arachni 1.3.2 → 1.4

data/spec/arachni/utilities_spec.rb

@@ -109,7 +109,7 @@ describe Arachni::Utilities do
 
         context 'when a port is not available' do
             it 'returns true' do
-                s = TCPServer.new( 7777 )
+                s = TCPServer.new( "127.0.0.1", 7777 )
                 expect(subject.port_available?( 7777 )).to be_falsey
                 s.close
             end
@@ -132,7 +132,7 @@ describe Arachni::Utilities do
 
     describe '#skip_resource?' do
         context 'when passed a' do
-            context Arachni::HTTP::Response do
+            context 'Arachni::HTTP::Response' do
                 context 'and #skip_response? returns' do
                     context 'true' do
                         it 'returns true' do
@@ -150,7 +150,7 @@ describe Arachni::Utilities do
                 end
             end
 
-            context Arachni::Page do
+            context 'Arachni::Page' do
                 context 'and #skip_page? returns' do
                     context 'true' do
                         it 'returns true' do
@@ -168,7 +168,7 @@ describe Arachni::Utilities do
                 end
             end
 
-            context String do
+            context 'String' do
                 context 'and #skip_path? returns' do
                     context 'true' do
                         it 'returns true' do
@@ -231,7 +231,7 @@ describe Arachni::Utilities do
                     end
                 end
 
-                context true do
+                context 'true' do
                     it 're-raises the exception' do
                         expect do
                             subject.exception_jail( true ) { raise }
@@ -239,7 +239,7 @@ describe Arachni::Utilities do
                     end
                 end
 
-                context false do
+                context 'false' do
                     it 'returns nil' do
                         expect(subject.exception_jail( false ) { raise }).to be_nil
                     end
@@ -257,7 +257,7 @@ describe Arachni::Utilities do
                     end
                 end
 
-                context true do
+                context 'true' do
                     it 'does not rescue it' do
                         expect do
                             subject.exception_jail( true ) { raise Exception }
@@ -265,7 +265,7 @@ describe Arachni::Utilities do
                     end
                 end
 
-                context false do
+                context 'false' do
                     it 'does not rescue it' do
                         expect do
                             subject.exception_jail( false ) { raise Exception }

data/spec/components/checks/active/code_injection_spec.rb

@@ -15,38 +15,38 @@ describe name_from_filename do
     def issue_count_per_element_per_platform
         {
             php:    {
-                Element::Form         => 4,
+                Element::Form         => 8,
                 Element::Link         => 4,
                 Element::Cookie       => 4,
                 Element::Header       => 4,
-                Element::LinkTemplate => 4,
+                Element::LinkTemplate => 8,
                 Element::JSON         => 4,
                 Element::XML          => 8
             },
             perl:    {
-                Element::Form         => 4,
+                Element::Form         => 8,
                 Element::Link         => 4,
                 Element::Cookie       => 4,
                 Element::Header       => 4,
-                Element::LinkTemplate => 4,
+                Element::LinkTemplate => 8,
                 Element::JSON         => 4,
                 Element::XML          => 8
             },
             python:  {
-                Element::Form         => 2,
+                Element::Form         => 4,
                 Element::Link         => 2,
                 Element::Cookie       => 2,
                 Element::Header       => 2,
-                Element::LinkTemplate => 2,
+                Element::LinkTemplate => 4,
                 Element::JSON         => 2,
                 Element::XML          => 4
             },
             asp:    {
-                Element::Form         => 4,
-                Element::Link         => 4,
+                Element::Form         => 8,
+                Element::Link         => 5,
                 Element::Cookie       => 4,
                 Element::Header       => 4,
-                Element::LinkTemplate => 4,
+                Element::LinkTemplate => 8,
                 Element::JSON         => 4,
                 Element::XML          => 8
             },

data/spec/components/checks/active/file_inclusion_spec.rb

@@ -15,49 +15,49 @@ describe name_from_filename do
     def issue_count_per_element_per_platform
         {
             unix:    {
-                Element::Form         => 16,
-                Element::Link         => 16,
+                Element::Form         => 32,
+                Element::Link         => 32,
                 Element::Cookie       => 16,
                 Element::Header       => 8,
-                Element::LinkTemplate => 8,
+                Element::LinkTemplate => 16,
                 Element::JSON         => 16,
-                Element::XML          => 32
+                Element::XML          => 16
             },
             windows: {
-                Element::Form         => 96,
-                Element::Link         => 96,
+                Element::Form         => 192,
+                Element::Link         => 192,
                 Element::Cookie       => 96,
                 Element::Header       => 48,
-                Element::LinkTemplate => 48,
+                Element::LinkTemplate => 96,
                 Element::JSON         => 96,
-                Element::XML          => 192
+                Element::XML          => 96
             },
             java:    {
-                Element::Form         => 8,
-                Element::Link         => 8,
+                Element::Form         => 16,
+                Element::Link         => 16,
                 Element::Cookie       => 8,
                 Element::Header       => 4,
-                Element::LinkTemplate => 4,
+                Element::LinkTemplate => 8,
                 Element::JSON         => 8,
-                Element::XML          => 16
+                Element::XML          => 8
             },
             php:  {
-                Element::Form         => 120,
-                Element::Link         => 120,
+                Element::Form         => 240,
+                Element::Link         => 240,
                 Element::Cookie       => 112,
                 Element::Header       => 56,
-                Element::LinkTemplate => 60,
+                Element::LinkTemplate => 120,
                 Element::JSON         => 112,
-                Element::XML          => 224
+                Element::XML          => 112
             },
             perl:  {
-                Element::Form         => 120,
-                Element::Link         => 120,
+                Element::Form         => 240,
+                Element::Link         => 240,
                 Element::Cookie       => 120,
                 Element::Header       => 60,
-                Element::LinkTemplate => 60,
+                Element::LinkTemplate => 120,
                 Element::JSON         => 120,
-                Element::XML          => 240
+                Element::XML          => 120
             }
         }
     end

data/spec/components/checks/active/ldap_injection_spec.rb

@@ -16,7 +16,7 @@ describe name_from_filename do
             Element::Link         => i,
             Element::Cookie       => i,
             Element::Header       => i,
-            Element::LinkTemplate => i,
+            Element::LinkTemplate => i * 2,
             Element::JSON         => i,
             Element::XML          => i * 2
         }

data/spec/components/checks/active/no_sql_injection_spec.rb

@@ -19,7 +19,7 @@ describe name_from_filename do
                 Element::Link         => 2,
                 Element::Cookie       => 2,
                 Element::Header       => 1,
-                Element::LinkTemplate => 1,
+                Element::LinkTemplate => 2,
                 Element::JSON         => 2,
                 Element::XML          => 2
             }

data/spec/components/checks/active/os_cmd_injection_spec.rb

@@ -16,11 +16,11 @@ describe name_from_filename do
         h = {}
         [:unix, :bsd, :aix].each do |platform|
             h[platform] = {
-                Element::Form         => 11,
+                Element::Form         => 19,
                 Element::Link         => 11,
                 Element::Cookie       => 11,
                 Element::Header       => 8,
-                Element::LinkTemplate => 10,
+                Element::LinkTemplate => 20,
                 Element::JSON         => 11,
                 Element::XML          => 22
             }
@@ -31,7 +31,7 @@ describe name_from_filename do
             Element::Link         => 22,
             Element::Cookie       => 22,
             Element::Header       => 16,
-            Element::LinkTemplate => 22,
+            Element::LinkTemplate => 44,
             Element::JSON         => 22,
             Element::XML          => 44
         }

data/spec/components/checks/active/path_traversal_spec.rb

@@ -15,31 +15,31 @@ describe name_from_filename do
     def issue_count_per_element_per_platform
         {
             unix:    {
-                Element::Form         => 112,
-                Element::Link         => 112,
+                Element::Form         => 224,
+                Element::Link         => 224,
                 Element::Cookie       => 112,
                 Element::Header       => 56,
-                Element::LinkTemplate => 8,
+                Element::LinkTemplate => 16,
                 Element::JSON         => 168,
-                Element::XML          => 224
+                Element::XML          => 112
             },
             windows: {
-                Element::Form         => 336,
-                Element::Link         => 336,
+                Element::Form         => 672,
+                Element::Link         => 672,
                 Element::Cookie       => 336,
                 Element::Header       => 168,
-                Element::LinkTemplate => 24,
+                Element::LinkTemplate => 48,
                 Element::JSON         => 504,
-                Element::XML          => 672
+                Element::XML          => 336
             },
             java:    {
-                Element::Form         => 8,
-                Element::Link         => 8,
+                Element::Form         => 16,
+                Element::Link         => 16,
                 Element::Cookie       => 8,
                 Element::Header       => 4,
                 Element::LinkTemplate => 0,
                 Element::JSON         => 12,
-                Element::XML          => 16
+                Element::XML          => 8
             }
         }
     end

data/spec/components/checks/active/response_splitting_spec.rb

@@ -14,9 +14,9 @@ describe name_from_filename do
             Element::Link         => 4,
             Element::Cookie       => 4,
             Element::Header       => 2,
-            Element::LinkTemplate => 4,
+            Element::LinkTemplate => 8,
             Element::JSON         => 4,
-            Element::XML          => 8
+            Element::XML          => 4
         }
     end
 

data/spec/components/checks/active/rfi_spec.rb

@@ -10,12 +10,12 @@ describe name_from_filename do
 
     def issue_count_per_element
         {
-            Element::Form   => 12,
-            Element::Link   => 12,
+            Element::Form   => 24,
+            Element::Link   => 24,
             Element::Cookie => 12,
             Element::Header => 6,
             Element::JSON   => 12,
-            Element::XML    => 24
+            Element::XML    => 12
         }
     end
 

data/spec/components/checks/active/session_fixation_spec.rb

@@ -13,7 +13,7 @@ describe name_from_filename do
     end
 
     def issue_count
-        4
+        8
     end
 
     easy_test

data/spec/components/checks/active/source_code_disclosure_spec.rb

@@ -14,13 +14,13 @@ describe name_from_filename do
 
     def issue_count_per_element
         {
-            Element::Form         => 6,
-            Element::Link         => 6,
+            Element::Form         => 12,
+            Element::Link         => 12,
             Element::Cookie       => 4,
             Element::Header       => 4,
-            Element::LinkTemplate => 5,
+            Element::LinkTemplate => 10,
             Element::JSON         => 6,
-            Element::XML          => 16
+            Element::XML          => 8
         }
     end
 

data/spec/components/checks/active/sql_injection_spec.rb

@@ -4,9 +4,8 @@ describe name_from_filename do
     include_examples 'check'
 
     def self.platforms
-        [:access, :db2, :emc, :firebird, :frontbase, :hsqldb,
-         :informix, :ingres, :interbase, :maxdb, :mssql, :mysql, :oracle,
-         :pgsql, :sqlite, :sybase]
+        [:access, :db2, :emc, :firebird, :frontbase, :hsqldb, :informix, :ingres,
+         :interbase, :maxdb, :mssql, :mysql, :oracle, :pgsql, :sqlite, :sybase]
     end
 
     def self.elements
@@ -17,146 +16,146 @@ describe name_from_filename do
     def issue_count_per_element_per_platform
         {
             access:     {
-                Element::Form         => 12,
-                Element::Link         => 12,
+                Element::Form         => 15,
+                Element::Link         => 15,
                 Element::Cookie       => 12,
                 Element::Header       => 6,
-                Element::LinkTemplate => 6,
+                Element::LinkTemplate => 12,
                 Element::JSON         => 12,
                 Element::XML          => 12
             },
             db2:        {
-                Element::Form         => 16,
-                Element::Link         => 16,
-                Element::Cookie       => 16,
-                Element::Header       => 8,
-                Element::LinkTemplate => 8,
-                Element::JSON         => 16,
-                Element::XML          => 16
+                Element::Form         => 15,
+                Element::Link         => 15,
+                Element::Cookie       => 12,
+                Element::Header       => 6,
+                Element::LinkTemplate => 12,
+                Element::JSON         => 12,
+                Element::XML          => 12
             },
             emc:        {
-                Element::Form         => 8,
-                Element::Link         => 8,
+                Element::Form         => 10,
+                Element::Link         => 10,
                 Element::Cookie       => 8,
                 Element::Header       => 4,
-                Element::LinkTemplate => 4,
+                Element::LinkTemplate => 8,
                 Element::JSON         => 8,
                 Element::XML          => 8
             },
             firebird:   {
-                Element::Form         => 4,
-                Element::Link         => 4,
+                Element::Form         => 5,
+                Element::Link         => 5,
                 Element::Cookie       => 4,
                 Element::Header       => 2,
-                Element::LinkTemplate => 2,
+                Element::LinkTemplate => 4,
                 Element::JSON         => 4,
                 Element::XML          => 4
             },
             frontbase:  {
-                Element::Form         => 4,
-                Element::Link         => 4,
+                Element::Form         => 5,
+                Element::Link         => 5,
                 Element::Cookie       => 4,
                 Element::Header       => 2,
-                Element::LinkTemplate => 2,
+                Element::LinkTemplate => 4,
                 Element::JSON         => 4,
                 Element::XML          => 4
             },
             hsqldb:     {
-                Element::Form         => 4,
-                Element::Link         => 4,
+                Element::Form         => 5,
+                Element::Link         => 5,
                 Element::Cookie       => 4,
                 Element::Header       => 2,
-                Element::LinkTemplate => 2,
+                Element::LinkTemplate => 4,
                 Element::JSON         => 4,
                 Element::XML          => 4
             },
             informix:   {
-                Element::Form         => 12,
-                Element::Link         => 12,
+                Element::Form         => 15,
+                Element::Link         => 15,
                 Element::Cookie       => 12,
                 Element::Header       => 6,
-                Element::LinkTemplate => 6,
+                Element::LinkTemplate => 12,
                 Element::JSON         => 12,
                 Element::XML          => 12
             },
             ingres:     {
-                Element::Form         => 12,
-                Element::Link         => 12,
+                Element::Form         => 15,
+                Element::Link         => 15,
                 Element::Cookie       => 12,
                 Element::Header       => 6,
-                Element::LinkTemplate => 6,
+                Element::LinkTemplate => 12,
                 Element::JSON         => 12,
                 Element::XML          => 12
             },
             interbase:  {
-                Element::Form         => 8,
-                Element::Link         => 8,
+                Element::Form         => 10,
+                Element::Link         => 10,
                 Element::Cookie       => 8,
                 Element::Header       => 4,
-                Element::LinkTemplate => 4,
+                Element::LinkTemplate => 8,
                 Element::JSON         => 8,
                 Element::XML          => 8
             },
             maxdb:      {
-                Element::Form         => 4,
-                Element::Link         => 4,
+                Element::Form         => 5,
+                Element::Link         => 5,
                 Element::Cookie       => 4,
                 Element::Header       => 2,
-                Element::LinkTemplate => 2,
+                Element::LinkTemplate => 4,
                 Element::JSON         => 4,
                 Element::XML          => 4
             },
             mssql:      {
-                Element::Form         => 86,
-                Element::Link         => 86,
-                Element::Cookie       => 86,
-                Element::Header       => 42,
-                Element::LinkTemplate => 42,
-                Element::JSON         => 86,
-                Element::XML          => 84
+                Element::Form         => 97,
+                Element::Link         => 97,
+                Element::Cookie       => 78,
+                Element::Header       => 38,
+                Element::LinkTemplate => 76,
+                Element::JSON         => 78,
+                Element::XML          => 76
             },
             mysql:      {
-                Element::Form         => 52,
-                Element::Link         => 52,
+                Element::Form         => 65,
+                Element::Link         => 65,
                 Element::Cookie       => 52,
                 Element::Header       => 26,
-                Element::LinkTemplate => 26,
+                Element::LinkTemplate => 52,
                 Element::JSON         => 52,
                 Element::XML          => 52
             },
             oracle:     {
-                Element::Form         => 20,
-                Element::Link         => 20,
+                Element::Form         => 25,
+                Element::Link         => 25,
                 Element::Cookie       => 20,
                 Element::Header       => 10,
-                Element::LinkTemplate => 10,
+                Element::LinkTemplate => 20,
                 Element::JSON         => 20,
                 Element::XML          => 20
             },
             pgsql:      {
-                Element::Form         => 36,
-                Element::Link         => 36,
+                Element::Form         => 45,
+                Element::Link         => 45,
                 Element::Cookie       => 36,
                 Element::Header       => 18,
-                Element::LinkTemplate => 18,
+                Element::LinkTemplate => 36,
                 Element::JSON         => 36,
                 Element::XML          => 36
             },
             sqlite:     {
-                Element::Form         => 16,
-                Element::Link         => 16,
+                Element::Form         => 20,
+                Element::Link         => 20,
                 Element::Cookie       => 16,
                 Element::Header       => 8,
-                Element::LinkTemplate => 8,
+                Element::LinkTemplate => 16,
                 Element::JSON         => 16,
                 Element::XML          => 16
             },
             sybase:     {
-                Element::Form         => 12,
-                Element::Link         => 12,
+                Element::Form         => 15,
+                Element::Link         => 15,
                 Element::Cookie       => 12,
                 Element::Header       => 6,
-                Element::LinkTemplate => 6,
+                Element::LinkTemplate => 12,
                 Element::JSON         => 12,
                 Element::XML          => 12
             }