arachni 1.5.1 → 1.6.1.1

data/lib/arachni/support/crypto/rsa_aes_cbc.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/crypto.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/database/base.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -26,6 +26,14 @@ class Base
         @filename_counter = 0
     end
 
+    def serialize( obj )
+        compress( serializer.dump( obj ) )
+    end
+
+    def unserialize( data )
+        serializer.load( decompress( data ) )
+    end
+
     private
 
     # Dumps the object to a unique file and returns its path.
@@ -75,16 +83,16 @@ class Base
         obj
     end
 
-    def serialize( obj )
-        serializer.dump( obj )
+    def serializer
+        @serializer
     end
 
-    def unserialize( obj )
-        serializer.load( obj )
+    def compress( string )
+        Zlib::Deflate.deflate string
     end
 
-    def serializer
-        @serializer
+    def decompress( string )
+        Zlib::Inflate.inflate string
     end
 
     def get_unique_filename

data/lib/arachni/support/database/hash.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/database/queue.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/database.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/glob.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/lookup/base.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/lookup/hash_set.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/lookup/moolb.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/lookup.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/mixins/observable.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/mixins/terminal.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/mixins.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/profiler.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support/signature.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/support.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/trainer.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/ui/foo/output.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/uri/scope.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/uri.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework
@@ -93,6 +93,7 @@ class URI
                     *[string, good_characters].compact
                 )
                 s.recode!
+                s.gsub!( '+', '%2B' )
                 s
             end
         end
@@ -104,13 +105,8 @@ class URI
         # @return   [String]
         def decode( string )
             CACHE[__method__].fetch( string ) do
-                s = Addressable::URI.unencode( string )
-
-                if s
-                    s.recode!
-                    s.gsub!( '+', ' ' )
-                end
-
+                s = Addressable::URI.unencode( string.gsub( '+', '%20' ) )
+                s.recode! if s
                 s
             end
         end
@@ -650,7 +646,8 @@ class URI
         @query_parameters ||= begin
             q.split( '&' ).inject( {} ) do |h, pair|
                 name, value = pair.split( '=', 2 )
-                h[::URI.decode( name.to_s )] = ::URI.decode( value.to_s )
+                h[::URI.decode_www_form_component( name.to_s )] =
+                  ::URI.decode_www_form_component( value.to_s )
                 h
             end
         end

data/lib/arachni/utilities.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni/version.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/arachni.rb

@@ -1,5 +1,5 @@
 =begin
-    Copyright 2010-2017 Sarosys LLC <http://www.sarosys.com>
+    Copyright 2010-2022 Ecsypno <http://www.ecsypno.com>
 
     This file is part of the Arachni Framework project and is subject to
     redistribution and commercial restrictions. Please see the Arachni Framework

data/lib/version

@@ -1 +1 @@
-1.5.1
+1.6.1.1

data/logs/error-1821117.log

@@ -0,0 +1,243 @@
+
+2022-05-03 09:22:04 +0300 --------------------------------------------------------------------------------
+ENV:
+---
+SHELL: "/bin/bash"
+SESSION_MANAGER: local/ripper:@/tmp/.ICE-unix/23204,unix/ripper:/tmp/.ICE-unix/23204
+WINDOWID: '54525959'
+QT_ACCESSIBILITY: '1'
+COLORTERM: truecolor
+XDG_CONFIG_DIRS: "/home/zapotek/.config/kdedefaults:/etc/xdg/xdg-plasma:/etc/xdg:/usr/share/kubuntu-default-settings/kf5-settings"
+XDG_SESSION_PATH: "/org/freedesktop/DisplayManager/Session3"
+rvm_delete_flag: '0'
+rvm_prefix: "/usr/share"
+LANGUAGE: ''
+LC_ADDRESS: el_GR.UTF-8
+LC_NAME: el_GR.UTF-8
+SSH_AUTH_SOCK: "/tmp/ssh-qnF3AgVJFYWd/agent.22776"
+SHELL_SESSION_ID: 005d9ece3ee3418783dd5680a1d887d7
+MY_RUBY_HOME: "/usr/share/rvm/rubies/ruby-2.7.5"
+DESKTOP_SESSION: plasma
+LC_MONETARY: el_GR.UTF-8
+SSH_AGENT_PID: '22950'
+GTK_RC_FILES: "/etc/gtk/gtkrc:/home/zapotek/.gtkrc:/home/zapotek/.config/gtkrc"
+install_flag: '1'
+XCURSOR_SIZE: '24'
+RUBY_VERSION: ruby-2.7.5
+XDG_SEAT: seat0
+PWD: "/home/zapotek/workspace/arachni"
+XDG_SESSION_DESKTOP: KDE
+LOGNAME: zapotek
+XDG_SESSION_TYPE: x11
+rvm_version: 1.29.12 (manual)
+rvm_pretty_print_flag: auto
+GPG_AGENT_INFO: "/run/user/1000/gnupg/S.gpg-agent:0:1"
+SYSTEMD_EXEC_PID: '2599'
+XAUTHORITY: "/home/zapotek/.Xauthority"
+GTK2_RC_FILES: "/etc/gtk-2.0/gtkrc:/home/zapotek/.gtkrc-2.0:/home/zapotek/.config/gtkrc-2.0"
+HOME: "/home/zapotek"
+IM_CONFIG_PHASE: '1'
+LC_PAPER: el_GR.UTF-8
+LANG: en_US.UTF-8
+LS_COLORS: 'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.webp=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:'
+XDG_CURRENT_DESKTOP: KDE
+KONSOLE_DBUS_SERVICE: ":1.110"
+KONSOLE_DBUS_SESSION: "/Sessions/1"
+PROFILEHOME: ''
+XDG_SEAT_PATH: "/org/freedesktop/DisplayManager/Seat0"
+KONSOLE_VERSION: '210801'
+rvm_recommended_ruby: rvm install ruby-2.7.5
+KDE_SESSION_UID: '1000'
+rvm_bin_path: "/usr/share/rvm/bin"
+GEM_PATH: "/usr/share/rvm/gems/ruby-2.7.5@arachni:/usr/share/rvm/gems/ruby-2.7.5@global"
+GEM_HOME: "/usr/share/rvm/gems/ruby-2.7.5@arachni"
+LESSCLOSE: "/usr/bin/lesspipe %s %s"
+XDG_SESSION_CLASS: user
+TERM: xterm-256color
+LC_IDENTIFICATION: el_GR.UTF-8
+LESSOPEN: "| /usr/bin/lesspipe %s"
+USER: zapotek
+COLORFGBG: 15;0
+KDE_SESSION_VERSION: '5'
+PAM_KWALLET5_LOGIN: "/run/user/1000/kwallet5.socket"
+DISPLAY: ":0"
+SHLVL: '1'
+LC_TELEPHONE: el_GR.UTF-8
+LC_MEASUREMENT: el_GR.UTF-8
+XDG_VTNR: '1'
+XDG_SESSION_ID: '9'
+rvm_ruby_string: ruby-2.7.5
+XDG_RUNTIME_DIR: "/run/user/1000"
+LC_TIME: el_GR.UTF-8
+QT_AUTO_SCREEN_SCALE_FACTOR: '0'
+XCURSOR_THEME: breeze_cursors
+XDG_DATA_DIRS: "/usr/share/plasma:/usr/local/share:/usr/share:/var/lib/snapd/desktop"
+KDE_FULL_SESSION: 'true'
+PATH: "/usr/share/rvm/gems/ruby-2.7.5@arachni/bin:/usr/share/rvm/gems/ruby-2.7.5@global/bin:/usr/share/rvm/rubies/ruby-2.7.5/bin:/usr/share/rvm/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin"
+DBUS_SESSION_BUS_ADDRESS: unix:path=/run/user/1000/bus
+KDE_APPLICATIONS_AS_SCOPE: '1'
+IRBRC: "/usr/share/rvm/rubies/ruby-2.7.5/.irbrc"
+rvm_path: "/usr/share/rvm"
+LC_NUMERIC: el_GR.UTF-8
+OLDPWD: "/home/zapotek/workspace/qadron/raktr"
+_: "./bin/arachni_reporter"
+BUNDLER_ORIG_BUNDLE_BIN_PATH: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLER_ORIG_BUNDLE_GEMFILE: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLER_ORIG_BUNDLER_VERSION: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLER_ORIG_GEM_HOME: "/usr/share/rvm/gems/ruby-2.7.5@arachni"
+BUNDLER_ORIG_GEM_PATH: "/usr/share/rvm/gems/ruby-2.7.5@arachni:/usr/share/rvm/gems/ruby-2.7.5@global"
+BUNDLER_ORIG_MANPATH: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLER_ORIG_PATH: "/usr/share/rvm/gems/ruby-2.7.5@arachni/bin:/usr/share/rvm/gems/ruby-2.7.5@global/bin:/usr/share/rvm/rubies/ruby-2.7.5/bin:/usr/share/rvm/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin"
+BUNDLER_ORIG_RB_USER_INSTALL: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLER_ORIG_RUBYLIB: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLER_ORIG_RUBYOPT: BUNDLER_ENVIRONMENT_PRESERVER_INTENTIONALLY_NIL
+BUNDLE_BIN_PATH: "/usr/share/rvm/rubies/ruby-2.7.5/lib/ruby/gems/2.7.0/gems/bundler-2.1.4/libexec/bundle"
+BUNDLE_GEMFILE: "/home/zapotek/workspace/arachni/Gemfile"
+BUNDLER_VERSION: 2.1.4
+RUBYOPT: "-r/usr/share/rvm/rubies/ruby-2.7.5/lib/ruby/2.7.0/bundler/setup"
+RUBYLIB: ''
+MANPATH: "/usr/share/rvm/gems/ruby-2.7.5@arachni/gems/kramdown-2.3.1/man"
+--------------------------------------------------------------------------------
+OPTIONS:
+---
+datastore:
+  report_path: 
+scope:
+  directory_depth_limit: 10
+  auto_redundant_paths: 15
+  redundant_path_patterns: {}
+  dom_depth_limit: 4
+  exclude_file_extensions:
+  - gif
+  - bmp
+  - tif
+  - tiff
+  - jpg
+  - jpeg
+  - jpe
+  - pjpeg
+  - png
+  - ico
+  - psd
+  - xcf
+  - 3dm
+  - max
+  - svg
+  - eps
+  - drw
+  - ai
+  - asf
+  - rm
+  - mpg
+  - mpeg
+  - mpe
+  - 3gp
+  - 3g2
+  - avi
+  - flv
+  - mov
+  - mp4
+  - swf
+  - vob
+  - wmv
+  - aif
+  - mp3
+  - mpa
+  - ra
+  - wav
+  - wma
+  - mid
+  - m4a
+  - ogg
+  - flac
+  - zip
+  - zipx
+  - tar
+  - gz
+  - 7z
+  - rar
+  - bz2
+  - bin
+  - cue
+  - dmg
+  - iso
+  - mdf
+  - vcd
+  - raw
+  - exe
+  - apk
+  - app
+  - jar
+  - pkg
+  - deb
+  - rpm
+  - msi
+  - ttf
+  - otf
+  - woff
+  - woff2
+  - fon
+  - fnt
+  - css
+  - js
+  - pdf
+  - docx
+  - xlsx
+  - pptx
+  - odt
+  - odp
+  exclude_path_patterns: []
+  exclude_content_patterns: []
+  include_path_patterns: []
+  restrict_paths: []
+  extend_paths: []
+  url_rewrites: {}
+input:
+  values: {}
+  default_values:
+    name: arachni_name
+    user: arachni_user
+    usr: arachni_user
+    pass: 5543!%arachni_secret
+    txt: arachni_text
+    num: '132'
+    amount: '100'
+    mail: arachni@email.gr
+    account: '12'
+    id: '1'
+  without_defaults: false
+  force: false
+audit:
+  parameter_values: true
+  exclude_vector_patterns: []
+  include_vector_patterns: []
+  link_templates: []
+browser_cluster:
+  local_storage: {}
+  session_storage: {}
+  wait_for_elements: {}
+  wait_for_timers: false
+  pool_size: 4
+  job_timeout: 60
+  worker_time_to_live: 250
+  ignore_images: false
+  screen_width: 1600
+  screen_height: 1200
+http:
+  user_agent: Mozilla/5.0 (Gecko) Arachni/v1.6.1
+  request_timeout: 20000
+  request_redirect_limit: 5
+  request_concurrency: 10
+  request_queue_size: 50
+  request_headers: {}
+  response_max_size: 500000
+  cookies: {}
+  authentication_type: auto
+session: {}
+checks: []
+platforms: []
+plugins: {}
+no_fingerprinting: false
+authorized_by: 
+--------------------------------------------------------------------------------
+[2022-05-03 09:22:04 +0300] [ui/cli/reporter/option_parser#validate:67] No report file provided.