arachni 1.1 → 1.2

data/spec/components/plugins/restrict_to_dom_state_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+describe name_from_filename do
+    include_examples 'plugin'
+
+    before( :all ) do
+        options.url = url
+    end
+
+    it 'audits only the page at the specific DOM state' do
+        options.plugins[component_name] = { 'fragment' => 'stuff/blah' }
+
+        run
+        framework.sitemap.should == { "#{options.url}#stuff/blah" => 200 }
+    end
+end

data/spec/components/plugins/vector_feed_spec.rb

@@ -45,6 +45,16 @@ describe name_from_filename do
                 'type'   => 'header',
                 'action' => "#{url}header",
                 'inputs' => { 'User-Agent' => "Blah/2" }
+            },
+            {
+                'type'   => 'json',
+                'action' => "#{url}json",
+                'source' => '{"name": "value"}'
+            },
+            {
+                'type'   => 'xml',
+                'action' => "#{url}xml",
+                'source' => '<forgot><username>admin</username></forgot>'
             }
         ]
     end
@@ -116,9 +126,37 @@ describe name_from_filename do
 
                 oks += 1
             end
+
+            if page.jsons.any?
+                json = v.select { |vector| vector['type'] == 'json' }.first
+                page.jsons.first.action.should == json['action']
+                page.jsons.first.source.should == json['source']
+                page.jsons.first.inputs.should == { 'name' => 'value' }
+
+                page.url.should  == json['action']
+                page.code.should == 200
+                page.body.should == ''
+
+                oks += 1
+            end
+
+            if page.xmls.any?
+                xml = v.select { |vector| vector['type'] == 'xml' }.first
+                page.xmls.first.action.should == xml['action']
+                page.xmls.first.source.should == xml['source']
+                page.xmls.first.inputs.should == {
+                    'forgot > username > text()' => 'admin'
+                }
+
+                page.url.should  == xml['action']
+                page.code.should == 200
+                page.body.should == ''
+
+                oks += 1
+            end
         end
 
-        oks.should == 5
+        oks.should == 7
     end
 
     def run_test

data/spec/support/factories/page/dom.rb

@@ -1,9 +1,14 @@
 Factory.define :dom_data do
     {
-        skip_states:         Arachni::Support::LookUp::HashSet.new.tap { |h| h << 0 },
-        transitions:         [ Factory[:transition]],
-        digest:              'stuff',
-        data_flow_sinks:     [ Factory[:data_flow] ],
+        skip_states:          Arachni::Support::LookUp::HashSet.new.tap { |h| h << 0 },
+        transitions:          [
+            Factory[:page_load_with_cookies_transition].complete,
+            Factory[:request_transition].complete,
+            Factory[:input_transition].complete,
+            Factory[:form_input_transition].complete
+        ],
+        digest:               'stuff',
+        data_flow_sinks:      [ Factory[:data_flow] ],
         execution_flow_sinks: [ Factory[:execution_flow] ]
     }
 end

data/spec/support/factories/page/dom/transition.rb

@@ -7,13 +7,11 @@ Factory.define :running_transition do
 end
 
 Factory.define :completed_transition do
-    Arachni::Page::DOM::Transition.new( :page, :load,
-        extra: {
-            options: {
-                stuff: 'here'
-            }
-        }
-    ).complete
+    Arachni::Page::DOM::Transition.new( :page, :load, stuff: 'here' ).complete
+end
+
+Factory.define :request_transition do
+    Arachni::Page::DOM::Transition.new( 'http://test.com', :request )
 end
 
 Factory.define :empty_transition do
@@ -24,6 +22,16 @@ Factory.define :empty_transition do
     Arachni::Page::DOM::Transition.new
 end
 
+Factory.define :page_load_with_cookies_transition do
+    Arachni::Page::DOM::Transition.new(
+        :page, :load,
+        url: 'http://a-url.com/?myvar=my%20value',
+        cookies: {
+            'myname' => 'myvalue'
+        }
+    )
+end
+
 Factory.define :input_transition do
     Arachni::Page::DOM::Transition.new(
         Arachni::Browser::ElementLocator.new(
@@ -35,8 +43,22 @@ Factory.define :input_transition do
             }
         ),
         :input,
-        options: {
-            value: "<some_dangerous_input_a9838b473d1f6db80b6342d1c61f9fa2></some_dangerous_input_a9838b473d1f6db80b6342d1c61f9fa2> "
+        value: "<some_dangerous_input_a9838b473d1f6db80b6342d1c61f9fa2></some_dangerous_input_a9838b473d1f6db80b6342d1c61f9fa2> "
+    )
+end
+
+Factory.define :form_input_transition do
+    Arachni::Page::DOM::Transition.new(
+        Arachni::Browser::ElementLocator.new(
+            tag_name:   :form,
+            attributes: {
+                "id" => "my-form",
+                "name" => "my-form"
+            }
+        ),
+        :submit,
+        inputs: {
+            'input-name' => "<some_dangerous_input_a9838b473d1f6db80b6342d1c61f9fa2></some_dangerous_input_a9838b473d1f6db80b6342d1c61f9fa2> "
         }
     )
 end

