arachni 1.1 → 1.2

data/components/plugins/vector_feed.rb

@@ -77,6 +77,7 @@ class Arachni::Plugins::VectorFeed < Arachni::Plugin::Base
         pages  = pages.values
         pages << page_buffer
         pages.flatten!
+
         if !pages.empty?
             print_status 'Pushing the vectors to the audit queue...'
             pages.each { |page| framework.push_to_page_queue( page, true ) }
@@ -105,37 +106,65 @@ class Arachni::Plugins::VectorFeed < Arachni::Plugin::Base
         owner  = framework.options.url.to_s
         action = vector[:action]
         inputs = vector[:inputs]
+        source = vector[:source].to_s
         method = vector[:method] || 'get'
-        type   = vector[:type]   || 'link'
+        type   = (vector[:type]  || 'link').to_s
 
-        return if !inputs || inputs.empty?
+        return if (!inputs || inputs.empty?) &&
+            (!(type == 'xml' || type == 'json') && !source.empty?)
 
         e = case type
             when Element::Link.type.to_s
-                Link.new(
+                Element::Link.new(
                     url:    owner,
                     action: action,
                     inputs: inputs,
+                    source: source
                 )
+
             when Element::Form.type.to_s
-                Form.new(
+                Element::Form.new(
                     url:    owner,
                     method: method,
                     action: action,
-                    inputs: inputs
+                    inputs: inputs,
+                    source: source
                 )
+
             when Element::Cookie.type.to_s
-                Cookie.new( url: action, inputs: inputs )
+                Element::Cookie.new(
+                    url:    action,
+                    inputs: inputs,
+                    source: source
+                )
+
             when Element::Header.type.to_s
                 Header.new( url: action, inputs: inputs )
+
+            when Element::JSON.type.to_s
+                Element::JSON.new(
+                    url:    action,
+                    inputs: inputs,
+                    source: source
+                )
+
+            when Element::XML.type.to_s
+                Element::XML.new(
+                    url:    action,
+                    inputs: inputs,
+                    source: source
+                )
+
             else
-                Link.new(
+                Element::Link.new(
                     url:    owner,
                     action: action,
                     inputs: inputs
                 )
-        end
+            end
+
         (vector[:skip] || []).each { |i| e.immutables << i }
+
         e
     end
 
@@ -205,7 +234,7 @@ Example YAML file:
 
 },
             author:      'Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>',
-            version:     '0.1.7',
+            version:     '0.2',
             options:     [
                 Options::Object.new( :vectors,
                     description: ' Vector array (for configuration over RPC).'

data/components/reporters/plugin_formatters/html/metrics.rb

@@ -0,0 +1,290 @@
+=begin
+    Copyright 2010-2015 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+
+    This file is part of the Arachni Framework project and is subject to
+    redistribution and commercial restrictions. Please see the Arachni Framework
+    web site for more information on licensing and terms of use.
+=end
+
+class Arachni::Reporters::HTML
+
+# @author Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>
+class PluginFormatters::Metrics  < Arachni::Plugin::Formatter
+    include TemplateUtilities
+
+    def run
+        ERB.new( tpl ).result( binding )
+    end
+
+    def tpl
+        <<-HTML
+        <div class="row">
+            <div class="col-md-3">
+
+                <h3>General</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Egress traffic
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_megabytes results['general']['egress_traffic'] %>MB
+                    </dd>
+
+                    <dt>
+                        Ingress traffic
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_megabytes results['general']['ingress_traffic'] %>MB
+                    </dd>
+
+                    <dt>
+                        Uses HTTP
+                    </dt>
+                    <dd>
+                        <%= boolean results['general']['uses_http'] %>
+                    </dd>
+
+                    <dt>
+                        Uses HTTPS
+                    </dt>
+                    <dd>
+                        <%= boolean results['general']['uses_https'] %>
+                    </dd>
+                </dl>
+
+                <h3>Scan</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Duration
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.seconds_to_hms results['scan']['duration'] %>
+                    </dd>
+
+                    <dt>
+                        Authenticated
+                    </dt>
+                    <dd>
+                        <%= boolean results['scan']['authenticated'] %>
+                    </dd>
+                </dl>
+
+                <h3>HTTP</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Requests
+                    </dt>
+                    <dd>
+                        <%= results['http']['requests'] %>
+                    </dd>
+
+                    <dt>
+                        Minimum response time
+                    </dt>
+                    <dd>
+                        <%= results['http']['response_time_min'].round( 4 ) %>s
+                    </dd>
+                    <dt>
+                        Maximum response time
+                    </dt>
+                    <dd>
+                        <%= results['http']['response_time_max'].round( 4 ) %>s
+                    </dd>
+                    <dt>
+                        Average response time
+                    </dt>
+                    <dd>
+                        <%= results['http']['response_time_average'].round( 4 ) %>s
+                    </dd>
+
+                    <dt>
+                        Minimum response size
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_kilobytes results['http']['response_size_min'] %> KB
+                    </dd>
+                    <dt>
+                        Maximum response size
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_kilobytes results['http']['response_size_max'] %> KB
+                    </dd>
+                    <dt>
+                        Average response size
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_kilobytes results['http']['response_size_average'] %> KB
+                    </dd>
+
+                    <dt>
+                        Minimum request size
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_kilobytes results['http']['request_size_min'] %> KB
+                    </dd>
+                    <dt>
+                        Maximum request size
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_kilobytes results['http']['request_size_max'] %> KB
+                    </dd>
+                    <dt>
+                        Average request size
+                    </dt>
+                    <dd>
+                        <%= Arachni::Utilities.bytes_to_kilobytes results['http']['request_size_average'] %> KB
+                    </dd>
+                </dl>
+
+                <h3>Resources</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Binary
+                    </dt>
+                    <dd>
+                        <%= results['resource']['binary'] %>
+                    </dd>
+
+                    <dt>
+                        Without parameters
+                    </dt>
+                    <dd>
+                        <%= results['resource']['without_parameters'] %>
+                    </dd>
+
+                    <dt>
+                        With parameters
+                    </dt>
+                    <dd>
+                        <%= results['resource']['with_parameters'] %>
+                    </dd>
+                </dl>
+            </div>
+
+            <div class="col-md-9">
+                <h3>Elements</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Links
+                    </dt>
+                    <dd>
+                        <%= results['element']['links'] %>
+                    </dd>
+
+                    <dt>
+                        Forms
+                    </dt>
+                    <dd>
+                        <small>
+                            <%= results['element']['forms'] %>
+                        </small>
+                    </dd>
+                    <dt>
+                        <small>
+                            &mdash; with nonces
+                        </small>
+                    </dt>
+                    <dd>
+                        <small>
+                            <%= boolean results['element']['has_forms_with_nonces'] %>
+                        </small>
+                    </dd>
+                    <dt>
+                        <small>
+                            &mdash; with passwords
+                        </small>
+                    </dt>
+                    <dd>
+                        <small>
+                            <%= boolean results['element']['has_forms_with_passwords'] %>
+                        </small>
+                    </dd>
+
+                    <dt>
+                        Cookies
+                    </dt>
+                    <dd>
+                        <%= results['element']['cookies'] %>
+                    </dd>
+
+                    <dt>
+                        Headers
+                    </dt>
+                    <dd>
+                        <%= results['element']['headers'] %>
+                    </dd>
+
+                    <dt>
+                        XMLs
+                    </dt>
+                    <dd>
+                        <%= results['element']['xmls'] %>
+                    </dd>
+
+                    <dt>
+                        JSONs
+                    </dt>
+                    <dd>
+                        <%= results['element']['jsons'] %>
+                    </dd>
+
+                    <dt>
+                        Total input names
+                    </dt>
+                    <dd>
+                        <%= results['element']['input_names_total'] %>
+                    </dd>
+
+                    <dt>
+                        Unique input names
+                    </dt>
+                    <dd>
+                        <%= results['element']['input_names_unique'] %>
+                    </dd>
+                </dl>
+
+                <h3>DOM</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Event listeners
+                    </dt>
+                    <dd>
+                        <%= results['dom']['event_listeners'] %>
+                    </dd>
+
+                    <dt>
+                        SWF objects
+                    </dt>
+                    <dd>
+                        <%= results['dom']['swf_objects'] %>
+                    </dd>
+                </dl>
+
+                <h3>Platforms</h3>
+                <dl class="dl-horizontal">
+                    <% results['platforms'].each do |type, platforms|
+                        next if platforms.empty? %>
+
+                        <dt>
+                            <%= Arachni::Platform::Manager::TYPES[type.to_sym] %>
+                        </dt>
+                        <dd>
+                            <%= platforms.map { |platform| Arachni::Platform::Manager::PLATFORM_NAMES[platform.to_sym] }.join( ', ' ) %>
+                        </dd>
+                    <% end %>
+                </dl>
+            </div>
+        </div>
+
+        HTML
+    end
+
+    def boolean( b )
+        <<-EOHTML
+        <i class="fa fa-#{b ? 'check' : 'times'}"></i>
+        EOHTML
+    end
+
+end
+
+end

data/components/reporters/plugin_formatters/stdout/metrics.rb

@@ -0,0 +1,80 @@
+=begin
+    Copyright 2010-2015 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+
+    This file is part of the Arachni Framework project and is subject to
+    redistribution and commercial restrictions. Please see the Arachni Framework
+    web site for more information on licensing and terms of use.
+=end
+
+class Arachni::Reporters::Stdout
+
+# @author Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>
+class PluginFormatters::Metrics < Arachni::Plugin::Formatter
+
+    def run
+        print_ok 'General'
+        general = results['general']
+        print_info "Egress traffic:  #{Arachni::Utilities.bytes_to_megabytes general['egress_traffic']} MB"
+        print_info "Ingress traffic: #{Arachni::Utilities.bytes_to_megabytes general['ingress_traffic']} MB"
+        print_info "Uses HTTP:       #{general['uses_http']}"
+        print_info "Uses HTTPS:      #{general['uses_https']}"
+        print_line
+
+        print_ok 'Scan'
+        scan = results['scan']
+        print_info "Duration:      #{Arachni::Utilities.seconds_to_hms scan['duration']}"
+        print_info "Authenticated: #{scan['authenticated']}"
+        print_line
+
+        print_ok 'HTTP'
+        http = results['http']
+        print_info "Requests: #{http['requests']}"
+        print_info "Minimum response time: #{http['response_time_min'].round( 4 )} seconds"
+        print_info "Maximum response time: #{http['response_time_max'].round( 4 )} seconds"
+        print_info "Average response time: #{http['response_time_average'].round( 4 )} seconds"
+        print_info "Minimum response size: #{Arachni::Utilities.bytes_to_kilobytes http['response_size_min']} KB"
+        print_info "Maximum response size: #{Arachni::Utilities.bytes_to_kilobytes http['response_size_max']} KB"
+        print_info "Average response size: #{Arachni::Utilities.bytes_to_kilobytes http['response_size_average']} KB"
+        print_info "Minimum request size:  #{Arachni::Utilities.bytes_to_kilobytes http['request_size_min']} KB"
+        print_info "Maximum request size:  #{Arachni::Utilities.bytes_to_kilobytes http['request_size_max']} KB"
+        print_info "Average request size:  #{Arachni::Utilities.bytes_to_kilobytes http['request_size_average']} KB"
+        print_line
+
+        print_ok 'Resources'
+        resource = results['resource']
+        print_info "Binary:             #{resource['binary']}"
+        print_info "Without parameters: #{resource['without_parameters']}"
+        print_info "With parameters:    #{resource['with_parameters']}"
+        print_line
+
+        print_ok 'Elements'
+        element = results['element']
+        print_info "Links:              #{element['links']}"
+        print_info "Forms:              #{element['forms']}"
+        print_info " -- with nonces:    #{element['has_forms_with_nonces']}"
+        print_info " -- with passwords: #{element['has_forms_with_passwords']}"
+        print_info "Cookies:            #{element['cookies']}"
+        print_info "Headers:            #{element['headers']}"
+        print_info "XMLs:               #{element['xmls']}"
+        print_info "JSONs:              #{element['jsons']}"
+        print_info "Total input names:  #{element['input_names_total']}"
+        print_info "Unique input names: #{element['input_names_unique']}"
+        print_line
+
+        print_ok 'DOM'
+        dom = results['dom']
+        print_info "Event listeners: #{dom['event_listeners']}"
+        print_info "SWF objects:     #{dom['swf_objects']}"
+        print_line
+
+        print_ok 'Platforms'
+        results['platforms'].each do |type, platforms|
+            next if platforms.empty?
+
+            platforms = platforms.map { |platform| Arachni::Platform::Manager::PLATFORM_NAMES[platform.to_sym] }
+            print_info "#{Arachni::Platform::Manager::TYPES[type.to_sym]}: #{platforms.join( ', ' )}"
+        end
+    end
+
+end
+end