -19
  1458. data/spec/support/logs/Dispatcher - 26173-58105.log +0 -21
  1459. data/spec/support/logs/Dispatcher - 26182-40848.log +0 -15
  1460. data/spec/support/logs/Dispatcher - 26195-2855.log +0 -19
  1461. data/spec/support/logs/Dispatcher - 26204-35297.log +0 -21
  1462. data/spec/support/logs/Dispatcher - 26213-59588.log +0 -15
  1463. data/spec/support/logs/Dispatcher - 26333-40774.log +0 -17
  1464. data/spec/support/logs/Dispatcher - 26342-45541.log +0 -21
  1465. data/spec/support/logs/Dispatcher - 26351-3349.log +0 -13
  1466. data/spec/support/logs/Dispatcher - 26364-37456.log +0 -19
  1467. data/spec/support/logs/Dispatcher - 26373-37340.log +0 -21
  1468. data/spec/support/logs/Dispatcher - 26382-54864.log +0 -15
  1469. data/spec/support/logs/Dispatcher - 26434-3070.log +0 -17
  1470. data/spec/support/logs/Dispatcher - 26448-14295.log +0 -21
  1471. data/spec/support/logs/Dispatcher - 26474-30587.log +0 -13
  1472. data/spec/support/logs/Dispatcher - 26500-32529.log +0 -17
  1473. data/spec/support/logs/Dispatcher - 26509-16952.log +0 -21
  1474. data/spec/support/logs/Dispatcher - 26519-43332.log +0 -13
  1475. data/spec/support/logs/Dispatcher - 26750-61867.log +0 -19
  1476. data/spec/support/logs/Dispatcher - 26759-22532.log +0 -21
  1477. data/spec/support/logs/Dispatcher - 26768-18231.log +0 -15
  1478. data/spec/support/logs/Dispatcher - 26792-41661.log +0 -21
  1479. data/spec/support/logs/Dispatcher - 26801-14384.log +0 -25
  1480. data/spec/support/logs/Dispatcher - 26810-2591.log +0 -15
  1481. data/spec/support/logs/Dispatcher - 26846-14591.log +0 -17
  1482. data/spec/support/logs/Dispatcher - 26855-15708.log +0 -21
  1483. data/spec/support/logs/Dispatcher - 26864-2062.log +0 -13
  1484. data/spec/support/logs/Dispatcher - 26877-14471.log +0 -21
  1485. data/spec/support/logs/Dispatcher - 26886-49795.log +0 -25
  1486. data/spec/support/logs/Dispatcher - 26895-21093.log +0 -15
  1487. data/spec/support/logs/Dispatcher - 26931-30049.log +0 -17
  1488. data/spec/support/logs/Dispatcher - 26940-34273.log +0 -21
  1489. data/spec/support/logs/Dispatcher - 26949-30040.log +0 -13
  1490. data/spec/support/logs/Dispatcher - 26962-8152.log +0 -17
  1491. data/spec/support/logs/Dispatcher - 26971-53062.log +0 -21
  1492. data/spec/support/logs/Dispatcher - 26980-7548.log +0 -13
  1493. data/spec/support/logs/Dispatcher - 2737-20989.log +0 -19
  1494. data/spec/support/logs/Dispatcher - 2746-5423.log +0 -21
  1495. data/spec/support/logs/Dispatcher - 2755-53393.log +0 -15
  1496. data/spec/support/logs/Dispatcher - 27615-41812.log +0 -19
  1497. data/spec/support/logs/Dispatcher - 27624-43683.log +0 -21
  1498. data/spec/support/logs/Dispatcher - 27633-11593.log +0 -15
  1499. data/spec/support/logs/Dispatcher - 27658-12186.log +0 -21
  1500. data/spec/support/logs/Dispatcher - 27667-15575.log +0 -25
  1501. data/spec/support/logs/Dispatcher - 27676-17207.log +0 -15
  1502. data/spec/support/logs/Dispatcher - 27712-2233.log +0 -17
  1503. data/spec/support/logs/Dispatcher - 27721-3842.log +0 -21
  1504. data/spec/support/logs/Dispatcher - 27730-22695.log +0 -13
  1505. data/spec/support/logs/Dispatcher - 27743-8364.log +0 -21
  1506. data/spec/support/logs/Dispatcher - 27752-6140.log +0 -25
  1507. data/spec/support/logs/Dispatcher - 27761-25015.log +0 -15
  1508. data/spec/support/logs/Dispatcher - 27797-9270.log +0 -17
  1509. data/spec/support/logs/Dispatcher - 2780-58168.log +0 -21
  1510. data/spec/support/logs/Dispatcher - 27806-48623.log +0 -21
  1511. data/spec/support/logs/Dispatcher - 27815-58778.log +0 -13
  1512. data/spec/support/logs/Dispatcher - 27828-29742.log +0 -17
  1513. data/spec/support/logs/Dispatcher - 27837-46211.log +0 -21
  1514. data/spec/support/logs/Dispatcher - 27846-16143.log +0 -13
  1515. data/spec/support/logs/Dispatcher - 2789-29375.log +0 -25
  1516. data/spec/support/logs/Dispatcher - 2798-10983.log +0 -15
  1517. data/spec/support/logs/Dispatcher - 2836-2354.log +0 -17
  1518. data/spec/support/logs/Dispatcher - 2845-65341.log +0 -21
  1519. data/spec/support/logs/Dispatcher - 2854-18936.log +0 -13
  1520. data/spec/support/logs/Dispatcher - 2867-51979.log +0 -21
  1521. data/spec/support/logs/Dispatcher - 2876-21086.log +0 -25
  1522. data/spec/support/logs/Dispatcher - 2887-17393.log +0 -15
  1523. data/spec/support/logs/Dispatcher - 2930-37394.log +0 -17
  1524. data/spec/support/logs/Dispatcher - 2943-46737.log +0 -21
  1525. data/spec/support/logs/Dispatcher - 2956-37866.log +0 -13
  1526. data/spec/support/logs/Dispatcher - 2976-21012.log +0 -17
  1527. data/spec/support/logs/Dispatcher - 2990-48082.log +0 -21
  1528. data/spec/support/logs/Dispatcher - 2999-16391.log +0 -13
  1529. data/spec/support/logs/Instance - 2204-45164.error.log +0 -356
  1530. data/spec/support/logs/Instance - 2475-49789.error.log +0 -356
  1531. data/spec/support/logs/Instance - 2509-39450.error.log +0 -455
  1532. data/spec/support/logs/Instance - 2533-5785.error.log +0 -354
  1533. data/spec/support/logs/Instance - 2539-42941.error.log +0 -356
  1534. data/spec/support/logs/Instance - 26178-57631.error.log +0 -324
  1535. data/spec/support/logs/Instance - 26458-60253.error.log +0 -326
  1536. data/spec/support/logs/Instance - 26514-44685.error.log +0 -423
  1537. data/spec/support/logs/Instance - 26538-43093.error.log +0 -322
  1538. data/spec/support/logs/Instance - 26544-52217.error.log +0 -328
  1539. data/spec/support/logs/Instance - 26682-37056.error.log +0 -345
  1540. data/spec/support/logs/Instance - 2669-56818.error.log +0 -354
  1541. data/spec/support/logs/Instance - 27547-3928.error.log +0 -309
  1542. data/spec/support/servers/arachni/element/capabilities/auditable/rdiff.rb +0 -162
  1543. data/spec/support/servers/arachni/element/capabilities/auditable/timeout.rb +0 -34
  1544. data/spec/support/servers/arachni/http.rb +0 -127
  1545. data/spec/support/servers/arachni/http_auth.rb +0 -9
  1546. data/spec/support/servers/arachni/module/auditor.rb +0 -136
  1547. data/spec/support/servers/arachni/rpc/server/framework_simple.rb +0 -30
  1548. data/spec/support/servers/arachni/spider.rb +0 -234
  1549. data/spec/support/servers/arachni/spider_https.rb +0 -58
  1550. data/spec/support/servers/modules/audit/code_injection.rb +0 -139
  1551. data/spec/support/servers/modules/audit/code_injection_timing.rb +0 -110
  1552. data/spec/support/servers/modules/audit/file_inclusion.rb +0 -202
  1553. data/spec/support/servers/modules/audit/ldapi.rb +0 -73
  1554. data/spec/support/servers/modules/audit/os_cmd_injection.rb +0 -140
  1555. data/spec/support/servers/modules/audit/os_cmd_injection_timing.rb +0 -103
  1556. data/spec/support/servers/modules/audit/path_traversal.rb +0 -197
  1557. data/spec/support/servers/modules/audit/response_splitting.rb +0 -114
  1558. data/spec/support/servers/modules/audit/session_fixation.rb +0 -87
  1559. data/spec/support/servers/modules/audit/source_code_disclosure.rb +0 -95
  1560. data/spec/support/servers/modules/audit/sqli.rb +0 -118
  1561. data/spec/support/servers/modules/audit/sqli_blind_timing.rb +0 -121
  1562. data/spec/support/servers/modules/audit/unvalidated_redirect.rb +0 -115
  1563. data/spec/support/servers/modules/audit/xpath.rb +0 -111
  1564. data/spec/support/servers/modules/audit/xss.rb +0 -152
  1565. data/spec/support/servers/modules/audit/xss_event.rb +0 -80
  1566. data/spec/support/servers/modules/audit/xss_script_tag.rb +0 -73
  1567. data/spec/support/servers/modules/module_server.rb +0 -14
  1568. data/spec/support/servers/modules/recon/backdoors.rb +0 -4
  1569. data/spec/support/servers/modules/recon/backup_files.rb +0 -28
  1570. data/spec/support/servers/modules/recon/common_directories.rb +0 -6
  1571. data/spec/support/servers/modules/recon/common_files.rb +0 -6
  1572. data/spec/support/servers/modules/recon/directory_listing.rb +0 -30
  1573. data/spec/support/servers/modules/recon/grep/emails.rb +0 -21
  1574. data/spec/support/servers/modules/recon/grep/insecure_cookies.rb +0 -21
  1575. data/spec/support/servers/modules/recon/grep/mixed_resource.rb +0 -83
  1576. data/spec/support/servers/modules/recon/grep/password_autocomplete.rb +0 -33
  1577. data/spec/support/servers/modules/recon/grep/unencrypted_password_forms.rb +0 -33
  1578. data/spec/support/servers/modules/recon/http_put.rb +0 -7
  1579. data/spec/support/servers/modules/recon/interesting_responses.rb +0 -5
  1580. data/spec/support/servers/modules/recon/webdav.rb +0 -25
  1581. data/spec/support/servers/modules/recon/x_forwarded_for_access_restriction_bypass.rb +0 -16
  1582. data/spec/support/servers/plugins/profiler.rb +0 -82
  1583. data/spec/support/servers/plugins/rescan.rb +0 -31
  1584. data/spec/support/shared/module.rb +0 -162
  1585. data/spec/support/shared/reports.rb +0 -47
metadata CHANGED
@@ -1,307 +1,277 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: arachni
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.4.7
4
+ version: '1.0'
5
5
  platform: ruby
6
6
  authors:
7
7
  - Tasos Laskos
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2014-04-12 00:00:00.000000000 Z
11
+ date: 2014-08-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler
15
15
  requirement: !ruby/object:Gem::Requirement
16
16
  requirements:
17
- - - ! '>='
17
+ - - ">="
18
18
  - !ruby/object:Gem::Version
19
19
  version: '0'
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
- - - ! '>='
24
+ - - ">="
25
25
  - !ruby/object:Gem::Version
26
26
  version: '0'
27
27
  - !ruby/object:Gem::Dependency
28
- name: arachni-rpc-em
28
+ name: rubyzip
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: '0.2'
33
+ version: 1.1.6
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: '0.2'
40
+ version: 1.1.6
41
41
  - !ruby/object:Gem::Dependency
42
- name: typhoeus
42
+ name: coderay
43
43
  requirement: !ruby/object:Gem::Requirement
44
44
  requirements:
45
- - - ~>
45
+ - - '='
46
46
  - !ruby/object:Gem::Version
47
- version: 0.3.3
47
+ version: 1.1.0
48
48
  type: :runtime
49
49
  prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
- - - ~>
52
+ - - '='
53
53
  - !ruby/object:Gem::Version
54
- version: 0.3.3
54
+ version: 1.1.0
55
55
  - !ruby/object:Gem::Dependency
56
- name: addressable
56
+ name: childprocess
57
57
  requirement: !ruby/object:Gem::Requirement
58
58
  requirements:
59
- - - ~>
59
+ - - '='
60
60
  - !ruby/object:Gem::Version
61
- version: 2.3.2
61
+ version: 0.5.3
62
62
  type: :runtime
63
63
  prerelease: false
64
64
  version_requirements: !ruby/object:Gem::Requirement
65
65
  requirements:
66
- - - ~>
66
+ - - '='
67
67
  - !ruby/object:Gem::Version
68
- version: 2.3.2
68
+ version: 0.5.3
69
69
  - !ruby/object:Gem::Dependency
70
- name: pony
70
+ name: msgpack
71
71
  requirement: !ruby/object:Gem::Requirement
72
72
  requirements:
73
- - - ! '>='
73
+ - - '='
74
74
  - !ruby/object:Gem::Version
75
- version: '0'
75
+ version: 0.5.8
76
76
  type: :runtime
77
77
  prerelease: false
78
78
  version_requirements: !ruby/object:Gem::Requirement
79
79
  requirements:
80
- - - ! '>='
80
+ - - '='
81
81
  - !ruby/object:Gem::Version
82
- version: '0'
82
+ version: 0.5.8
83
83
  - !ruby/object:Gem::Dependency
84
- name: awesome_print
84
+ name: arachni-rpc
85
85
  requirement: !ruby/object:Gem::Requirement
86
86
  requirements:
87
- - - ! '>='
87
+ - - '='
88
88
  - !ruby/object:Gem::Version
89
- version: '0'
89
+ version: 0.2.0
90
90
  type: :runtime
91
91
  prerelease: false
92
92
  version_requirements: !ruby/object:Gem::Requirement
93
93
  requirements:
94
- - - ! '>='
94
+ - - '='
95
95
  - !ruby/object:Gem::Version
96
- version: '0'
96
+ version: 0.2.0
97
97
  - !ruby/object:Gem::Dependency
98
- name: json
98
+ name: typhoeus
99
99
  requirement: !ruby/object:Gem::Requirement
100
100
  requirements:
101
- - - ! '>='
101
+ - - '='
102
102
  - !ruby/object:Gem::Version
103
- version: '0'
103
+ version: 0.6.9
104
104
  type: :runtime
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
- - - ! '>='
108
+ - - '='
109
109
  - !ruby/object:Gem::Version
110
- version: '0'
110
+ version: 0.6.9
111
111
  - !ruby/object:Gem::Dependency
112
- name: rb-readline
112
+ name: addressable
113
113
  requirement: !ruby/object:Gem::Requirement
114
114
  requirements:
115
- - - ! '>='
115
+ - - '='
116
116
  - !ruby/object:Gem::Version
117
- version: '0'
117
+ version: 2.3.6
118
118
  type: :runtime
119
119
  prerelease: false
120
120
  version_requirements: !ruby/object:Gem::Requirement
121
121
  requirements:
122
- - - ! '>='
122
+ - - '='
123
123
  - !ruby/object:Gem::Version
124
- version: '0'
124
+ version: 2.3.6
125
125
  - !ruby/object:Gem::Dependency
126
- name: nokogiri
126
+ name: pony
127
127
  requirement: !ruby/object:Gem::Requirement
128
128
  requirements:
129
- - - ! '>='
129
+ - - '='
130
130
  - !ruby/object:Gem::Version
131
- version: 1.5.7.rc1
131
+ version: '1.8'
132
132
  type: :runtime
133
133
  prerelease: false
134
134
  version_requirements: !ruby/object:Gem::Requirement
135
135
  requirements:
136
- - - ! '>='
136
+ - - '='
137
137
  - !ruby/object:Gem::Version
138
- version: 1.5.7.rc1
138
+ version: '1.8'
139
139
  - !ruby/object:Gem::Dependency
140
- name: sys-proctable
140
+ name: awesome_print
141
141
  requirement: !ruby/object:Gem::Requirement
142
142
  requirements:
143
- - - ! '>='
143
+ - - '='
144
144
  - !ruby/object:Gem::Version
145
- version: 0.9.1
145
+ version: 1.2.0
146
146
  type: :runtime
147
147
  prerelease: false
148
148
  version_requirements: !ruby/object:Gem::Requirement
149
149
  requirements:
150
- - - ! '>='
150
+ - - '='
151
151
  - !ruby/object:Gem::Version
152
- version: 0.9.1
152
+ version: 1.2.0
153
153
  - !ruby/object:Gem::Dependency
154
- name: terminal-table
154
+ name: json
155
155
  requirement: !ruby/object:Gem::Requirement
156
156
  requirements:
157
- - - ! '>='
157
+ - - '='
158
158
  - !ruby/object:Gem::Version
159
- version: 1.4.2
159
+ version: 1.8.1
160
160
  type: :runtime
161
161
  prerelease: false
162
162
  version_requirements: !ruby/object:Gem::Requirement
163
163
  requirements:
164
- - - ! '>='
164
+ - - '='
165
165
  - !ruby/object:Gem::Version
166
- version: 1.4.2
166
+ version: 1.8.1
167
167
  - !ruby/object:Gem::Dependency
168
- name: highline
168
+ name: rb-readline
169
169
  requirement: !ruby/object:Gem::Requirement
170
170
  requirements:
171
- - - ! '>='
171
+ - - '='
172
172
  - !ruby/object:Gem::Version
173
- version: '0'
173
+ version: 0.5.1
174
174
  type: :runtime
175
175
  prerelease: false
176
176
  version_requirements: !ruby/object:Gem::Requirement
177
177
  requirements:
178
- - - ! '>='
178
+ - - '='
179
179
  - !ruby/object:Gem::Version
180
- version: '0'
180
+ version: 0.5.1
181
181
  - !ruby/object:Gem::Dependency
182
- name: rake
182
+ name: nokogiri
183
183
  requirement: !ruby/object:Gem::Requirement
184
184
  requirements:
185
- - - ! '>='
185
+ - - '='
186
186
  - !ruby/object:Gem::Version
187
- version: '0'
188
- type: :development
187
+ version: 1.6.2.1
188
+ type: :runtime
189
189
  prerelease: false
190
190
  version_requirements: !ruby/object:Gem::Requirement
191
191
  requirements:
192
- - - ! '>='
192
+ - - '='
193
193
  - !ruby/object:Gem::Version
194
- version: '0'
194
+ version: 1.6.2.1
195
195
  - !ruby/object:Gem::Dependency
196
- name: rspec
196
+ name: terminal-table
197
197
  requirement: !ruby/object:Gem::Requirement
198
198
  requirements:
199
- - - ! '>='
199
+ - - '='
200
200
  - !ruby/object:Gem::Version
201
- version: '0'
202
- type: :development
201
+ version: 1.4.5
202
+ type: :runtime
203
203
  prerelease: false
204
204
  version_requirements: !ruby/object:Gem::Requirement
205
205
  requirements:
206
- - - ! '>='
206
+ - - '='
207
207
  - !ruby/object:Gem::Version
208
- version: '0'
208
+ version: 1.4.5
209
209
  - !ruby/object:Gem::Dependency
210
- name: thin
210
+ name: watir-webdriver
211
211
  requirement: !ruby/object:Gem::Requirement
212
212
  requirements:
213
- - - ! '>='
213
+ - - '='
214
214
  - !ruby/object:Gem::Version
215
- version: '0'
216
- type: :development
215
+ version: 0.6.9
216
+ type: :runtime
217
217
  prerelease: false
218
218
  version_requirements: !ruby/object:Gem::Requirement
219
219
  requirements:
220
- - - ! '>='
220
+ - - '='
221
221
  - !ruby/object:Gem::Version
222
- version: '0'
222
+ version: 0.6.9
223
223
  - !ruby/object:Gem::Dependency
224
- name: sinatra
224
+ name: kramdown
225
225
  requirement: !ruby/object:Gem::Requirement
226
226
  requirements:
227
- - - ~>
227
+ - - '='
228
228
  - !ruby/object:Gem::Version
229
- version: 1.3.2
230
- type: :development
229
+ version: 1.4.1
230
+ type: :runtime
231
231
  prerelease: false
232
232
  version_requirements: !ruby/object:Gem::Requirement
233
233
  requirements:
234
- - - ~>
234
+ - - '='
235
235
  - !ruby/object:Gem::Version
236
- version: 1.3.2
236
+ version: 1.4.1
237
237
  - !ruby/object:Gem::Dependency
238
- name: sinatra-contrib
238
+ name: loofah
239
239
  requirement: !ruby/object:Gem::Requirement
240
240
  requirements:
241
- - - ~>
241
+ - - '='
242
242
  - !ruby/object:Gem::Version
243
- version: 1.3.1
244
- type: :development
243
+ version: 2.0.0
244
+ type: :runtime
245
245
  prerelease: false
246
246
  version_requirements: !ruby/object:Gem::Requirement
247
247
  requirements:
248
- - - ~>
248
+ - - '='
249
249
  - !ruby/object:Gem::Version
250
- version: 1.3.1
251
- description: ! 'Arachni is an Open Source, feature-full, modular, high-performance
252
- Ruby framework
253
-
250
+ version: 2.0.0
251
+ description: |
252
+ Arachni is an Open Source, feature-full, modular, high-performance Ruby framework
254
253
  aimed towards helping penetration testers and administrators evaluate the security
255
-
256
254
  of web applications.
257
255
 
258
-
259
- It is smart, it trains itself by learning from the HTTP responses it receives
260
-
261
- during the audit process and is able to perform meta-analysis using a number of
262
-
256
+ It is smart, it trains itself by monitoring and learning from the web application's
257
+ behavior during the scan process and is able to perform meta-analysis using a number of
263
258
  factors in order to correctly assess the trustworthiness of results and intelligently
264
-
265
- identify false-positives.
266
-
259
+ identify (or avoid) false-positives.
267
260
 
268
261
  Unlike other scanners, it takes into account the dynamic nature of web applications,
269
-
270
262
  can detect changes caused while travelling through the paths of a web application’s
263
+ cyclomatic complexity and is able to adjust itself accordingly. This way, attack/input
264
+ vectors that would otherwise be undetectable by non-humans can be handled seamlessly.
271
265
 
272
- cyclomatic complexity and is able to adjust itself accordingly. This way attack/input
273
-
274
- vectors that would otherwise be undetectable by non-humans are seamlessly handled
275
- by Arachni.
276
-
277
-
278
- Moreover, Arachni yields great performance due to its asynchronous HTTP model
279
-
280
- (courtesy of Typhoeus) — especially when combined with a High Performance Grid
281
-
282
- setup which allows you to combine the resources of multiple nodes for lightning
283
-
284
- fast scans. Thus, you’ll only be limited by the responsiveness of the server under
285
- audit.
286
-
266
+ Moreover, due to its integrated browser environment, it can also audit and inspect
267
+ client-side code, as well as support highly complicated web applications which make
268
+ heavy use of technologies such as JavaScript, HTML5, DOM manipulation and AJAX.
287
269
 
288
270
  Finally, it is versatile enough to cover a great deal of use cases, ranging from
289
-
290
271
  a simple command line scanner utility, to a global high performance grid of
291
-
292
272
  scanners, to a Ruby library allowing for scripted audits, to a multi-user
293
-
294
273
  multi-scan web collaboration platform.
295
-
296
-
297
- **Note**: Despite the fact that Arachni is mostly targeted towards web application
298
-
299
- security, it can easily be used for general purpose scraping, data-mining, etc
300
-
301
- with the addition of custom modules.
302
-
303
- '
304
- email: tasos.laskos@gmail.com
274
+ email: tasos.laskos@arachni-scanner.com
305
275
  executables:
306
276
  - arachni
307
277
  - arachni_rpcd_monitor
@@ -310,6 +280,8 @@ executables:
310
280
  - arachni_console
311
281
  - arachni_script
312
282
  - arachni_multi
283
+ - arachni_reporter
284
+ - arachni_restore
313
285
  extensions: []
314
286
  extra_rdoc_files:
315
287
  - README.md
@@ -318,115 +290,393 @@ extra_rdoc_files:
318
290
  - AUTHORS.md
319
291
  - CHANGELOG.md
320
292
  - CONTRIBUTORS.md
321
- - EXPLOITATION.md
322
- - HACKING.md
323
- - NOTICE
324
293
  files:
325
294
  - ACKNOWLEDGMENTS.md
326
295
  - AUTHORS.md
327
296
  - CHANGELOG.md
328
297
  - CONTRIBUTORS.md
329
- - EXPLOITATION.md
330
298
  - Gemfile
331
- - HACKING.md
332
299
  - LICENSE.md
333
- - NOTICE
334
300
  - README.md
335
301
  - Rakefile
336
302
  - arachni.gemspec
337
303
  - bin/arachni
338
304
  - bin/arachni_console
339
305
  - bin/arachni_multi
306
+ - bin/arachni_reporter
307
+ - bin/arachni_restore
340
308
  - bin/arachni_rpc
341
309
  - bin/arachni_rpcd
342
310
  - bin/arachni_rpcd_monitor
343
311
  - bin/arachni_script
344
- - data/crypto/public.pem
345
- - external/metasploit/LICENSE
346
- - external/metasploit/plugins/arachni.rb
347
- - external/metasploit/plugins/arachni/modules/auxiliary/arachni_sqlmap.rb
348
- - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_exec.rb
349
- - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_path_traversal.rb
350
- - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_eval.rb
351
- - external/metasploit/plugins/arachni/modules/exploits/unix/webapp/arachni_php_include.rb
352
- - extras/placeholder
353
- - fingerprinters/frameworks/rack.rb
354
- - fingerprinters/languages/asp.rb
355
- - fingerprinters/languages/aspx.rb
356
- - fingerprinters/languages/jsp.rb
357
- - fingerprinters/languages/php.rb
358
- - fingerprinters/languages/python.rb
359
- - fingerprinters/languages/ruby.rb
360
- - fingerprinters/os/bsd.rb
361
- - fingerprinters/os/linux.rb
362
- - fingerprinters/os/solaris.rb
363
- - fingerprinters/os/unix.rb
364
- - fingerprinters/os/windows.rb
365
- - fingerprinters/servers/apache.rb
366
- - fingerprinters/servers/iis.rb
367
- - fingerprinters/servers/jetty.rb
368
- - fingerprinters/servers/nginx.rb
369
- - fingerprinters/servers/tomcat.rb
370
- - gfx/README.md
371
- - gfx/compiled/banner.png
372
- - gfx/compiled/favicon.ico
373
- - gfx/compiled/icon.png
374
- - gfx/compiled/logo.png
375
- - gfx/compiled/spider.png
376
- - gfx/font/Beneath_the_Surface.ttf
377
- - gfx/font/bts_readme.txt
378
- - gfx/source/banner.svg
379
- - gfx/source/icon.svg
380
- - gfx/source/logo.svg
381
- - gfx/source/spider.png
382
- - gfx/source/spider.svg
312
+ - components/checks/active/code_injection.rb
313
+ - components/checks/active/code_injection_php_input_wrapper.rb
314
+ - components/checks/active/code_injection_timing.rb
315
+ - components/checks/active/csrf.rb
316
+ - components/checks/active/file_inclusion.rb
317
+ - components/checks/active/ldap_injection.rb
318
+ - components/checks/active/ldap_injection/errors.txt
319
+ - components/checks/active/no_sql_injection.rb
320
+ - components/checks/active/no_sql_injection/patterns/mongodb
321
+ - components/checks/active/no_sql_injection/regexp_ignore.txt
322
+ - components/checks/active/no_sql_injection_differential.rb
323
+ - components/checks/active/os_cmd_injection.rb
324
+ - components/checks/active/os_cmd_injection_timing.rb
325
+ - components/checks/active/path_traversal.rb
326
+ - components/checks/active/response_splitting.rb
327
+ - components/checks/active/rfi.rb
328
+ - components/checks/active/session_fixation.rb
329
+ - components/checks/active/source_code_disclosure.rb
330
+ - components/checks/active/sql_injection.rb
331
+ - components/checks/active/sql_injection/patterns/access
332
+ - components/checks/active/sql_injection/patterns/coldfusion
333
+ - components/checks/active/sql_injection/patterns/db2
334
+ - components/checks/active/sql_injection/patterns/emc
335
+ - components/checks/active/sql_injection/patterns/firebird
336
+ - components/checks/active/sql_injection/patterns/frontbase
337
+ - components/checks/active/sql_injection/patterns/hsqldb
338
+ - components/checks/active/sql_injection/patterns/informix
339
+ - components/checks/active/sql_injection/patterns/ingres
340
+ - components/checks/active/sql_injection/patterns/interbase
341
+ - components/checks/active/sql_injection/patterns/maxdb
342
+ - components/checks/active/sql_injection/patterns/mssql
343
+ - components/checks/active/sql_injection/patterns/mysql
344
+ - components/checks/active/sql_injection/patterns/oracle
345
+ - components/checks/active/sql_injection/patterns/pgsql
346
+ - components/checks/active/sql_injection/patterns/sqlite
347
+ - components/checks/active/sql_injection/patterns/sybase
348
+ - components/checks/active/sql_injection/regexp_ignore.txt
349
+ - components/checks/active/sql_injection_differential.rb
350
+ - components/checks/active/sql_injection_differential/payloads.txt
351
+ - components/checks/active/sql_injection_timing.rb
352
+ - components/checks/active/sql_injection_timing/mssql.txt
353
+ - components/checks/active/sql_injection_timing/mysql.txt
354
+ - components/checks/active/sql_injection_timing/pgsql.txt
355
+ - components/checks/active/trainer.rb
356
+ - components/checks/active/unvalidated_redirect.rb
357
+ - components/checks/active/xpath_injection.rb
358
+ - components/checks/active/xpath_injection/errors.txt
359
+ - components/checks/active/xss.rb
360
+ - components/checks/active/xss_dom.rb
361
+ - components/checks/active/xss_dom_inputs.rb
362
+ - components/checks/active/xss_dom_script_context.rb
363
+ - components/checks/active/xss_event.rb
364
+ - components/checks/active/xss_path.rb
365
+ - components/checks/active/xss_script_context.rb
366
+ - components/checks/active/xss_tag.rb
367
+ - components/checks/passive/allowed_methods.rb
368
+ - components/checks/passive/backdoors.rb
369
+ - components/checks/passive/backdoors/filenames.txt
370
+ - components/checks/passive/backup_directories.rb
371
+ - components/checks/passive/backup_directories/formats.txt
372
+ - components/checks/passive/backup_files.rb
373
+ - components/checks/passive/backup_files/formats.txt
374
+ - components/checks/passive/common_directories.rb
375
+ - components/checks/passive/common_directories/directories.txt
376
+ - components/checks/passive/common_files.rb
377
+ - components/checks/passive/common_files/filenames.txt
378
+ - components/checks/passive/directory_listing.rb
379
+ - components/checks/passive/grep/captcha.rb
380
+ - components/checks/passive/grep/cookie_set_for_parent_domain.rb
381
+ - components/checks/passive/grep/credit_card.rb
382
+ - components/checks/passive/grep/cvs_svn_users.rb
383
+ - components/checks/passive/grep/emails.rb
384
+ - components/checks/passive/grep/form_upload.rb
385
+ - components/checks/passive/grep/hsts.rb
386
+ - components/checks/passive/grep/html_objects.rb
387
+ - components/checks/passive/grep/http_only_cookies.rb
388
+ - components/checks/passive/grep/insecure_cookies.rb
389
+ - components/checks/passive/grep/mixed_resource.rb
390
+ - components/checks/passive/grep/password_autocomplete.rb
391
+ - components/checks/passive/grep/private_ip.rb
392
+ - components/checks/passive/grep/ssn.rb
393
+ - components/checks/passive/grep/unencrypted_password_forms.rb
394
+ - components/checks/passive/htaccess_limit.rb
395
+ - components/checks/passive/http_put.rb
396
+ - components/checks/passive/interesting_responses.rb
397
+ - components/checks/passive/localstart_asp.rb
398
+ - components/checks/passive/origin_spoof_access_restriction_bypass.rb
399
+ - components/checks/passive/webdav.rb
400
+ - components/checks/passive/xst.rb
401
+ - components/fingerprinters/frameworks/rack.rb
402
+ - components/fingerprinters/languages/asp.rb
403
+ - components/fingerprinters/languages/aspx.rb
404
+ - components/fingerprinters/languages/jsp.rb
405
+ - components/fingerprinters/languages/php.rb
406
+ - components/fingerprinters/languages/python.rb
407
+ - components/fingerprinters/languages/ruby.rb
408
+ - components/fingerprinters/os/bsd.rb
409
+ - components/fingerprinters/os/linux.rb
410
+ - components/fingerprinters/os/solaris.rb
411
+ - components/fingerprinters/os/unix.rb
412
+ - components/fingerprinters/os/windows.rb
413
+ - components/fingerprinters/servers/apache.rb
414
+ - components/fingerprinters/servers/iis.rb
415
+ - components/fingerprinters/servers/jetty.rb
416
+ - components/fingerprinters/servers/nginx.rb
417
+ - components/fingerprinters/servers/tomcat.rb
418
+ - components/path_extractors/anchors.rb
419
+ - components/path_extractors/areas.rb
420
+ - components/path_extractors/comments.rb
421
+ - components/path_extractors/forms.rb
422
+ - components/path_extractors/frames.rb
423
+ - components/path_extractors/generic.rb
424
+ - components/path_extractors/links.rb
425
+ - components/path_extractors/meta_refresh.rb
426
+ - components/path_extractors/scripts.rb
427
+ - components/plugins/autologin.rb
428
+ - components/plugins/beep_notify.rb
429
+ - components/plugins/content_types.rb
430
+ - components/plugins/cookie_collector.rb
431
+ - components/plugins/defaults/autothrottle.rb
432
+ - components/plugins/defaults/healthmap.rb
433
+ - components/plugins/defaults/meta/remedies/discovery.rb
434
+ - components/plugins/defaults/meta/remedies/timing_attacks.rb
435
+ - components/plugins/defaults/meta/uniformity.rb
436
+ - components/plugins/email_notify.rb
437
+ - components/plugins/form_dicattack.rb
438
+ - components/plugins/http_dicattack.rb
439
+ - components/plugins/proxy.rb
440
+ - components/plugins/proxy/panel/403_forbidden.html.erb
441
+ - components/plugins/proxy/panel/404_not_found.html.erb
442
+ - components/plugins/proxy/panel/css/bootstrap-responsive.css
443
+ - components/plugins/proxy/panel/css/bootstrap.min.css
444
+ - components/plugins/proxy/panel/css/panel.css
445
+ - components/plugins/proxy/panel/help.html.erb
446
+ - components/plugins/proxy/panel/img/glyphicons-halflings-white.png
447
+ - components/plugins/proxy/panel/img/glyphicons-halflings.png
448
+ - components/plugins/proxy/panel/img/record.png
449
+ - components/plugins/proxy/panel/inspect.html.erb
450
+ - components/plugins/proxy/panel/js/bootstrap.min.js
451
+ - components/plugins/proxy/panel/js/jquery.min.js
452
+ - components/plugins/proxy/panel/js/panel.js
453
+ - components/plugins/proxy/panel/layout.html.erb
454
+ - components/plugins/proxy/panel/page_accordion.html.erb
455
+ - components/plugins/proxy/panel/page_twin_accordion.html.erb
456
+ - components/plugins/proxy/panel/panel.html.erb
457
+ - components/plugins/proxy/panel/shutdown_message.html.erb
458
+ - components/plugins/proxy/panel/sign_in.html.erb
459
+ - components/plugins/proxy/panel/vectors.yml.erb
460
+ - components/plugins/proxy/panel/verify_login_check.html.erb
461
+ - components/plugins/proxy/panel/verify_login_final.html.erb
462
+ - components/plugins/proxy/panel/verify_login_sequence.html.erb
463
+ - components/plugins/proxy/template_scope.rb
464
+ - components/plugins/script.rb
465
+ - components/plugins/uncommon_headers.rb
466
+ - components/plugins/vector_feed.rb
467
+ - components/plugins/waf_detector.rb
468
+ - components/reporters/ap.rb
469
+ - components/reporters/html.rb
470
+ - components/reporters/html/default.erb
471
+ - components/reporters/html/default/configuration.erb
472
+ - components/reporters/html/default/css/lib/bootstrap-theme.min.css
473
+ - components/reporters/html/default/css/lib/bootstrap.min.css
474
+ - components/reporters/html/default/css/lib/c3.css
475
+ - components/reporters/html/default/css/lib/font-awesome.min.css
476
+ - components/reporters/html/default/css/main.css
477
+ - components/reporters/html/default/fonts/FontAwesome.otf
478
+ - components/reporters/html/default/fonts/fontawesome-webfont.eot
479
+ - components/reporters/html/default/fonts/fontawesome-webfont.svg
480
+ - components/reporters/html/default/fonts/fontawesome-webfont.ttf
481
+ - components/reporters/html/default/fonts/fontawesome-webfont.woff
482
+ - components/reporters/html/default/fonts/glyphicons-halflings-regular.eot
483
+ - components/reporters/html/default/fonts/glyphicons-halflings-regular.svg
484
+ - components/reporters/html/default/fonts/glyphicons-halflings-regular.ttf
485
+ - components/reporters/html/default/fonts/glyphicons-halflings-regular.woff
486
+ - components/reporters/html/default/issue.erb
487
+ - components/reporters/html/default/issue/details.erb
488
+ - components/reporters/html/default/issue/info.erb
489
+ - components/reporters/html/default/issue/page.erb
490
+ - components/reporters/html/default/issue/page/body.erb
491
+ - components/reporters/html/default/issue/page/sink/data_flow.erb
492
+ - components/reporters/html/default/issue/page/sink/data_flow/arguments.erb
493
+ - components/reporters/html/default/issue/page/sink/data_flow/source.erb
494
+ - components/reporters/html/default/issue/page/sink/execution_flow.erb
495
+ - components/reporters/html/default/issue/page/sink/frame/source.erb
496
+ - components/reporters/html/default/issue/page/sink/trace/table.erb
497
+ - components/reporters/html/default/issue/page/transitions.erb
498
+ - components/reporters/html/default/issue/platform.erb
499
+ - components/reporters/html/default/issue/remarks.erb
500
+ - components/reporters/html/default/issue/vector.erb
501
+ - components/reporters/html/default/issues.erb
502
+ - components/reporters/html/default/issues/grouped.erb
503
+ - components/reporters/html/default/js/charts.js.erb
504
+ - components/reporters/html/default/js/configuration.js.erb
505
+ - components/reporters/html/default/js/helpers.js
506
+ - components/reporters/html/default/js/init.js.erb
507
+ - components/reporters/html/default/js/lib/bootstrap.min.js
508
+ - components/reporters/html/default/js/lib/c3.min.js
509
+ - components/reporters/html/default/js/lib/d3.min.js
510
+ - components/reporters/html/default/js/lib/jquery.min.js
511
+ - components/reporters/html/default/navigation.erb
512
+ - components/reporters/html/default/plugins.erb
513
+ - components/reporters/html/default/shared/hash.erb
514
+ - components/reporters/html/default/shared/hash_table.erb
515
+ - components/reporters/html/default/sitemap.erb
516
+ - components/reporters/html/default/summary.erb
517
+ - components/reporters/html/default/summary/charts.erb
518
+ - components/reporters/html/default/summary/issues.erb
519
+ - components/reporters/json.rb
520
+ - components/reporters/marshal.rb
521
+ - components/reporters/plugin_formatters/html/autologin.rb
522
+ - components/reporters/plugin_formatters/html/content_types.rb
523
+ - components/reporters/plugin_formatters/html/cookie_collector.rb
524
+ - components/reporters/plugin_formatters/html/form_dicattack.rb
525
+ - components/reporters/plugin_formatters/html/healthmap.rb
526
+ - components/reporters/plugin_formatters/html/http_dicattack.rb
527
+ - components/reporters/plugin_formatters/html/uncommon_headers.rb
528
+ - components/reporters/plugin_formatters/html/uniformity.rb
529
+ - components/reporters/plugin_formatters/html/waf_detector.rb
530
+ - components/reporters/plugin_formatters/stdout/autologin.rb
531
+ - components/reporters/plugin_formatters/stdout/content_types.rb
532
+ - components/reporters/plugin_formatters/stdout/cookie_collector.rb
533
+ - components/reporters/plugin_formatters/stdout/form_dicattack.rb
534
+ - components/reporters/plugin_formatters/stdout/healthmap.rb
535
+ - components/reporters/plugin_formatters/stdout/http_dicattack.rb
536
+ - components/reporters/plugin_formatters/stdout/uncommon_headers.rb
537
+ - components/reporters/plugin_formatters/stdout/uniformity.rb
538
+ - components/reporters/plugin_formatters/stdout/waf_detector.rb
539
+ - components/reporters/plugin_formatters/xml/autologin.rb
540
+ - components/reporters/plugin_formatters/xml/content_types.rb
541
+ - components/reporters/plugin_formatters/xml/cookie_collector.rb
542
+ - components/reporters/plugin_formatters/xml/form_dicattack.rb
543
+ - components/reporters/plugin_formatters/xml/healthmap.rb
544
+ - components/reporters/plugin_formatters/xml/http_dicattack.rb
545
+ - components/reporters/plugin_formatters/xml/uncommon_headers.rb
546
+ - components/reporters/plugin_formatters/xml/uniformity.rb
547
+ - components/reporters/plugin_formatters/xml/waf_detector.rb
548
+ - components/reporters/stdout.rb
549
+ - components/reporters/txt.rb
550
+ - components/reporters/xml.rb
551
+ - components/reporters/xml/schema.xsd
552
+ - components/reporters/yaml.rb
553
+ - components/services/placeholder
383
554
  - lib/arachni.rb
384
- - lib/arachni/audit_store.rb
385
555
  - lib/arachni/banner.rb
556
+ - lib/arachni/browser.rb
557
+ - lib/arachni/browser/element_locator.rb
558
+ - lib/arachni/browser/javascript.rb
559
+ - lib/arachni/browser/javascript/dom_monitor.rb
560
+ - lib/arachni/browser/javascript/proxy.rb
561
+ - lib/arachni/browser/javascript/proxy/stub.rb
562
+ - lib/arachni/browser/javascript/scripts/dom_monitor.js
563
+ - lib/arachni/browser/javascript/scripts/taint_tracer.js
564
+ - lib/arachni/browser/javascript/taint_tracer.rb
565
+ - lib/arachni/browser/javascript/taint_tracer/frame.rb
566
+ - lib/arachni/browser/javascript/taint_tracer/frame/called_function.rb
567
+ - lib/arachni/browser/javascript/taint_tracer/sink/base.rb
568
+ - lib/arachni/browser/javascript/taint_tracer/sink/data_flow.rb
569
+ - lib/arachni/browser/javascript/taint_tracer/sink/execution_flow.rb
570
+ - lib/arachni/browser_cluster.rb
571
+ - lib/arachni/browser_cluster/job.rb
572
+ - lib/arachni/browser_cluster/job/result.rb
573
+ - lib/arachni/browser_cluster/jobs/browser_provider.rb
574
+ - lib/arachni/browser_cluster/jobs/resource_exploration.rb
575
+ - lib/arachni/browser_cluster/jobs/resource_exploration/event_trigger.rb
576
+ - lib/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result.rb
577
+ - lib/arachni/browser_cluster/jobs/resource_exploration/result.rb
578
+ - lib/arachni/browser_cluster/jobs/taint_trace.rb
579
+ - lib/arachni/browser_cluster/jobs/taint_trace/event_trigger.rb
580
+ - lib/arachni/browser_cluster/jobs/taint_trace/event_trigger/result.rb
581
+ - lib/arachni/browser_cluster/jobs/taint_trace/result.rb
582
+ - lib/arachni/browser_cluster/worker.rb
583
+ - lib/arachni/check.rb
584
+ - lib/arachni/check/auditor.rb
585
+ - lib/arachni/check/base.rb
586
+ - lib/arachni/check/manager.rb
587
+ - lib/arachni/component.rb
588
+ - lib/arachni/component/base.rb
386
589
  - lib/arachni/component/manager.rb
387
590
  - lib/arachni/component/options.rb
388
591
  - lib/arachni/component/options/address.rb
389
592
  - lib/arachni/component/options/base.rb
390
593
  - lib/arachni/component/options/bool.rb
391
- - lib/arachni/component/options/enum.rb
392
594
  - lib/arachni/component/options/float.rb
393
595
  - lib/arachni/component/options/int.rb
596
+ - lib/arachni/component/options/multiple_choice.rb
597
+ - lib/arachni/component/options/object.rb
394
598
  - lib/arachni/component/options/path.rb
395
599
  - lib/arachni/component/options/port.rb
396
600
  - lib/arachni/component/options/string.rb
397
601
  - lib/arachni/component/options/url.rb
602
+ - lib/arachni/component/output.rb
603
+ - lib/arachni/component/utilities.rb
604
+ - lib/arachni/data.rb
605
+ - lib/arachni/data/framework.rb
606
+ - lib/arachni/data/framework/rpc.rb
607
+ - lib/arachni/data/issues.rb
608
+ - lib/arachni/data/plugins.rb
609
+ - lib/arachni/data/session.rb
398
610
  - lib/arachni/element/base.rb
399
611
  - lib/arachni/element/body.rb
612
+ - lib/arachni/element/capabilities/analyzable.rb
613
+ - lib/arachni/element/capabilities/analyzable/differential.rb
614
+ - lib/arachni/element/capabilities/analyzable/taint.rb
615
+ - lib/arachni/element/capabilities/analyzable/timeout.rb
400
616
  - lib/arachni/element/capabilities/auditable.rb
401
- - lib/arachni/element/capabilities/auditable/rdiff.rb
402
- - lib/arachni/element/capabilities/auditable/taint.rb
403
- - lib/arachni/element/capabilities/auditable/timeout.rb
617
+ - lib/arachni/element/capabilities/auditable/dom.rb
618
+ - lib/arachni/element/capabilities/inputtable.rb
404
619
  - lib/arachni/element/capabilities/mutable.rb
405
620
  - lib/arachni/element/capabilities/refreshable.rb
621
