arachni 1.1 → 1.2

data/spec/components/fingerprinters/frameworks/rails_spec.rb

@@ -0,0 +1,53 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Rails do
+    include_examples 'fingerprinter'
+
+    def platforms
+        [:ruby, :rack, :rails]
+    end
+
+    context 'when there is an Server header' do
+        context 'and it contains Rails' do
+            it 'identifies it as Ruby' do
+                check_platforms Arachni::Page.from_data(
+                    url:     'http://stuff.com/blah',
+                    response: { headers: { 'Server' => 'Rails' } }
+                )
+            end
+        end
+    end
+
+    context 'when there is a X-Powered-By header' do
+        context 'and it contains X-Powered-By' do
+            it 'identifies it as Rails' do
+                check_platforms Arachni::Page.from_data(
+                    url:     'http://stuff.com/blah',
+                    response: { headers: { 'X-Powered-By' => 'Rails' } }
+                )
+            end
+        end
+    end
+
+    context 'when there are X-Rails headers' do
+        it 'identifies it as Rails' do
+            check_platforms Arachni::Page.from_data(
+                url: 'http://stuff.com/blah',
+                response: { headers: { 'X-Rails-Stuff' => 'Blah' } }
+            )
+        end
+    end
+
+    context 'when there is a _rails_admin_session cookie' do
+        it 'identifies it as Rails' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new(
+                              url:    'http://stuff.com/blah',
+                              inputs: { '_rails_admin_session' => 'stuff' } )]
+
+            )
+        end
+    end
+
+end

data/spec/components/fingerprinters/languages/asp_spec.rb

@@ -3,35 +3,33 @@ require 'spec_helper'
 describe Arachni::Platform::Fingerprinters::ASP do
     include_examples 'fingerprinter'
 
+    def platforms
+        [:asp, :windows]
+    end
+
     context 'when the page has a .asp extension' do
         it 'identifies it as ASP' do
-            page = Arachni::Page.from_data( url: 'http://stuff.com/blah.asp' )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :windows
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.asp' )
         end
     end
 
     context 'when there is a ASPSESSIONID query parameter' do
         it 'identifies it as ASP' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url: 'http://stuff.com/blah?ASPSESSIONID=stuff'
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :windows
         end
     end
 
     context 'when there is a ASPSESSIONID cookie' do
         it 'identifies it as ASP' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 cookies: [Arachni::Cookie.new(
                               url:    'http://stuff.com/blah',
                               inputs: { 'ASPSESSIONID' => 'stuff' } )]
 
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :windows
         end
     end
 

data/spec/components/fingerprinters/languages/aspx_spec.rb

@@ -3,76 +3,62 @@ require 'spec_helper'
 describe Arachni::Platform::Fingerprinters::ASPX do
     include_examples 'fingerprinter'
 
+    def platforms
+        [:asp, :aspx, :windows]
+    end
+
     context 'when the page has a .aspx extension' do
         it 'identifies it as ASPX' do
-            page = Arachni::Page.from_data( url: 'http://stuff.com/blah.aspx' )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :aspx
-            platforms_for( page ).should include :windows
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.aspx' )
         end
     end
 
     context 'when there is a session ID in the path' do
         it 'identifies it as ASPX' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:        'http://blah.com/(S(yn5cby55lgzstcen0ng2b4iq))/stuff'
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :aspx
-            platforms_for( page ).should include :windows
         end
     end
 
     context 'when there is a ASP.NET_SessionId cookie' do
         it 'identifies it as ASPX' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 cookies: [Arachni::Cookie.new(
                               url:  'http://stuff.com/blah',
                               inputs: { 'ASP.NET_SessionId' => 'stuff' } )]
 
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :aspx
-            platforms_for( page ).should include :windows
         end
     end
 
     context 'when there is an X-Powered-By header' do
         it 'identifies it as ASPX' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 response: { headers: { 'X-Powered-By' => 'ASP.NET'  } }
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :aspx
-            platforms_for( page ).should include :windows
         end
     end
 
     context 'when there is an X-AspNet-Version header' do
         it 'identifies it as ASPX' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 response: { headers: { 'X-AspNet-Version' => '4.0.30319' } }
 
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :aspx
-            platforms_for( page ).should include :windows
         end
     end
 
     context 'when there is an X-AspNetMvc-Version header' do
         it 'identifies it as ASPX' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 response: { headers: { 'X-AspNetMvc-Version' => '2.0' } }
 
             )
-            platforms_for( page ).should include :asp
-            platforms_for( page ).should include :aspx
-            platforms_for( page ).should include :windows
         end
     end
 

data/spec/components/fingerprinters/languages/java_spec.rb

@@ -0,0 +1,88 @@
+require 'spec_helper'
+
+describe Arachni::Platform::Fingerprinters::Java do
+    include_examples 'fingerprinter'
+
+    def platforms
+        [:java]
+    end
+
+    context 'when the page has a .jsp extension' do
+        it 'identifies it as JSP' do
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.jsp' )
+        end
+    end
+
+    context 'when there is a JSESSIONID query parameter' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url: 'http://stuff.com/blah?JSESSIONID=stuff'
+            )
+        end
+    end
+
+    context 'when there is a JSESSIONID cookie' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                cookies: [Arachni::Cookie.new(
+                              url: 'http://stuff.com/blah',
+                              inputs: { 'JSESSIONID' => 'stuff' } )]
+            )
+        end
+    end
+
+    context 'when there is an X-Powered-By header with Servlet' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                response: { headers:  { 'X-Powered-By' => 'Servlet/2.4' } }
+            )
+        end
+    end
+
+    context 'when there is an X-Powered-By header with JSP' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                response: { headers:  { 'X-Powered-By' => 'JSP/2.1' } }
+            )
+        end
+    end
+
+    context 'when there is an X-Powered-By header with JBoss' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                response: { headers:  { 'X-Powered-By' => 'JBossWeb-2.1' } }
+            )
+        end
+    end
+
+    context 'when there is an X-Powered-By header with GlassFish' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                response: { headers:  { 'X-Powered-By' => 'GlassFish Server' } }
+            )
+        end
+    end
+
+    context 'when there is an X-Powered-By header with Java' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                response: { headers:  { 'X-Powered-By' => 'Java' } }
+            )
+        end
+    end
+
+    context 'when there is an X-Powered-By header with Oracle' do
+        it 'identifies it as Java' do
+            check_platforms Arachni::Page.from_data(
+                url:     'http://stuff.com/blah',
+                response: { headers:  { 'X-Powered-By' => 'Oracle-Application-Server-10g/10.1.3.5.0 Oracle-HTTP-Server' } }
+            )
+        end
+    end
+end

data/spec/components/fingerprinters/languages/php_spec.rb

@@ -3,56 +3,63 @@ require 'spec_helper'
 describe Arachni::Platform::Fingerprinters::PHP do
     include_examples 'fingerprinter'
 
+    def platforms
+        [:php]
+    end
+
     context 'when the page has a .php extension' do
         it 'identifies it as PHP' do
-            page = Arachni::Page.from_data( url: 'http://stuff.com/blah.php' )
-            platforms_for( page ).should include :php
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.php' )
         end
     end
 
     context 'when the page has a .php/ rewrite' do
         it 'identifies it as PHP' do
-            page = Arachni::Page.from_data( url: 'http://stuff.com/blah.php/Stuff/1' )
-            platforms_for( page ).should include :php
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.php/Stuff/1' )
         end
     end
 
     context 'when the page has a .php5 (or similarly numbered) extension' do
         it 'identifies it as PHP' do
-            page = Arachni::Page.from_data( url: 'http://stuff.com/blah.php5' )
-            platforms_for( page ).should include :php
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.php5' )
         end
     end
 
     context 'when there is a PHPSESSID query parameter' do
         it 'identifies it as PHP' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url: 'http://stuff.com/blah?PHPSESSID=stuff'
             )
-            platforms_for( page ).should include :php
         end
     end
 
     context 'when there is a PHPSESSID cookie' do
         it 'identifies it as PHP' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 cookies: [Arachni::Cookie.new(
                               url: 'http://stuff.com/blah',
                               inputs: { 'PHPSESSID' => 'stuff' } )]
 
             )
-            platforms_for( page ).should include :php
         end
     end
 
     context 'when there is an X-Powered-By header' do
         it 'identifies it as PHP' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url: 'http://stuff.com/blah',
                 response: { headers: { 'X-Powered-By' => 'PHP/5.1.2' } }
             )
-            platforms_for( page ).should include :php
+        end
+    end
+
+    context 'when there is an X-PHP-PID header' do
+        it 'identifies it as PHP' do
+            check_platforms Arachni::Page.from_data(
+                url: 'http://stuff.com/blah',
+                response: { headers: { 'X-PHP-PID' => '2212' } }
+            )
         end
     end
 

data/spec/components/fingerprinters/languages/python_spec.rb

@@ -3,20 +3,33 @@ require 'spec_helper'
 describe Arachni::Platform::Fingerprinters::Python do
     include_examples 'fingerprinter'
 
+    def platforms
+        [:python]
+    end
+
     context 'when the page has a .py extension' do
         it 'identifies it as Python' do
-            page = Arachni::Page.from_data( url: 'http://stuff.com/blah.py' )
-            platforms_for( page ).should include :python
+            check_platforms Arachni::Page.from_data( url: 'http://stuff.com/blah.py' )
         end
     end
 
-    context 'when there is an X-Powered-By header' do
-        it 'identifies it as Python' do
-            page = Arachni::Page.from_data(
-                url:     'http://stuff.com/blah',
-                response: { headers: { 'X-Powered-By' => 'Python/stuff' } }
-            )
-            platforms_for( page ).should include :python
+    described_class::IDS.each do |id|
+        context "when there is an X-Powered-By header with #{id}" do
+            it 'identifies it as Python' do
+                check_platforms Arachni::Page.from_data(
+                    url:     'http://stuff.com/blah',
+                    response: { headers: { 'X-Powered-By' => "#{id}/stuff" } }
+                )
+            end
+        end
+
+        context "when there is a Server header with #{id}" do
+            it 'identifies it as Python' do
+                check_platforms Arachni::Page.from_data(
+                    url:     'http://stuff.com/blah',
+                    response: { headers: { 'Server' => "#{id}/stuff" } }
+                )
+            end
         end
     end
 

data/spec/components/fingerprinters/languages/ruby.rb

@@ -3,15 +3,18 @@ require 'spec_helper'
 describe Arachni::Platform::Fingerprinters::Ruby do
     include_examples 'fingerprinter'
 
+    def platforms
+        [:ruby]
+    end
+
     context 'when there is an Server header' do
         described_class::IDs.each do |id|
             context "and it contains #{id}" do
                 it 'identifies it as Ruby' do
-                    page = Arachni::Page.from_data(
+                    check_platforms Arachni::Page.from_data(
                         url:     'http://stuff.com/blah',
                         response: { headers: { 'Server' => "Apache/2.2.21 (#{id})" } }
                     )
-                    platforms_for( page ).should include :ruby
                 end
             end
         end
@@ -21,11 +24,10 @@ describe Arachni::Platform::Fingerprinters::Ruby do
         described_class::IDs.each do |id|
             context "and it contains #{id}" do
                 it 'identifies it as Ruby' do
-                    page = Arachni::Page.from_data(
+                    check_platforms Arachni::Page.from_data(
                         url:     'http://stuff.com/blah',
                         response: { headers: { 'X-Powered-By' => "Apache/2.2.21 (#{id})" } }
                     )
-                    platforms_for( page ).should include :ruby
                 end
             end
         end

data/spec/components/fingerprinters/os/bsd_spec.rb

@@ -3,23 +3,25 @@ require 'spec_helper'
 describe Arachni::Platform::Fingerprinters::BSD do
     include_examples 'fingerprinter'
 
+    def platforms
+        [:bsd]
+    end
+
     context 'when there is an Server header' do
         it 'identifies it as BSD' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 response: { headers: { 'Server' => 'Apache/2.2.21 (FreeBSD)' } }
             )
-            platforms_for( page ).should include :bsd
         end
     end
 
     context 'when there is a X-Powered-By header' do
         it 'identifies it as BSD' do
-            page = Arachni::Page.from_data(
+            check_platforms Arachni::Page.from_data(
                 url:     'http://stuff.com/blah',
                 response: { headers: { 'X-Powered-By' => 'Stuf/0.4 (FreeBSD)' } }
             )
-            platforms_for( page ).should include :bsd
         end
     end