data/spec/support/factories/scan_report.rb

@@ -1,13 +1,15 @@
 Factory.define :report_data do
+    issues = Arachni::Data::Issues.new
+
+    (0..10).map do |i|
+        issues << Factory[:passive_issue].tap { |issue| issue.vector.action += i.to_s }
+        issues << Factory[:active_issue].tap { |issue| issue.vector.action += i.to_s }
+    end
+
     {
         options:  Arachni::Options.to_hash,
         sitemap:  { Arachni::Options.url => 200 },
-        issues:   (0..10).map do |i|
-            [
-                Factory[:passive_issue].tap { |issue| issue.vector.action += i.to_s },
-                Factory[:active_issue].tap { |issue| issue.vector.action += i.to_s }
-            ]
-        end.flatten,
+        issues:   issues,
         plugins:  {
             plugin_name: {
                 results: 'stuff',

data/spec/support/fixtures/reporters/manager_spec/error.rb

@@ -0,0 +1,18 @@
+=begin
+    Copyright 2010-2015 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+
+    This file is part of the Arachni Framework project and is subject to
+    redistribution and commercial restrictions. Please see the Arachni Framework
+    web site for more information on licensing and terms of use.
+=end
+
+class Arachni::Reporters::Error < Arachni::Reporter::Base
+
+    def run
+        fail
+    end
+
+    def self.info
+        super.merge( options: [ Options.outfile( 'foo' ) ] )
+    end
+end

data/spec/support/servers/arachni/browser.rb

@@ -2,7 +2,8 @@ require 'sinatra'
 require 'sinatra/contrib'
 require_relative '../../../../lib/arachni'
 
-@@hit_count ||= 0
+@@hit_count       ||= 0
+@@image_hit_count ||= 0
 
 get '/' do
     @@hit_count += 1
@@ -27,6 +28,111 @@ get '/' do
 HTML
 end
 
+get '/If-None-Match' do
+    etag '1'
+
+    <<HTML
+<html>
+    <script src="/If-None-Match/asset"></script>
+
+    <body>
+    </body>
+</html>
+HTML
+end
+
+get '/If-None-Match/asset' do
+    etag '1'
+    ''
+end
+
+get '/If-Modified-Since' do
+    last_modified Time.now - 24*60*60
+    expires -1
+
+    <<HTML
+<html>
+    <script src="/If-Modified-Since/asset"></script>
+
+    <body>
+    </body>
+</html>
+HTML
+end
+
+get '/If-Modified-Since/asset' do
+    last_modified Time.now - 24*60*60
+    expires -1
+
+    ''
+end
+
+get '/wait_for_elements' do
+    <<HTML
+<html>
+    <body>
+    </body>
+
+    <script>
+        setInterval( function(){ document.write( '<button id="matchThis" />' ); }, 5000 );
+    </script>
+</html>
+HTML
+end
+
+get '/asset_domains' do
+end
+
+get '/asset_domains/link' do
+    <<HTML
+<html>
+    <body>
+        <link href="http://blah.link.stuff/link.css" />
+    </body>
+</html>
+HTML
+end
+
+get '/asset_domains/input' do
+    <<HTML
+<html>
+    <body>
+        <input type="image" src="http://blah.input.stuff/input.png" />
+    </body>
+</html>
+HTML
+end
+
+get '/asset_domains/script' do
+    <<HTML
+<html>
+    <body>
+        <script src="http://blah.script.stuff/script"></script>
+    </body>
+</html>
+HTML
+end
+
+get '/asset_domains/img' do
+    <<HTML
+<html>
+    <body>
+        <img src="http://blah.img.stuff/img.png" />
+    </body>
+</html>
+HTML
+end
+
+get '/asset_domains/extension/js' do
+    <<HTML
+<html>
+    <body>
+        <script src="http://code.jquery.com/jquery-2.1.4.min.js"></script>
+    </body>
+</html>
+HTML
+end
+
 get '/ajax_sleep' do
     <<HTML
     <html>
@@ -286,6 +392,10 @@ get '/fire_event/form/image-input' do
 HTML
 end
 
+get '/test.png' do
+    @@image_hit_count += 1
+end
+
 Arachni::Browser::Javascript::EVENTS_PER_ELEMENT[:input].each do |event|
     get "/fire_event/input/#{event}" do
         <<-EOHTML
@@ -367,7 +477,7 @@ get '/form-with-image-button' do
     <html>
       <form>
         <input type="text" name="stuff" value="blah">
-        <input type="image" name="myImageButton" src="/__sinatra__/404.png">
+        <input type="image" name="myImageButton" src="/test.png">
       </form>
     </html>
 HTML
@@ -697,14 +807,6 @@ get '/dom-cookies-values' do
 HTML
 end
 
-get '/image.png' do
-    @@image_hit = true
-end
-
-get '/image-hit' do
-    @@image_hit.to_s
-end
-
 get '/explore' do
     <<HTML
 <html>
@@ -936,6 +1038,10 @@ get '/hit-count' do
     @@hit_count.to_s
 end
 
+get '/image-hit-count' do
+    @@image_hit_count.to_s
+end
+
 get '/clear-hit-count' do
-    @@hit_count = 0
+    @@image_hit_count = @@hit_count = 0
 end

data/spec/support/servers/arachni/browser/javascript/dom_monitor.rb

@@ -1,6 +1,8 @@
 require 'sinatra'
 require 'sinatra/contrib'
 
+JS_LIB = "#{File.dirname( __FILE__ )}/"
+
 get '/' do
     <<HTML
     <html>
@@ -85,11 +87,21 @@ get '/intervals' do
 HTML
 end
 
-get '/elements_with_events' do
+get '/elements_with_events/attributes' do
     <<HTML
-    <button onclick="handler_1()" id="my-button">Click me</button>
-    <button onclick="handler_2()" id="my-button2">Click me too</button>
-    <button onclick="handler_3()" id="my-button3">Don't bother clicking me</button>
+    <body>
+        <button onclick="handler_1()" id="my-button">Click me</button>
+        <button onclick="handler_2()" id="my-button2">Click me too</button>
+        <button onclick="handler_3()" id="my-button3">Don't bother clicking me</button>
+    </body>
+HTML
+end
+
+get '/elements_with_events/listeners' do
+    <<HTML
+    <button id="my-button">Click me</button>
+    <button id="my-button2">Click me too</button>
+    <button id="my-button3">Don't bother clicking me</button>
 
     <script>
         document.getElementById( "my-button" ).addEventListener( "click", function( my_button_click ){}, false );
@@ -101,6 +113,121 @@ get '/elements_with_events' do
 HTML
 end
 
+get '/elements_with_events/listeners/custom' do
+    <<HTML
+    <button id="my-button">Click me</button>
+
+    <script>
+        document.getElementById( "my-button" ).addEventListener( "custom_event", function(){}, false );
+    </script>
+HTML
+end
+
+get '/elements_with_events/jQuery.on' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <body>
+        <button id="my-button">Click me</button>
+    </body>
+
+    <script>
+        $('#my-button').on( 'click', function (){});
+    </script>
+HTML
+end
+
+get '/elements_with_events/jQuery.on-object-types' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <body>
+        <button id="my-button">Click me</button>
+    </body>
+
+    <script>
+        $('#my-button').on({
+            click: function (){},
+            hover: function (){}
+        });
+    </script>
+HTML
+end
+
+get '/elements_with_events/jQuery.on-selector' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <body id='body'>
+        <script>
+            $('body').on( 'click', '#my-button', function (){
+
+            });
+
+            $('body').on( 'hover', '#my-button', function (){
+
+            });
+
+            $('body').on( 'click', '#my-button-2', function (){
+
+            });
+        </script>
+
+        <button id="my-button">Click me</button>
+        <button id="my-button-2">Click me</button>
+    </body>
+HTML
+end
+
+get '/elements_with_events/jQuery.on-object-types-selector' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <body id='body'>
+        <script>
+            $('body').on({
+                click: function (){},
+                hover: function (){}
+            }, '#my-button');
+        </script>
+
+        <button id="my-button">Click me</button>
+        <button id="my-button-2">Click me</button>
+    </body>
+HTML
+end
+
+get '/elements_with_events/jQuery.delegate' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <body id='body'>
+        <script>
+            $('body').delegate( '#my-button', 'click', function (){});
+        </script>
+
+        <button id="my-button">Click me</button>
+    </body>
+HTML
+end
+
+get '/elements_with_events/jQuery.delegate-object-types' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <body id='body'>
+        <script>
+            $('body').delegate( '#my-button', {
+                click: function (){},
+                hover: function (){}
+            });
+        </script>
+
+        <button id="my-button">Click me</button>
+    </body>
+HTML
+end
+
 get '/elements_with_events/with-hidden' do
     <<HTML
     <button onclick="handler_1()" id="my-button">Click me</button>
@@ -112,6 +239,18 @@ get '/elements_with_events/with-hidden' do
 HTML
 end
 
+get '/elements_with_events/custom-dot-delimited' do
+    <<HTML
+    <script src="/jquery.js"></script>
+
+    <button id="my-button">Click me</button>
+
+    <script>
+        $('#my-button').on( 'click.stuff', function (){});
+    </script>
+HTML
+end
+
 get '/set_element_ids' do
     <<HTML
         <a name="1" href="by-ajax" id="by-ajax">Stuff 1</a>
@@ -126,3 +265,8 @@ get '/set_element_ids' do
     </script>
 HTML
 end
+
+get '/jquery.js' do
+    content_type 'text/javascript'
+    IO.read "#{JS_LIB}/jquery-2.0.3.js"
+end