+ - lib/arachni/element/capabilities/submittable.rb
622
+ - lib/arachni/element/capabilities/with_auditor.rb
623
+ - lib/arachni/element/capabilities/with_auditor/output.rb
624
+ - lib/arachni/element/capabilities/with_dom.rb
625
+ - lib/arachni/element/capabilities/with_node.rb
626
+ - lib/arachni/element/capabilities/with_scope.rb
627
+ - lib/arachni/element/capabilities/with_scope/scope.rb
406
628
  - lib/arachni/element/cookie.rb
629
+ - lib/arachni/element/cookie/dom.rb
407
630
  - lib/arachni/element/form.rb
631
+ - lib/arachni/element/form/dom.rb
632
+ - lib/arachni/element/generic_dom.rb
408
633
  - lib/arachni/element/header.rb
409
634
  - lib/arachni/element/link.rb
635
+ - lib/arachni/element/link/dom.rb
636
+ - lib/arachni/element/link_template.rb
637
+ - lib/arachni/element/link_template/dom.rb
410
638
  - lib/arachni/element/path.rb
411
639
  - lib/arachni/element/server.rb
412
640
  - lib/arachni/element_filter.rb
413
641
  - lib/arachni/error.rb
642
+ - lib/arachni/ethon/easy.rb
414
643
  - lib/arachni/framework.rb
415
644
  - lib/arachni/http.rb
645
+ - lib/arachni/http/client.rb
416
646
  - lib/arachni/http/cookie_jar.rb
647
+ - lib/arachni/http/headers.rb
648
+ - lib/arachni/http/message.rb
649
+ - lib/arachni/http/message/scope.rb
650
+ - lib/arachni/http/proxy_server.rb
651
+ - lib/arachni/http/proxy_server/ssl-interceptor-cert.pem
652
+ - lib/arachni/http/proxy_server/ssl-interceptor-pkey.pem
653
+ - lib/arachni/http/request.rb
654
+ - lib/arachni/http/request/scope.rb
655
+ - lib/arachni/http/response.rb
656
+ - lib/arachni/http/response/scope.rb
417
657
  - lib/arachni/issue.rb
418
- - lib/arachni/mixins/observable.rb
419
- - lib/arachni/mixins/progress_bar.rb
420
- - lib/arachni/mixins/terminal.rb
421
- - lib/arachni/module.rb
422
- - lib/arachni/module/auditor.rb
423
- - lib/arachni/module/base.rb
424
- - lib/arachni/module/manager.rb
425
- - lib/arachni/module/output.rb
426
- - lib/arachni/module/utilities.rb
658
+ - lib/arachni/issue/severity.rb
659
+ - lib/arachni/issue/severity/base.rb
427
660
  - lib/arachni/nokogiri/xml/node.rb
661
+ - lib/arachni/option_group.rb
662
+ - lib/arachni/option_groups.rb
663
+ - lib/arachni/option_groups/audit.rb
664
+ - lib/arachni/option_groups/browser_cluster.rb
665
+ - lib/arachni/option_groups/datastore.rb
666
+ - lib/arachni/option_groups/dispatcher.rb
667
+ - lib/arachni/option_groups/http.rb
668
+ - lib/arachni/option_groups/input.rb
669
+ - lib/arachni/option_groups/output.rb
670
+ - lib/arachni/option_groups/paths.rb
671
+ - lib/arachni/option_groups/rpc.rb
672
+ - lib/arachni/option_groups/scope.rb
673
+ - lib/arachni/option_groups/session.rb
674
+ - lib/arachni/option_groups/snapshot.rb
428
675
  - lib/arachni/options.rb
429
676
  - lib/arachni/page.rb
677
+ - lib/arachni/page/dom.rb
678
+ - lib/arachni/page/dom/transition.rb
679
+ - lib/arachni/page/scope.rb
430
680
  - lib/arachni/parser.rb
431
681
  - lib/arachni/platform.rb
432
682
  - lib/arachni/platform/fingerprinter.rb
@@ -434,9 +684,13 @@ files:
434
684
  - lib/arachni/platform/manager.rb
435
685
  - lib/arachni/plugin.rb
436
686
  - lib/arachni/plugin/base.rb
687
+ - lib/arachni/plugin/formatter.rb
437
688
  - lib/arachni/plugin/manager.rb
438
689
  - lib/arachni/processes.rb
439
690
  - lib/arachni/processes/dispatchers.rb
691
+ - lib/arachni/processes/executables/base.rb
692
+ - lib/arachni/processes/executables/dispatcher.rb
693
+ - lib/arachni/processes/executables/instance.rb
440
694
  - lib/arachni/processes/helpers.rb
441
695
  - lib/arachni/processes/helpers/dispatchers.rb
442
696
  - lib/arachni/processes/helpers/instances.rb
@@ -444,30 +698,34 @@ files:
444
698
  - lib/arachni/processes/instances.rb
445
699
  - lib/arachni/processes/manager.rb
446
700
  - lib/arachni/report.rb
447
- - lib/arachni/report/base.rb
448
- - lib/arachni/report/manager.rb
701
+ - lib/arachni/reporter.rb
702
+ - lib/arachni/reporter/base.rb
703
+ - lib/arachni/reporter/formatter_manager.rb
704
+ - lib/arachni/reporter/manager.rb
705
+ - lib/arachni/reporter/options.rb
449
706
  - lib/arachni/rpc/client.rb
450
707
  - lib/arachni/rpc/client/base.rb
451
708
  - lib/arachni/rpc/client/dispatcher.rb
452
709
  - lib/arachni/rpc/client/instance.rb
710
+ - lib/arachni/rpc/client/instance/framework.rb
711
+ - lib/arachni/rpc/client/instance/service.rb
712
+ - lib/arachni/rpc/serializer.rb
453
713
  - lib/arachni/rpc/server/active_options.rb
454
714
  - lib/arachni/rpc/server/base.rb
715
+ - lib/arachni/rpc/server/check/manager.rb
455
716
  - lib/arachni/rpc/server/dispatcher.rb
456
- - lib/arachni/rpc/server/dispatcher/handler.rb
457
717
  - lib/arachni/rpc/server/dispatcher/node.rb
718
+ - lib/arachni/rpc/server/dispatcher/service.rb
458
719
  - lib/arachni/rpc/server/framework.rb
459
720
  - lib/arachni/rpc/server/framework/distributor.rb
460
721
  - lib/arachni/rpc/server/framework/master.rb
461
722
  - lib/arachni/rpc/server/framework/multi_instance.rb
462
723
  - lib/arachni/rpc/server/framework/slave.rb
463
724
  - lib/arachni/rpc/server/instance.rb
464
- - lib/arachni/rpc/server/module/manager.rb
465
725
  - lib/arachni/rpc/server/output.rb
466
726
  - lib/arachni/rpc/server/plugin/manager.rb
467
- - lib/arachni/rpc/server/spider.rb
468
727
  - lib/arachni/ruby.rb
469
728
  - lib/arachni/ruby/array.rb
470
- - lib/arachni/ruby/enumerable.rb
471
729
  - lib/arachni/ruby/hash.rb
472
730
  - lib/arachni/ruby/io.rb
473
731
  - lib/arachni/ruby/object.rb
@@ -476,8 +734,18 @@ files:
476
734
  - lib/arachni/ruby/webrick.rb
477
735
  - lib/arachni/ruby/webrick/cookie.rb
478
736
  - lib/arachni/ruby/webrick/httprequest.rb
737
+ - lib/arachni/scope.rb
738
+ - lib/arachni/selenium/webdriver/remote/http/typhoeus.rb
479
739
  - lib/arachni/session.rb
480
- - lib/arachni/spider.rb
740
+ - lib/arachni/snapshot.rb
741
+ - lib/arachni/state.rb
742
+ - lib/arachni/state/audit.rb
743
+ - lib/arachni/state/element_filter.rb
744
+ - lib/arachni/state/framework.rb
745
+ - lib/arachni/state/framework/rpc.rb
746
+ - lib/arachni/state/http.rb
747
+ - lib/arachni/state/options.rb
748
+ - lib/arachni/state/plugins.rb
481
749
  - lib/arachni/support.rb
482
750
  - lib/arachni/support/buffer.rb
483
751
  - lib/arachni/support/buffer/autoflush.rb
@@ -494,317 +762,162 @@ files:
494
762
  - lib/arachni/support/database/base.rb
495
763
  - lib/arachni/support/database/hash.rb
496
764
  - lib/arachni/support/database/queue.rb
497
- - lib/arachni/support/key_filler.rb
498
765
  - lib/arachni/support/lookup.rb
499
766
  - lib/arachni/support/lookup/base.rb
500
767
  - lib/arachni/support/lookup/hash_set.rb
501
768
  - lib/arachni/support/lookup/moolb.rb
502
- - lib/arachni/support/queue.rb
503
- - lib/arachni/support/queue/disk.rb
769
+ - lib/arachni/support/mixins.rb
770
+ - lib/arachni/support/mixins/observable.rb
771
+ - lib/arachni/support/mixins/terminal.rb
772
+ - lib/arachni/support/profiler.rb
504
773
  - lib/arachni/support/signature.rb
505
774
  - lib/arachni/trainer.rb
506
- - lib/arachni/typhoeus/hydra.rb
507
- - lib/arachni/typhoeus/request.rb
508
- - lib/arachni/typhoeus/response.rb
509
- - lib/arachni/typhoeus/utils.rb
510
- - lib/arachni/ui/cli/cli.rb
511
- - lib/arachni/ui/cli/output.rb
512
- - lib/arachni/ui/cli/rpc/dispatcher_monitor.rb
513
- - lib/arachni/ui/cli/rpc/instance.rb
514
- - lib/arachni/ui/cli/rpc/local.rb
515
- - lib/arachni/ui/cli/rpc/remote.rb
516
- - lib/arachni/ui/cli/utilities.rb
517
775
  - lib/arachni/ui/foo/output.rb
518
776
  - lib/arachni/uri.rb
777
+ - lib/arachni/uri/scope.rb
519
778
  - lib/arachni/utilities.rb
520
779
  - lib/arachni/version.rb
780
+ - lib/arachni/watir/element.rb
521
781
  - lib/version
522
782
  - logs/placeholder
523
- - modules/audit/code_injection.rb
524
- - modules/audit/code_injection_php_input_wrapper.rb
525
- - modules/audit/code_injection_timing.rb
526
- - modules/audit/csrf.rb
527
- - modules/audit/file_inclusion.rb
528
- - modules/audit/ldapi.rb
529
- - modules/audit/ldapi/errors.txt
530
- - modules/audit/os_cmd_injection.rb
531
- - modules/audit/os_cmd_injection_timing.rb
532
- - modules/audit/path_traversal.rb
533
- - modules/audit/response_splitting.rb
534
- - modules/audit/rfi.rb
535
- - modules/audit/session_fixation.rb
536
- - modules/audit/source_code_disclosure.rb
537
- - modules/audit/sqli.rb
538
- - modules/audit/sqli/patterns/access
539
- - modules/audit/sqli/patterns/coldfusion
540
- - modules/audit/sqli/patterns/db2
541
- - modules/audit/sqli/patterns/emc
542
- - modules/audit/sqli/patterns/firebird
543
- - modules/audit/sqli/patterns/frontbase
544
- - modules/audit/sqli/patterns/hsqldb
545
- - modules/audit/sqli/patterns/informix
546
- - modules/audit/sqli/patterns/ingres
547
- - modules/audit/sqli/patterns/interbase
548
- - modules/audit/sqli/patterns/maxdb
549
- - modules/audit/sqli/patterns/mssql
550
- - modules/audit/sqli/patterns/mysql
551
- - modules/audit/sqli/patterns/oracle
552
- - modules/audit/sqli/patterns/pgsql
553
- - modules/audit/sqli/patterns/sqlite
554
- - modules/audit/sqli/patterns/sybase
555
- - modules/audit/sqli/regexp_ignore.txt
556
- - modules/audit/sqli_blind_rdiff.rb
557
- - modules/audit/sqli_blind_rdiff/payloads.txt
558
- - modules/audit/sqli_blind_timing.rb
559
- - modules/audit/sqli_blind_timing/mssql.txt
560
- - modules/audit/sqli_blind_timing/mysql.txt
561
- - modules/audit/sqli_blind_timing/pgsql.txt
562
- - modules/audit/trainer.rb
563
- - modules/audit/unvalidated_redirect.rb
564
- - modules/audit/xpath.rb
565
- - modules/audit/xpath/errors.txt
566
- - modules/audit/xss.rb
567
- - modules/audit/xss_event.rb
568
- - modules/audit/xss_path.rb
569
- - modules/audit/xss_script_tag.rb
570
- - modules/audit/xss_tag.rb
571
- - modules/recon/allowed_methods.rb
572
- - modules/recon/backdoors.rb
573
- - modules/recon/backdoors/filenames.txt
574
- - modules/recon/backup_files.rb
575
- - modules/recon/backup_files/extensions.txt
576
- - modules/recon/common_directories.rb
577
- - modules/recon/common_directories/directories.txt
578
- - modules/recon/common_files.rb
579
- - modules/recon/common_files/filenames.txt
580
- - modules/recon/directory_listing.rb
581
- - modules/recon/grep/captcha.rb
582
- - modules/recon/grep/credit_card.rb
583
- - modules/recon/grep/cvs_svn_users.rb
584
- - modules/recon/grep/emails.rb
585
- - modules/recon/grep/form_upload.rb
586
- - modules/recon/grep/html_objects.rb
587
- - modules/recon/grep/http_only_cookies.rb
588
- - modules/recon/grep/insecure_cookies.rb
589
- - modules/recon/grep/mixed_resource.rb
590
- - modules/recon/grep/password_autocomplete.rb
591
- - modules/recon/grep/private_ip.rb
592
- - modules/recon/grep/ssn.rb
593
- - modules/recon/grep/unencrypted_password_forms.rb
594
- - modules/recon/htaccess_limit.rb
595
- - modules/recon/http_put.rb
596
- - modules/recon/interesting_responses.rb
597
- - modules/recon/localstart_asp.rb
598
- - modules/recon/webdav.rb
599
- - modules/recon/x_forwarded_for_access_restriction_bypass.rb
600
- - modules/recon/xst.rb
601
- - path_extractors/anchors.rb
602
- - path_extractors/areas.rb
603
- - path_extractors/forms.rb
604
- - path_extractors/frames.rb
605
- - path_extractors/generic.rb
606
- - path_extractors/links.rb
607
- - path_extractors/meta_refresh.rb
608
- - path_extractors/scripts.rb
609
- - plugins/autologin.rb
610
- - plugins/beep_notify.rb
611
- - plugins/content_types.rb
612
- - plugins/cookie_collector.rb
613
- - plugins/defaults/autothrottle.rb
614
- - plugins/defaults/healthmap.rb
615
- - plugins/defaults/meta/remedies/discovery.rb
616
- - plugins/defaults/meta/remedies/timing_attacks.rb
617
- - plugins/defaults/meta/uniformity.rb
618
- - plugins/defaults/resolver.rb
619
- - plugins/email_notify.rb
620
- - plugins/form_dicattack.rb
621
- - plugins/http_dicattack.rb
622
- - plugins/libnotify.rb
623
- - plugins/profiler.rb
624
- - plugins/proxy.rb
625
- - plugins/proxy/panel/403_forbidden.html.erb
626
- - plugins/proxy/panel/404_not_found.html.erb
627
- - plugins/proxy/panel/css/bootstrap-responsive.css
628
- - plugins/proxy/panel/css/bootstrap.min.css
629
- - plugins/proxy/panel/css/panel.css
630
- - plugins/proxy/panel/help.html.erb
631
- - plugins/proxy/panel/img/glyphicons-halflings-white.png
632
- - plugins/proxy/panel/img/glyphicons-halflings.png
633
- - plugins/proxy/panel/img/record.png
634
- - plugins/proxy/panel/inspect.html.erb
635
- - plugins/proxy/panel/js/bootstrap.min.js
636
- - plugins/proxy/panel/js/jquery.min.js
637
- - plugins/proxy/panel/js/panel.js
638
- - plugins/proxy/panel/layout.html.erb
639
- - plugins/proxy/panel/page_accordion.html.erb
640
- - plugins/proxy/panel/page_twin_accordion.html.erb
641
- - plugins/proxy/panel/panel.html.erb
642
- - plugins/proxy/panel/shutdown_message.html.erb
643
- - plugins/proxy/panel/sign_in.html.erb
644
- - plugins/proxy/panel/vectors.yml.erb
645
- - plugins/proxy/panel/verify_login_check.html.erb
646
- - plugins/proxy/panel/verify_login_final.html.erb
647
- - plugins/proxy/panel/verify_login_sequence.html.erb
648
- - plugins/proxy/server.rb
649
- - plugins/proxy/ssl-interceptor-cert.pem
650
- - plugins/proxy/ssl-interceptor-pkey.pem
651
- - plugins/proxy/template_scope.rb
652
- - plugins/rescan.rb
653
- - plugins/script.rb
654
- - plugins/uncommon_headers.rb
655
- - plugins/vector_feed.rb
656
- - plugins/waf_detector.rb
657
- - profiles/full.afp
658
- - reports/afr.rb
659
- - reports/ap.rb
660
- - reports/html.rb
661
- - reports/html/default.erb
662
- - reports/html/default/configuration.erb
663
- - reports/html/default/css/jquery-ui.css
664
- - reports/html/default/css/jquery.jqplot.min.css
665
- - reports/html/default/css/main.css
666
- - reports/html/default/headers.erb
667
- - reports/html/default/issue.erb
668
- - reports/html/default/issues.erb
669
- - reports/html/default/js/charts.js
670
- - reports/html/default/js/helpers.js
671
- - reports/html/default/js/init.js
672
- - reports/html/default/js/lib/jqplot.barRenderer.min.js
673
- - reports/html/default/js/lib/jqplot.categoryAxisRenderer.min.js
674
- - reports/html/default/js/lib/jqplot.cursor.min.js
675
- - reports/html/default/js/lib/jqplot.pieRenderer.min.js
676
- - reports/html/default/js/lib/jqplot.pointLabels.min.js
677
- - reports/html/default/js/lib/jquery-ui.min.js
678
- - reports/html/default/js/lib/jquery.jqplot.min.js
679
- - reports/html/default/js/lib/jquery.min.js
680
- - reports/html/default/plugins.erb
681
- - reports/html/default/search.erb
682
- - reports/html/default/sitemap.erb
683
- - reports/html/default/summary.erb
684
- - reports/html/default/summary_issue.erb
685
- - reports/json.rb
686
- - reports/marshal.rb
687
- - reports/metareport.rb
688
- - reports/plugin_formatters/html/autologin.rb
689
- - reports/plugin_formatters/html/content_types.rb
690
- - reports/plugin_formatters/html/cookie_collector.rb
691
- - reports/plugin_formatters/html/discovery.rb
692
- - reports/plugin_formatters/html/form_dicattack.rb
693
- - reports/plugin_formatters/html/healthmap.rb
694
- - reports/plugin_formatters/html/http_dicattack.rb
695
- - reports/plugin_formatters/html/profiler.rb
696
- - reports/plugin_formatters/html/profiler/template.erb
697
- - reports/plugin_formatters/html/resolver.rb
698
- - reports/plugin_formatters/html/timing_attacks.rb
699
- - reports/plugin_formatters/html/uncommon_headers.rb
700
- - reports/plugin_formatters/html/uniformity.rb
701
- - reports/plugin_formatters/html/waf_detector.rb
702
- - reports/plugin_formatters/stdout/autologin.rb
703
- - reports/plugin_formatters/stdout/content_types.rb
704
- - reports/plugin_formatters/stdout/cookie_collector.rb
705
- - reports/plugin_formatters/stdout/discovery.rb
706
- - reports/plugin_formatters/stdout/form_dicattack.rb
707
- - reports/plugin_formatters/stdout/healthmap.rb
708
- - reports/plugin_formatters/stdout/http_dicattack.rb
709
- - reports/plugin_formatters/stdout/profiler.rb
710
- - reports/plugin_formatters/stdout/resolver.rb
711
- - reports/plugin_formatters/stdout/timing_attacks.rb
712
- - reports/plugin_formatters/stdout/uncommon_headers.rb
713
- - reports/plugin_formatters/stdout/uniformity.rb
714
- - reports/plugin_formatters/stdout/waf_detector.rb
715
- - reports/plugin_formatters/xml/autologin.rb
716
- - reports/plugin_formatters/xml/content_types.rb
717
- - reports/plugin_formatters/xml/cookie_collector.rb
718
- - reports/plugin_formatters/xml/discovery.rb
719
- - reports/plugin_formatters/xml/form_dicattack.rb
720
- - reports/plugin_formatters/xml/healthmap.rb
721
- - reports/plugin_formatters/xml/http_dicattack.rb
722
- - reports/plugin_formatters/xml/profiler.rb
723
- - reports/plugin_formatters/xml/resolver.rb
724
- - reports/plugin_formatters/xml/timing_attacks.rb
725
- - reports/plugin_formatters/xml/uncommon_headers.rb
726
- - reports/plugin_formatters/xml/uniformity.rb
727
- - reports/plugin_formatters/xml/waf_detector.rb
728
- - reports/stdout.rb
729
- - reports/txt.rb
730
- - reports/xml.rb
731
- - reports/xml/buffer.rb
732
- - reports/yaml.rb
733
- - rpcd_handlers/placeholder
734
- - spec/arachni/audit_store_spec.rb
783
+ - profiles/placeholder
784
+ - spec/arachni/browser/element_locator_spec.rb
785
+ - spec/arachni/browser/javascript/dom_monitor_spec.rb
786
+ - spec/arachni/browser/javascript/proxy/stub_spec.rb
787
+ - spec/arachni/browser/javascript/proxy_spec.rb
788
+ - spec/arachni/browser/javascript/taint_tracer/frame/called_function_spec.rb
789
+ - spec/arachni/browser/javascript/taint_tracer/frame_spec.rb
790
+ - spec/arachni/browser/javascript/taint_tracer/sink/data_flow_spec.rb
791
+ - spec/arachni/browser/javascript/taint_tracer/sink/execution_flow_spec.rb
792
+ - spec/arachni/browser/javascript/taint_tracer_spec.rb
793
+ - spec/arachni/browser/javascript_spec.rb
794
+ - spec/arachni/browser_cluster/job/result_spec.rb
795
+ - spec/arachni/browser_cluster/job_spec.rb
796
+ - spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result_spec.rb
797
+ - spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger_spec.rb
798
+ - spec/arachni/browser_cluster/jobs/resource_exploration/result_spec.rb
799
+ - spec/arachni/browser_cluster/jobs/resource_exploration_spec.rb
800
+ - spec/arachni/browser_cluster/jobs/taint_tracer_spec.rb
801
+ - spec/arachni/browser_cluster/worker_spec.rb
802
+ - spec/arachni/browser_cluster_spec.rb
803
+ - spec/arachni/browser_spec.rb
804
+ - spec/arachni/check/auditor_spec.rb
805
+ - spec/arachni/check/base_spec.rb
806
+ - spec/arachni/check/manager_spec.rb
807
+ - spec/arachni/component/base_spec.rb
735
808
  - spec/arachni/component/manager_spec.rb
736
809
  - spec/arachni/component/options/address_spec.rb
737
810
  - spec/arachni/component/options/base_spec.rb
738
811
  - spec/arachni/component/options/bool_spec.rb
739
- - spec/arachni/component/options/enum_spec.rb
740
812
  - spec/arachni/component/options/float_spec.rb
741
813
  - spec/arachni/component/options/int_spec.rb
814
+ - spec/arachni/component/options/multiple_choice_spec.rb
815
+ - spec/arachni/component/options/object_spec.rb
742
816
  - spec/arachni/component/options/path_spec.rb
743
817
  - spec/arachni/component/options/port_spec.rb
744
818
  - spec/arachni/component/options/string_spec.rb
745
819
  - spec/arachni/component/options/url_spec.rb
746
- - spec/arachni/element/base_spec.rb
820
+ - spec/arachni/component/utilities_spec.rb
821
+ - spec/arachni/component/utilities_spec/read_file.txt
822
+ - spec/arachni/data/framework/rpc_spec.rb
823
+ - spec/arachni/data/framework_spec.rb
824
+ - spec/arachni/data/issues_spec.rb
825
+ - spec/arachni/data/plugins_spec.rb
826
+ - spec/arachni/data/session_spec.rb
827
+ - spec/arachni/data_spec.rb
747
828
  - spec/arachni/element/body_spec.rb
748
- - spec/arachni/element/capabilities/auditable/rdiff_spec.rb
749
- - spec/arachni/element/capabilities/auditable/taint_spec.rb
750
- - spec/arachni/element/capabilities/auditable/timeout_spec.rb
751
- - spec/arachni/element/capabilities/mutable_spec.rb
829
+ - spec/arachni/element/capabilities/analyzable/differential_spec.rb
830
+ - spec/arachni/element/capabilities/analyzable/taint_spec.rb
831
+ - spec/arachni/element/capabilities/analyzable/timeout_spec.rb
832
+ - spec/arachni/element/capabilities/with_scope/scope_spec.rb
833
+ - spec/arachni/element/cookie/dom_spec.rb
752
834
  - spec/arachni/element/cookie_spec.rb
835
+ - spec/arachni/element/form/dom_spec.rb
753
836
  - spec/arachni/element/form_spec.rb
837
+ - spec/arachni/element/generic_dom_spec.rb
754
838
  - spec/arachni/element/header_spec.rb
839
+ - spec/arachni/element/link/dom_spec.rb
755
840
  - spec/arachni/element/link_spec.rb
841
+ - spec/arachni/element/link_template/dom_spec.rb
842
+ - spec/arachni/element/link_template_spec.rb
756
843
  - spec/arachni/element/path_spec.rb
757
844
  - spec/arachni/element/server_spec.rb
758
845
  - spec/arachni/element_filter_spec.rb
759
846
  - spec/arachni/error_spec.rb
760
847
  - spec/arachni/framework_spec.rb
848
+ - spec/arachni/http/client_spec.rb
761
849
  - spec/arachni/http/cookie_jar_spec.rb
762
- - spec/arachni/http_spec.rb
850
+ - spec/arachni/http/headers_spec.rb
851
+ - spec/arachni/http/message_spec.rb
852
+ - spec/arachni/http/proxy_server_spec.rb
853
+ - spec/arachni/http/request_spec.rb
854
+ - spec/arachni/http/response/scope_spec.rb
855
+ - spec/arachni/http/response_spec.rb
856
+ - spec/arachni/issue/severity/base_spec.rb
857
+ - spec/arachni/issue/severity_spec.rb
763
858
  - spec/arachni/issue_spec.rb
764
- - spec/arachni/mixins/observable_spec.rb
765
- - spec/arachni/mixins/progress_bar_spec.rb
766
- - spec/arachni/module/auditor_spec.rb
767
- - spec/arachni/module/manager_spec.rb
768
- - spec/arachni/module/utilities_spec.rb
769
- - spec/arachni/module/utilities_spec/read_file.txt
859
+ - spec/arachni/option_groups/audit_spec.rb
860
+ - spec/arachni/option_groups/browser_cluster_spec.rb
861
+ - spec/arachni/option_groups/datastore_spec.rb
862
+ - spec/arachni/option_groups/dispatcher_spec.rb
863
+ - spec/arachni/option_groups/http_spec.rb
864
+ - spec/arachni/option_groups/input_spec.rb
865
+ - spec/arachni/option_groups/output_spec.rb
866
+ - spec/arachni/option_groups/paths_spec.rb
867
+ - spec/arachni/option_groups/rpc_spec.rb
868
+ - spec/arachni/option_groups/scope_spec.rb
869
+ - spec/arachni/option_groups/session_spec.rb
870
+ - spec/arachni/option_groups/snapshot_spec.rb
770
871
  - spec/arachni/options_spec.rb
872
+ - spec/arachni/page/dom/transition_spec.rb
873
+ - spec/arachni/page/dom_spec.rb
874
+ - spec/arachni/page/scope_spec.rb
771
875
  - spec/arachni/page_spec.rb
772
876
  - spec/arachni/parser_spec.rb
773
877
  - spec/arachni/platform/fingerprinter_spec.rb
774
878
  - spec/arachni/platform/list_spec.rb
775
879
  - spec/arachni/platform/manager_spec.rb
880
+ - spec/arachni/plugin/base_spec.rb
776
881
  - spec/arachni/plugin/manager_spec.rb
777
- - spec/arachni/report/base_spec.rb
778
- - spec/arachni/report/manager_spec.rb
882
+ - spec/arachni/report_spec.rb
883
+ - spec/arachni/reporter/base_spec.rb
884
+ - spec/arachni/reporter/manager_spec.rb
885
+ - spec/arachni/reporter/options_spec.rb
779
886
  - spec/arachni/rpc/client/base_spec.rb
780
887
  - spec/arachni/rpc/client/dispatcher_spec.rb
781
888
  - spec/arachni/rpc/client/instance_spec.rb
782
889
  - spec/arachni/rpc/server/active_options_spec.rb
783
890
  - spec/arachni/rpc/server/base_spec.rb
784
- - spec/arachni/rpc/server/dispatcher/handler_spec.rb
891
+ - spec/arachni/rpc/server/checks/manager_spec.rb
785
892
  - spec/arachni/rpc/server/dispatcher/node_spec.rb
893
+ - spec/arachni/rpc/server/dispatcher/service_spec.rb
786
894
  - spec/arachni/rpc/server/dispatcher_spec.rb
787
895
  - spec/arachni/rpc/server/framework/distributor_spec.rb
788
- - spec/arachni/rpc/server/framework_hpg_spec.rb
789
- - spec/arachni/rpc/server/framework_simple_spec.rb
896
+ - spec/arachni/rpc/server/framework_multi_spec.rb
897
+ - spec/arachni/rpc/server/framework_spec.rb
790
898
  - spec/arachni/rpc/server/instance_spec.rb
791
- - spec/arachni/rpc/server/modules/manager_spec.rb
792
899
  - spec/arachni/rpc/server/output_spec.rb
793
900
  - spec/arachni/rpc/server/plugin/manager_spec.rb
794
- - spec/arachni/rpc/server/spider_spec.rb
795
901
  - spec/arachni/ruby/array_spec.rb
796
- - spec/arachni/ruby/enumerable_spec.rb
797
902
  - spec/arachni/ruby/hash_spec.rb
798
903
  - spec/arachni/ruby/io_spec.rb
799
904
  - spec/arachni/ruby/object_spec.rb
800
905
  - spec/arachni/ruby/set_spec.rb
801
906
  - spec/arachni/ruby/string_spec.rb
802
907
  - spec/arachni/ruby/webrick_spec.rb
908
+ - spec/arachni/scope_spec.rb
803
909
  - spec/arachni/session_spec.rb
804
- - spec/arachni/spider_spec.rb
910
+ - spec/arachni/snapshot_spec.rb
911
+ - spec/arachni/state/audit_spec.rb
912
+ - spec/arachni/state/element_filter_spec.rb
913
+ - spec/arachni/state/framework/rpc_spec.rb
914
+ - spec/arachni/state/framework_spec.rb
915
+ - spec/arachni/state/http_spec.rb
916
+ - spec/arachni/state/options_spec.rb
917
+ - spec/arachni/state/plugins_spec.rb
918
+ - spec/arachni/state_spec.rb
805
919
  - spec/arachni/support/buffer/autoflush_spec.rb
806
920
  - spec/arachni/support/buffer/base_spec.rb
807
- - spec/arachni/support/cache/base_spec.rb
808
921
  - spec/arachni/support/cache/least_cost_replacement_spec.rb
809
922
  - spec/arachni/support/cache/least_recently_used_spec.rb
810
923
  - spec/arachni/support/cache/preference_spec.rb
@@ -812,343 +925,213 @@ files:
812
925
  - spec/arachni/support/crypto/rsa_aes_cbc_spec.rb
813
926
  - spec/arachni/support/database/hash_spec.rb
814
927
  - spec/arachni/support/database/queue_spec.rb
815
- - spec/arachni/support/key_filler.rb
816
928
  - spec/arachni/support/lookup/hash_set_spec.rb
817
929
  - spec/arachni/support/lookup/moolb_spec.rb
818
- - spec/arachni/support/queue/disk_spec.rb
930
+ - spec/arachni/support/mixins/observable_spec.rb
819
931
  - spec/arachni/support/signature_spec.rb
820
932
  - spec/arachni/trainer_spec.rb
821
933
  - spec/arachni/typhoeus/hydra_spec.rb
822
- - spec/arachni/typhoeus/requrest_spec.rb
823
- - spec/arachni/typhoeus/response_spec.rb
934
+ - spec/arachni/uri/scope_spec.rb
824
935
  - spec/arachni/uri_spec.rb
825
936
  - spec/arachni/utilities_spec.rb
937
+ - spec/components/checks/active/code_injection_spec.rb
938
+ - spec/components/checks/active/code_injection_timing_spec.rb
939
+ - spec/components/checks/active/csrf_spec.rb
940
+ - spec/components/checks/active/file_inclusion_spec.rb
941
+ - spec/components/checks/active/ldap_injection_spec.rb
942
+ - spec/components/checks/active/no_sql_injection_differential_spec.rb
943
+ - spec/components/checks/active/no_sql_injection_spec.rb
944
+ - spec/components/checks/active/os_cmd_injection_spec.rb
945
+ - spec/components/checks/active/os_cmd_injection_timing_spec.rb
946
+ - spec/components/checks/active/path_traversal_spec.rb
947
+ - spec/components/checks/active/response_splitting_spec.rb
948
+ - spec/components/checks/active/rfi_spec.rb
949
+ - spec/components/checks/active/session_fixation_spec.rb
950
+ - spec/components/checks/active/source_code_disclosure_spec.rb
951
+ - spec/components/checks/active/sql_injection_differential_spec.rb
952
+ - spec/components/checks/active/sql_injection_spec.rb
953
+ - spec/components/checks/active/sql_injection_timing_spec.rb
954
+ - spec/components/checks/active/trainer_spec.rb
955
+ - spec/components/checks/active/unvalidated_redirect_spec.rb
956
+ - spec/components/checks/active/xpath_injection_spec.rb
957
+ - spec/components/checks/active/xss_dom_inputs_spec.rb
958
+ - spec/components/checks/active/xss_dom_script_context_spec.rb
959
+ - spec/components/checks/active/xss_dom_spec.rb
960
+ - spec/components/checks/active/xss_event_spec.rb
961
+ - spec/components/checks/active/xss_path_spec.rb
962
+ - spec/components/checks/active/xss_script_context_spec.rb
963
+ - spec/components/checks/active/xss_spec.rb
964
+ - spec/components/checks/active/xss_tag_spec.rb
965
+ - spec/components/checks/passive/allowed_methods_spec.rb
966
+ - spec/components/checks/passive/backdoors_spec.rb
967
+ - spec/components/checks/passive/backup_directories_spec.rb
968
+ - spec/components/checks/passive/backup_files_spec.rb
969
+ - spec/components/checks/passive/common_directories_spec.rb
970
+ - spec/components/checks/passive/common_files_spec.rb
971
+ - spec/components/checks/passive/directory_listing_spec.rb
972
+ - spec/components/checks/passive/grep/captcha_spec.rb
973
+ - spec/components/checks/passive/grep/cookie_set_for_parent_domain_spec.rb
974
+ - spec/components/checks/passive/grep/credit_card_spec.rb
975
+ - spec/components/checks/passive/grep/cvs_svn_users_spec.rb
976
+ - spec/components/checks/passive/grep/emails_spec.rb
977
+ - spec/components/checks/passive/grep/form_upload_spec.rb
978
+ - spec/components/checks/passive/grep/hsts_spec.rb
979
+ - spec/components/checks/passive/grep/html_objects_spec.rb
980
+ - spec/components/checks/passive/grep/http_only_cookies_spec.rb
981
+ - spec/components/checks/passive/grep/insecure_cookies_spec.rb
982
+ - spec/components/checks/passive/grep/mixed_resource_spec.rb
983
+ - spec/components/checks/passive/grep/password_autocomplete_spec.rb
984
+ - spec/components/checks/passive/grep/private_ip_spec.rb
985
+ - spec/components/checks/passive/grep/ssn_spec.rb
986
+ - spec/components/checks/passive/grep/unencrypted_password_forms_spec.rb
987
+ - spec/components/checks/passive/htaccess_limit_spec.rb
988
+ - spec/components/checks/passive/http_put_spec.rb
989
+ - spec/components/checks/passive/interesting_responses_spec.rb
990
+ - spec/components/checks/passive/localstart_asp_spec.rb
991
+ - spec/components/checks/passive/origin_spoof_access_restriction_bypass_spec.rb
992
+ - spec/components/checks/passive/webdav_spec.rb
993
+ - spec/components/checks/passive/xst_spec.rb
994
+ - spec/components/fingerprinters/frameworks/rack_spec.rb
995
+ - spec/components/fingerprinters/languages/asp_spec.rb
996
+ - spec/components/fingerprinters/languages/aspx_spec.rb
997
+ - spec/components/fingerprinters/languages/jsp_spec.rb
998
+ - spec/components/fingerprinters/languages/php_spec.rb
999
+ - spec/components/fingerprinters/languages/python_spec.rb
1000
+ - spec/components/fingerprinters/languages/ruby.rb
1001
+ - spec/components/fingerprinters/os/bsd_spec.rb
1002
+ - spec/components/fingerprinters/os/linux_spec.rb
1003
+ - spec/components/fingerprinters/os/solaris_spec.rb
1004
+ - spec/components/fingerprinters/os/unix_spec.rb
1005
+ - spec/components/fingerprinters/os/windows_spec.rb
1006
+ - spec/components/fingerprinters/servers/apache_spec.rb
1007
+ - spec/components/fingerprinters/servers/iis_spec.rb
1008
+ - spec/components/fingerprinters/servers/jetty_spec.rb
1009
+ - spec/components/fingerprinters/servers/nginx_spec.rb
1010
+ - spec/components/fingerprinters/servers/tomcat_spec.rb
1011
+ - spec/components/path_extractors/anchors_spec.rb
1012
+ - spec/components/path_extractors/areas_spec.rb
1013
+ - spec/components/path_extractors/comments_spec.rb
1014
+ - spec/components/path_extractors/forms_spec.rb
1015
+ - spec/components/path_extractors/frames_spec.rb
1016
+ - spec/components/path_extractors/generic_spec.rb
1017
+ - spec/components/path_extractors/links_spec.rb
1018
+ - spec/components/path_extractors/meta_refresh_spec.rb
1019
+ - spec/components/path_extractors/scripts_spec.rb
1020
+ - spec/components/plugins/autologin_spec.rb
1021
+ - spec/components/plugins/autothrottle_spec.rb
1022
+ - spec/components/plugins/content_types_spec.rb
1023
+ - spec/components/plugins/cookie_collector_spec.rb
1024
+ - spec/components/plugins/form_dicattack_spec.rb
1025
+ - spec/components/plugins/healthmap_spec.rb
1026
+ - spec/components/plugins/http_dicattack_spec.rb
1027
+ - spec/components/plugins/meta/remedies/discovery_spec.rb
1028
+ - spec/components/plugins/meta/remedies/timing_attacks_spec.rb
1029
+ - spec/components/plugins/meta/uniformity_spec.rb
1030
+ - spec/components/plugins/script_spec.rb
1031
+ - spec/components/plugins/uncommon_headers_spec.rb
1032
+ - spec/components/plugins/vector_feed_spec.rb
1033
+ - spec/components/plugins/waf_detector_spec.rb
1034
+ - spec/components/reporters/ap_spec.rb
1035
+ - spec/components/reporters/html_spec.rb
1036
+ - spec/components/reporters/json_spec.rb
1037
+ - spec/components/reporters/marshal_spec.rb
1038
+ - spec/components/reporters/stdout_spec.rb
1039
+ - spec/components/reporters/txt_spec.rb
1040
+ - spec/components/reporters/xml_spec.rb
1041
+ - spec/components/reporters/yaml_spec.rb
826
1042
  - spec/external/wavsep/active/lfi_spec.rb
1043
+ - spec/external/wavsep/active/obsolete_files_spec.rb
827
1044
  - spec/external/wavsep/active/rfi_spec.rb
828
1045
  - spec/external/wavsep/active/sqli_spec.rb
1046
+ - spec/external/wavsep/active/unvalidated_redirect_spec.rb
1047
+ - spec/external/wavsep/active/xss_dom_spec.rb
829
1048
  - spec/external/wavsep/active/xss_spec.rb
830
1049
  - spec/external/wavsep/false_positives/lfi_spec.rb
1050
+ - spec/external/wavsep/false_positives/obsolete_files_spec.rb
831
1051
  - spec/external/wavsep/false_positives/rfi_spec.rb
832
1052
  - spec/external/wavsep/false_positives/sqli_spec.rb
1053
+ - spec/external/wavsep/false_positives/unvalidated_redirect_spec.rb
833
1054
  - spec/external/wavsep/false_positives/xss_spec.rb
834
- - spec/fingerprinters/frameworks/rack_spec.rb
835
- - spec/fingerprinters/languages/asp_spec.rb
836
- - spec/fingerprinters/languages/aspx_spec.rb
837
- - spec/fingerprinters/languages/jsp_spec.rb
838
- - spec/fingerprinters/languages/php_spec.rb
839
- - spec/fingerprinters/languages/python_spec.rb
840
- - spec/fingerprinters/languages/ruby.rb
841
- - spec/fingerprinters/os/bsd_spec.rb
842
- - spec/fingerprinters/os/linux_spec.rb
843
- - spec/fingerprinters/os/solaris_spec.rb
844
- - spec/fingerprinters/os/unix_spec.rb
845
- - spec/fingerprinters/os/windows_spec.rb
846
- - spec/fingerprinters/servers/apache_spec.rb
847
- - spec/fingerprinters/servers/iis_spec.rb
848
- - spec/fingerprinters/servers/jetty_spec.rb
849
- - spec/fingerprinters/servers/nginx_spec.rb
850
- - spec/fingerprinters/servers/tomcat_spec.rb
851
- - spec/modules/audit/code_injection_spec.rb
852
- - spec/modules/audit/code_injection_timing_spec.rb
853
- - spec/modules/audit/csrf_spec.rb
854
- - spec/modules/audit/file_inclusion_spec.rb
855
- - spec/modules/audit/ldapi_spec.rb
856
- - spec/modules/audit/os_cmd_injection_spec.rb
857
- - spec/modules/audit/os_cmd_injection_timing_spec.rb
858
- - spec/modules/audit/path_traversal_spec.rb
859
- - spec/modules/audit/response_splitting_spec.rb
860
- - spec/modules/audit/rfi_spec.rb
861
- - spec/modules/audit/session_fixation_spec.rb
862
- - spec/modules/audit/source_code_disclosure_spec.rb
863
- - spec/modules/audit/sqli_blind_rdiff_spec.rb
864
- - spec/modules/audit/sqli_blind_timing_spec.rb
865
- - spec/modules/audit/sqli_spec.rb
866
- - spec/modules/audit/trainer_spec.rb
867
- - spec/modules/audit/unvalidated_redirect_spec.rb
868
- - spec/modules/audit/xpath_spec.rb
869
- - spec/modules/audit/xss_event_spec.rb
870
- - spec/modules/audit/xss_path_spec.rb
871
- - spec/modules/audit/xss_script_tag_spec.rb
872
- - spec/modules/audit/xss_spec.rb
873
- - spec/modules/audit/xss_tag_spec.rb
874
- - spec/modules/recon/allowed_methods_spec.rb
875
- - spec/modules/recon/backdoors_spec.rb
876
- - spec/modules/recon/backup_files_spec.rb
877
- - spec/modules/recon/common_directories_spec.rb
878
- - spec/modules/recon/common_files_spec.rb
879
- - spec/modules/recon/directory_listing_spec.rb
880
- - spec/modules/recon/grep/captcha_spec.rb
881
- - spec/modules/recon/grep/credit_card_spec.rb
882
- - spec/modules/recon/grep/cvs_svn_users_spec.rb
883
- - spec/modules/recon/grep/emails_spec.rb
884
- - spec/modules/recon/grep/form_upload_spec.rb
885
- - spec/modules/recon/grep/html_objects_spec.rb
886
- - spec/modules/recon/grep/http_only_cookies_spec.rb
887
- - spec/modules/recon/grep/insecure_cookies_spec.rb
888
- - spec/modules/recon/grep/mixed_resource_spec.rb
889
- - spec/modules/recon/grep/password_autocomplete_spec.rb
890
- - spec/modules/recon/grep/private_ip_spec.rb
891
- - spec/modules/recon/grep/ssn_spec.rb
892
- - spec/modules/recon/grep/unencrypted_password_forms_spec.rb
893
- - spec/modules/recon/htaccess_limit_spec.rb
894
- - spec/modules/recon/http_put_spec.rb
895
- - spec/modules/recon/interesting_responses_spec.rb
896
- - spec/modules/recon/localstart_asp_spec.rb
897
- - spec/modules/recon/webdav_spec.rb
898
- - spec/modules/recon/x_forwarded_for_access_restriction_bypass_spec.rb
899
- - spec/modules/recon/xst_spec.rb
900
- - spec/path_extractors/anchors_spec.rb
901
- - spec/path_extractors/areas_spec.rb
902
- - spec/path_extractors/forms_spec.rb
903
- - spec/path_extractors/frames_spec.rb
904
- - spec/path_extractors/generic_spec.rb
905
- - spec/path_extractors/links_spec.rb
906
- - spec/path_extractors/meta_refresh_spec.rb
907
- - spec/path_extractors/scripts_spec.rb
908
- - spec/plugins/autologin_spec.rb
909
- - spec/plugins/autothrottle_spec.rb
910
- - spec/plugins/content_types_spec.rb
911
- - spec/plugins/cookie_collector_spec.rb
912
- - spec/plugins/form_dicattack_spec.rb
913
- - spec/plugins/healthmap_spec.rb
914
- - spec/plugins/http_dicattack_spec.rb
915
- - spec/plugins/meta/remedies/discovery_spec.rb
916
- - spec/plugins/meta/remedies/timing_attacks_spec.rb
917
- - spec/plugins/meta/uniformity_spec.rb
918
- - spec/plugins/profiler_spec.rb
919
- - spec/plugins/rescan_spec.rb
920
- - spec/plugins/resolver_spec.rb
921
- - spec/plugins/script_spec.rb
922
- - spec/plugins/uncommon_headers_spec.rb
923
- - spec/plugins/vector_feed_spec.rb
924
- - spec/plugins/waf_detector_spec.rb
925
- - spec/reports/afr_spec.rb
926
- - spec/reports/ap_spec.rb
927
- - spec/reports/html_spec.rb
928
- - spec/reports/json_spec.rb
929
- - spec/reports/marshal_spec.rb
930
- - spec/reports/stdout_spec.rb
931
- - spec/reports/txt_spec.rb
932
- - spec/reports/xml_spec.rb
933
- - spec/reports/yaml_spec.rb
934
1055
  - spec/spec_helper.rb
935
- - spec/support/fixtures/auditstore.afr
1056
+ - spec/support/factories/browser/javascript/taint_tracer/frame.rb
1057
+ - spec/support/factories/browser/javascript/taint_tracer/frame/called_function.rb
1058
+ - spec/support/factories/browser/javascript/taint_tracer/sink/data_flow.rb
1059
+ - spec/support/factories/browser/javascript/taint_tracer/sink/execution_flow.rb
1060
+ - spec/support/factories/browser_cluster/job.rb
1061
+ - spec/support/factories/element/cookie.rb
1062
+ - spec/support/factories/element/form.rb
1063
+ - spec/support/factories/element/header.rb
1064
+ - spec/support/factories/element/link.rb
1065
+ - spec/support/factories/element/link_template.rb
1066
+ - spec/support/factories/http/request.rb
1067
+ - spec/support/factories/http/response.rb
1068
+ - spec/support/factories/issue.rb
1069
+ - spec/support/factories/page.rb
1070
+ - spec/support/factories/page/dom.rb
1071
+ - spec/support/factories/page/dom/transition.rb
1072
+ - spec/support/factories/scan_report.rb
1073
+ - spec/support/factories/vector.rb
1074
+ - spec/support/fixtures/check_with_invalid_platforms/with_invalid_platforms.rb
1075
+ - spec/support/fixtures/checks/test.rb
1076
+ - spec/support/fixtures/checks/test2.rb
1077
+ - spec/support/fixtures/checks/test3.rb
936
1078
  - spec/support/fixtures/cookies.txt
1079
+ - spec/support/fixtures/executables/node.rb
937
1080
  - spec/support/fixtures/fingerprinters/test.rb
938
- - spec/support/fixtures/modules/test.rb
939
- - spec/support/fixtures/modules/test2.rb
940
- - spec/support/fixtures/modules/test3.rb
1081
+ - spec/support/fixtures/option_groups/input.yml
941
1082
  - spec/support/fixtures/passwords.txt
942
1083
  - spec/support/fixtures/plugins/bad.rb
943
1084
  - spec/support/fixtures/plugins/defaults/default.rb
944
1085
  - spec/support/fixtures/plugins/distributable.rb
945
1086
  - spec/support/fixtures/plugins/loop.rb
946
- - spec/support/fixtures/plugins/spider_hook.rb
1087
+ - spec/support/fixtures/plugins/suspendable.rb
947
1088
  - spec/support/fixtures/plugins/wait.rb
948
1089
  - spec/support/fixtures/plugins/with_options.rb
949
- - spec/support/fixtures/reports/base_spec/plugin_formatters/with_formatters/foobar.rb
950
- - spec/support/fixtures/reports/base_spec/with_formatters.rb
951
- - spec/support/fixtures/reports/base_spec/with_outfile.rb
952
- - spec/support/fixtures/reports/base_spec/without_outfile.rb
953
- - spec/support/fixtures/reports/manager_spec/afr.rb
954
- - spec/support/fixtures/reports/manager_spec/foo.rb
1090
+ - spec/support/fixtures/plugins_with_priorities/p0.rb
1091
+ - spec/support/fixtures/plugins_with_priorities/p00.rb
1092
+ - spec/support/fixtures/plugins_with_priorities/p1.rb
1093
+ - spec/support/fixtures/plugins_with_priorities/p2.rb
1094
+ - spec/support/fixtures/plugins_with_priorities/p22.rb
1095
+ - spec/support/fixtures/plugins_with_priorities/p222.rb
1096
+ - spec/support/fixtures/plugins_with_priorities/p_nil.rb
1097
+ - spec/support/fixtures/plugins_with_priorities/p_nil2.rb
1098
+ - spec/support/fixtures/report.afr
1099
+ - spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb
1100
+ - spec/support/fixtures/reporters/base_spec/with_formatters.rb
1101
+ - spec/support/fixtures/reporters/base_spec/with_outfile.rb
1102
+ - spec/support/fixtures/reporters/base_spec/without_outfile.rb
1103
+ - spec/support/fixtures/reporters/manager_spec/afr.rb
1104
+ - spec/support/fixtures/reporters/manager_spec/foo.rb
955
1105
  - spec/support/fixtures/rescan.afr.tpl
956
- - spec/support/fixtures/rpcd_handlers/echo.rb
957
- - spec/support/fixtures/run_mod/body.rb
958
- - spec/support/fixtures/run_mod/cookies.rb
959
- - spec/support/fixtures/run_mod/empty.rb
960
- - spec/support/fixtures/run_mod/flch.rb
961
- - spec/support/fixtures/run_mod/forms.rb
962
- - spec/support/fixtures/run_mod/headers.rb
963
- - spec/support/fixtures/run_mod/links.rb
964
- - spec/support/fixtures/run_mod/nil.rb
965
- - spec/support/fixtures/run_mod/path.rb
966
- - spec/support/fixtures/run_mod/server.rb
1106
+ - spec/support/fixtures/run_check/body.rb
1107
+ - spec/support/fixtures/run_check/cookies.rb
1108
+ - spec/support/fixtures/run_check/empty.rb
1109
+ - spec/support/fixtures/run_check/flch.rb
1110
+ - spec/support/fixtures/run_check/forms.rb
1111
+ - spec/support/fixtures/run_check/headers.rb
1112
+ - spec/support/fixtures/run_check/links.rb
1113
+ - spec/support/fixtures/run_check/nil.rb
1114
+ - spec/support/fixtures/run_check/path.rb
1115
+ - spec/support/fixtures/run_check/server.rb
967
1116
  - spec/support/fixtures/script_plugin.rb
968
- - spec/support/fixtures/taint_module/taint.rb
1117
+ - spec/support/fixtures/services/echo.rb
1118
+ - spec/support/fixtures/taint_check/taint.rb
969
1119
  - spec/support/fixtures/usernames.txt
970
- - spec/support/fixtures/wait_module/wait.rb
1120
+ - spec/support/fixtures/wait_check/wait.rb
971
1121
  - spec/support/helpers/auditor.rb
1122
+ - spec/support/helpers/browser.rb
1123
+ - spec/support/helpers/browser_cluster/jobs/taint_tracer.rb
972
1124
  - spec/support/helpers/framework.rb
973
1125
  - spec/support/helpers/misc.rb
1126
+ - spec/support/helpers/pages.rb
974
1127
  - spec/support/helpers/paths.rb
975
1128
  - spec/support/helpers/requires.rb
976
1129
  - spec/support/helpers/resets.rb
977
1130
  - spec/support/helpers/web_server.rb
1131
+ - spec/support/lib/factory.rb
1132
+ - spec/support/lib/web_server_client.rb
1133
+ - spec/support/lib/web_server_dispatcher.rb
978
1134
  - spec/support/lib/web_server_manager.rb
979
- - spec/support/logs/Dispatcher - 1332-56847.log
980
- - spec/support/logs/Dispatcher - 1361-63434.log
981
- - spec/support/logs/Dispatcher - 1545-55308.log
982
- - spec/support/logs/Dispatcher - 1559-18938.log
983
- - spec/support/logs/Dispatcher - 1568-25013.log
984
- - spec/support/logs/Dispatcher - 1577-55689.log
985
- - spec/support/logs/Dispatcher - 1586-18577.log
986
- - spec/support/logs/Dispatcher - 1595-49353.log
987
- - spec/support/logs/Dispatcher - 1604-27831.log
988
- - spec/support/logs/Dispatcher - 1617-57444.log
989
- - spec/support/logs/Dispatcher - 1631-28737.log
990
- - spec/support/logs/Dispatcher - 1644-21815.log
991
- - spec/support/logs/Dispatcher - 1738-53470.log
992
- - spec/support/logs/Dispatcher - 1747-64173.log
993
- - spec/support/logs/Dispatcher - 1756-11866.log
994
- - spec/support/logs/Dispatcher - 1798-12175.log
995
- - spec/support/logs/Dispatcher - 1807-22790.log
996
- - spec/support/logs/Dispatcher - 1816-57823.log
997
- - spec/support/logs/Dispatcher - 1831-64825.log
998
- - spec/support/logs/Dispatcher - 1845-27623.log
999
- - spec/support/logs/Dispatcher - 1854-26066.log
1000
- - spec/support/logs/Dispatcher - 1863-37486.log
1001
- - spec/support/logs/Dispatcher - 1874-22463.log
1002
- - spec/support/logs/Dispatcher - 1883-41263.log
1003
- - spec/support/logs/Dispatcher - 1900-53660.log
1004
- - spec/support/logs/Dispatcher - 1909-44423.log
1005
- - spec/support/logs/Dispatcher - 1921-58931.log
1006
- - spec/support/logs/Dispatcher - 1993-6448.log
1007
- - spec/support/logs/Dispatcher - 2002-19206.log
1008
- - spec/support/logs/Dispatcher - 2011-11852.log
1009
- - spec/support/logs/Dispatcher - 2020-65055.log
1010
- - spec/support/logs/Dispatcher - 2029-48445.log
1011
- - spec/support/logs/Dispatcher - 2038-55271.log
1012
- - spec/support/logs/Dispatcher - 2047-45722.log
1013
- - spec/support/logs/Dispatcher - 2057-48194.log
1014
- - spec/support/logs/Dispatcher - 2189-39843.log
1015
- - spec/support/logs/Dispatcher - 2199-15985.log
1016
- - spec/support/logs/Dispatcher - 2208-22080.log
1017
- - spec/support/logs/Dispatcher - 2221-37690.log
1018
- - spec/support/logs/Dispatcher - 2230-47867.log
1019
- - spec/support/logs/Dispatcher - 2239-27060.log
1020
- - spec/support/logs/Dispatcher - 2358-8967.log
1021
- - spec/support/logs/Dispatcher - 2367-27103.log
1022
- - spec/support/logs/Dispatcher - 2376-16287.log
1023
- - spec/support/logs/Dispatcher - 2389-9109.log
1024
- - spec/support/logs/Dispatcher - 2398-62926.log
1025
- - spec/support/logs/Dispatcher - 2407-48685.log
1026
- - spec/support/logs/Dispatcher - 2459-62480.log
1027
- - spec/support/logs/Dispatcher - 2470-57894.log
1028
- - spec/support/logs/Dispatcher - 2479-51883.log
1029
- - spec/support/logs/Dispatcher - 2493-36944.log
1030
- - spec/support/logs/Dispatcher - 2503-59143.log
1031
- - spec/support/logs/Dispatcher - 2513-33084.log
1032
- - spec/support/logs/Dispatcher - 25430-46306.log
1033
- - spec/support/logs/Dispatcher - 25457-10711.log
1034
- - spec/support/logs/Dispatcher - 25603-48892.log
1035
- - spec/support/logs/Dispatcher - 25613-24775.log
1036
- - spec/support/logs/Dispatcher - 25622-59684.log
1037
- - spec/support/logs/Dispatcher - 25631-23195.log
1038
- - spec/support/logs/Dispatcher - 25640-9810.log
1039
- - spec/support/logs/Dispatcher - 25649-52757.log
1040
- - spec/support/logs/Dispatcher - 25658-58550.log
1041
- - spec/support/logs/Dispatcher - 25671-30871.log
1042
- - spec/support/logs/Dispatcher - 25684-48620.log
1043
- - spec/support/logs/Dispatcher - 25697-18124.log
1044
- - spec/support/logs/Dispatcher - 25762-35321.log
1045
- - spec/support/logs/Dispatcher - 25771-64633.log
1046
- - spec/support/logs/Dispatcher - 25780-43558.log
1047
- - spec/support/logs/Dispatcher - 25821-43561.log
1048
- - spec/support/logs/Dispatcher - 25830-39112.log
1049
- - spec/support/logs/Dispatcher - 25839-44093.log
1050
- - spec/support/logs/Dispatcher - 25852-12057.log
1051
- - spec/support/logs/Dispatcher - 25866-49029.log
1052
- - spec/support/logs/Dispatcher - 25875-32179.log
1053
- - spec/support/logs/Dispatcher - 25884-62703.log
1054
- - spec/support/logs/Dispatcher - 25894-4228.log
1055
- - spec/support/logs/Dispatcher - 25903-6709.log
1056
- - spec/support/logs/Dispatcher - 25917-29651.log
1057
- - spec/support/logs/Dispatcher - 25926-12708.log
1058
- - spec/support/logs/Dispatcher - 25935-54092.log
1059
- - spec/support/logs/Dispatcher - 25990-26756.log
1060
- - spec/support/logs/Dispatcher - 25999-4016.log
1061
- - spec/support/logs/Dispatcher - 26008-52076.log
1062
- - spec/support/logs/Dispatcher - 26017-48497.log
1063
- - spec/support/logs/Dispatcher - 26026-28839.log
1064
- - spec/support/logs/Dispatcher - 26035-54215.log
1065
- - spec/support/logs/Dispatcher - 26044-27216.log
1066
- - spec/support/logs/Dispatcher - 26054-53464.log
1067
- - spec/support/logs/Dispatcher - 26163-65271.log
1068
- - spec/support/logs/Dispatcher - 26173-58105.log
1069
- - spec/support/logs/Dispatcher - 26182-40848.log
1070
- - spec/support/logs/Dispatcher - 26195-2855.log
1071
- - spec/support/logs/Dispatcher - 26204-35297.log
1072
- - spec/support/logs/Dispatcher - 26213-59588.log
1073
- - spec/support/logs/Dispatcher - 26333-40774.log
1074
- - spec/support/logs/Dispatcher - 26342-45541.log
1075
- - spec/support/logs/Dispatcher - 26351-3349.log
1076
- - spec/support/logs/Dispatcher - 26364-37456.log
1077
- - spec/support/logs/Dispatcher - 26373-37340.log
1078
- - spec/support/logs/Dispatcher - 26382-54864.log
1079
- - spec/support/logs/Dispatcher - 26434-3070.log
1080
- - spec/support/logs/Dispatcher - 26448-14295.log
1081
- - spec/support/logs/Dispatcher - 26474-30587.log
1082
- - spec/support/logs/Dispatcher - 26500-32529.log
1083
- - spec/support/logs/Dispatcher - 26509-16952.log
1084
- - spec/support/logs/Dispatcher - 26519-43332.log
1085
- - spec/support/logs/Dispatcher - 26750-61867.log
1086
- - spec/support/logs/Dispatcher - 26759-22532.log
1087
- - spec/support/logs/Dispatcher - 26768-18231.log
1088
- - spec/support/logs/Dispatcher - 26792-41661.log
1089
- - spec/support/logs/Dispatcher - 26801-14384.log
1090
- - spec/support/logs/Dispatcher - 26810-2591.log
1091
- - spec/support/logs/Dispatcher - 26846-14591.log
1092
- - spec/support/logs/Dispatcher - 26855-15708.log
1093
- - spec/support/logs/Dispatcher - 26864-2062.log
1094
- - spec/support/logs/Dispatcher - 26877-14471.log
1095
- - spec/support/logs/Dispatcher - 26886-49795.log
1096
- - spec/support/logs/Dispatcher - 26895-21093.log
1097
- - spec/support/logs/Dispatcher - 26931-30049.log
1098
- - spec/support/logs/Dispatcher - 26940-34273.log
1099
- - spec/support/logs/Dispatcher - 26949-30040.log
1100
- - spec/support/logs/Dispatcher - 26962-8152.log
1101
- - spec/support/logs/Dispatcher - 26971-53062.log
1102
- - spec/support/logs/Dispatcher - 26980-7548.log
1103
- - spec/support/logs/Dispatcher - 2737-20989.log
1104
- - spec/support/logs/Dispatcher - 2746-5423.log
1105
- - spec/support/logs/Dispatcher - 2755-53393.log
1106
- - spec/support/logs/Dispatcher - 27615-41812.log
1107
- - spec/support/logs/Dispatcher - 27624-43683.log
1108
- - spec/support/logs/Dispatcher - 27633-11593.log
1109
- - spec/support/logs/Dispatcher - 27658-12186.log
1110
- - spec/support/logs/Dispatcher - 27667-15575.log
1111
- - spec/support/logs/Dispatcher - 27676-17207.log
1112
- - spec/support/logs/Dispatcher - 27712-2233.log
1113
- - spec/support/logs/Dispatcher - 27721-3842.log
1114
- - spec/support/logs/Dispatcher - 27730-22695.log
1115
- - spec/support/logs/Dispatcher - 27743-8364.log
1116
- - spec/support/logs/Dispatcher - 27752-6140.log
1117
- - spec/support/logs/Dispatcher - 27761-25015.log
1118
- - spec/support/logs/Dispatcher - 27797-9270.log
1119
- - spec/support/logs/Dispatcher - 2780-58168.log
1120
- - spec/support/logs/Dispatcher - 27806-48623.log
1121
- - spec/support/logs/Dispatcher - 27815-58778.log
1122
- - spec/support/logs/Dispatcher - 27828-29742.log
1123
- - spec/support/logs/Dispatcher - 27837-46211.log
1124
- - spec/support/logs/Dispatcher - 27846-16143.log
1125
- - spec/support/logs/Dispatcher - 2789-29375.log
1126
- - spec/support/logs/Dispatcher - 2798-10983.log
1127
- - spec/support/logs/Dispatcher - 2836-2354.log
1128
- - spec/support/logs/Dispatcher - 2845-65341.log
1129
- - spec/support/logs/Dispatcher - 2854-18936.log
1130
- - spec/support/logs/Dispatcher - 2867-51979.log
1131
- - spec/support/logs/Dispatcher - 2876-21086.log
1132
- - spec/support/logs/Dispatcher - 2887-17393.log
1133
- - spec/support/logs/Dispatcher - 2930-37394.log
1134
- - spec/support/logs/Dispatcher - 2943-46737.log
1135
- - spec/support/logs/Dispatcher - 2956-37866.log
1136
- - spec/support/logs/Dispatcher - 2976-21012.log
1137
- - spec/support/logs/Dispatcher - 2990-48082.log
1138
- - spec/support/logs/Dispatcher - 2999-16391.log
1139
- - spec/support/logs/Instance - 2204-45164.error.log
1140
- - spec/support/logs/Instance - 2475-49789.error.log
1141
- - spec/support/logs/Instance - 2509-39450.error.log
1142
- - spec/support/logs/Instance - 2533-5785.error.log
1143
- - spec/support/logs/Instance - 2539-42941.error.log
1144
- - spec/support/logs/Instance - 26178-57631.error.log
1145
- - spec/support/logs/Instance - 26458-60253.error.log
1146
- - spec/support/logs/Instance - 26514-44685.error.log
1147
- - spec/support/logs/Instance - 26538-43093.error.log
1148
- - spec/support/logs/Instance - 26544-52217.error.log
1149
- - spec/support/logs/Instance - 26682-37056.error.log
1150
- - spec/support/logs/Instance - 2669-56818.error.log
1151
- - spec/support/logs/Instance - 27547-3928.error.log
1152
1135
  - spec/support/logs/placeholder
1153
1136
  - spec/support/pems/cacert.pem
1154
1137
  - spec/support/pems/client/cert.pem
@@ -1157,97 +1140,121 @@ files:
1157
1140
  - spec/support/pems/client/key.pem
1158
1141
  - spec/support/pems/server/cert.pem
1159
1142
  - spec/support/pems/server/key.pem
1160
- - spec/support/servers/arachni/element/capabilities/auditable/rdiff.rb
1161
- - spec/support/servers/arachni/element/capabilities/auditable/taint.rb
1162
- - spec/support/servers/arachni/element/capabilities/auditable/timeout.rb
1143
+ - spec/support/servers/arachni/browser.rb
1144
+ - spec/support/servers/arachni/browser/javascript.rb
1145
+ - spec/support/servers/arachni/browser/javascript/angular-1.2.8.js
1146
+ - spec/support/servers/arachni/browser/javascript/angular-route.js
1147
+ - spec/support/servers/arachni/browser/javascript/dom_monitor.rb
1148
+ - spec/support/servers/arachni/browser/javascript/jquery-2.0.3.js
1149
+ - spec/support/servers/arachni/browser/javascript/proxy.rb
1150
+ - spec/support/servers/arachni/browser/javascript/taint_tracer.rb
1151
+ - spec/support/servers/arachni/browser_cluster/jobs/event_trigger.rb
1152
+ - spec/support/servers/arachni/browser_https.rb
1153
+ - spec/support/servers/arachni/check/auditor.rb
1154
+ - spec/support/servers/arachni/element/body.rb
1155
+ - spec/support/servers/arachni/element/capabilities/analyzable/differential.rb
1156
+ - spec/support/servers/arachni/element/capabilities/analyzable/taint.rb
1157
+ - spec/support/servers/arachni/element/capabilities/analyzable/timeout.rb
1163
1158
  - spec/support/servers/arachni/element/cookie.rb
1159
+ - spec/support/servers/arachni/element/cookie/cookie_dom.rb
1164
1160
  - spec/support/servers/arachni/element/form.rb
1161
+ - spec/support/servers/arachni/element/form/form_dom.rb
1165
1162
  - spec/support/servers/arachni/element/header.rb
1166
1163
  - spec/support/servers/arachni/element/link.rb
1164
+ - spec/support/servers/arachni/element/link/link_dom.rb
1165
+ - spec/support/servers/arachni/element/link_template.rb
1166
+ - spec/support/servers/arachni/element/link_template/link_template_dom.rb
1167
1167
  - spec/support/servers/arachni/framework.rb
1168
- - spec/support/servers/arachni/http.rb
1169
- - spec/support/servers/arachni/http_auth.rb
1170
- - spec/support/servers/arachni/module/auditor.rb
1168
+ - spec/support/servers/arachni/http/client.rb
1169
+ - spec/support/servers/arachni/http/proxy_server.rb
1170
+ - spec/support/servers/arachni/http/proxy_server_https.rb
1171
+ - spec/support/servers/arachni/page/page_dom.rb
1171
1172
  - spec/support/servers/arachni/parser.rb
1172
- - spec/support/servers/arachni/rpc/server/framework_hpg.rb
1173
- - spec/support/servers/arachni/rpc/server/framework_simple.rb
1173
+ - spec/support/servers/arachni/rpc/server/framework_multi.rb
1174
1174
  - spec/support/servers/arachni/session.rb
1175
- - spec/support/servers/arachni/spider.rb
1176
- - spec/support/servers/arachni/spider_https.rb
1177
1175
  - spec/support/servers/arachni/trainer.rb
1178
- - spec/support/servers/modules/audit/code_injection.rb
1179
- - spec/support/servers/modules/audit/code_injection_timing.rb
1180
- - spec/support/servers/modules/audit/csrf.rb
1181
- - spec/support/servers/modules/audit/file_inclusion.rb
1182
- - spec/support/servers/modules/audit/ldapi.rb
1183
- - spec/support/servers/modules/audit/os_cmd_injection.rb
1184
- - spec/support/servers/modules/audit/os_cmd_injection_timing.rb
1185
- - spec/support/servers/modules/audit/path_traversal.rb
1186
- - spec/support/servers/modules/audit/response_splitting.rb
1187
- - spec/support/servers/modules/audit/rfi.rb
1188
- - spec/support/servers/modules/audit/session_fixation.rb
1189
- - spec/support/servers/modules/audit/source_code_disclosure.rb
1190
- - spec/support/servers/modules/audit/sqli.rb
1191
- - spec/support/servers/modules/audit/sqli/access
1192
- - spec/support/servers/modules/audit/sqli/coldfusion
1193
- - spec/support/servers/modules/audit/sqli/db2
1194
- - spec/support/servers/modules/audit/sqli/emc
1195
- - spec/support/servers/modules/audit/sqli/firebird
1196
- - spec/support/servers/modules/audit/sqli/frontbase
1197
- - spec/support/servers/modules/audit/sqli/hsqldb
1198
- - spec/support/servers/modules/audit/sqli/informix
1199
- - spec/support/servers/modules/audit/sqli/ingres
1200
- - spec/support/servers/modules/audit/sqli/interbase
1201
- - spec/support/servers/modules/audit/sqli/jdbc
1202
- - spec/support/servers/modules/audit/sqli/maxdb
1203
- - spec/support/servers/modules/audit/sqli/mssql
1204
- - spec/support/servers/modules/audit/sqli/mysql
1205
- - spec/support/servers/modules/audit/sqli/oracle
1206
- - spec/support/servers/modules/audit/sqli/postgresql
1207
- - spec/support/servers/modules/audit/sqli/sqlite
1208
- - spec/support/servers/modules/audit/sqli/sybase
1209
- - spec/support/servers/modules/audit/sqli_blind_rdiff.rb
1210
- - spec/support/servers/modules/audit/sqli_blind_timing.rb
1211
- - spec/support/servers/modules/audit/trainer_module.rb
1212
- - spec/support/servers/modules/audit/unvalidated_redirect.rb
1213
- - spec/support/servers/modules/audit/xpath.rb
1214
- - spec/support/servers/modules/audit/xpath/dotnet
1215
- - spec/support/servers/modules/audit/xpath/general
1216
- - spec/support/servers/modules/audit/xpath/java
1217
- - spec/support/servers/modules/audit/xpath/libxml2
1218
- - spec/support/servers/modules/audit/xpath/php
1219
- - spec/support/servers/modules/audit/xss.rb
1220
- - spec/support/servers/modules/audit/xss_event.rb
1221
- - spec/support/servers/modules/audit/xss_path.rb
1222
- - spec/support/servers/modules/audit/xss_script_tag.rb
1223
- - spec/support/servers/modules/audit/xss_tag.rb
1224
- - spec/support/servers/modules/module_server.rb
1225
- - spec/support/servers/modules/recon/allowed_methods.rb
1226
- - spec/support/servers/modules/recon/backdoors.rb
1227
- - spec/support/servers/modules/recon/backup_files.rb
1228
- - spec/support/servers/modules/recon/common_directories.rb
1229
- - spec/support/servers/modules/recon/common_files.rb
1230
- - spec/support/servers/modules/recon/directory_listing.rb
1231
- - spec/support/servers/modules/recon/grep/captcha.rb
1232
- - spec/support/servers/modules/recon/grep/credit_card.rb
1233
- - spec/support/servers/modules/recon/grep/cvs_svn_users.rb
1234
- - spec/support/servers/modules/recon/grep/emails.rb
1235
- - spec/support/servers/modules/recon/grep/form_upload.rb
1236
- - spec/support/servers/modules/recon/grep/html_objects.rb
1237
- - spec/support/servers/modules/recon/grep/http_only_cookies.rb
1238
- - spec/support/servers/modules/recon/grep/insecure_cookies.rb
1239
- - spec/support/servers/modules/recon/grep/mixed_resource.rb
1240
- - spec/support/servers/modules/recon/grep/password_autocomplete.rb
1241
- - spec/support/servers/modules/recon/grep/private_ip.rb
1242
- - spec/support/servers/modules/recon/grep/ssn.rb
1243
- - spec/support/servers/modules/recon/grep/unencrypted_password_forms.rb
1244
- - spec/support/servers/modules/recon/htaccess_limit.rb
1245
- - spec/support/servers/modules/recon/http_put.rb
1246
- - spec/support/servers/modules/recon/interesting_responses.rb
1247
- - spec/support/servers/modules/recon/localstart_asp.rb
1248
- - spec/support/servers/modules/recon/webdav.rb
1249
- - spec/support/servers/modules/recon/x_forwarded_for_access_restriction_bypass.rb
1250
- - spec/support/servers/modules/recon/xst.rb
1176
+ - spec/support/servers/checks/active/code_injection.rb
1177
+ - spec/support/servers/checks/active/code_injection_timing.rb
1178
+ - spec/support/servers/checks/active/csrf.rb
1179
+ - spec/support/servers/checks/active/file_inclusion.rb
1180
+ - spec/support/servers/checks/active/ldap_injection.rb
1181
+ - spec/support/servers/checks/active/no_sql_injection.rb
1182
+ - spec/support/servers/checks/active/no_sql_injection/mongodb
1183
+ - spec/support/servers/checks/active/no_sql_injection_differential.rb
1184
+ - spec/support/servers/checks/active/os_cmd_injection.rb
1185
+ - spec/support/servers/checks/active/os_cmd_injection_timing.rb
1186
+ - spec/support/servers/checks/active/path_traversal.rb
1187
+ - spec/support/servers/checks/active/response_splitting.rb
1188
+ - spec/support/servers/checks/active/rfi.rb
1189
+ - spec/support/servers/checks/active/session_fixation.rb
1190
+ - spec/support/servers/checks/active/source_code_disclosure.rb
1191
+ - spec/support/servers/checks/active/sql_injection.rb
1192
+ - spec/support/servers/checks/active/sql_injection/access
1193
+ - spec/support/servers/checks/active/sql_injection/coldfusion
1194
+ - spec/support/servers/checks/active/sql_injection/db2
1195
+ - spec/support/servers/checks/active/sql_injection/emc
1196
+ - spec/support/servers/checks/active/sql_injection/firebird
1197
+ - spec/support/servers/checks/active/sql_injection/frontbase
1198
+ - spec/support/servers/checks/active/sql_injection/hsqldb
1199
+ - spec/support/servers/checks/active/sql_injection/informix
1200
+ - spec/support/servers/checks/active/sql_injection/ingres
1201
+ - spec/support/servers/checks/active/sql_injection/interbase
1202
+ - spec/support/servers/checks/active/sql_injection/jdbc
1203
+ - spec/support/servers/checks/active/sql_injection/maxdb
1204
+ - spec/support/servers/checks/active/sql_injection/mssql
1205
+ - spec/support/servers/checks/active/sql_injection/mysql
1206
+ - spec/support/servers/checks/active/sql_injection/oracle
1207
+ - spec/support/servers/checks/active/sql_injection/pgsql
1208
+ - spec/support/servers/checks/active/sql_injection/sqlite
1209
+ - spec/support/servers/checks/active/sql_injection/sybase
1210
+ - spec/support/servers/checks/active/sql_injection_differential.rb
1211
+ - spec/support/servers/checks/active/sql_injection_timing.rb
1212
+ - spec/support/servers/checks/active/trainer_check.rb
1213
+ - spec/support/servers/checks/active/unvalidated_redirect.rb
1214
+ - spec/support/servers/checks/active/xpath_injection.rb
1215
+ - spec/support/servers/checks/active/xpath_injection/dotnet
1216
+ - spec/support/servers/checks/active/xpath_injection/general
1217
+ - spec/support/servers/checks/active/xpath_injection/java
1218
+ - spec/support/servers/checks/active/xpath_injection/libxml2
1219
+ - spec/support/servers/checks/active/xpath_injection/php
1220
+ - spec/support/servers/checks/active/xss.rb
1221
+ - spec/support/servers/checks/active/xss_dom.rb
1222
+ - spec/support/servers/checks/active/xss_dom_inputs.rb
1223
+ - spec/support/servers/checks/active/xss_dom_script_context.rb
1224
+ - spec/support/servers/checks/active/xss_event.rb
1225
+ - spec/support/servers/checks/active/xss_path.rb
1226
+ - spec/support/servers/checks/active/xss_script_context.rb
1227
+ - spec/support/servers/checks/active/xss_tag.rb
1228
+ - spec/support/servers/checks/check_server.rb
1229
+ - spec/support/servers/checks/passive/allowed_methods.rb
1230
+ - spec/support/servers/checks/passive/backdoors.rb
1231
+ - spec/support/servers/checks/passive/backup_directories.rb
1232
+ - spec/support/servers/checks/passive/backup_files.rb
1233
+ - spec/support/servers/checks/passive/common_directories.rb
1234
+ - spec/support/servers/checks/passive/common_files.rb
1235
+ - spec/support/servers/checks/passive/directory_listing.rb
1236
+ - spec/support/servers/checks/passive/grep/captcha.rb
1237
+ - spec/support/servers/checks/passive/grep/cookie_set_for_parent_domain.rb
1238
+ - spec/support/servers/checks/passive/grep/credit_card.rb
1239
+ - spec/support/servers/checks/passive/grep/cvs_svn_users.rb
1240
+ - spec/support/servers/checks/passive/grep/emails.rb
1241
+ - spec/support/servers/checks/passive/grep/form_upload.rb
1242
+ - spec/support/servers/checks/passive/grep/hsts_https.rb
1243
+ - spec/support/servers/checks/passive/grep/html_objects.rb
1244
+ - spec/support/servers/checks/passive/grep/http_only_cookies.rb
1245
+ - spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
1246
+ - spec/support/servers/checks/passive/grep/mixed_resource_https.rb
1247
+ - spec/support/servers/checks/passive/grep/password_autocomplete.rb
1248
+ - spec/support/servers/checks/passive/grep/private_ip.rb
1249
+ - spec/support/servers/checks/passive/grep/ssn.rb
1250
+ - spec/support/servers/checks/passive/grep/unencrypted_password_forms.rb
1251
+ - spec/support/servers/checks/passive/htaccess_limit.rb
1252
+ - spec/support/servers/checks/passive/http_put.rb
1253
+ - spec/support/servers/checks/passive/interesting_responses.rb
1254
+ - spec/support/servers/checks/passive/localstart_asp.rb
1255
+ - spec/support/servers/checks/passive/origin_spoof_access_restriction_bypass.rb
1256
+ - spec/support/servers/checks/passive/webdav.rb
1257
+ - spec/support/servers/checks/passive/xst.rb
1251
1258
  - spec/support/servers/plugins/autologin.rb
1252
1259
  - spec/support/servers/plugins/autothrottle.rb
1253
1260
  - spec/support/servers/plugins/content_types.rb
@@ -1259,88 +1266,98 @@ files:
1259
1266
  - spec/support/servers/plugins/http_dicattack_unprotected.rb
1260
1267
  - spec/support/servers/plugins/meta/remedies/discovery.rb
1261
1268
  - spec/support/servers/plugins/meta/remedies/timing_attacks.rb
1262
- - spec/support/servers/plugins/profiler.rb
1263
- - spec/support/servers/plugins/rescan.rb
1264
1269
  - spec/support/servers/plugins/uncommon_headers.rb
1265
1270
  - spec/support/servers/plugins/waf_detector.rb
1271
+ - spec/support/shared/browser/javascript/taint_tracer/sink/base.rb
1272
+ - spec/support/shared/check.rb
1266
1273
  - spec/support/shared/component.rb
1274
+ - spec/support/shared/component/options/base.rb
1275
+ - spec/support/shared/element/base.rb
1267
1276
  - spec/support/shared/element/capabilities/auditable.rb
1277
+ - spec/support/shared/element/capabilities/auditable/dom.rb
1278
+ - spec/support/shared/element/capabilities/inputtable.rb
1279
+ - spec/support/shared/element/capabilities/mutable.rb
1268
1280
  - spec/support/shared/element/capabilities/refreshable.rb
1281
+ - spec/support/shared/element/capabilities/submitable.rb
1282
+ - spec/support/shared/element/capabilities/with_auditor.rb
1283
+ - spec/support/shared/element/capabilities/with_dom.rb
1284
+ - spec/support/shared/element/capabilities/with_node.rb
1285
+ - spec/support/shared/element/capabilities/with_scope.rb
1269
1286
  - spec/support/shared/external/wavsep.rb
1270
1287
  - spec/support/shared/fingerprinter.rb
1271
- - spec/support/shared/module.rb
1288
+ - spec/support/shared/http/message.rb
1289
+ - spec/support/shared/option_group.rb
1272
1290
  - spec/support/shared/path_extractor.rb
1273
1291
  - spec/support/shared/plugin.rb
1274
- - spec/support/shared/reports.rb
1292
+ - spec/support/shared/reporter.rb
1293
+ - spec/support/shared/support/cache.rb
1275
1294
  - spec/support/shared/support/lookup.rb
1295
+ - ui/cli/framework.rb
1296
+ - ui/cli/framework/option_parser.rb
1297
+ - ui/cli/option_parser.rb
1298
+ - ui/cli/output.rb
1299
+ - ui/cli/reporter.rb
1300
+ - ui/cli/reporter/option_parser.rb
1301
+ - ui/cli/restored_framework.rb
1302
+ - ui/cli/restored_framework/option_parser.rb
1303
+ - ui/cli/rpc/client/dispatcher_monitor.rb
1304
+ - ui/cli/rpc/client/dispatcher_monitor/option_parser.rb
1305
+ - ui/cli/rpc/client/instance.rb
1306
+ - ui/cli/rpc/client/local.rb
1307
+ - ui/cli/rpc/client/local/option_parser.rb
1308
+ - ui/cli/rpc/client/remote.rb
1309
+ - ui/cli/rpc/client/remote/option_parser.rb
1310
+ - ui/cli/rpc/server/dispatcher.rb
1311
+ - ui/cli/rpc/server/dispatcher/option_parser.rb
1312
+ - ui/cli/utilities.rb
1276
1313
  homepage: https://www.arachni-scanner.com
1277
- licenses: []
1314
+ licenses:
1315
+ - Apache-2.0
1316
+ - Proprietary
1278
1317
  metadata: {}
1279
- post_install_message: ! '
1318
+ post_install_message: |2+
1280
1319
 
1281
1320
  Thank you for installing Arachni, here are some resources which should
1282
-
1283
1321
  help you make the best of it:
1284
1322
 
1285
-
1286
1323
  Homepage - http://arachni-scanner.com
1287
-
1288
1324
  Blog - http://arachni-scanner.com/blog
1289
-
1290
1325
  Documentation - http://arachni-scanner.com/wiki
1291
-
1292
1326
  Support - http://support.arachni-scanner.com
1293
-
1294
1327
  GitHub page - http://github.com/Arachni/arachni
1295
-
1296
1328
  Code Documentation - http://rubydoc.info/github/Arachni/arachni
1297
-
1329
+ License - Apache License v2.0/Proprietary
1330
+ (https://github.com/Arachni/arachni/blob/master/LICENSE.md)
1298
1331
  Author - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
1299
-
1300
1332
  Twitter - http://twitter.com/ArachniScanner
1301
-
1302
1333
  Copyright - 2010-2014 Tasos Laskos
1303
1334
 
1304
- License - Apache License v2
1305
-
1306
-
1307
1335
  Please do not hesitate to ask for assistance (via the support portal)
1308
-
1309
1336
  or report a bug (via GitHub Issues) if you come across any problem.
1310
1337
 
1311
-
1312
- '
1313
1338
  rdoc_options:
1314
- - --charset=UTF-8
1339
+ - "--charset=UTF-8"
1315
1340
  require_paths:
1316
1341
  - lib
1317
1342
  required_ruby_version: !ruby/object:Gem::Requirement
1318
1343
  requirements:
1319
- - - ! '>='
1344
+ - - ">="
1320
1345
  - !ruby/object:Gem::Version
1321
- version: 1.9.2
1346
+ version: 1.9.3
1322
1347
  required_rubygems_version: !ruby/object:Gem::Requirement
1323
1348
  requirements:
1324
- - - ! '>='
1349
+ - - ">="
1325
1350
  - !ruby/object:Gem::Version
1326
1351
  version: '0'
1327
1352
  requirements: []
1328
1353
  rubyforge_project:
1329
- rubygems_version: 2.2.2
1354
+ rubygems_version: 2.4.1
1330
1355
  signing_key:
1331
1356
  specification_version: 4
1332
1357
  summary: Arachni is a feature-full, modular, high-performance Ruby framework aimed
1333
1358
  towards helping penetration testers and administrators evaluate the security of
1334
1359
  web applications.
1335
1360
  test_files:
1336
- - spec/path_extractors/anchors_spec.rb
1337
- - spec/path_extractors/meta_refresh_spec.rb
1338
- - spec/path_extractors/frames_spec.rb
1339
- - spec/path_extractors/forms_spec.rb
1340
- - spec/path_extractors/generic_spec.rb
1341
- - spec/path_extractors/areas_spec.rb
1342
- - spec/path_extractors/scripts_spec.rb
1343
- - spec/path_extractors/links_spec.rb
1344
1361
  - spec/support/pems/server/cert.pem
1345
1362
  - spec/support/pems/server/key.pem
1346
1363
  - spec/support/pems/cacert.pem
@@ -1348,480 +1365,423 @@ test_files:
1348
1365
  - spec/support/pems/client/cert.pem
1349
1366
  - spec/support/pems/client/foo-cert.pem
1350
1367
  - spec/support/pems/client/key.pem
1351
- - spec/support/fixtures/rpcd_handlers/echo.rb
1352
- - spec/support/fixtures/modules/test3.rb
1353
- - spec/support/fixtures/modules/test2.rb
1354
- - spec/support/fixtures/modules/test.rb
1368
+ - spec/support/fixtures/option_groups/input.yml
1369
+ - spec/support/fixtures/check_with_invalid_platforms/with_invalid_platforms.rb
1355
1370
  - spec/support/fixtures/plugins/loop.rb
1356
1371
  - spec/support/fixtures/plugins/bad.rb
1357
1372
  - spec/support/fixtures/plugins/defaults/default.rb
1358
1373
  - spec/support/fixtures/plugins/wait.rb
1359
1374
  - spec/support/fixtures/plugins/with_options.rb
1360
1375
  - spec/support/fixtures/plugins/distributable.rb
1361
- - spec/support/fixtures/plugins/spider_hook.rb
1376
+ - spec/support/fixtures/plugins/suspendable.rb
1377
+ - spec/support/fixtures/services/echo.rb
1378
+ - spec/support/fixtures/report.afr
1362
1379
  - spec/support/fixtures/script_plugin.rb
1363
- - spec/support/fixtures/reports/base_spec/plugin_formatters/with_formatters/foobar.rb
1364
- - spec/support/fixtures/reports/base_spec/with_formatters.rb
1365
- - spec/support/fixtures/reports/base_spec/without_outfile.rb
1366
- - spec/support/fixtures/reports/base_spec/with_outfile.rb
1367
- - spec/support/fixtures/reports/manager_spec/foo.rb
1368
- - spec/support/fixtures/reports/manager_spec/afr.rb
1369
- - spec/support/fixtures/wait_module/wait.rb
1380
+ - spec/support/fixtures/wait_check/wait.rb
1381
+ - spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb
1382
+ - spec/support/fixtures/reporters/base_spec/with_formatters.rb
1383
+ - spec/support/fixtures/reporters/base_spec/without_outfile.rb
1384
+ - spec/support/fixtures/reporters/base_spec/with_outfile.rb
1385
+ - spec/support/fixtures/reporters/manager_spec/foo.rb
1386
+ - spec/support/fixtures/reporters/manager_spec/afr.rb
1387
+ - spec/support/fixtures/checks/test3.rb
1388
+ - spec/support/fixtures/checks/test2.rb
1389
+ - spec/support/fixtures/checks/test.rb
1390
+ - spec/support/fixtures/executables/node.rb
1370
1391
  - spec/support/fixtures/passwords.txt
1371
- - spec/support/fixtures/taint_module/taint.rb
1372
- - spec/support/fixtures/run_mod/links.rb
1373
- - spec/support/fixtures/run_mod/flch.rb
1374
- - spec/support/fixtures/run_mod/body.rb
1375
- - spec/support/fixtures/run_mod/forms.rb
1376
- - spec/support/fixtures/run_mod/headers.rb
1377
- - spec/support/fixtures/run_mod/path.rb
1378
- - spec/support/fixtures/run_mod/nil.rb
1379
- - spec/support/fixtures/run_mod/cookies.rb
1380
- - spec/support/fixtures/run_mod/empty.rb
1381
- - spec/support/fixtures/run_mod/server.rb
1382
1392
  - spec/support/fixtures/cookies.txt
1383
1393
  - spec/support/fixtures/fingerprinters/test.rb
1384
1394
  - spec/support/fixtures/usernames.txt
1385
- - spec/support/fixtures/auditstore.afr
1395
+ - spec/support/fixtures/run_check/links.rb
1396
+ - spec/support/fixtures/run_check/flch.rb
1397
+ - spec/support/fixtures/run_check/body.rb
1398
+ - spec/support/fixtures/run_check/forms.rb
1399
+ - spec/support/fixtures/run_check/headers.rb
1400
+ - spec/support/fixtures/run_check/path.rb
1401
+ - spec/support/fixtures/run_check/nil.rb
1402
+ - spec/support/fixtures/run_check/cookies.rb
1403
+ - spec/support/fixtures/run_check/empty.rb
1404
+ - spec/support/fixtures/run_check/server.rb
1405
+ - spec/support/fixtures/taint_check/taint.rb
1406
+ - spec/support/fixtures/plugins_with_priorities/p0.rb
1407
+ - spec/support/fixtures/plugins_with_priorities/p22.rb
1408
+ - spec/support/fixtures/plugins_with_priorities/p_nil.rb
1409
+ - spec/support/fixtures/plugins_with_priorities/p_nil2.rb
1410
+ - spec/support/fixtures/plugins_with_priorities/p222.rb
1411
+ - spec/support/fixtures/plugins_with_priorities/p00.rb
1412
+ - spec/support/fixtures/plugins_with_priorities/p2.rb
1413
+ - spec/support/fixtures/plugins_with_priorities/p1.rb
1386
1414
  - spec/support/fixtures/rescan.afr.tpl
1387
- - spec/support/servers/modules/audit/csrf.rb
1388
- - spec/support/servers/modules/audit/xss_tag.rb
1389
- - spec/support/servers/modules/audit/code_injection_timing.rb
1390
- - spec/support/servers/modules/audit/os_cmd_injection.rb
1391
- - spec/support/servers/modules/audit/ldapi.rb
1392
- - spec/support/servers/modules/audit/sqli_blind_timing.rb
1393
- - spec/support/servers/modules/audit/xpath/java
1394
- - spec/support/servers/modules/audit/xpath/libxml2
1395
- - spec/support/servers/modules/audit/xpath/general
1396
- - spec/support/servers/modules/audit/xpath/php
1397
- - spec/support/servers/modules/audit/xpath/dotnet
1398
- - spec/support/servers/modules/audit/session_fixation.rb
1399
- - spec/support/servers/modules/audit/file_inclusion.rb
1400
- - spec/support/servers/modules/audit/xss_script_tag.rb
1401
- - spec/support/servers/modules/audit/sqli.rb
1402
- - spec/support/servers/modules/audit/sqli/sqlite
1403
- - spec/support/servers/modules/audit/sqli/ingres
1404
- - spec/support/servers/modules/audit/sqli/access
1405
- - spec/support/servers/modules/audit/sqli/db2
1406
- - spec/support/servers/modules/audit/sqli/jdbc
1407
- - spec/support/servers/modules/audit/sqli/emc
1408
- - spec/support/servers/modules/audit/sqli/hsqldb
1409
- - spec/support/servers/modules/audit/sqli/interbase
1410
- - spec/support/servers/modules/audit/sqli/informix
1411
- - spec/support/servers/modules/audit/sqli/frontbase
1412
- - spec/support/servers/modules/audit/sqli/maxdb
1413
- - spec/support/servers/modules/audit/sqli/sybase
1414
- - spec/support/servers/modules/audit/sqli/mssql
1415
- - spec/support/servers/modules/audit/sqli/oracle
1416
- - spec/support/servers/modules/audit/sqli/postgresql
1417
- - spec/support/servers/modules/audit/sqli/firebird
1418
- - spec/support/servers/modules/audit/sqli/coldfusion
1419
- - spec/support/servers/modules/audit/sqli/mysql
1420
- - spec/support/servers/modules/audit/source_code_disclosure.rb
1421
- - spec/support/servers/modules/audit/xss_path.rb
1422
- - spec/support/servers/modules/audit/trainer_module.rb
1423
- - spec/support/servers/modules/audit/os_cmd_injection_timing.rb
1424
- - spec/support/servers/modules/audit/xpath.rb
1425
- - spec/support/servers/modules/audit/path_traversal.rb
1426
- - spec/support/servers/modules/audit/rfi.rb
1427
- - spec/support/servers/modules/audit/sqli_blind_rdiff.rb
1428
- - spec/support/servers/modules/audit/xss_event.rb
1429
- - spec/support/servers/modules/audit/code_injection.rb
1430
- - spec/support/servers/modules/audit/unvalidated_redirect.rb
1431
- - spec/support/servers/modules/audit/xss.rb
1432
- - spec/support/servers/modules/audit/response_splitting.rb
1433
- - spec/support/servers/modules/recon/common_files.rb
1434
- - spec/support/servers/modules/recon/webdav.rb
1435
- - spec/support/servers/modules/recon/common_directories.rb
1436
- - spec/support/servers/modules/recon/localstart_asp.rb
1437
- - spec/support/servers/modules/recon/backup_files.rb
1438
- - spec/support/servers/modules/recon/x_forwarded_for_access_restriction_bypass.rb
1439
- - spec/support/servers/modules/recon/grep/unencrypted_password_forms.rb
1440
- - spec/support/servers/modules/recon/grep/form_upload.rb
1441
- - spec/support/servers/modules/recon/grep/ssn.rb
1442
- - spec/support/servers/modules/recon/grep/captcha.rb
1443
- - spec/support/servers/modules/recon/grep/http_only_cookies.rb
1444
- - spec/support/servers/modules/recon/grep/private_ip.rb
1445
- - spec/support/servers/modules/recon/grep/insecure_cookies.rb
1446
- - spec/support/servers/modules/recon/grep/cvs_svn_users.rb
1447
- - spec/support/servers/modules/recon/grep/html_objects.rb
1448
- - spec/support/servers/modules/recon/grep/mixed_resource.rb
1449
- - spec/support/servers/modules/recon/grep/emails.rb
1450
- - spec/support/servers/modules/recon/grep/credit_card.rb
1451
- - spec/support/servers/modules/recon/grep/password_autocomplete.rb
1452
- - spec/support/servers/modules/recon/http_put.rb
1453
- - spec/support/servers/modules/recon/interesting_responses.rb
1454
- - spec/support/servers/modules/recon/allowed_methods.rb
1455
- - spec/support/servers/modules/recon/htaccess_limit.rb
1456
- - spec/support/servers/modules/recon/backdoors.rb
1457
- - spec/support/servers/modules/recon/directory_listing.rb
1458
- - spec/support/servers/modules/recon/xst.rb
1459
- - spec/support/servers/modules/module_server.rb
1460
1415
  - spec/support/servers/plugins/content_types.rb
1461
1416
  - spec/support/servers/plugins/waf_detector.rb
1462
1417
  - spec/support/servers/plugins/cookie_collector.rb
1463
1418
  - spec/support/servers/plugins/healthmap.rb
1464
1419
  - spec/support/servers/plugins/form_dicattack.rb
1465
- - spec/support/servers/plugins/rescan.rb
1466
1420
  - spec/support/servers/plugins/http_dicattack_unprotected.rb
1467
1421
  - spec/support/servers/plugins/autologin.rb
1468
1422
  - spec/support/servers/plugins/uncommon_headers.rb
1469
- - spec/support/servers/plugins/profiler.rb
1470
1423
  - spec/support/servers/plugins/http_dicattack.rb
1471
1424
  - spec/support/servers/plugins/meta/remedies/timing_attacks.rb
1472
1425
  - spec/support/servers/plugins/meta/remedies/discovery.rb
1473
1426
  - spec/support/servers/plugins/http_dicattack_secure.rb
1474
1427
  - spec/support/servers/plugins/autothrottle.rb
1475
- - spec/support/servers/arachni/http.rb
1476
- - spec/support/servers/arachni/rpc/server/framework_hpg.rb
1477
- - spec/support/servers/arachni/rpc/server/framework_simple.rb
1478
- - spec/support/servers/arachni/http_auth.rb
1428
+ - spec/support/servers/checks/check_server.rb
1429
+ - spec/support/servers/checks/active/csrf.rb
1430
+ - spec/support/servers/checks/active/xss_tag.rb
1431
+ - spec/support/servers/checks/active/code_injection_timing.rb
1432
+ - spec/support/servers/checks/active/os_cmd_injection.rb
1433
+ - spec/support/servers/checks/active/xpath_injection/java
1434
+ - spec/support/servers/checks/active/xpath_injection/libxml2
1435
+ - spec/support/servers/checks/active/xpath_injection/general
1436
+ - spec/support/servers/checks/active/xpath_injection/php
1437
+ - spec/support/servers/checks/active/xpath_injection/dotnet
1438
+ - spec/support/servers/checks/active/xss_dom_script_context.rb
1439
+ - spec/support/servers/checks/active/xss_dom.rb
1440
+ - spec/support/servers/checks/active/xss_script_context.rb
1441
+ - spec/support/servers/checks/active/no_sql_injection.rb
1442
+ - spec/support/servers/checks/active/no_sql_injection/mongodb
1443
+ - spec/support/servers/checks/active/sql_injection/sqlite
1444
+ - spec/support/servers/checks/active/sql_injection/ingres
1445
+ - spec/support/servers/checks/active/sql_injection/access
1446
+ - spec/support/servers/checks/active/sql_injection/db2
1447
+ - spec/support/servers/checks/active/sql_injection/pgsql
1448
+ - spec/support/servers/checks/active/sql_injection/jdbc
1449
+ - spec/support/servers/checks/active/sql_injection/emc
1450
+ - spec/support/servers/checks/active/sql_injection/hsqldb
1451
+ - spec/support/servers/checks/active/sql_injection/interbase
1452
+ - spec/support/servers/checks/active/sql_injection/informix
1453
+ - spec/support/servers/checks/active/sql_injection/frontbase
1454
+ - spec/support/servers/checks/active/sql_injection/maxdb
1455
+ - spec/support/servers/checks/active/sql_injection/sybase
1456
+ - spec/support/servers/checks/active/sql_injection/mssql
1457
+ - spec/support/servers/checks/active/sql_injection/oracle
1458
+ - spec/support/servers/checks/active/sql_injection/firebird
1459
+ - spec/support/servers/checks/active/sql_injection/coldfusion
1460
+ - spec/support/servers/checks/active/sql_injection/mysql
1461
+ - spec/support/servers/checks/active/xpath_injection.rb
1462
+ - spec/support/servers/checks/active/session_fixation.rb
1463
+ - spec/support/servers/checks/active/xss_dom_inputs.rb
1464
+ - spec/support/servers/checks/active/no_sql_injection_differential.rb
1465
+ - spec/support/servers/checks/active/sql_injection_timing.rb
1466
+ - spec/support/servers/checks/active/sql_injection.rb
1467
+ - spec/support/servers/checks/active/file_inclusion.rb
1468
+ - spec/support/servers/checks/active/trainer_check.rb
1469
+ - spec/support/servers/checks/active/source_code_disclosure.rb
1470
+ - spec/support/servers/checks/active/xss_path.rb
1471
+ - spec/support/servers/checks/active/os_cmd_injection_timing.rb
1472
+ - spec/support/servers/checks/active/path_traversal.rb
1473
+ - spec/support/servers/checks/active/rfi.rb
1474
+ - spec/support/servers/checks/active/xss_event.rb
1475
+ - spec/support/servers/checks/active/code_injection.rb
1476
+ - spec/support/servers/checks/active/unvalidated_redirect.rb
1477
+ - spec/support/servers/checks/active/ldap_injection.rb
1478
+ - spec/support/servers/checks/active/xss.rb
1479
+ - spec/support/servers/checks/active/sql_injection_differential.rb
1480
+ - spec/support/servers/checks/active/response_splitting.rb
1481
+ - spec/support/servers/checks/passive/common_files.rb
1482
+ - spec/support/servers/checks/passive/webdav.rb
1483
+ - spec/support/servers/checks/passive/common_directories.rb
1484
+ - spec/support/servers/checks/passive/localstart_asp.rb
1485
+ - spec/support/servers/checks/passive/backup_files.rb
1486
+ - spec/support/servers/checks/passive/grep/unencrypted_password_forms.rb
1487
+ - spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
1488
+ - spec/support/servers/checks/passive/grep/form_upload.rb
1489
+ - spec/support/servers/checks/passive/grep/ssn.rb
1490
+ - spec/support/servers/checks/passive/grep/captcha.rb
1491
+ - spec/support/servers/checks/passive/grep/http_only_cookies.rb
1492
+ - spec/support/servers/checks/passive/grep/private_ip.rb
1493
+ - spec/support/servers/checks/passive/grep/cookie_set_for_parent_domain.rb
1494
+ - spec/support/servers/checks/passive/grep/cvs_svn_users.rb
1495
+ - spec/support/servers/checks/passive/grep/mixed_resource_https.rb
1496
+ - spec/support/servers/checks/passive/grep/html_objects.rb
1497
+ - spec/support/servers/checks/passive/grep/hsts_https.rb
1498
+ - spec/support/servers/checks/passive/grep/emails.rb
1499
+ - spec/support/servers/checks/passive/grep/credit_card.rb
1500
+ - spec/support/servers/checks/passive/grep/password_autocomplete.rb
1501
+ - spec/support/servers/checks/passive/origin_spoof_access_restriction_bypass.rb
1502
+ - spec/support/servers/checks/passive/backup_directories.rb
1503
+ - spec/support/servers/checks/passive/http_put.rb
1504
+ - spec/support/servers/checks/passive/interesting_responses.rb
1505
+ - spec/support/servers/checks/passive/allowed_methods.rb
1506
+ - spec/support/servers/checks/passive/htaccess_limit.rb
1507
+ - spec/support/servers/checks/passive/backdoors.rb
1508
+ - spec/support/servers/checks/passive/directory_listing.rb
1509
+ - spec/support/servers/checks/passive/xst.rb
1510
+ - spec/support/servers/arachni/browser/javascript/dom_monitor.rb
1511
+ - spec/support/servers/arachni/browser/javascript/proxy.rb
1512
+ - spec/support/servers/arachni/browser/javascript/angular-route.js
1513
+ - spec/support/servers/arachni/browser/javascript/angular-1.2.8.js
1514
+ - spec/support/servers/arachni/browser/javascript/taint_tracer.rb
1515
+ - spec/support/servers/arachni/browser/javascript/jquery-2.0.3.js
1516
+ - spec/support/servers/arachni/browser/javascript.rb
1517
+ - spec/support/servers/arachni/rpc/server/framework_multi.rb
1518
+ - spec/support/servers/arachni/page/page_dom.rb
1479
1519
  - spec/support/servers/arachni/trainer.rb
1520
+ - spec/support/servers/arachni/element/body.rb
1480
1521
  - spec/support/servers/arachni/element/form.rb
1481
1522
  - spec/support/servers/arachni/element/cookie.rb
1523
+ - spec/support/servers/arachni/element/link_template.rb
1524
+ - spec/support/servers/arachni/element/link/link_dom.rb
1482
1525
  - spec/support/servers/arachni/element/link.rb
1483
- - spec/support/servers/arachni/element/capabilities/auditable/taint.rb
1484
- - spec/support/servers/arachni/element/capabilities/auditable/timeout.rb
1485
- - spec/support/servers/arachni/element/capabilities/auditable/rdiff.rb
1526
+ - spec/support/servers/arachni/element/form/form_dom.rb
1527
+ - spec/support/servers/arachni/element/capabilities/analyzable/taint.rb
1528
+ - spec/support/servers/arachni/element/capabilities/analyzable/differential.rb
1529
+ - spec/support/servers/arachni/element/capabilities/analyzable/timeout.rb
1530
+ - spec/support/servers/arachni/element/cookie/cookie_dom.rb
1531
+ - spec/support/servers/arachni/element/link_template/link_template_dom.rb
1486
1532
  - spec/support/servers/arachni/element/header.rb
1487
- - spec/support/servers/arachni/spider.rb
1533
+ - spec/support/servers/arachni/check/auditor.rb
1534
+ - spec/support/servers/arachni/browser.rb
1488
1535
  - spec/support/servers/arachni/framework.rb
1489
- - spec/support/servers/arachni/spider_https.rb
1490
- - spec/support/servers/arachni/module/auditor.rb
1536
+ - spec/support/servers/arachni/http/proxy_server_https.rb
1537
+ - spec/support/servers/arachni/http/client.rb
1538
+ - spec/support/servers/arachni/http/proxy_server.rb
1539
+ - spec/support/servers/arachni/browser_cluster/jobs/event_trigger.rb
1491
1540
  - spec/support/servers/arachni/session.rb
1541
+ - spec/support/servers/arachni/browser_https.rb
1492
1542
  - spec/support/servers/arachni/parser.rb
1493
1543
  - spec/support/helpers/web_server.rb
1544
+ - spec/support/helpers/browser.rb
1494
1545
  - spec/support/helpers/paths.rb
1495
1546
  - spec/support/helpers/framework.rb
1547
+ - spec/support/helpers/pages.rb
1496
1548
  - spec/support/helpers/auditor.rb
1549
+ - spec/support/helpers/browser_cluster/jobs/taint_tracer.rb
1497
1550
  - spec/support/helpers/resets.rb
1498
1551
  - spec/support/helpers/requires.rb
1499
1552
  - spec/support/helpers/misc.rb
1500
- - spec/support/logs/Dispatcher - 26373-37340.log
1501
- - spec/support/logs/Dispatcher - 2737-20989.log
1502
- - spec/support/logs/Dispatcher - 2479-51883.log
1503
- - spec/support/logs/Dispatcher - 26855-15708.log
1504
- - spec/support/logs/Instance - 26538-43093.error.log
1505
- - spec/support/logs/Dispatcher - 1631-28737.log
1506
- - spec/support/logs/Dispatcher - 2398-62926.log
1507
- - spec/support/logs/Dispatcher - 2887-17393.log
1508
- - spec/support/logs/Dispatcher - 2002-19206.log
1509
- - spec/support/logs/Dispatcher - 25649-52757.log
1510
- - spec/support/logs/Dispatcher - 27837-46211.log
1511
- - spec/support/logs/Dispatcher - 2845-65341.log
1512
- - spec/support/logs/Dispatcher - 1617-57444.log
1513
- - spec/support/logs/Instance - 2533-5785.error.log
1514
- - spec/support/logs/Dispatcher - 26768-18231.log
1515
- - spec/support/logs/Dispatcher - 1559-18938.log
1516
- - spec/support/logs/Instance - 2204-45164.error.log
1517
- - spec/support/logs/Dispatcher - 1756-11866.log
1518
- - spec/support/logs/Dispatcher - 2943-46737.log
1519
- - spec/support/logs/Dispatcher - 27761-25015.log
1520
- - spec/support/logs/Dispatcher - 25821-43561.log
1521
- - spec/support/logs/Dispatcher - 25852-12057.log
1522
- - spec/support/logs/Dispatcher - 26035-54215.log
1523
- - spec/support/logs/Instance - 26514-44685.error.log
1524
- - spec/support/logs/Dispatcher - 25430-46306.log
1525
- - spec/support/logs/Dispatcher - 26949-30040.log
1526
- - spec/support/logs/Dispatcher - 26017-48497.log
1527
- - spec/support/logs/Dispatcher - 2930-37394.log
1528
- - spec/support/logs/Instance - 26458-60253.error.log
1529
- - spec/support/logs/Dispatcher - 26351-3349.log
1530
- - spec/support/logs/Instance - 2669-56818.error.log
1531
- - spec/support/logs/Dispatcher - 2755-53393.log
1532
- - spec/support/logs/Dispatcher - 2038-55271.log
1533
- - spec/support/logs/Dispatcher - 1577-55689.log
1534
- - spec/support/logs/Dispatcher - 2513-33084.log
1535
- - spec/support/logs/Dispatcher - 25926-12708.log
1536
- - spec/support/logs/Dispatcher - 2407-48685.log
1537
- - spec/support/logs/Dispatcher - 26213-59588.log
1538
- - spec/support/logs/Dispatcher - 26519-43332.log
1539
- - spec/support/logs/Dispatcher - 27743-8364.log
1540
- - spec/support/logs/Dispatcher - 2221-37690.log
1541
- - spec/support/logs/Dispatcher - 25999-4016.log
1542
- - spec/support/logs/Dispatcher - 26008-52076.log
1543
- - spec/support/logs/Dispatcher - 26182-40848.log
1544
- - spec/support/logs/Dispatcher - 1604-27831.log
1545
- - spec/support/logs/Dispatcher - 2189-39843.log
1546
- - spec/support/logs/Dispatcher - 26801-14384.log
1547
- - spec/support/logs/Dispatcher - 2470-57894.log
1548
- - spec/support/logs/Dispatcher - 2493-36944.log
1549
- - spec/support/logs/Dispatcher - 27676-17207.log
1550
- - spec/support/logs/Dispatcher - 27667-15575.log
1551
- - spec/support/logs/Dispatcher - 1798-12175.log
1552
- - spec/support/logs/Dispatcher - 25762-35321.log
1553
- - spec/support/logs/Dispatcher - 27752-6140.log
1554
- - spec/support/logs/Dispatcher - 1568-25013.log
1555
- - spec/support/logs/Dispatcher - 2057-48194.log
1556
- - spec/support/logs/Dispatcher - 25884-62703.log
1557
- - spec/support/logs/Dispatcher - 25839-44093.log
1558
- - spec/support/logs/Dispatcher - 26448-14295.log
1559
- - spec/support/logs/Dispatcher - 2389-9109.log
1560
- - spec/support/logs/Dispatcher - 1845-27623.log
1561
- - spec/support/logs/Dispatcher - 2854-18936.log
1562
- - spec/support/logs/Dispatcher - 2876-21086.log
1563
- - spec/support/logs/Dispatcher - 2358-8967.log
1564
- - spec/support/logs/Dispatcher - 26971-53062.log
1565
- - spec/support/logs/Dispatcher - 26382-54864.log
1566
- - spec/support/logs/Dispatcher - 27658-12186.log
1567
- - spec/support/logs/Dispatcher - 26364-37456.log
1568
- - spec/support/logs/Dispatcher - 2990-48082.log
1569
- - spec/support/logs/Dispatcher - 26750-61867.log
1570
- - spec/support/logs/Dispatcher - 1644-21815.log
1571
- - spec/support/logs/Dispatcher - 26940-34273.log
1572
- - spec/support/logs/Dispatcher - 26474-30587.log
1573
- - spec/support/logs/Instance - 2509-39450.error.log
1574
- - spec/support/logs/Dispatcher - 27730-22695.log
1575
- - spec/support/logs/Dispatcher - 26026-28839.log
1576
- - spec/support/logs/Dispatcher - 26846-14591.log
1577
- - spec/support/logs/Dispatcher - 27633-11593.log
1578
- - spec/support/logs/Dispatcher - 1921-58931.log
1579
- - spec/support/logs/Dispatcher - 26342-45541.log
1580
- - spec/support/logs/Dispatcher - 2208-22080.log
1581
- - spec/support/logs/Dispatcher - 26962-8152.log
1582
- - spec/support/logs/Dispatcher - 26509-16952.log
1583
- - spec/support/logs/Dispatcher - 2976-21012.log
1584
- - spec/support/logs/Dispatcher - 26163-65271.log
1585
- - spec/support/logs/Dispatcher - 25658-58550.log
1586
- - spec/support/logs/Dispatcher - 26886-49795.log
1587
- - spec/support/logs/Dispatcher - 2239-27060.log
1588
- - spec/support/logs/Dispatcher - 25771-64633.log
1589
- - spec/support/logs/Dispatcher - 2503-59143.log
1590
- - spec/support/logs/Dispatcher - 27721-3842.log
1591
- - spec/support/logs/Dispatcher - 26877-14471.log
1592
- - spec/support/logs/Dispatcher - 1831-64825.log
1593
- - spec/support/logs/Dispatcher - 2230-47867.log
1594
- - spec/support/logs/Dispatcher - 26810-2591.log
1595
- - spec/support/logs/Dispatcher - 27797-9270.log
1596
- - spec/support/logs/Dispatcher - 2956-37866.log
1597
- - spec/support/logs/Instance - 26544-52217.error.log
1598
- - spec/support/logs/Dispatcher - 26173-58105.log
1599
- - spec/support/logs/Dispatcher - 26759-22532.log
1600
- - spec/support/logs/Dispatcher - 2376-16287.log
1601
- - spec/support/logs/Dispatcher - 2836-2354.log
1602
- - spec/support/logs/Dispatcher - 27806-48623.log
1603
- - spec/support/logs/Dispatcher - 1361-63434.log
1604
- - spec/support/logs/Dispatcher - 26333-40774.log
1605
- - spec/support/logs/Dispatcher - 25903-6709.log
1606
- - spec/support/logs/Dispatcher - 26434-3070.log
1607
- - spec/support/logs/Dispatcher - 25780-43558.log
1608
- - spec/support/logs/Dispatcher - 26195-2855.log
1609
- - spec/support/logs/Dispatcher - 1747-64173.log
1610
- - spec/support/logs/Dispatcher - 27828-29742.log
1611
- - spec/support/logs/Dispatcher - 2367-27103.log
1612
- - spec/support/logs/Dispatcher - 26500-32529.log
1613
- - spec/support/logs/Dispatcher - 1883-41263.log
1553
+ - spec/support/factories/browser/javascript/taint_tracer/frame.rb
1554
+ - spec/support/factories/browser/javascript/taint_tracer/frame/called_function.rb
1555
+ - spec/support/factories/browser/javascript/taint_tracer/sink/execution_flow.rb
1556
+ - spec/support/factories/browser/javascript/taint_tracer/sink/data_flow.rb
1557
+ - spec/support/factories/scan_report.rb
1558
+ - spec/support/factories/page/dom.rb
1559
+ - spec/support/factories/page/dom/transition.rb
1560
+ - spec/support/factories/element/form.rb
1561
+ - spec/support/factories/element/cookie.rb
1562
+ - spec/support/factories/element/link_template.rb
1563
+ - spec/support/factories/element/link.rb
1564
+ - spec/support/factories/element/header.rb
1565
+ - spec/support/factories/page.rb
1566
+ - spec/support/factories/http/request.rb
1567
+ - spec/support/factories/http/response.rb
1568
+ - spec/support/factories/browser_cluster/job.rb
1569
+ - spec/support/factories/vector.rb
1570
+ - spec/support/factories/issue.rb
1614
1571
  - spec/support/logs/placeholder
1615
- - spec/support/logs/Dispatcher - 27615-41812.log
1616
- - spec/support/logs/Dispatcher - 1332-56847.log
1617
- - spec/support/logs/Dispatcher - 26792-41661.log
1618
- - spec/support/logs/Dispatcher - 2867-51979.log
1619
- - spec/support/logs/Dispatcher - 2029-48445.log
1620
- - spec/support/logs/Dispatcher - 1545-55308.log
1621
- - spec/support/logs/Instance - 2475-49789.error.log
1622
- - spec/support/logs/Dispatcher - 2780-58168.log
1623
- - spec/support/logs/Dispatcher - 27815-58778.log
1624
- - spec/support/logs/Dispatcher - 25613-24775.log
1625
- - spec/support/logs/Dispatcher - 2789-29375.log
1626
- - spec/support/logs/Dispatcher - 26980-7548.log
1627
- - spec/support/logs/Dispatcher - 1586-18577.log
1628
- - spec/support/logs/Dispatcher - 27712-2233.log
1629
- - spec/support/logs/Dispatcher - 25640-9810.log
1630
- - spec/support/logs/Dispatcher - 1993-6448.log
1631
- - spec/support/logs/Dispatcher - 25671-30871.log
1632
- - spec/support/logs/Dispatcher - 25866-49029.log
1633
- - spec/support/logs/Dispatcher - 26204-35297.log
1634
- - spec/support/logs/Dispatcher - 2746-5423.log
1635
- - spec/support/logs/Dispatcher - 2047-45722.log
1636
- - spec/support/logs/Dispatcher - 2999-16391.log
1637
- - spec/support/logs/Dispatcher - 1807-22790.log
1638
- - spec/support/logs/Instance - 27547-3928.error.log
1639
- - spec/support/logs/Dispatcher - 26864-2062.log
1640
- - spec/support/logs/Dispatcher - 25875-32179.log
1641
- - spec/support/logs/Dispatcher - 2459-62480.log
1642
- - spec/support/logs/Dispatcher - 1595-49353.log
1643
- - spec/support/logs/Dispatcher - 26895-21093.log
1644
- - spec/support/logs/Dispatcher - 1900-53660.log
1645
- - spec/support/logs/Dispatcher - 1874-22463.log
1646
- - spec/support/logs/Dispatcher - 25917-29651.log
1647
- - spec/support/logs/Instance - 26682-37056.error.log
1648
- - spec/support/logs/Dispatcher - 1854-26066.log
1649
- - spec/support/logs/Dispatcher - 25631-23195.log
1650
- - spec/support/logs/Instance - 26178-57631.error.log
1651
- - spec/support/logs/Dispatcher - 1863-37486.log
1652
- - spec/support/logs/Dispatcher - 25457-10711.log
1653
- - spec/support/logs/Dispatcher - 25830-39112.log
1654
- - spec/support/logs/Dispatcher - 27624-43683.log
1655
- - spec/support/logs/Dispatcher - 25935-54092.log
1656
- - spec/support/logs/Dispatcher - 25990-26756.log
1657
- - spec/support/logs/Dispatcher - 2199-15985.log
1658
- - spec/support/logs/Dispatcher - 2798-10983.log
1659
- - spec/support/logs/Dispatcher - 1816-57823.log
1660
- - spec/support/logs/Dispatcher - 25622-59684.log
1661
- - spec/support/logs/Dispatcher - 25684-48620.log
1662
- - spec/support/logs/Dispatcher - 26054-53464.log
1663
- - spec/support/logs/Dispatcher - 25697-18124.log
1664
- - spec/support/logs/Dispatcher - 25894-4228.log
1665
- - spec/support/logs/Dispatcher - 26044-27216.log
1666
- - spec/support/logs/Dispatcher - 27846-16143.log
1667
- - spec/support/logs/Dispatcher - 2011-11852.log
1668
- - spec/support/logs/Dispatcher - 25603-48892.log
1669
- - spec/support/logs/Dispatcher - 2020-65055.log
1670
- - spec/support/logs/Dispatcher - 26931-30049.log
1671
- - spec/support/logs/Instance - 2539-42941.error.log
1672
- - spec/support/logs/Dispatcher - 1738-53470.log
1673
- - spec/support/logs/Dispatcher - 1909-44423.log
1674
1572
  - spec/support/lib/web_server_manager.rb
1573
+ - spec/support/lib/factory.rb
1574
+ - spec/support/lib/web_server_dispatcher.rb
1575
+ - spec/support/lib/web_server_client.rb
1675
1576
  - spec/support/shared/fingerprinter.rb
1577
+ - spec/support/shared/browser/javascript/taint_tracer/sink/base.rb
1578
+ - spec/support/shared/component/options/base.rb
1579
+ - spec/support/shared/check.rb
1676
1580
  - spec/support/shared/support/lookup.rb
1581
+ - spec/support/shared/support/cache.rb
1582
+ - spec/support/shared/element/base.rb
1583
+ - spec/support/shared/element/capabilities/inputtable.rb
1584
+ - spec/support/shared/element/capabilities/mutable.rb
1677
1585
  - spec/support/shared/element/capabilities/refreshable.rb
1586
+ - spec/support/shared/element/capabilities/with_node.rb
1587
+ - spec/support/shared/element/capabilities/submitable.rb
1588
+ - spec/support/shared/element/capabilities/auditable/dom.rb
1589
+ - spec/support/shared/element/capabilities/with_auditor.rb
1590
+ - spec/support/shared/element/capabilities/with_scope.rb
1591
+ - spec/support/shared/element/capabilities/with_dom.rb
1678
1592
  - spec/support/shared/element/capabilities/auditable.rb
1679
- - spec/support/shared/module.rb
1680
1593
  - spec/support/shared/external/wavsep.rb
1681
1594
  - spec/support/shared/plugin.rb
1682
- - spec/support/shared/reports.rb
1595
+ - spec/support/shared/reporter.rb
1596
+ - spec/support/shared/http/message.rb
1683
1597
  - spec/support/shared/path_extractor.rb
1684
1598
  - spec/support/shared/component.rb
1685
- - spec/modules/audit/code_injection_timing_spec.rb
1686
- - spec/modules/audit/sqli_blind_timing_spec.rb
1687
- - spec/modules/audit/sqli_spec.rb
1688
- - spec/modules/audit/trainer_spec.rb
1689
- - spec/modules/audit/os_cmd_injection_spec.rb
1690
- - spec/modules/audit/path_traversal_spec.rb
1691
- - spec/modules/audit/xss_script_tag_spec.rb
1692
- - spec/modules/audit/xpath_spec.rb
1693
- - spec/modules/audit/xss_spec.rb
1694
- - spec/modules/audit/source_code_disclosure_spec.rb
1695
- - spec/modules/audit/response_splitting_spec.rb
1696
- - spec/modules/audit/code_injection_spec.rb
1697
- - spec/modules/audit/ldapi_spec.rb
1698
- - spec/modules/audit/xss_tag_spec.rb
1699
- - spec/modules/audit/session_fixation_spec.rb
1700
- - spec/modules/audit/csrf_spec.rb
1701
- - spec/modules/audit/rfi_spec.rb
1702
- - spec/modules/audit/file_inclusion_spec.rb
1703
- - spec/modules/audit/xss_path_spec.rb
1704
- - spec/modules/audit/os_cmd_injection_timing_spec.rb
1705
- - spec/modules/audit/sqli_blind_rdiff_spec.rb
1706
- - spec/modules/audit/xss_event_spec.rb
1707
- - spec/modules/audit/unvalidated_redirect_spec.rb
1708
- - spec/modules/recon/interesting_responses_spec.rb
1709
- - spec/modules/recon/localstart_asp_spec.rb
1710
- - spec/modules/recon/http_put_spec.rb
1711
- - spec/modules/recon/htaccess_limit_spec.rb
1712
- - spec/modules/recon/common_files_spec.rb
1713
- - spec/modules/recon/allowed_methods_spec.rb
1714
- - spec/modules/recon/xst_spec.rb
1715
- - spec/modules/recon/backup_files_spec.rb
1716
- - spec/modules/recon/grep/mixed_resource_spec.rb
1717
- - spec/modules/recon/grep/cvs_svn_users_spec.rb
1718
- - spec/modules/recon/grep/ssn_spec.rb
1719
- - spec/modules/recon/grep/http_only_cookies_spec.rb
1720
- - spec/modules/recon/grep/password_autocomplete_spec.rb
1721
- - spec/modules/recon/grep/unencrypted_password_forms_spec.rb
1722
- - spec/modules/recon/grep/private_ip_spec.rb
1723
- - spec/modules/recon/grep/credit_card_spec.rb
1724
- - spec/modules/recon/grep/captcha_spec.rb
1725
- - spec/modules/recon/grep/insecure_cookies_spec.rb
1726
- - spec/modules/recon/grep/form_upload_spec.rb
1727
- - spec/modules/recon/grep/html_objects_spec.rb
1728
- - spec/modules/recon/grep/emails_spec.rb
1729
- - spec/modules/recon/directory_listing_spec.rb
1730
- - spec/modules/recon/common_directories_spec.rb
1731
- - spec/modules/recon/webdav_spec.rb
1732
- - spec/modules/recon/x_forwarded_for_access_restriction_bypass_spec.rb
1733
- - spec/modules/recon/backdoors_spec.rb
1734
- - spec/plugins/autothrottle_spec.rb
1735
- - spec/plugins/resolver_spec.rb
1736
- - spec/plugins/healthmap_spec.rb
1737
- - spec/plugins/vector_feed_spec.rb
1738
- - spec/plugins/http_dicattack_spec.rb
1739
- - spec/plugins/waf_detector_spec.rb
1740
- - spec/plugins/script_spec.rb
1741
- - spec/plugins/cookie_collector_spec.rb
1742
- - spec/plugins/uncommon_headers_spec.rb
1743
- - spec/plugins/autologin_spec.rb
1744
- - spec/plugins/meta/uniformity_spec.rb
1745
- - spec/plugins/meta/remedies/discovery_spec.rb
1746
- - spec/plugins/meta/remedies/timing_attacks_spec.rb
1747
- - spec/plugins/profiler_spec.rb
1748
- - spec/plugins/form_dicattack_spec.rb
1749
- - spec/plugins/content_types_spec.rb
1750
- - spec/plugins/rescan_spec.rb
1599
+ - spec/support/shared/option_group.rb
1751
1600
  - spec/external/wavsep/false_positives/sqli_spec.rb
1752
1601
  - spec/external/wavsep/false_positives/lfi_spec.rb
1753
1602
  - spec/external/wavsep/false_positives/xss_spec.rb
1754
1603
  - spec/external/wavsep/false_positives/rfi_spec.rb
1604
+ - spec/external/wavsep/false_positives/obsolete_files_spec.rb
1605
+ - spec/external/wavsep/false_positives/unvalidated_redirect_spec.rb
1755
1606
  - spec/external/wavsep/active/sqli_spec.rb
1756
1607
  - spec/external/wavsep/active/lfi_spec.rb
1757
1608
  - spec/external/wavsep/active/xss_spec.rb
1609
+ - spec/external/wavsep/active/xss_dom_spec.rb
1758
1610
  - spec/external/wavsep/active/rfi_spec.rb
1759
- - spec/reports/txt_spec.rb
1760
- - spec/reports/stdout_spec.rb
1761
- - spec/reports/ap_spec.rb
1762
- - spec/reports/html_spec.rb
1763
- - spec/reports/marshal_spec.rb
1764
- - spec/reports/json_spec.rb
1765
- - spec/reports/yaml_spec.rb
1766
- - spec/reports/xml_spec.rb
1767
- - spec/reports/afr_spec.rb
1611
+ - spec/external/wavsep/active/obsolete_files_spec.rb
1612
+ - spec/external/wavsep/active/unvalidated_redirect_spec.rb
1613
+ - spec/components/path_extractors/anchors_spec.rb
1614
+ - spec/components/path_extractors/meta_refresh_spec.rb
1615
+ - spec/components/path_extractors/frames_spec.rb
1616
+ - spec/components/path_extractors/forms_spec.rb
1617
+ - spec/components/path_extractors/generic_spec.rb
1618
+ - spec/components/path_extractors/areas_spec.rb
1619
+ - spec/components/path_extractors/comments_spec.rb
1620
+ - spec/components/path_extractors/scripts_spec.rb
1621
+ - spec/components/path_extractors/links_spec.rb
1622
+ - spec/components/plugins/autothrottle_spec.rb
1623
+ - spec/components/plugins/healthmap_spec.rb
1624
+ - spec/components/plugins/vector_feed_spec.rb
1625
+ - spec/components/plugins/http_dicattack_spec.rb
1626
+ - spec/components/plugins/waf_detector_spec.rb
1627
+ - spec/components/plugins/script_spec.rb
1628
+ - spec/components/plugins/cookie_collector_spec.rb
1629
+ - spec/components/plugins/uncommon_headers_spec.rb
1630
+ - spec/components/plugins/autologin_spec.rb
1631
+ - spec/components/plugins/meta/uniformity_spec.rb
1632
+ - spec/components/plugins/meta/remedies/discovery_spec.rb
1633
+ - spec/components/plugins/meta/remedies/timing_attacks_spec.rb
1634
+ - spec/components/plugins/form_dicattack_spec.rb
1635
+ - spec/components/plugins/content_types_spec.rb
1636
+ - spec/components/reporters/txt_spec.rb
1637
+ - spec/components/reporters/stdout_spec.rb
1638
+ - spec/components/reporters/ap_spec.rb
1639
+ - spec/components/reporters/html_spec.rb
1640
+ - spec/components/reporters/marshal_spec.rb
1641
+ - spec/components/reporters/json_spec.rb
1642
+ - spec/components/reporters/yaml_spec.rb
1643
+ - spec/components/reporters/xml_spec.rb
1644
+ - spec/components/checks/active/sql_injection_differential_spec.rb
1645
+ - spec/components/checks/active/code_injection_timing_spec.rb
1646
+ - spec/components/checks/active/xpath_injection_spec.rb
1647
+ - spec/components/checks/active/trainer_spec.rb
1648
+ - spec/components/checks/active/xss_script_context_spec.rb
1649
+ - spec/components/checks/active/xss_dom_inputs_spec.rb
1650
+ - spec/components/checks/active/os_cmd_injection_spec.rb
1651
+ - spec/components/checks/active/no_sql_injection_spec.rb
1652
+ - spec/components/checks/active/path_traversal_spec.rb
1653
+ - spec/components/checks/active/sql_injection_timing_spec.rb
1654
+ - spec/components/checks/active/xss_dom_script_context_spec.rb
1655
+ - spec/components/checks/active/xss_spec.rb
1656
+ - spec/components/checks/active/source_code_disclosure_spec.rb
1657
+ - spec/components/checks/active/ldap_injection_spec.rb
1658
+ - spec/components/checks/active/response_splitting_spec.rb
1659
+ - spec/components/checks/active/code_injection_spec.rb
1660
+ - spec/components/checks/active/xss_tag_spec.rb
1661
+ - spec/components/checks/active/session_fixation_spec.rb
1662
+ - spec/components/checks/active/xss_dom_spec.rb
1663
+ - spec/components/checks/active/csrf_spec.rb
1664
+ - spec/components/checks/active/rfi_spec.rb
1665
+ - spec/components/checks/active/file_inclusion_spec.rb
1666
+ - spec/components/checks/active/xss_path_spec.rb
1667
+ - spec/components/checks/active/os_cmd_injection_timing_spec.rb
1668
+ - spec/components/checks/active/xss_event_spec.rb
1669
+ - spec/components/checks/active/sql_injection_spec.rb
1670
+ - spec/components/checks/active/unvalidated_redirect_spec.rb
1671
+ - spec/components/checks/active/no_sql_injection_differential_spec.rb
1672
+ - spec/components/checks/passive/interesting_responses_spec.rb
1673
+ - spec/components/checks/passive/localstart_asp_spec.rb
1674
+ - spec/components/checks/passive/http_put_spec.rb
1675
+ - spec/components/checks/passive/htaccess_limit_spec.rb
1676
+ - spec/components/checks/passive/common_files_spec.rb
1677
+ - spec/components/checks/passive/allowed_methods_spec.rb
1678
+ - spec/components/checks/passive/xst_spec.rb
1679
+ - spec/components/checks/passive/backup_files_spec.rb
1680
+ - spec/components/checks/passive/backup_directories_spec.rb
1681
+ - spec/components/checks/passive/grep/mixed_resource_spec.rb
1682
+ - spec/components/checks/passive/grep/cvs_svn_users_spec.rb
1683
+ - spec/components/checks/passive/grep/ssn_spec.rb
1684
+ - spec/components/checks/passive/grep/http_only_cookies_spec.rb
1685
+ - spec/components/checks/passive/grep/password_autocomplete_spec.rb
1686
+ - spec/components/checks/passive/grep/unencrypted_password_forms_spec.rb
1687
+ - spec/components/checks/passive/grep/private_ip_spec.rb
1688
+ - spec/components/checks/passive/grep/credit_card_spec.rb
1689
+ - spec/components/checks/passive/grep/captcha_spec.rb
1690
+ - spec/components/checks/passive/grep/insecure_cookies_spec.rb
1691
+ - spec/components/checks/passive/grep/form_upload_spec.rb
1692
+ - spec/components/checks/passive/grep/cookie_set_for_parent_domain_spec.rb
1693
+ - spec/components/checks/passive/grep/html_objects_spec.rb
1694
+ - spec/components/checks/passive/grep/hsts_spec.rb
1695
+ - spec/components/checks/passive/grep/emails_spec.rb
1696
+ - spec/components/checks/passive/directory_listing_spec.rb
1697
+ - spec/components/checks/passive/origin_spoof_access_restriction_bypass_spec.rb
1698
+ - spec/components/checks/passive/common_directories_spec.rb
1699
+ - spec/components/checks/passive/webdav_spec.rb
1700
+ - spec/components/checks/passive/backdoors_spec.rb
1701
+ - spec/components/fingerprinters/os/solaris_spec.rb
1702
+ - spec/components/fingerprinters/os/windows_spec.rb
1703
+ - spec/components/fingerprinters/os/linux_spec.rb
1704
+ - spec/components/fingerprinters/os/unix_spec.rb
1705
+ - spec/components/fingerprinters/os/bsd_spec.rb
1706
+ - spec/components/fingerprinters/servers/nginx_spec.rb
1707
+ - spec/components/fingerprinters/servers/jetty_spec.rb
1708
+ - spec/components/fingerprinters/servers/iis_spec.rb
1709
+ - spec/components/fingerprinters/servers/tomcat_spec.rb
1710
+ - spec/components/fingerprinters/servers/apache_spec.rb
1711
+ - spec/components/fingerprinters/languages/aspx_spec.rb
1712
+ - spec/components/fingerprinters/languages/php_spec.rb
1713
+ - spec/components/fingerprinters/languages/python_spec.rb
1714
+ - spec/components/fingerprinters/languages/ruby.rb
1715
+ - spec/components/fingerprinters/languages/jsp_spec.rb
1716
+ - spec/components/fingerprinters/languages/asp_spec.rb
1717
+ - spec/components/fingerprinters/frameworks/rack_spec.rb
1768
1718
  - spec/spec_helper.rb
1769
- - spec/fingerprinters/os/solaris_spec.rb
1770
- - spec/fingerprinters/os/windows_spec.rb
1771
- - spec/fingerprinters/os/linux_spec.rb
1772
- - spec/fingerprinters/os/unix_spec.rb
1773
- - spec/fingerprinters/os/bsd_spec.rb
1774
- - spec/fingerprinters/servers/nginx_spec.rb
1775
- - spec/fingerprinters/servers/jetty_spec.rb
1776
- - spec/fingerprinters/servers/iis_spec.rb
1777
- - spec/fingerprinters/servers/tomcat_spec.rb
1778
- - spec/fingerprinters/servers/apache_spec.rb
1779
- - spec/fingerprinters/languages/aspx_spec.rb
1780
- - spec/fingerprinters/languages/php_spec.rb
1781
- - spec/fingerprinters/languages/python_spec.rb
1782
- - spec/fingerprinters/languages/ruby.rb
1783
- - spec/fingerprinters/languages/jsp_spec.rb
1784
- - spec/fingerprinters/languages/asp_spec.rb
1785
- - spec/fingerprinters/frameworks/rack_spec.rb
1786
1719
  - spec/arachni/session_spec.rb
1720
+ - spec/arachni/browser/javascript/dom_monitor_spec.rb
1721
+ - spec/arachni/browser/javascript/proxy/stub_spec.rb
1722
+ - spec/arachni/browser/javascript/taint_tracer_spec.rb
1723
+ - spec/arachni/browser/javascript/taint_tracer/frame/called_function_spec.rb
1724
+ - spec/arachni/browser/javascript/taint_tracer/frame_spec.rb
1725
+ - spec/arachni/browser/javascript/taint_tracer/sink/execution_flow_spec.rb
1726
+ - spec/arachni/browser/javascript/taint_tracer/sink/data_flow_spec.rb
1727
+ - spec/arachni/browser/javascript/proxy_spec.rb
1728
+ - spec/arachni/browser/element_locator_spec.rb
1729
+ - spec/arachni/browser/javascript_spec.rb
1730
+ - spec/arachni/option_groups/session_spec.rb
1731
+ - spec/arachni/option_groups/paths_spec.rb
1732
+ - spec/arachni/option_groups/dispatcher_spec.rb
1733
+ - spec/arachni/option_groups/browser_cluster_spec.rb
1734
+ - spec/arachni/option_groups/datastore_spec.rb
1735
+ - spec/arachni/option_groups/http_spec.rb
1736
+ - spec/arachni/option_groups/rpc_spec.rb
1737
+ - spec/arachni/option_groups/snapshot_spec.rb
1738
+ - spec/arachni/option_groups/output_spec.rb
1739
+ - spec/arachni/option_groups/scope_spec.rb
1740
+ - spec/arachni/option_groups/input_spec.rb
1741
+ - spec/arachni/option_groups/audit_spec.rb
1742
+ - spec/arachni/component/utilities_spec.rb
1743
+ - spec/arachni/component/utilities_spec/read_file.txt
1787
1744
  - spec/arachni/component/options/int_spec.rb
1788
1745
  - spec/arachni/component/options/path_spec.rb
1746
+ - spec/arachni/component/options/multiple_choice_spec.rb
1789
1747
  - spec/arachni/component/options/port_spec.rb
1790
1748
  - spec/arachni/component/options/string_spec.rb
1749
+ - spec/arachni/component/options/object_spec.rb
1791
1750
  - spec/arachni/component/options/float_spec.rb
1792
1751
  - spec/arachni/component/options/bool_spec.rb
1793
1752
  - spec/arachni/component/options/url_spec.rb
1794
- - spec/arachni/component/options/enum_spec.rb
1795
1753
  - spec/arachni/component/options/address_spec.rb
1796
1754
  - spec/arachni/component/options/base_spec.rb
1797
1755
  - spec/arachni/component/manager_spec.rb
1756
+ - spec/arachni/component/base_spec.rb
1798
1757
  - spec/arachni/utilities_spec.rb
1799
1758
  - spec/arachni/rpc/server/dispatcher_spec.rb
1800
- - spec/arachni/rpc/server/modules/manager_spec.rb
1801
- - spec/arachni/rpc/server/dispatcher/handler_spec.rb
1759
+ - spec/arachni/rpc/server/dispatcher/service_spec.rb
1802
1760
  - spec/arachni/rpc/server/dispatcher/node_spec.rb
1803
- - spec/arachni/rpc/server/spider_spec.rb
1761
+ - spec/arachni/rpc/server/framework_multi_spec.rb
1804
1762
  - spec/arachni/rpc/server/framework/distributor_spec.rb
1805
1763
  - spec/arachni/rpc/server/output_spec.rb
1764
+ - spec/arachni/rpc/server/checks/manager_spec.rb
1765
+ - spec/arachni/rpc/server/framework_spec.rb
1806
1766
  - spec/arachni/rpc/server/active_options_spec.rb
1807
1767
  - spec/arachni/rpc/server/instance_spec.rb
1808
- - spec/arachni/rpc/server/framework_hpg_spec.rb
1809
1768
  - spec/arachni/rpc/server/plugin/manager_spec.rb
1810
- - spec/arachni/rpc/server/framework_simple_spec.rb
1811
1769
  - spec/arachni/rpc/server/base_spec.rb
1812
1770
  - spec/arachni/rpc/client/dispatcher_spec.rb
1813
1771
  - spec/arachni/rpc/client/instance_spec.rb
1814
1772
  - spec/arachni/rpc/client/base_spec.rb
1773
+ - spec/arachni/page/dom_spec.rb
1774
+ - spec/arachni/page/scope_spec.rb
1775
+ - spec/arachni/page/dom/transition_spec.rb
1776
+ - spec/arachni/uri/scope_spec.rb
1815
1777
  - spec/arachni/support/buffer/autoflush_spec.rb
1816
1778
  - spec/arachni/support/buffer/base_spec.rb
1817
1779
  - spec/arachni/support/crypto/rsa_aes_cbc_spec.rb
1780
+ - spec/arachni/support/mixins/observable_spec.rb
1818
1781
  - spec/arachni/support/cache/least_recently_used_spec.rb
1819
1782
  - spec/arachni/support/cache/least_cost_replacement_spec.rb
1820
1783
  - spec/arachni/support/cache/preference_spec.rb
1821
1784
  - spec/arachni/support/cache/random_replacement_spec.rb
1822
- - spec/arachni/support/cache/base_spec.rb
1823
- - spec/arachni/support/queue/disk_spec.rb
1824
- - spec/arachni/support/key_filler.rb
1825
1785
  - spec/arachni/support/lookup/moolb_spec.rb
1826
1786
  - spec/arachni/support/lookup/hash_set_spec.rb
1827
1787
  - spec/arachni/support/signature_spec.rb
@@ -1830,33 +1790,54 @@ test_files:
1830
1790
  - spec/arachni/element/body_spec.rb
1831
1791
  - spec/arachni/element/server_spec.rb
1832
1792
  - spec/arachni/element/path_spec.rb
1833
- - spec/arachni/element/capabilities/mutable_spec.rb
1834
- - spec/arachni/element/capabilities/auditable/rdiff_spec.rb
1835
- - spec/arachni/element/capabilities/auditable/taint_spec.rb
1836
- - spec/arachni/element/capabilities/auditable/timeout_spec.rb
1793
+ - spec/arachni/element/link/dom_spec.rb
1794
+ - spec/arachni/element/form/dom_spec.rb
1795
+ - spec/arachni/element/capabilities/analyzable/differential_spec.rb
1796
+ - spec/arachni/element/capabilities/analyzable/taint_spec.rb
1797
+ - spec/arachni/element/capabilities/analyzable/timeout_spec.rb
1798
+ - spec/arachni/element/capabilities/with_scope/scope_spec.rb
1799
+ - spec/arachni/element/cookie/dom_spec.rb
1837
1800
  - spec/arachni/element/header_spec.rb
1801
+ - spec/arachni/element/generic_dom_spec.rb
1838
1802
  - spec/arachni/element/cookie_spec.rb
1839
1803
  - spec/arachni/element/form_spec.rb
1804
+ - spec/arachni/element/link_template/dom_spec.rb
1840
1805
  - spec/arachni/element/link_spec.rb
1841
- - spec/arachni/element/base_spec.rb
1842
- - spec/arachni/mixins/observable_spec.rb
1843
- - spec/arachni/mixins/progress_bar_spec.rb
1806
+ - spec/arachni/element/link_template_spec.rb
1807
+ - spec/arachni/data/session_spec.rb
1808
+ - spec/arachni/data/framework/rpc_spec.rb
1809
+ - spec/arachni/data/framework_spec.rb
1810
+ - spec/arachni/data/issues_spec.rb
1811
+ - spec/arachni/data/plugins_spec.rb
1812
+ - spec/arachni/state/element_filter_spec.rb
1813
+ - spec/arachni/state/options_spec.rb
1814
+ - spec/arachni/state/http_spec.rb
1815
+ - spec/arachni/state/framework/rpc_spec.rb
1816
+ - spec/arachni/state/framework_spec.rb
1817
+ - spec/arachni/state/audit_spec.rb
1818
+ - spec/arachni/state/plugins_spec.rb
1844
1819
  - spec/arachni/element_filter_spec.rb
1820
+ - spec/arachni/check/auditor_spec.rb
1821
+ - spec/arachni/check/manager_spec.rb
1822
+ - spec/arachni/check/base_spec.rb
1823
+ - spec/arachni/browser_cluster_spec.rb
1845
1824
  - spec/arachni/options_spec.rb
1846
- - spec/arachni/http_spec.rb
1847
1825
  - spec/arachni/trainer_spec.rb
1848
- - spec/arachni/spider_spec.rb
1849
- - spec/arachni/audit_store_spec.rb
1850
1826
  - spec/arachni/uri_spec.rb
1851
- - spec/arachni/report/manager_spec.rb
1852
- - spec/arachni/report/base_spec.rb
1853
- - spec/arachni/typhoeus/requrest_spec.rb
1854
- - spec/arachni/typhoeus/response_spec.rb
1827
+ - spec/arachni/browser_spec.rb
1828
+ - spec/arachni/snapshot_spec.rb
1855
1829
  - spec/arachni/typhoeus/hydra_spec.rb
1856
1830
  - spec/arachni/framework_spec.rb
1831
+ - spec/arachni/http/client_spec.rb
1832
+ - spec/arachni/http/request_spec.rb
1833
+ - spec/arachni/http/response/scope_spec.rb
1834
+ - spec/arachni/http/proxy_server_spec.rb
1835
+ - spec/arachni/http/message_spec.rb
1836
+ - spec/arachni/http/response_spec.rb
1857
1837
  - spec/arachni/http/cookie_jar_spec.rb
1838
+ - spec/arachni/http/headers_spec.rb
1839
+ - spec/arachni/scope_spec.rb
1858
1840
  - spec/arachni/ruby/webrick_spec.rb
1859
- - spec/arachni/ruby/enumerable_spec.rb
1860
1841
  - spec/arachni/ruby/io_spec.rb
1861
1842
  - spec/arachni/ruby/string_spec.rb
1862
1843
  - spec/arachni/ruby/hash_spec.rb
@@ -1867,12 +1848,25 @@ test_files:
1867
1848
  - spec/arachni/platform/fingerprinter_spec.rb
1868
1849
  - spec/arachni/platform/manager_spec.rb
1869
1850
  - spec/arachni/page_spec.rb
1870
- - spec/arachni/module/utilities_spec.rb
1871
- - spec/arachni/module/auditor_spec.rb
1872
- - spec/arachni/module/utilities_spec/read_file.txt
1873
- - spec/arachni/module/manager_spec.rb
1851
+ - spec/arachni/report_spec.rb
1852
+ - spec/arachni/state_spec.rb
1874
1853
  - spec/arachni/issue_spec.rb
1854
+ - spec/arachni/browser_cluster/job_spec.rb
1855
+ - spec/arachni/browser_cluster/job/result_spec.rb
1856
+ - spec/arachni/browser_cluster/jobs/resource_exploration_spec.rb
1857
+ - spec/arachni/browser_cluster/jobs/taint_tracer_spec.rb
1858
+ - spec/arachni/browser_cluster/jobs/resource_exploration/result_spec.rb
1859
+ - spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger_spec.rb
1860
+ - spec/arachni/browser_cluster/jobs/resource_exploration/event_trigger/result_spec.rb
1861
+ - spec/arachni/browser_cluster/worker_spec.rb
1875
1862
  - spec/arachni/error_spec.rb
1876
1863
  - spec/arachni/plugin/manager_spec.rb
1864
+ - spec/arachni/plugin/base_spec.rb
1865
+ - spec/arachni/reporter/options_spec.rb
1866
+ - spec/arachni/reporter/manager_spec.rb
1867
+ - spec/arachni/reporter/base_spec.rb
1877
1868
  - spec/arachni/parser_spec.rb
1869
+ - spec/arachni/issue/severity/base_spec.rb
1870
+ - spec/arachni/issue/severity_spec.rb
1871
+ - spec/arachni/data_spec.rb
1878
1872
  has_rdoc: