arachni 1.4 → 1.6.0

data/components/plugins/webhook_notify.rb

@@ -0,0 +1,99 @@
+=begin
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
+
+    This file is part of the Arachni Framework project and is subject to
+    redistribution and commercial restrictions. Please see the Arachni Framework
+    web site for more information on licensing and terms of use.
+=end
+
+# Send a webhook notification and payload after scan.
+#
+# @author Sean Handley <sean.handley@gmail.com>
+# @author Tasos Laskos <tasos.laskos@arachni-scanner.com>
+# @version 0.1
+class Arachni::Plugins::WebhookNotify < Arachni::Plugin::Base
+
+    def run
+        wait_while_framework_running
+
+        print_status 'Sending the notification...'
+
+        response = http.request( options[:url].to_s,
+            method:  :post,
+            body:    interpolate_variables( options[:payload] ),
+            mode:    :sync,
+            headers: {
+                'Content-Type' => "application/#{options[:content_type]}"
+            }
+        )
+
+        register_results(
+            'success'  => response.ok?,
+            'status'   => response.return_code.to_s,
+            'message'  => response.return_message,
+            'response' => response.to_s
+        )
+
+        print_status "Done with HTTP code #{response.code}: " <<
+                     "[#{response.return_code}] #{response.return_message}"
+    end
+
+    def interpolate_variables( data )
+        report = framework.report
+
+        data = data.gsub( '$URL$', framework.options.url )
+
+        data.gsub!( '$SEED$', random_seed )
+        data.gsub!( '$ISSUE_COUNT$', report.issues.size.to_s )
+
+        max_severity = ''
+        if (max_severity_issue = report.issues.sort.first)
+            max_severity = max_severity_issue.severity.to_s
+        end
+        data.gsub!( '$MAX_SEVERITY$', max_severity )
+
+        data.gsub!( '$DURATION$', report.delta_time )
+        data
+    end
+
+    def self.info
+        {
+            name:        'Webhook notify',
+            description: %q{
+Sends a webhook payload over HTTP/HTTPS at the end of the scan.
+
+Valid payload variables to use in the payload:
+
+* $SEED$ -- Unique seed used for the scan.
+* $URL$  -- Targeted URL.
+* $MAX_SEVERITY$ -- Maximum severity of the identified issues.
+* $ISSUE_COUNT$ -- Amount of identified issues.
+* $DURATION$ -- Scan duration.
+},
+            author:      [
+                'Sean Handley <sean.handley@gmail.com>',
+                'Tasos Laskos <tasos.laskos@arachni-scanner.com>'
+            ],
+            version:     '0.1',
+            options:     [
+                Options::URL.new( :url,
+                    required:    true,
+                    description: 'Webhook URL (fully qualified including scheme)'
+                ),
+                Options::MultipleChoice.new( :content_type,
+                    description: 'Content type of payload (XML or JSON).',
+                    required:    true,
+                    default:     'json',
+                    choices:     %w(json xml)
+                ),
+                Options::String.new( :payload,
+                    required:    true,
+                    description: 'Either XML or JSON payload. Must be well-formed ' <<
+                                 'and valid. You can interpolate variables with $VARIABLE_NAME$'
+                )
+            ]
+
+        }
+    end
+
+end

data/components/reporters/ap.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/html/default/configuration.erb

@@ -9,6 +9,8 @@
 <dl class="dl-horizontal">
     <dt>Version</dt>
     <dd><%= report.version %></dd>
+    <dt>Seed</dt>
+    <dd><%= report.seed %></dd>
     <dt>Audit started on</dt>
     <dd><%= report.start_datetime %></dd>
     <dt>Audit finished on</dt>

data/components/reporters/html/default.erb

@@ -3,14 +3,15 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
+    <meta charset="utf-8" />
+
     <title>
         <%= escapeHTML(report.url) %> ::
         Arachni Web Application Security Report
     </title>
 
     <!--
-        Design by Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>
-        Copyright (c) Arachni 2011-2015.
+        Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
      -->
 
     <% %w(js/lib/jquery.min.js js/lib/bootstrap.min.js js/lib/d3.min.js

data/components/reporters/html.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -19,7 +19,6 @@ require 'fileutils'
 # Creates an HTML report with scan results.
 #
 # @author Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>
-# @version 0.4.1
 class Arachni::Reporters::HTML < Arachni::Reporter::Base
 
     TEMPLATE_FILE = File.dirname( __FILE__ ) + '/html/default.erb'
@@ -405,7 +404,7 @@ access unauthorized pages.
 
         TemplateScope.global_data = global_data
 
-        tmpdir = "#{Arachni.tmpdir}/#{generate_token}/"
+        tmpdir = "#{Arachni::Options.paths.tmpdir}/#{generate_token}/"
 
         FileUtils.rm_rf tmpdir
         FileUtils.mkdir_p tmpdir
@@ -440,11 +439,8 @@ access unauthorized pages.
             description:  %q{Exports the audit results as a compressed HTML report.},
             content_type: 'application/zip',
             author:       'Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>',
-            version:      '0.4.2',
-            options:      [
-                Options.outfile( '.html.zip' ),
-                Options.skip_responses
-            ]
+            version:      '0.4.4',
+            options:      [ Options.outfile( '.html.zip' ) ]
         }
     end
 
@@ -490,6 +486,7 @@ access unauthorized pages.
                 Element::Link::DOM.type   => 0,
                 Element::Cookie.type => 0,
                 Element::Cookie::DOM.type => 0,
+                Element::NestedCookie.type => 0,
                 Element::LinkTemplate.type => 0,
                 Element::LinkTemplate::DOM.type => 0,
                 Element::Header.type => 0,

data/components/reporters/json.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/marshal.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/autologin.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/content_types.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/cookie_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/exec.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/form_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/healthmap.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/http_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/login_script.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/metrics.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -78,6 +78,20 @@ class PluginFormatters::Metrics  < Arachni::Plugin::Formatter
                         <%= results['http']['requests'] %>
                     </dd>
 
+                    <dt>
+                        Requests time outs
+                    </dt>
+                    <dd>
+                        <%= results['http']['request_time_outs'] %>
+                    </dd>
+
+                    <dt>
+                        Responses per second
+                    </dt>
+                    <dd>
+                        <%= results['http']['responses_per_second'].round(4) %>
+                    </dd>
+
                     <dt>
                         Minimum response time
                     </dt>
@@ -162,6 +176,37 @@ class PluginFormatters::Metrics  < Arachni::Plugin::Formatter
             </div>
 
             <div class="col-md-9">
+                <h3>Browser cluster</h3>
+                <dl class="dl-horizontal">
+                    <dt>
+                        Job count
+                    </dt>
+                    <dd>
+                        <%= results['browser_cluster']['job_count'] %>
+                    </dd>
+
+                    <dt>
+                        Timed-out jobs
+                    </dt>
+                    <dd>
+                        <%= results['browser_cluster']['job_time_outs'] %>
+                    </dd>
+
+                    <dt>
+                        Seconds per job
+                    </dt>
+                    <dd>
+                        <%= results['browser_cluster']['seconds_per_job'].round(4) %>
+                    </dd>
+
+                    <dt>
+                        Total job time
+                    </dt>
+                    <dd>
+                        <%= results['browser_cluster']['total_job_time'] %>s
+                    </dd>
+                </dl>
+
                 <h3>Elements</h3>
                 <dl class="dl-horizontal">
                     <dt>

data/components/reporters/plugin_formatters/html/uncommon_headers.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/uniformity.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/vector_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/html/waf_detector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/autologin.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/content_types.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/cookie_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/exec.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/form_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/healthmap.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/http_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/login_script.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/metrics.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -29,6 +29,8 @@ class PluginFormatters::Metrics < Arachni::Plugin::Formatter
         print_ok 'HTTP'
         http = results['http']
         print_info "Requests: #{http['requests']}"
+        print_info "Request time-outs:     #{http['request_time_outs']}"
+        print_info "Responses per second:  #{http['responses_per_second'].round( 4 )}"
         print_info "Minimum response time: #{http['response_time_min'].round( 4 )} seconds"
         print_info "Maximum response time: #{http['response_time_max'].round( 4 )} seconds"
         print_info "Average response time: #{http['response_time_average'].round( 4 )} seconds"
@@ -40,6 +42,14 @@ class PluginFormatters::Metrics < Arachni::Plugin::Formatter
         print_info "Average request size:  #{Arachni::Utilities.bytes_to_kilobytes http['request_size_average']} KB"
         print_line
 
+        print_ok 'Browser cluster'
+        browser_cluster = results['browser_cluster']
+        print_info "Job count:       #{browser_cluster['job_count']}"
+        print_info "Timed-out jobs:  #{browser_cluster['job_time_outs']}"
+        print_info "Seconds per job: #{browser_cluster['seconds_per_job'].round( 4 )}"
+        print_info "Total job time:  #{browser_cluster['total_job_time']} seconds"
+        print_line
+
         print_ok 'Resources'
         resource = results['resource']
         print_info "Binary:             #{resource['binary']}"

data/components/reporters/plugin_formatters/stdout/uncommon_headers.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/uniformity.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/vector_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/stdout/waf_detector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/autologin.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/content_types.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -21,12 +21,15 @@ class PluginFormatters::ContentTypes < Arachni::Plugin::Formatter
                     xml.url  info['url']
                     xml.method_ info['method']
 
-                    info['parameters'].each do |name, value|
-                        xml.parameters {
-                            xml.name name
-                            xml.value value
-                        }
-                    end
+                    xml.parameters {
+                        info['parameters'].each do |name, value|
+                            xml.parameter(
+                                name: Arachni::Reporters::XML.replace_nulls( name ),
+                                value: Arachni::Reporters::XML.replace_nulls( value )
+                            )
+                        end
+                    }
+
                 }
             end
         end

data/components/reporters/plugin_formatters/xml/cookie_collector.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -17,11 +17,14 @@ class PluginFormatters::CookieCollector < Arachni::Plugin::Formatter
         results.each_with_index do |result, i|
             xml.entry {
                 xml.time Time.parse( result['time'] ).xmlschema
-                xml.url result['response']['url']
+                xml.url XML.replace_nulls( result['response']['url'] )
 
                 xml.cookies {
                     result['cookies'].each do |name, value|
-                        xml.cookie( name: name, value: value )
+                        xml.cookie(
+                            name:  Arachni::Reporters::XML.replace_nulls( name ),
+                            value: Arachni::Reporters::XML.replace_nulls( value )
+                        )
                     end
                 }
             }

data/components/reporters/plugin_formatters/xml/exec.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/form_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/healthmap.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/http_dicattack.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/login_script.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/metrics.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/components/reporters/plugin_formatters/xml/uncommon_headers.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -18,7 +18,10 @@ class PluginFormatters::UncommonHeaders < Arachni::Plugin::Formatter
 
                 xml.headers {
                     headers.each do |name, value|
-                        xml.header name: name, value: value
+                        xml.header(
+                            name:  Arachni::Reporters::XML.replace_nulls( name ),
+                            value: Arachni::Reporters::XML.replace_nulls( value )
+                        )
                     end
                 }
             }

data/components/reporters/plugin_formatters/xml/uniformity.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2016 Tasos Laskos <tasos.laskos@arachni-scanner.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework