arachni 1.0.4 → 1.0.5

data/spec/support/servers/plugins/login_script.rb

@@ -0,0 +1,13 @@
+require 'sinatra'
+require 'sinatra/contrib'
+
+get '/' do
+    cookies[:success] ||= 'false'
+
+    if cookies[:success] == 'true'
+        <<-HTML
+            <a href='/congrats'>Hi there logged-in user!</a>
+        HTML
+    end
+end
+

data/ui/cli/output.rb

@@ -48,6 +48,8 @@ module Output
         end
         @@error_fd = nil
 
+        @@error_buffer  = []
+
         @@error_logfile = "#{Options.paths.logs}error-#{Process.pid}.log"
     end
 
@@ -112,26 +114,41 @@ module Output
         if !@@error_log_written_env
             @@error_log_written_env = true
 
-            error_log_fd.puts
-            error_log_fd.puts "#{Time.now} " + ( '-' * 80 )
+            ['', "#{Time.now} " + ( '-' * 80 )].each do |s|
+                error_log_fd.puts s
+                @@error_buffer << s
+            end
 
             begin
                 h = {}
                 ENV.each { |k, v| h[k] = v }
-                error_log_fd.puts 'ENV:'
-                error_log_fd.puts h.to_yaml
-
-                error_log_fd.puts '-' * 80
 
-                error_log_fd.puts 'OPTIONS:'
-                error_log_fd.puts Arachni::Options.to_save_data
+                options = Arachni::Options.to_rpc_data
+                if options['http']['authentication_username']
+                    options['http']['authentication_username'] = '*****'
+                    options['http']['authentication_password'] =
+                        options['http']['authentication_username']
+                end
+                options = options.to_yaml
+
+                ['ENV:', h.to_yaml, '-' * 80, 'OPTIONS:', options].each do |s|
+                    error_log_fd.puts s
+                    @@error_buffer += s.split("\n")
+                end
             rescue
             end
 
             error_log_fd.puts '-' * 80
+            @@error_buffer << '-' * 80
         end
 
-        print_color( "[#{Time.now}]", 31, str, error_log_fd, true )
+        t = "[#{Time.now}]"
+        @@error_buffer << "#{t} #{str}"
+        print_color( t, 31, str, error_log_fd, true )
+    end
+
+    def error_buffer
+        @@error_buffer
     end
 
     # Used to draw attention to a bad situation which isn't an error.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: arachni
 version: !ruby/object:Gem::Version
-  version: 1.0.4
+  version: 1.0.5
 platform: ruby
 authors:
 - Tasos Laskos
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-25 00:00:00.000000000 Z
+date: 2014-11-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -436,6 +436,7 @@ files:
 - components/plugins/email_notify.rb
 - components/plugins/form_dicattack.rb
 - components/plugins/http_dicattack.rb
+- components/plugins/login_script.rb
 - components/plugins/proxy.rb
 - components/plugins/proxy/panel/403_forbidden.html.erb
 - components/plugins/proxy/panel/404_not_found.html.erb
@@ -524,6 +525,7 @@ files:
 - components/reporters/plugin_formatters/html/form_dicattack.rb
 - components/reporters/plugin_formatters/html/healthmap.rb
 - components/reporters/plugin_formatters/html/http_dicattack.rb
+- components/reporters/plugin_formatters/html/login_script.rb
 - components/reporters/plugin_formatters/html/uncommon_headers.rb
 - components/reporters/plugin_formatters/html/uniformity.rb
 - components/reporters/plugin_formatters/html/waf_detector.rb
@@ -533,6 +535,7 @@ files:
 - components/reporters/plugin_formatters/stdout/form_dicattack.rb
 - components/reporters/plugin_formatters/stdout/healthmap.rb
 - components/reporters/plugin_formatters/stdout/http_dicattack.rb
+- components/reporters/plugin_formatters/stdout/login_script.rb
 - components/reporters/plugin_formatters/stdout/uncommon_headers.rb
 - components/reporters/plugin_formatters/stdout/uniformity.rb
 - components/reporters/plugin_formatters/stdout/waf_detector.rb
@@ -542,6 +545,7 @@ files:
 - components/reporters/plugin_formatters/xml/form_dicattack.rb
 - components/reporters/plugin_formatters/xml/healthmap.rb
 - components/reporters/plugin_formatters/xml/http_dicattack.rb
+- components/reporters/plugin_formatters/xml/login_script.rb
 - components/reporters/plugin_formatters/xml/uncommon_headers.rb
 - components/reporters/plugin_formatters/xml/uniformity.rb
 - components/reporters/plugin_formatters/xml/waf_detector.rb
@@ -1024,6 +1028,7 @@ files:
 - spec/components/plugins/form_dicattack_spec.rb
 - spec/components/plugins/healthmap_spec.rb
 - spec/components/plugins/http_dicattack_spec.rb
+- spec/components/plugins/login_script_spec.rb
 - spec/components/plugins/meta/remedies/discovery_spec.rb
 - spec/components/plugins/meta/remedies/timing_attacks_spec.rb
 - spec/components/plugins/meta/uniformity_spec.rb
@@ -1268,6 +1273,7 @@ files:
 - spec/support/servers/plugins/http_dicattack.rb
 - spec/support/servers/plugins/http_dicattack_secure.rb
 - spec/support/servers/plugins/http_dicattack_unprotected.rb
+- spec/support/servers/plugins/login_script.rb
 - spec/support/servers/plugins/meta/remedies/discovery.rb
 - spec/support/servers/plugins/meta/remedies/timing_attacks.rb
 - spec/support/servers/plugins/uncommon_headers.rb
@@ -1355,7 +1361,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.2
+rubygems_version: 2.4.3
 signing_key: 
 specification_version: 4
 summary: Arachni is a feature-full, modular, high-performance Ruby framework aimed
@@ -1424,6 +1430,7 @@ test_files:
 - spec/support/servers/plugins/http_dicattack_unprotected.rb
 - spec/support/servers/plugins/autologin.rb
 - spec/support/servers/plugins/uncommon_headers.rb
+- spec/support/servers/plugins/login_script.rb
 - spec/support/servers/plugins/http_dicattack.rb
 - spec/support/servers/plugins/meta/remedies/timing_attacks.rb
 - spec/support/servers/plugins/meta/remedies/discovery.rb
@@ -1635,6 +1642,7 @@ test_files:
 - spec/components/plugins/script_spec.rb
 - spec/components/plugins/cookie_collector_spec.rb
 - spec/components/plugins/uncommon_headers_spec.rb
+- spec/components/plugins/login_script_spec.rb
 - spec/components/plugins/autologin_spec.rb
 - spec/components/plugins/meta/uniformity_spec.rb
 - spec/components/plugins/meta/remedies/discovery_spec.rb