arachni 1.3.2 → 1.4

data/components/checks/active/no_sql_injection/patterns/mongodb

@@ -1 +0,0 @@
-Uncaught exception 'MongoCursorException' .*: SyntaxError: Unexpected

data/components/checks/active/sql_injection/patterns/access

@@ -1,3 +0,0 @@
-JET Database Engine
-Access Database Engine
-\[Microsoft\]\[ODBC Microsoft Access Driver\]

data/components/checks/active/sql_injection/patterns/db2

@@ -1,5 +0,0 @@
-DB2 SQL error:
-\[IBM\]\[CLI Driver\]\[DB2/6000\]
-CLI Driver.*DB2
-DB2 SQL error
-db2_\w+\(

data/components/checks/active/sql_injection/patterns/frontbase

@@ -1 +0,0 @@
-Exception (condition )?\d+\. Transaction rollback\.

data/components/checks/active/sql_injection/patterns/hsqldb

@@ -1 +0,0 @@
-org\.hsqldb\.jdbc

data/components/checks/active/sql_injection/patterns/ingres

@@ -1,3 +0,0 @@
-Warning.*ingres_
-Ingres SQLSTATE
-Ingres\W.*Driver

data/components/checks/active/sql_injection/patterns/maxdb

@@ -1,2 +0,0 @@
-SQL error.*POS([0-9]+).*
-Warning.*maxdb.*

data/components/checks/active/sql_injection/patterns/mssql

@@ -1,25 +0,0 @@
-System\.Data\.OleDb\.OleDbException
-\[Microsoft\]\[ODBC SQL Server Driver\]
-\[Macromedia\]\[SQLServer JDBC Driver\]
-\[SqlException
-System\.Data\.SqlClient\.SqlException
-Unclosed quotation mark after the character string
-'80040e14'
-mssql_query\(\)
-Microsoft OLE DB Provider for ODBC Drivers
-Microsoft OLE DB Provider for SQL Server
-Incorrect syntax near
-Sintaxis incorrecta cerca de
-Syntax error in string in query expression
-Procedure or function .* expects parameter
-Unclosed quotation mark before the character string
-Syntax error .* in query expression
-Data type mismatch in criteria expression\.
-ADODB\.Field \(0x800A0BCD\)
-the used select statements have different number of columns
-OLE DB.*SQL Server
-Warning.*mssql_.*
-Driver.*SQL[\-\_\ ]*Server
-SQL Server.*Driver
-SQL Server.*[0-9a-fA-F]{8}
-Exception.*\WSystem\.Data\.SqlClient\.

data/components/checks/active/sql_injection/patterns/oracle

@@ -1,6 +0,0 @@
-ORA-[0-9][0-9][0-9][0-9]
-java\.sql\.SQLException
-Oracle error
-Oracle.*Driver
-Warning.*oci_.*
-Warning.*ora_.*

data/components/checks/active/sql_injection/patterns/sqlite

@@ -1,5 +0,0 @@
-Warning.*sqlite_.*
-Warning.*SQLite3::
-SQLite/JDBCDriver
-SQLite\.Exception
-System\.Data\.SQLite\.SQLiteException

data/components/checks/active/sql_injection/patterns/sybase

@@ -1,3 +0,0 @@
-Sybase message:
-Warning.*sybase.*
-Sybase.*Server message.*

data/lib/arachni/ruby/io.rb

@@ -1,39 +0,0 @@
-=begin
-    Copyright 2010-2015 Tasos Laskos <tasos.laskos@arachni-scanner.com>
-
-    This file is part of the Arachni Framework project and is subject to
-    redistribution and commercial restrictions. Please see the Arachni Framework
-    web site for more information on licensing and terms of use.
-=end
-
-class IO
-    TAIL_BUF_LENGTH = 1 << 16
-
-    # @param    [Integer]   n
-    #   Amount of lines to return from the bottom of the file.
-    #
-    # @return   [Array<String>]
-    #   `n` amount of lines from the bottom of the file.
-    #
-    # @see http://stackoverflow.com/questions/3024372/how-to-read-a-file-from-bottom-to-top-in-ruby/3024704#3024704
-    def tail( n )
-        return [] if n < 1
-
-        seek_to = TAIL_BUF_LENGTH
-        seek_to = size if seek_to > size
-
-        seek -seek_to, IO::SEEK_END
-
-        buf = ''
-        while buf.count( "\n" ) <= n
-            buf = read( seek_to ) + buf
-
-            seek_to *= 2
-            seek_to = size if seek_to > size
-
-            seek -seek_to, IO::SEEK_CUR
-        end
-
-        buf.split( "\n" )[-n..-1]
-    end
-end

data/lib/arachni/selenium/webdriver/remote/http/typhoeus.rb

@@ -1,63 +0,0 @@
-require 'typhoeus'
-
-module Selenium
-module WebDriver
-module Remote
-
-module Http
-
-# The default client is unusably slow on platforms where Ruby IO is lacking in
-# performance, like Windows.
-class Typhoeus < Common
-
-    private
-
-    def request( verb, url, headers, payload )
-        url = url.to_s
-
-        headers.delete 'Content-Length'
-
-        options = {
-            headers:        headers,
-            maxredirs:      MAX_REDIRECTS,
-            followlocation: true,
-            # Small trick to cancel out http_proxy env variables which would
-            # otherwise be honoured by libcurl and hinder browser communications.
-            proxy:          ''
-        }
-
-        options[:timeout] = @timeout if @timeout
-
-        case verb
-            when :post, :put
-                options[:body] = payload.to_s
-
-            when :get, :delete, :head
-            else
-                raise Error::WebDriverError, "Unknown HTTP verb: #{verb.inspect}"
-        end
-
-        response = ::Typhoeus::Request.send( verb, url, options )
-
-        create_response extract_real_code( response ), response.body,
-                        response.headers['Content-Type']
-    end
-
-    def extract_real_code( response )
-        # Typhoeus sometimes gets confused when running under JRuby from multiple
-        # threads:
-        #  https://github.com/typhoeus/typhoeus/issues/411
-        if Arachni.jruby?
-            code = response.response_headers.match( /HTTP\/1\.\d\s(\d+)\s/ )[1] || 0
-            code.to_i
-        else
-            response.code
-        end
-    end
-
-end
-
-end
-end
-end
-end

data/spec/arachni/ruby/io_spec.rb

@@ -1,26 +0,0 @@
-require 'spec_helper'
-require 'tempfile'
-
-describe IO do
-    describe '#tail' do
-        it 'returns the specified amount of lines from the bottom of an IO stream' do
-            Tempfile.open( 'w' ) do |f|
-                f.write <<-EOSTR
-                    Test
-                    Test2
-                    Test3
-                    Test4
-                    Test5
-                EOSTR
-                f.flush
-
-                expect(f.tail( 4 )).to eq([
-                    '                    Test2',
-                    '                    Test3',
-                    '                    Test4',
-                    '                    Test5'
-                ])
-            end
-        end
-    end
-end