arachni 1.5.1 → 1.6.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +5 -5
- data/CHANGELOG.md +56 -0
- data/Gemfile +2 -4
- data/LICENSE.md +1 -1
- data/README.md +116 -110
- data/Rakefile +1 -1
- data/arachni.gemspec +26 -26
- data/bin/arachni +1 -1
- data/bin/arachni_console +1 -1
- data/bin/arachni_multi +1 -1
- data/bin/arachni_reporter +1 -1
- data/bin/arachni_reproduce +1 -1
- data/bin/arachni_rest_server +1 -1
- data/bin/arachni_restore +1 -1
- data/bin/arachni_rpc +1 -1
- data/bin/arachni_rpcd +1 -1
- data/bin/arachni_rpcd_monitor +1 -1
- data/bin/arachni_script +1 -1
- data/components/checks/active/code_injection.rb +1 -1
- data/components/checks/active/code_injection_php_input_wrapper.rb +1 -1
- data/components/checks/active/code_injection_timing.rb +1 -1
- data/components/checks/active/csrf.rb +7 -2
- data/components/checks/active/file_inclusion.rb +1 -1
- data/components/checks/active/ldap_injection.rb +1 -1
- data/components/checks/active/no_sql_injection.rb +1 -1
- data/components/checks/active/no_sql_injection_differential.rb +3 -3
- data/components/checks/active/os_cmd_injection.rb +1 -1
- data/components/checks/active/os_cmd_injection_timing.rb +1 -1
- data/components/checks/active/path_traversal.rb +1 -1
- data/components/checks/active/response_splitting.rb +1 -1
- data/components/checks/active/rfi.rb +1 -1
- data/components/checks/active/session_fixation.rb +1 -1
- data/components/checks/active/source_code_disclosure.rb +1 -1
- data/components/checks/active/sql_injection.rb +1 -1
- data/components/checks/active/sql_injection_differential.rb +3 -3
- data/components/checks/active/sql_injection_timing.rb +1 -1
- data/components/checks/active/trainer.rb +1 -1
- data/components/checks/active/unvalidated_redirect.rb +1 -1
- data/components/checks/active/unvalidated_redirect_dom.rb +1 -1
- data/components/checks/active/xpath_injection.rb +1 -1
- data/components/checks/active/xss.rb +4 -4
- data/components/checks/active/xss_dom.rb +1 -1
- data/components/checks/active/xss_dom_script_context.rb +1 -1
- data/components/checks/active/xss_event.rb +3 -3
- data/components/checks/active/xss_path.rb +1 -1
- data/components/checks/active/xss_script_context.rb +3 -3
- data/components/checks/active/xss_tag.rb +4 -3
- data/components/checks/active/xxe.rb +1 -1
- data/components/checks/passive/allowed_methods.rb +1 -1
- data/components/checks/passive/backdoors.rb +1 -1
- data/components/checks/passive/backup_directories.rb +1 -1
- data/components/checks/passive/backup_files.rb +2 -2
- data/components/checks/passive/common_admin_interfaces.rb +1 -1
- data/components/checks/passive/common_directories/directories.txt +1 -0
- data/components/checks/passive/common_directories.rb +1 -1
- data/components/checks/passive/common_files.rb +1 -1
- data/components/checks/passive/directory_listing.rb +1 -1
- data/components/checks/passive/grep/captcha.rb +1 -1
- data/components/checks/passive/grep/cookie_set_for_parent_domain.rb +1 -1
- data/components/checks/passive/grep/credit_card.rb +1 -1
- data/components/checks/passive/grep/cvs_svn_users.rb +1 -1
- data/components/checks/passive/grep/emails.rb +1 -1
- data/components/checks/passive/grep/form_upload.rb +1 -1
- data/components/checks/passive/grep/hsts.rb +1 -1
- data/components/checks/passive/grep/html_objects.rb +1 -1
- data/components/checks/passive/grep/http_only_cookies.rb +1 -1
- data/components/checks/passive/grep/insecure_cookies.rb +1 -1
- data/components/checks/passive/grep/insecure_cors_policy.rb +1 -1
- data/components/checks/passive/grep/mixed_resource.rb +1 -1
- data/components/checks/passive/grep/password_autocomplete.rb +1 -1
- data/components/checks/passive/grep/private_ip.rb +1 -1
- data/components/checks/passive/grep/ssn.rb +1 -1
- data/components/checks/passive/grep/unencrypted_password_forms.rb +1 -1
- data/components/checks/passive/grep/x_frame_options.rb +4 -4
- data/components/checks/passive/htaccess_limit.rb +1 -1
- data/components/checks/passive/http_put.rb +1 -1
- data/components/checks/passive/insecure_client_access_policy.rb +1 -1
- data/components/checks/passive/insecure_cross_domain_policy_access.rb +1 -1
- data/components/checks/passive/insecure_cross_domain_policy_headers.rb +1 -1
- data/components/checks/passive/interesting_responses.rb +1 -1
- data/components/checks/passive/localstart_asp.rb +1 -1
- data/components/checks/passive/origin_spoof_access_restriction_bypass.rb +1 -1
- data/components/checks/passive/webdav.rb +1 -1
- data/components/checks/passive/xst.rb +1 -1
- data/components/fingerprinters/frameworks/aspx_mvc.rb +1 -1
- data/components/fingerprinters/frameworks/cakephp.rb +1 -1
- data/components/fingerprinters/frameworks/cherrypy.rb +1 -1
- data/components/fingerprinters/frameworks/django.rb +1 -1
- data/components/fingerprinters/frameworks/jsf.rb +1 -1
- data/components/fingerprinters/frameworks/nette.rb +1 -1
- data/components/fingerprinters/frameworks/rack.rb +1 -1
- data/components/fingerprinters/frameworks/rails.rb +1 -1
- data/components/fingerprinters/frameworks/symfony.rb +1 -1
- data/components/fingerprinters/languages/asp.rb +1 -1
- data/components/fingerprinters/languages/aspx.rb +1 -1
- data/components/fingerprinters/languages/java.rb +1 -1
- data/components/fingerprinters/languages/php.rb +1 -1
- data/components/fingerprinters/languages/python.rb +1 -1
- data/components/fingerprinters/languages/ruby.rb +1 -1
- data/components/fingerprinters/os/bsd.rb +1 -1
- data/components/fingerprinters/os/linux.rb +1 -1
- data/components/fingerprinters/os/solaris.rb +1 -1
- data/components/fingerprinters/os/unix.rb +1 -1
- data/components/fingerprinters/os/windows.rb +1 -1
- data/components/fingerprinters/servers/apache.rb +1 -1
- data/components/fingerprinters/servers/gunicorn.rb +1 -1
- data/components/fingerprinters/servers/iis.rb +1 -1
- data/components/fingerprinters/servers/jetty.rb +1 -1
- data/components/fingerprinters/servers/nginx.rb +1 -1
- data/components/fingerprinters/servers/tomcat.rb +1 -1
- data/components/path_extractors/anchors.rb +1 -1
- data/components/path_extractors/areas.rb +1 -1
- data/components/path_extractors/comments.rb +1 -1
- data/components/path_extractors/data_url.rb +1 -1
- data/components/path_extractors/forms.rb +1 -1
- data/components/path_extractors/frames.rb +1 -1
- data/components/path_extractors/generic.rb +1 -1
- data/components/path_extractors/links.rb +1 -1
- data/components/path_extractors/meta_refresh.rb +1 -1
- data/components/path_extractors/scripts.rb +1 -1
- data/components/plugins/autologin.rb +1 -1
- data/components/plugins/beep_notify.rb +1 -1
- data/components/plugins/content_types.rb +1 -1
- data/components/plugins/cookie_collector.rb +1 -1
- data/components/plugins/debug/browser_cluster_job_monitor.rb +1 -1
- data/components/plugins/defaults/autothrottle.rb +1 -1
- data/components/plugins/defaults/healthmap.rb +2 -2
- data/components/plugins/defaults/meta/remedies/discovery.rb +1 -1
- data/components/plugins/defaults/meta/remedies/timing_attacks.rb +1 -1
- data/components/plugins/defaults/meta/uniformity.rb +1 -1
- data/components/plugins/email_notify.rb +1 -1
- data/components/plugins/exec.rb +3 -3
- data/components/plugins/form_dicattack.rb +1 -1
- data/components/plugins/headers_collector.rb +1 -1
- data/components/plugins/http_dicattack.rb +1 -1
- data/components/plugins/login_script.rb +1 -1
- data/components/plugins/metrics.rb +1 -1
- data/components/plugins/page_dump.rb +1 -1
- data/components/plugins/proxy/panel/verify_login_sequence.html.erb +1 -1
- data/components/plugins/proxy/template_scope.rb +1 -1
- data/components/plugins/proxy.rb +3 -2
- data/components/plugins/rate_limiter.rb +1 -1
- data/components/plugins/restrict_to_dom_state.rb +1 -1
- data/components/plugins/script.rb +1 -1
- data/components/plugins/uncommon_headers.rb +1 -1
- data/components/plugins/vector_collector.rb +1 -1
- data/components/plugins/vector_feed.rb +1 -1
- data/components/plugins/waf_detector.rb +1 -1
- data/components/plugins/webhook_notify.rb +1 -1
- data/components/reporters/ap.rb +1 -1
- data/components/reporters/html/default/css/main.css +4 -0
- data/components/reporters/html/default.erb +9 -1
- data/components/reporters/html.rb +4 -6
- data/components/reporters/json.rb +1 -1
- data/components/reporters/marshal.rb +1 -1
- data/components/reporters/plugin_formatters/html/autologin.rb +1 -1
- data/components/reporters/plugin_formatters/html/content_types.rb +1 -1
- data/components/reporters/plugin_formatters/html/cookie_collector.rb +1 -1
- data/components/reporters/plugin_formatters/html/exec.rb +1 -1
- data/components/reporters/plugin_formatters/html/form_dicattack.rb +1 -1
- data/components/reporters/plugin_formatters/html/healthmap.rb +1 -1
- data/components/reporters/plugin_formatters/html/http_dicattack.rb +1 -1
- data/components/reporters/plugin_formatters/html/login_script.rb +1 -1
- data/components/reporters/plugin_formatters/html/metrics.rb +1 -1
- data/components/reporters/plugin_formatters/html/uncommon_headers.rb +1 -1
- data/components/reporters/plugin_formatters/html/uniformity.rb +1 -1
- data/components/reporters/plugin_formatters/html/vector_collector.rb +1 -1
- data/components/reporters/plugin_formatters/html/waf_detector.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/autologin.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/content_types.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/cookie_collector.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/exec.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/form_dicattack.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/healthmap.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/http_dicattack.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/login_script.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/metrics.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/uncommon_headers.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/uniformity.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/vector_collector.rb +1 -1
- data/components/reporters/plugin_formatters/stdout/waf_detector.rb +1 -1
- data/components/reporters/plugin_formatters/xml/autologin.rb +1 -1
- data/components/reporters/plugin_formatters/xml/content_types.rb +1 -1
- data/components/reporters/plugin_formatters/xml/cookie_collector.rb +1 -1
- data/components/reporters/plugin_formatters/xml/exec.rb +1 -1
- data/components/reporters/plugin_formatters/xml/form_dicattack.rb +1 -1
- data/components/reporters/plugin_formatters/xml/healthmap.rb +1 -1
- data/components/reporters/plugin_formatters/xml/http_dicattack.rb +1 -1
- data/components/reporters/plugin_formatters/xml/login_script.rb +1 -1
- data/components/reporters/plugin_formatters/xml/metrics.rb +1 -1
- data/components/reporters/plugin_formatters/xml/uncommon_headers.rb +1 -1
- data/components/reporters/plugin_formatters/xml/uniformity.rb +1 -1
- data/components/reporters/plugin_formatters/xml/vector_collector.rb +1 -1
- data/components/reporters/plugin_formatters/xml/waf_detector.rb +1 -1
- data/components/reporters/stdout.rb +6 -1
- data/components/reporters/txt.rb +1 -1
- data/components/reporters/xml/schema.xsd +1 -0
- data/components/reporters/xml.rb +3 -3
- data/components/reporters/yaml.rb +1 -1
- data/lib/arachni/banner.rb +1 -1
- data/lib/arachni/browser/element_locator.rb +1 -1
- data/lib/arachni/browser/javascript/dom_monitor.rb +1 -1
- data/lib/arachni/browser/javascript/proxy/stub.rb +1 -1
- data/lib/arachni/browser/javascript/proxy.rb +1 -1
- data/lib/arachni/browser/javascript/scripts/dom_monitor.js +39 -11
- data/lib/arachni/browser/javascript/scripts/taint_tracer.js +41 -30
- data/lib/arachni/browser/javascript/taint_tracer/frame/called_function.rb +1 -1
- data/lib/arachni/browser/javascript/taint_tracer/frame.rb +1 -1
- data/lib/arachni/browser/javascript/taint_tracer/sink/base.rb +1 -1
- data/lib/arachni/browser/javascript/taint_tracer/sink/data_flow.rb +1 -1
- data/lib/arachni/browser/javascript/taint_tracer/sink/execution_flow.rb +1 -1
- data/lib/arachni/browser/javascript/taint_tracer.rb +1 -1
- data/lib/arachni/browser/javascript.rb +14 -29
- data/lib/arachni/browser.rb +133 -216
- data/lib/arachni/browser_cluster/job/result.rb +1 -1
- data/lib/arachni/browser_cluster/job.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/browser_provider.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/dom_exploration/event_trigger/result.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/dom_exploration/event_trigger.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/dom_exploration/result.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/dom_exploration.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/taint_trace/event_trigger/result.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/taint_trace/event_trigger.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/taint_trace/result.rb +1 -1
- data/lib/arachni/browser_cluster/jobs/taint_trace.rb +1 -1
- data/lib/arachni/browser_cluster/worker.rb +11 -26
- data/lib/arachni/browser_cluster.rb +2 -3
- data/lib/arachni/check/auditor.rb +10 -5
- data/lib/arachni/check/base.rb +1 -1
- data/lib/arachni/check/manager.rb +1 -1
- data/lib/arachni/check.rb +1 -1
- data/lib/arachni/component/base.rb +1 -1
- data/lib/arachni/component/manager.rb +1 -1
- data/lib/arachni/component/options/address.rb +1 -1
- data/lib/arachni/component/options/base.rb +1 -1
- data/lib/arachni/component/options/bool.rb +1 -1
- data/lib/arachni/component/options/float.rb +1 -1
- data/lib/arachni/component/options/int.rb +1 -1
- data/lib/arachni/component/options/multiple_choice.rb +1 -1
- data/lib/arachni/component/options/object.rb +1 -1
- data/lib/arachni/component/options/path.rb +1 -1
- data/lib/arachni/component/options/port.rb +1 -1
- data/lib/arachni/component/options/string.rb +1 -1
- data/lib/arachni/component/options/url.rb +1 -1
- data/lib/arachni/component/options.rb +1 -1
- data/lib/arachni/component/output.rb +1 -1
- data/lib/arachni/component/utilities.rb +1 -1
- data/lib/arachni/component.rb +1 -1
- data/lib/arachni/data/framework/rpc.rb +2 -2
- data/lib/arachni/data/framework.rb +2 -2
- data/lib/arachni/data/issues.rb +1 -1
- data/lib/arachni/data/plugins.rb +1 -1
- data/lib/arachni/data/session.rb +1 -1
- data/lib/arachni/data.rb +1 -1
- data/lib/arachni/element/base.rb +1 -1
- data/lib/arachni/element/body.rb +1 -1
- data/lib/arachni/element/capabilities/analyzable/differential.rb +1 -1
- data/lib/arachni/element/capabilities/analyzable/signature.rb +1 -1
- data/lib/arachni/element/capabilities/analyzable/timeout.rb +1 -1
- data/lib/arachni/element/capabilities/analyzable.rb +1 -1
- data/lib/arachni/element/capabilities/auditable/buffered.rb +1 -1
- data/lib/arachni/element/capabilities/auditable/line_buffered.rb +1 -1
- data/lib/arachni/element/capabilities/auditable.rb +1 -1
- data/lib/arachni/element/capabilities/dom_only.rb +1 -1
- data/lib/arachni/element/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/capabilities/refreshable.rb +1 -1
- data/lib/arachni/element/capabilities/submittable.rb +1 -1
- data/lib/arachni/element/capabilities/with_auditor/output.rb +1 -1
- data/lib/arachni/element/capabilities/with_auditor.rb +1 -1
- data/lib/arachni/element/capabilities/with_dom.rb +1 -1
- data/lib/arachni/element/capabilities/with_node.rb +1 -1
- data/lib/arachni/element/capabilities/with_scope/scope.rb +1 -1
- data/lib/arachni/element/capabilities/with_scope.rb +1 -1
- data/lib/arachni/element/capabilities/with_source.rb +1 -1
- data/lib/arachni/element/cookie/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/cookie/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/cookie/capabilities/with_dom.rb +1 -1
- data/lib/arachni/element/cookie/dom.rb +1 -1
- data/lib/arachni/element/cookie.rb +1 -1
- data/lib/arachni/element/dom/capabilities/auditable.rb +1 -1
- data/lib/arachni/element/dom/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/dom/capabilities/locatable.rb +1 -1
- data/lib/arachni/element/dom/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/dom/capabilities/submittable.rb +1 -1
- data/lib/arachni/element/dom.rb +1 -1
- data/lib/arachni/element/form/capabilities/auditable.rb +1 -1
- data/lib/arachni/element/form/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/form/capabilities/submittable.rb +1 -1
- data/lib/arachni/element/form/capabilities/with_dom.rb +1 -1
- data/lib/arachni/element/form/dom.rb +1 -1
- data/lib/arachni/element/form.rb +1 -1
- data/lib/arachni/element/generic_dom.rb +1 -1
- data/lib/arachni/element/header/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/header/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/header.rb +1 -1
- data/lib/arachni/element/json/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/json/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/json.rb +1 -1
- data/lib/arachni/element/link/capabilities/auditable.rb +1 -1
- data/lib/arachni/element/link/capabilities/submittable.rb +1 -1
- data/lib/arachni/element/link/capabilities/with_dom.rb +1 -1
- data/lib/arachni/element/link/dom/capabilities/submittable.rb +1 -1
- data/lib/arachni/element/link/dom.rb +1 -1
- data/lib/arachni/element/link.rb +1 -1
- data/lib/arachni/element/link_template/capabilities/auditable.rb +1 -1
- data/lib/arachni/element/link_template/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/link_template/capabilities/with_dom.rb +1 -1
- data/lib/arachni/element/link_template/dom/capabilities/submittable.rb +1 -1
- data/lib/arachni/element/link_template/dom.rb +1 -1
- data/lib/arachni/element/link_template.rb +1 -1
- data/lib/arachni/element/nested_cookie/capabilities/submittable.rb +35 -0
- data/lib/arachni/element/nested_cookie.rb +370 -0
- data/lib/arachni/element/path.rb +1 -1
- data/lib/arachni/element/server.rb +1 -1
- data/lib/arachni/element/ui_form/dom.rb +1 -1
- data/lib/arachni/element/ui_form.rb +1 -1
- data/lib/arachni/element/ui_input/dom.rb +1 -1
- data/lib/arachni/element/ui_input.rb +1 -1
- data/lib/arachni/element/xml/capabilities/inputtable.rb +1 -1
- data/lib/arachni/element/xml/capabilities/mutable.rb +1 -1
- data/lib/arachni/element/xml.rb +1 -1
- data/lib/arachni/element_filter.rb +1 -1
- data/lib/arachni/error.rb +1 -1
- data/lib/arachni/ethon/easy.rb +1 -1
- data/lib/arachni/framework/parts/audit.rb +1 -1
- data/lib/arachni/framework/parts/browser.rb +1 -1
- data/lib/arachni/framework/parts/check.rb +1 -1
- data/lib/arachni/framework/parts/data.rb +1 -1
- data/lib/arachni/framework/parts/platform.rb +1 -1
- data/lib/arachni/framework/parts/plugin.rb +1 -1
- data/lib/arachni/framework/parts/report.rb +1 -1
- data/lib/arachni/framework/parts/scope.rb +1 -1
- data/lib/arachni/framework/parts/state.rb +1 -1
- data/lib/arachni/framework.rb +1 -1
- data/lib/arachni/http/client/dynamic_404_handler.rb +1 -1
- data/lib/arachni/http/client.rb +7 -5
- data/lib/arachni/http/cookie_jar.rb +1 -1
- data/lib/arachni/http/headers.rb +1 -1
- data/lib/arachni/http/message/scope.rb +1 -1
- data/lib/arachni/http/message.rb +1 -1
- data/lib/arachni/http/proxy_server/connection.rb +3 -8
- data/lib/arachni/http/proxy_server/ssl-interceptor-cacert.pem +18 -32
- data/lib/arachni/http/proxy_server/ssl-interceptor-cakey.pem +28 -49
- data/lib/arachni/http/proxy_server/ssl_interceptor.rb +7 -6
- data/lib/arachni/http/proxy_server/tunnel.rb +1 -1
- data/lib/arachni/http/proxy_server.rb +1 -1
- data/lib/arachni/http/request/scope.rb +1 -1
- data/lib/arachni/http/request.rb +8 -2
- data/lib/arachni/http/response/scope.rb +1 -1
- data/lib/arachni/http/response.rb +1 -1
- data/lib/arachni/http.rb +1 -1
- data/lib/arachni/issue/severity/base.rb +1 -1
- data/lib/arachni/issue/severity.rb +1 -1
- data/lib/arachni/issue.rb +1 -1
- data/lib/arachni/option_group.rb +1 -1
- data/lib/arachni/option_groups/audit.rb +11 -2
- data/lib/arachni/option_groups/browser_cluster.rb +28 -4
- data/lib/arachni/option_groups/datastore.rb +1 -1
- data/lib/arachni/option_groups/dispatcher.rb +1 -1
- data/lib/arachni/option_groups/http.rb +5 -5
- data/lib/arachni/option_groups/input.rb +1 -1
- data/lib/arachni/option_groups/output.rb +1 -1
- data/lib/arachni/option_groups/paths.rb +1 -1
- data/lib/arachni/option_groups/rpc.rb +1 -1
- data/lib/arachni/option_groups/scope.rb +46 -4
- data/lib/arachni/option_groups/session.rb +1 -1
- data/lib/arachni/option_groups/snapshot.rb +1 -1
- data/lib/arachni/option_groups.rb +1 -1
- data/lib/arachni/options.rb +1 -1
- data/lib/arachni/page/dom/transition.rb +1 -1
- data/lib/arachni/page/dom.rb +1 -1
- data/lib/arachni/page/scope.rb +1 -1
- data/lib/arachni/page.rb +3 -3
- data/lib/arachni/parser/document.rb +1 -1
- data/lib/arachni/parser/extractors/base.rb +1 -1
- data/lib/arachni/parser/nodes/base.rb +1 -1
- data/lib/arachni/parser/nodes/comment.rb +1 -1
- data/lib/arachni/parser/nodes/element/with_attributes/attributes.rb +2 -2
- data/lib/arachni/parser/nodes/element/with_attributes.rb +1 -1
- data/lib/arachni/parser/nodes/element.rb +1 -1
- data/lib/arachni/parser/nodes/text.rb +1 -1
- data/lib/arachni/parser/nodes/with_value.rb +2 -2
- data/lib/arachni/parser/sax.rb +2 -1
- data/lib/arachni/parser/with_children/search.rb +1 -1
- data/lib/arachni/parser/with_children.rb +1 -1
- data/lib/arachni/parser.rb +31 -2
- data/lib/arachni/platform/fingerprinter.rb +1 -1
- data/lib/arachni/platform/list.rb +1 -1
- data/lib/arachni/platform/manager.rb +1 -1
- data/lib/arachni/platform.rb +1 -1
- data/lib/arachni/plugin/base.rb +1 -1
- data/lib/arachni/plugin/formatter.rb +1 -1
- data/lib/arachni/plugin/manager.rb +1 -1
- data/lib/arachni/plugin.rb +1 -1
- data/lib/arachni/processes/dispatchers.rb +1 -1
- data/lib/arachni/processes/executables/base.rb +2 -1
- data/lib/arachni/processes/helpers/dispatchers.rb +1 -1
- data/lib/arachni/processes/helpers/instances.rb +1 -1
- data/lib/arachni/processes/helpers/processes.rb +1 -1
- data/lib/arachni/processes/helpers.rb +1 -1
- data/lib/arachni/processes/instances.rb +1 -1
- data/lib/arachni/processes/manager.rb +9 -5
- data/lib/arachni/processes.rb +1 -1
- data/lib/arachni/report.rb +1 -1
- data/lib/arachni/reporter/base.rb +1 -1
- data/lib/arachni/reporter/formatter_manager.rb +1 -1
- data/lib/arachni/reporter/manager.rb +1 -1
- data/lib/arachni/reporter/options.rb +1 -10
- data/lib/arachni/reporter.rb +1 -1
- data/lib/arachni/rest/server/instance_helpers.rb +10 -1
- data/lib/arachni/rest/server.rb +7 -1
- data/lib/arachni/rpc/client/base.rb +1 -1
- data/lib/arachni/rpc/client/dispatcher.rb +1 -1
- data/lib/arachni/rpc/client/instance/framework.rb +1 -1
- data/lib/arachni/rpc/client/instance/service.rb +1 -1
- data/lib/arachni/rpc/client/instance.rb +1 -1
- data/lib/arachni/rpc/serializer.rb +1 -1
- data/lib/arachni/rpc/server/active_options.rb +1 -1
- data/lib/arachni/rpc/server/base.rb +1 -1
- data/lib/arachni/rpc/server/check/manager.rb +1 -1
- data/lib/arachni/rpc/server/dispatcher/node.rb +1 -1
- data/lib/arachni/rpc/server/dispatcher/service.rb +1 -1
- data/lib/arachni/rpc/server/dispatcher.rb +1 -1
- data/lib/arachni/rpc/server/framework/distributor.rb +1 -1
- data/lib/arachni/rpc/server/framework/master.rb +1 -1
- data/lib/arachni/rpc/server/framework/multi_instance.rb +1 -1
- data/lib/arachni/rpc/server/framework/slave.rb +1 -1
- data/lib/arachni/rpc/server/framework.rb +1 -1
- data/lib/arachni/rpc/server/instance.rb +1 -1
- data/lib/arachni/rpc/server/output.rb +1 -1
- data/lib/arachni/rpc/server/plugin/manager.rb +1 -1
- data/lib/arachni/ruby/array.rb +1 -1
- data/lib/arachni/ruby/hash.rb +1 -1
- data/lib/arachni/ruby/object.rb +1 -1
- data/lib/arachni/ruby/set.rb +1 -1
- data/lib/arachni/ruby/string.rb +1 -1
- data/lib/arachni/ruby/webrick/cookie.rb +1 -1
- data/lib/arachni/ruby/webrick/httprequest.rb +1 -1
- data/lib/arachni/ruby/webrick.rb +1 -1
- data/lib/arachni/ruby.rb +1 -1
- data/lib/arachni/scope.rb +1 -1
- data/lib/arachni/selenium/webdriver/remote/typhoeus.rb +6 -16
- data/lib/arachni/session.rb +1 -1
- data/lib/arachni/snapshot.rb +1 -1
- data/lib/arachni/state/audit.rb +1 -1
- data/lib/arachni/state/element_filter.rb +1 -1
- data/lib/arachni/state/framework/rpc.rb +1 -1
- data/lib/arachni/state/framework.rb +1 -1
- data/lib/arachni/state/http.rb +1 -1
- data/lib/arachni/state/options.rb +1 -1
- data/lib/arachni/state/plugins.rb +1 -1
- data/lib/arachni/state.rb +1 -1
- data/lib/arachni/support/buffer/autoflush.rb +1 -1
- data/lib/arachni/support/buffer/base.rb +1 -1
- data/lib/arachni/support/buffer.rb +1 -1
- data/lib/arachni/support/cache/base.rb +1 -1
- data/lib/arachni/support/cache/least_cost_replacement.rb +1 -1
- data/lib/arachni/support/cache/least_recently_pushed.rb +1 -1
- data/lib/arachni/support/cache/least_recently_used.rb +1 -1
- data/lib/arachni/support/cache/preference.rb +1 -1
- data/lib/arachni/support/cache/random_replacement.rb +1 -1
- data/lib/arachni/support/cache.rb +1 -1
- data/lib/arachni/support/crypto/rsa_aes_cbc.rb +1 -1
- data/lib/arachni/support/crypto.rb +1 -1
- data/lib/arachni/support/database/base.rb +15 -7
- data/lib/arachni/support/database/hash.rb +1 -1
- data/lib/arachni/support/database/queue.rb +1 -1
- data/lib/arachni/support/database.rb +1 -1
- data/lib/arachni/support/glob.rb +1 -1
- data/lib/arachni/support/lookup/base.rb +1 -1
- data/lib/arachni/support/lookup/hash_set.rb +1 -1
- data/lib/arachni/support/lookup/moolb.rb +1 -1
- data/lib/arachni/support/lookup.rb +1 -1
- data/lib/arachni/support/mixins/observable.rb +1 -1
- data/lib/arachni/support/mixins/terminal.rb +1 -1
- data/lib/arachni/support/mixins.rb +1 -1
- data/lib/arachni/support/profiler.rb +1 -1
- data/lib/arachni/support/signature.rb +1 -1
- data/lib/arachni/support.rb +1 -1
- data/lib/arachni/trainer.rb +1 -1
- data/lib/arachni/ui/foo/output.rb +1 -1
- data/lib/arachni/uri/scope.rb +1 -1
- data/lib/arachni/uri.rb +6 -9
- data/lib/arachni/utilities.rb +1 -1
- data/lib/arachni/version.rb +1 -1
- data/lib/arachni.rb +1 -1
- data/lib/version +1 -1
- data/logs/error-1821117.log +243 -0
- data/spec/arachni/browser/javascript/dom_monitor_spec.rb +84 -60
- data/spec/arachni/browser/javascript/proxy_spec.rb +0 -10
- data/spec/arachni/browser/javascript/taint_tracer_spec.rb +68 -90
- data/spec/arachni/browser/javascript_spec.rb +10 -9
- data/spec/arachni/browser_cluster/worker_spec.rb +23 -55
- data/spec/arachni/browser_spec.rb +160 -158
- data/spec/arachni/data/framework/rpc_spec.rb +1 -1
- data/spec/arachni/data/framework_spec.rb +1 -1
- data/spec/arachni/element/cookie_spec.rb +1 -1
- data/spec/arachni/element/nested_cookie_spec.rb +687 -0
- data/spec/arachni/element/ui_form_spec.rb +2 -2
- data/spec/arachni/element/ui_input_spec.rb +1 -1
- data/spec/arachni/http/client_spec.rb +14 -26
- data/spec/arachni/http/cookie_jar_spec.rb +2 -2
- data/spec/arachni/http/proxy_server_spec.rb +2 -0
- data/spec/arachni/http/request_spec.rb +3 -2
- data/spec/arachni/option_groups/browser_cluster_spec.rb +17 -0
- data/spec/arachni/option_groups/http_spec.rb +6 -6
- data/spec/arachni/option_groups/scope_spec.rb +1 -6
- data/spec/arachni/page_spec.rb +3 -2
- data/spec/arachni/parser_spec.rb +45 -1
- data/spec/arachni/reporter/options_spec.rb +0 -14
- data/spec/arachni/rest/server_spec.rb +39 -2
- data/spec/arachni/uri_spec.rb +1 -1
- data/spec/components/checks/active/code_injection_spec.rb +12 -7
- data/spec/components/checks/active/code_injection_timing_spec.rb +4 -3
- data/spec/components/checks/active/file_inclusion_spec.rb +15 -10
- data/spec/components/checks/active/ldap_injection_spec.rb +5 -4
- data/spec/components/checks/active/no_sql_injection_differential_spec.rb +1 -1
- data/spec/components/checks/active/no_sql_injection_spec.rb +5 -4
- data/spec/components/checks/active/os_cmd_injection_spec.rb +6 -4
- data/spec/components/checks/active/os_cmd_injection_timing_spec.rb +4 -3
- data/spec/components/checks/active/path_traversal_spec.rb +10 -7
- data/spec/components/checks/active/response_splitting_spec.rb +5 -4
- data/spec/components/checks/active/rfi_spec.rb +9 -8
- data/spec/components/checks/active/source_code_disclosure_spec.rb +33 -10
- data/spec/components/checks/active/sql_injection_differential_spec.rb +1 -1
- data/spec/components/checks/active/sql_injection_spec.rb +53 -36
- data/spec/components/checks/active/sql_injection_timing_spec.rb +11 -8
- data/spec/components/checks/active/unvalidated_redirect_spec.rb +9 -8
- data/spec/components/checks/active/xpath_injection_spec.rb +5 -4
- data/spec/components/checks/active/xss_dom_script_context_spec.rb +5 -5
- data/spec/components/checks/active/xss_event_spec.rb +5 -3
- data/spec/components/checks/active/xss_script_context_spec.rb +4 -3
- data/spec/components/checks/active/xss_spec.rb +5 -4
- data/spec/components/checks/active/xss_tag_spec.rb +11 -3
- data/spec/components/checks/passive/backup_files_spec.rb +0 -4
- data/spec/components/checks/passive/grep/x_frame_options_spec.rb +6 -0
- data/spec/spec_helper.rb +2 -1
- data/spec/support/factories/http/response.rb +1 -1
- data/spec/support/fixtures/check_with_invalid_platforms/with_invalid_platforms.rb +1 -1
- data/spec/support/fixtures/checks/test.rb +4 -4
- data/spec/support/fixtures/checks/test2.rb +1 -1
- data/spec/support/fixtures/checks/test3.rb +1 -1
- data/spec/support/fixtures/cookies.txt +1 -1
- data/spec/support/fixtures/executables/node.rb +2 -3
- data/spec/support/fixtures/fingerprinters/test.rb +1 -1
- data/spec/support/fixtures/nested_cookies.txt +11 -0
- data/spec/support/fixtures/plugins/bad.rb +1 -1
- data/spec/support/fixtures/plugins/defaults/default.rb +1 -1
- data/spec/support/fixtures/plugins/distributable.rb +1 -1
- data/spec/support/fixtures/plugins/loop.rb +1 -1
- data/spec/support/fixtures/plugins/suspendable.rb +1 -1
- data/spec/support/fixtures/plugins/wait.rb +1 -1
- data/spec/support/fixtures/plugins/with_options.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p0.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p00.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p1.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p2.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p22.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p222.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p_nil.rb +1 -1
- data/spec/support/fixtures/plugins_with_priorities/p_nil2.rb +1 -1
- data/spec/support/fixtures/report.afr +0 -0
- data/spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb +1 -1
- data/spec/support/fixtures/reporters/base_spec/with_formatters.rb +1 -1
- data/spec/support/fixtures/reporters/base_spec/with_outfile.rb +1 -1
- data/spec/support/fixtures/reporters/base_spec/without_outfile.rb +1 -1
- data/spec/support/fixtures/reporters/manager_spec/afr.rb +1 -1
- data/spec/support/fixtures/reporters/manager_spec/error.rb +1 -1
- data/spec/support/fixtures/reporters/manager_spec/foo.rb +1 -1
- data/spec/support/fixtures/run_check/body.rb +1 -1
- data/spec/support/fixtures/run_check/cookies.rb +1 -1
- data/spec/support/fixtures/run_check/empty.rb +1 -1
- data/spec/support/fixtures/run_check/flch.rb +1 -1
- data/spec/support/fixtures/run_check/forms.rb +1 -1
- data/spec/support/fixtures/run_check/headers.rb +1 -1
- data/spec/support/fixtures/run_check/links.rb +1 -1
- data/spec/support/fixtures/run_check/nil.rb +1 -1
- data/spec/support/fixtures/run_check/path.rb +1 -1
- data/spec/support/fixtures/run_check/server.rb +1 -1
- data/spec/support/fixtures/signature_check/signature.rb +1 -1
- data/spec/support/fixtures/wait_check/wait.rb +1 -1
- data/spec/support/helpers/framework.rb +1 -1
- data/spec/support/helpers/misc.rb +1 -1
- data/spec/support/helpers/paths.rb +1 -1
- data/spec/support/helpers/requires.rb +1 -1
- data/spec/support/helpers/resets.rb +1 -1
- data/spec/support/helpers/web_server.rb +1 -1
- data/spec/support/lib/factory.rb +1 -1
- data/spec/support/lib/web_server_client.rb +1 -1
- data/spec/support/lib/web_server_dispatcher.rb +1 -1
- data/spec/support/lib/web_server_manager.rb +1 -1
- data/spec/support/servers/arachni/check/auditor.rb +1 -0
- data/spec/support/servers/arachni/element/form/form_dom.rb +1 -0
- data/spec/support/servers/arachni/element/form.rb +4 -4
- data/spec/support/servers/arachni/element/header.rb +1 -1
- data/spec/support/servers/arachni/element/nested_cookie.rb +84 -0
- data/spec/support/servers/arachni/parser.rb +6 -0
- data/spec/support/servers/checks/active/code_injection.rb +18 -0
- data/spec/support/servers/checks/active/code_injection_timing.rb +18 -0
- data/spec/support/servers/checks/active/file_inclusion.rb +19 -1
- data/spec/support/servers/checks/active/ldap_injection.rb +18 -0
- data/spec/support/servers/checks/active/no_sql_injection.rb +27 -0
- data/spec/support/servers/checks/active/no_sql_injection_differential.rb +19 -0
- data/spec/support/servers/checks/active/os_cmd_injection.rb +29 -0
- data/spec/support/servers/checks/active/os_cmd_injection_timing.rb +18 -1
- data/spec/support/servers/checks/active/path_traversal.rb +30 -3
- data/spec/support/servers/checks/active/response_splitting.rb +30 -1
- data/spec/support/servers/checks/active/rfi.rb +30 -2
- data/spec/support/servers/checks/active/session_fixation.rb +1 -3
- data/spec/support/servers/checks/active/source_code_disclosure.rb +16 -0
- data/spec/support/servers/checks/active/sql_injection.rb +27 -0
- data/spec/support/servers/checks/active/sql_injection_differential.rb +19 -0
- data/spec/support/servers/checks/active/sql_injection_timing.rb +19 -1
- data/spec/support/servers/checks/active/unvalidated_redirect.rb +40 -1
- data/spec/support/servers/checks/active/xpath_injection.rb +27 -0
- data/spec/support/servers/checks/active/xss.rb +40 -0
- data/spec/support/servers/checks/active/xss_event.rb +22 -1
- data/spec/support/servers/checks/active/xss_script_context.rb +18 -0
- data/spec/support/servers/checks/active/xss_tag.rb +40 -0
- data/spec/support/servers/checks/passive/grep/x_frame_options.rb +5 -0
- data/spec/support/shared/check.rb +1 -0
- data/spec/support/shared/element/capabilities/auditable/buffered.rb +2 -2
- data/spec/support/shared/element/capabilities/auditable/line_buffered.rb +2 -2
- data/spec/support/shared/element/capabilities/auditable.rb +2 -2
- data/ui/cli/framework/option_parser.rb +44 -8
- data/ui/cli/framework.rb +6 -5
- data/ui/cli/option_parser.rb +1 -1
- data/ui/cli/output.rb +1 -1
- data/ui/cli/reporter/option_parser.rb +1 -1
- data/ui/cli/reporter.rb +1 -1
- data/ui/cli/reproduce/option_parser.rb +1 -1
- data/ui/cli/reproduce.rb +1 -1
- data/ui/cli/rest/server/option_parser.rb +1 -1
- data/ui/cli/rest/server.rb +1 -1
- data/ui/cli/restored_framework/option_parser.rb +1 -1
- data/ui/cli/restored_framework.rb +1 -1
- data/ui/cli/rpc/client/dispatcher_monitor/option_parser.rb +1 -1
- data/ui/cli/rpc/client/dispatcher_monitor.rb +1 -1
- data/ui/cli/rpc/client/instance.rb +7 -4
- data/ui/cli/rpc/client/local/option_parser.rb +1 -1
- data/ui/cli/rpc/client/local.rb +1 -1
- data/ui/cli/rpc/client/remote/option_parser.rb +1 -1
- data/ui/cli/rpc/client/remote.rb +1 -1
- data/ui/cli/rpc/server/dispatcher/option_parser.rb +1 -1
- data/ui/cli/rpc/server/dispatcher.rb +1 -1
- data/ui/cli/utilities.rb +1 -1
- metadata +603 -581
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: arachni
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.6.1.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Tasos Laskos
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2022-05-03 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: awesome_print
|
@@ -30,14 +30,28 @@ dependencies:
|
|
30
30
|
requirements:
|
31
31
|
- - '='
|
32
32
|
- !ruby/object:Gem::Version
|
33
|
-
version:
|
33
|
+
version: 2.2.3
|
34
34
|
type: :runtime
|
35
35
|
prerelease: false
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
37
37
|
requirements:
|
38
38
|
- - '='
|
39
39
|
- !ruby/object:Gem::Version
|
40
|
-
version:
|
40
|
+
version: 2.2.3
|
41
|
+
- !ruby/object:Gem::Dependency
|
42
|
+
name: rack-test
|
43
|
+
requirement: !ruby/object:Gem::Requirement
|
44
|
+
requirements:
|
45
|
+
- - ">="
|
46
|
+
- !ruby/object:Gem::Version
|
47
|
+
version: '0'
|
48
|
+
type: :runtime
|
49
|
+
prerelease: false
|
50
|
+
version_requirements: !ruby/object:Gem::Requirement
|
51
|
+
requirements:
|
52
|
+
- - ">="
|
53
|
+
- !ruby/object:Gem::Version
|
54
|
+
version: '0'
|
41
55
|
- !ruby/object:Gem::Dependency
|
42
56
|
name: bundler
|
43
57
|
requirement: !ruby/object:Gem::Requirement
|
@@ -58,42 +72,42 @@ dependencies:
|
|
58
72
|
requirements:
|
59
73
|
- - '='
|
60
74
|
- !ruby/object:Gem::Version
|
61
|
-
version: 1.0.
|
75
|
+
version: 1.0.5
|
62
76
|
type: :runtime
|
63
77
|
prerelease: false
|
64
78
|
version_requirements: !ruby/object:Gem::Requirement
|
65
79
|
requirements:
|
66
80
|
- - '='
|
67
81
|
- !ruby/object:Gem::Version
|
68
|
-
version: 1.0.
|
82
|
+
version: 1.0.5
|
69
83
|
- !ruby/object:Gem::Dependency
|
70
84
|
name: concurrent-ruby-ext
|
71
85
|
requirement: !ruby/object:Gem::Requirement
|
72
86
|
requirements:
|
73
87
|
- - '='
|
74
88
|
- !ruby/object:Gem::Version
|
75
|
-
version: 1.0.
|
89
|
+
version: 1.0.5
|
76
90
|
type: :runtime
|
77
91
|
prerelease: false
|
78
92
|
version_requirements: !ruby/object:Gem::Requirement
|
79
93
|
requirements:
|
80
94
|
- - '='
|
81
95
|
- !ruby/object:Gem::Version
|
82
|
-
version: 1.0.
|
96
|
+
version: 1.0.5
|
83
97
|
- !ruby/object:Gem::Dependency
|
84
98
|
name: rubyzip
|
85
99
|
requirement: !ruby/object:Gem::Requirement
|
86
100
|
requirements:
|
87
|
-
- -
|
101
|
+
- - ">="
|
88
102
|
- !ruby/object:Gem::Version
|
89
|
-
version: 1.
|
103
|
+
version: 1.3.0
|
90
104
|
type: :runtime
|
91
105
|
prerelease: false
|
92
106
|
version_requirements: !ruby/object:Gem::Requirement
|
93
107
|
requirements:
|
94
|
-
- -
|
108
|
+
- - ">="
|
95
109
|
- !ruby/object:Gem::Version
|
96
|
-
version: 1.
|
110
|
+
version: 1.3.0
|
97
111
|
- !ruby/object:Gem::Dependency
|
98
112
|
name: http_parser.rb
|
99
113
|
requirement: !ruby/object:Gem::Requirement
|
@@ -114,56 +128,56 @@ dependencies:
|
|
114
128
|
requirements:
|
115
129
|
- - '='
|
116
130
|
- !ruby/object:Gem::Version
|
117
|
-
version: 1.1.
|
131
|
+
version: 1.1.2
|
118
132
|
type: :runtime
|
119
133
|
prerelease: false
|
120
134
|
version_requirements: !ruby/object:Gem::Requirement
|
121
135
|
requirements:
|
122
136
|
- - '='
|
123
137
|
- !ruby/object:Gem::Version
|
124
|
-
version: 1.1.
|
138
|
+
version: 1.1.2
|
125
139
|
- !ruby/object:Gem::Dependency
|
126
140
|
name: childprocess
|
127
141
|
requirement: !ruby/object:Gem::Requirement
|
128
142
|
requirements:
|
129
143
|
- - '='
|
130
144
|
- !ruby/object:Gem::Version
|
131
|
-
version: 0.
|
145
|
+
version: 0.9.0
|
132
146
|
type: :runtime
|
133
147
|
prerelease: false
|
134
148
|
version_requirements: !ruby/object:Gem::Requirement
|
135
149
|
requirements:
|
136
150
|
- - '='
|
137
151
|
- !ruby/object:Gem::Version
|
138
|
-
version: 0.
|
152
|
+
version: 0.9.0
|
139
153
|
- !ruby/object:Gem::Dependency
|
140
154
|
name: msgpack
|
141
155
|
requirement: !ruby/object:Gem::Requirement
|
142
156
|
requirements:
|
143
157
|
- - '='
|
144
158
|
- !ruby/object:Gem::Version
|
145
|
-
version:
|
159
|
+
version: 1.2.4
|
146
160
|
type: :runtime
|
147
161
|
prerelease: false
|
148
162
|
version_requirements: !ruby/object:Gem::Requirement
|
149
163
|
requirements:
|
150
164
|
- - '='
|
151
165
|
- !ruby/object:Gem::Version
|
152
|
-
version:
|
166
|
+
version: 1.2.4
|
153
167
|
- !ruby/object:Gem::Dependency
|
154
168
|
name: oj
|
155
169
|
requirement: !ruby/object:Gem::Requirement
|
156
170
|
requirements:
|
157
171
|
- - '='
|
158
172
|
- !ruby/object:Gem::Version
|
159
|
-
version:
|
173
|
+
version: 3.6.5
|
160
174
|
type: :runtime
|
161
175
|
prerelease: false
|
162
176
|
version_requirements: !ruby/object:Gem::Requirement
|
163
177
|
requirements:
|
164
178
|
- - '='
|
165
179
|
- !ruby/object:Gem::Version
|
166
|
-
version:
|
180
|
+
version: 3.6.5
|
167
181
|
- !ruby/object:Gem::Dependency
|
168
182
|
name: oj_mimic_json
|
169
183
|
requirement: !ruby/object:Gem::Requirement
|
@@ -182,44 +196,44 @@ dependencies:
|
|
182
196
|
name: puma
|
183
197
|
requirement: !ruby/object:Gem::Requirement
|
184
198
|
requirements:
|
185
|
-
- -
|
199
|
+
- - ">="
|
186
200
|
- !ruby/object:Gem::Version
|
187
|
-
version:
|
201
|
+
version: 4.3.9
|
188
202
|
type: :runtime
|
189
203
|
prerelease: false
|
190
204
|
version_requirements: !ruby/object:Gem::Requirement
|
191
205
|
requirements:
|
192
|
-
- -
|
206
|
+
- - ">="
|
193
207
|
- !ruby/object:Gem::Version
|
194
|
-
version:
|
208
|
+
version: 4.3.9
|
195
209
|
- !ruby/object:Gem::Dependency
|
196
210
|
name: sinatra
|
197
211
|
requirement: !ruby/object:Gem::Requirement
|
198
212
|
requirements:
|
199
213
|
- - '='
|
200
214
|
- !ruby/object:Gem::Version
|
201
|
-
version: 1.
|
215
|
+
version: 2.1.0
|
202
216
|
type: :runtime
|
203
217
|
prerelease: false
|
204
218
|
version_requirements: !ruby/object:Gem::Requirement
|
205
219
|
requirements:
|
206
220
|
- - '='
|
207
221
|
- !ruby/object:Gem::Version
|
208
|
-
version: 1.
|
222
|
+
version: 2.1.0
|
209
223
|
- !ruby/object:Gem::Dependency
|
210
224
|
name: sinatra-contrib
|
211
225
|
requirement: !ruby/object:Gem::Requirement
|
212
226
|
requirements:
|
213
227
|
- - '='
|
214
228
|
- !ruby/object:Gem::Version
|
215
|
-
version: 1.
|
229
|
+
version: 2.1.0
|
216
230
|
type: :runtime
|
217
231
|
prerelease: false
|
218
232
|
version_requirements: !ruby/object:Gem::Requirement
|
219
233
|
requirements:
|
220
234
|
- - '='
|
221
235
|
- !ruby/object:Gem::Version
|
222
|
-
version: 1.
|
236
|
+
version: 2.1.0
|
223
237
|
- !ruby/object:Gem::Dependency
|
224
238
|
name: arachni-rpc
|
225
239
|
requirement: !ruby/object:Gem::Requirement
|
@@ -240,154 +254,154 @@ dependencies:
|
|
240
254
|
requirements:
|
241
255
|
- - '='
|
242
256
|
- !ruby/object:Gem::Version
|
243
|
-
version: 1.0
|
257
|
+
version: 1.3.0
|
244
258
|
type: :runtime
|
245
259
|
prerelease: false
|
246
260
|
version_requirements: !ruby/object:Gem::Requirement
|
247
261
|
requirements:
|
248
262
|
- - '='
|
249
263
|
- !ruby/object:Gem::Version
|
250
|
-
version: 1.0
|
264
|
+
version: 1.3.0
|
251
265
|
- !ruby/object:Gem::Dependency
|
252
266
|
name: addressable
|
253
267
|
requirement: !ruby/object:Gem::Requirement
|
254
268
|
requirements:
|
255
|
-
- -
|
269
|
+
- - ">="
|
256
270
|
- !ruby/object:Gem::Version
|
257
|
-
version: 2.
|
271
|
+
version: 2.8.0
|
258
272
|
type: :runtime
|
259
273
|
prerelease: false
|
260
274
|
version_requirements: !ruby/object:Gem::Requirement
|
261
275
|
requirements:
|
262
|
-
- -
|
276
|
+
- - ">="
|
263
277
|
- !ruby/object:Gem::Version
|
264
|
-
version: 2.
|
278
|
+
version: 2.8.0
|
265
279
|
- !ruby/object:Gem::Dependency
|
266
280
|
name: pony
|
267
281
|
requirement: !ruby/object:Gem::Requirement
|
268
282
|
requirements:
|
269
283
|
- - '='
|
270
284
|
- !ruby/object:Gem::Version
|
271
|
-
version: '1.
|
285
|
+
version: '1.12'
|
272
286
|
type: :runtime
|
273
287
|
prerelease: false
|
274
288
|
version_requirements: !ruby/object:Gem::Requirement
|
275
289
|
requirements:
|
276
290
|
- - '='
|
277
291
|
- !ruby/object:Gem::Version
|
278
|
-
version: '1.
|
292
|
+
version: '1.12'
|
279
293
|
- !ruby/object:Gem::Dependency
|
280
294
|
name: rb-readline
|
281
295
|
requirement: !ruby/object:Gem::Requirement
|
282
296
|
requirements:
|
283
297
|
- - '='
|
284
298
|
- !ruby/object:Gem::Version
|
285
|
-
version: 0.5.
|
299
|
+
version: 0.5.5
|
286
300
|
type: :runtime
|
287
301
|
prerelease: false
|
288
302
|
version_requirements: !ruby/object:Gem::Requirement
|
289
303
|
requirements:
|
290
304
|
- - '='
|
291
305
|
- !ruby/object:Gem::Version
|
292
|
-
version: 0.5.
|
306
|
+
version: 0.5.5
|
293
307
|
- !ruby/object:Gem::Dependency
|
294
308
|
name: nokogiri
|
295
309
|
requirement: !ruby/object:Gem::Requirement
|
296
310
|
requirements:
|
297
|
-
- -
|
311
|
+
- - ">="
|
298
312
|
- !ruby/object:Gem::Version
|
299
|
-
version:
|
313
|
+
version: '0'
|
300
314
|
type: :runtime
|
301
315
|
prerelease: false
|
302
316
|
version_requirements: !ruby/object:Gem::Requirement
|
303
317
|
requirements:
|
304
|
-
- -
|
318
|
+
- - ">="
|
305
319
|
- !ruby/object:Gem::Version
|
306
|
-
version:
|
320
|
+
version: '0'
|
307
321
|
- !ruby/object:Gem::Dependency
|
308
322
|
name: ox
|
309
323
|
requirement: !ruby/object:Gem::Requirement
|
310
324
|
requirements:
|
311
325
|
- - '='
|
312
326
|
- !ruby/object:Gem::Version
|
313
|
-
version: 2.4
|
327
|
+
version: 2.9.4
|
314
328
|
type: :runtime
|
315
329
|
prerelease: false
|
316
330
|
version_requirements: !ruby/object:Gem::Requirement
|
317
331
|
requirements:
|
318
332
|
- - '='
|
319
333
|
- !ruby/object:Gem::Version
|
320
|
-
version: 2.4
|
334
|
+
version: 2.9.4
|
321
335
|
- !ruby/object:Gem::Dependency
|
322
336
|
name: terminal-table
|
323
337
|
requirement: !ruby/object:Gem::Requirement
|
324
338
|
requirements:
|
325
339
|
- - '='
|
326
340
|
- !ruby/object:Gem::Version
|
327
|
-
version: 1.
|
341
|
+
version: 1.8.0
|
328
342
|
type: :runtime
|
329
343
|
prerelease: false
|
330
344
|
version_requirements: !ruby/object:Gem::Requirement
|
331
345
|
requirements:
|
332
346
|
- - '='
|
333
347
|
- !ruby/object:Gem::Version
|
334
|
-
version: 1.
|
348
|
+
version: 1.8.0
|
335
349
|
- !ruby/object:Gem::Dependency
|
336
|
-
name:
|
350
|
+
name: watir
|
337
351
|
requirement: !ruby/object:Gem::Requirement
|
338
352
|
requirements:
|
339
353
|
- - '='
|
340
354
|
- !ruby/object:Gem::Version
|
341
|
-
version:
|
355
|
+
version: 6.19.1
|
342
356
|
type: :runtime
|
343
357
|
prerelease: false
|
344
358
|
version_requirements: !ruby/object:Gem::Requirement
|
345
359
|
requirements:
|
346
360
|
- - '='
|
347
361
|
- !ruby/object:Gem::Version
|
348
|
-
version:
|
362
|
+
version: 6.19.1
|
349
363
|
- !ruby/object:Gem::Dependency
|
350
|
-
name:
|
364
|
+
name: selenium-webdriver
|
351
365
|
requirement: !ruby/object:Gem::Requirement
|
352
366
|
requirements:
|
353
367
|
- - '='
|
354
368
|
- !ruby/object:Gem::Version
|
355
|
-
version:
|
369
|
+
version: 4.1.0
|
356
370
|
type: :runtime
|
357
371
|
prerelease: false
|
358
372
|
version_requirements: !ruby/object:Gem::Requirement
|
359
373
|
requirements:
|
360
374
|
- - '='
|
361
375
|
- !ruby/object:Gem::Version
|
362
|
-
version:
|
376
|
+
version: 4.1.0
|
363
377
|
- !ruby/object:Gem::Dependency
|
364
378
|
name: kramdown
|
365
379
|
requirement: !ruby/object:Gem::Requirement
|
366
380
|
requirements:
|
367
|
-
- -
|
381
|
+
- - ">="
|
368
382
|
- !ruby/object:Gem::Version
|
369
|
-
version:
|
383
|
+
version: 2.3.0
|
370
384
|
type: :runtime
|
371
385
|
prerelease: false
|
372
386
|
version_requirements: !ruby/object:Gem::Requirement
|
373
387
|
requirements:
|
374
|
-
- -
|
388
|
+
- - ">="
|
375
389
|
- !ruby/object:Gem::Version
|
376
|
-
version:
|
390
|
+
version: 2.3.0
|
377
391
|
- !ruby/object:Gem::Dependency
|
378
392
|
name: loofah
|
379
393
|
requirement: !ruby/object:Gem::Requirement
|
380
394
|
requirements:
|
381
|
-
- -
|
395
|
+
- - ">="
|
382
396
|
- !ruby/object:Gem::Version
|
383
|
-
version: 2.
|
397
|
+
version: 2.3.1
|
384
398
|
type: :runtime
|
385
399
|
prerelease: false
|
386
400
|
version_requirements: !ruby/object:Gem::Requirement
|
387
401
|
requirements:
|
388
|
-
- -
|
402
|
+
- - ">="
|
389
403
|
- !ruby/object:Gem::Version
|
390
|
-
version: 2.
|
404
|
+
version: 2.3.1
|
391
405
|
description: |
|
392
406
|
Arachni is a feature-full, modular, high-performance Ruby framework aimed towards
|
393
407
|
helping penetration testers and administrators evaluate the security of web applications.
|
@@ -413,15 +427,15 @@ description: |
|
|
413
427
|
email: tasos.laskos@arachni-scanner.com
|
414
428
|
executables:
|
415
429
|
- arachni_rpcd
|
416
|
-
- arachni_restore
|
417
|
-
- arachni_console
|
418
|
-
- arachni_rpc
|
419
|
-
- arachni_rpcd_monitor
|
420
|
-
- arachni_reproduce
|
421
430
|
- arachni_reporter
|
422
|
-
-
|
431
|
+
- arachni_restore
|
423
432
|
- arachni_multi
|
424
433
|
- arachni_script
|
434
|
+
- arachni_rest_server
|
435
|
+
- arachni_reproduce
|
436
|
+
- arachni_rpcd_monitor
|
437
|
+
- arachni_console
|
438
|
+
- arachni_rpc
|
425
439
|
- arachni
|
426
440
|
extensions: []
|
427
441
|
extra_rdoc_files:
|
@@ -854,6 +868,8 @@ files:
|
|
854
868
|
- lib/arachni/element/link_template/capabilities/with_dom.rb
|
855
869
|
- lib/arachni/element/link_template/dom.rb
|
856
870
|
- lib/arachni/element/link_template/dom/capabilities/submittable.rb
|
871
|
+
- lib/arachni/element/nested_cookie.rb
|
872
|
+
- lib/arachni/element/nested_cookie/capabilities/submittable.rb
|
857
873
|
- lib/arachni/element/path.rb
|
858
874
|
- lib/arachni/element/server.rb
|
859
875
|
- lib/arachni/element/ui_form.rb
|
@@ -1034,6 +1050,7 @@ files:
|
|
1034
1050
|
- lib/arachni/utilities.rb
|
1035
1051
|
- lib/arachni/version.rb
|
1036
1052
|
- lib/version
|
1053
|
+
- logs/error-1821117.log
|
1037
1054
|
- logs/placeholder
|
1038
1055
|
- profiles/placeholder
|
1039
1056
|
- spec/arachni/browser/element_locator_spec.rb
|
@@ -1097,6 +1114,7 @@ files:
|
|
1097
1114
|
- spec/arachni/element/link_spec.rb
|
1098
1115
|
- spec/arachni/element/link_template/dom_spec.rb
|
1099
1116
|
- spec/arachni/element/link_template_spec.rb
|
1117
|
+
- spec/arachni/element/nested_cookie_spec.rb
|
1100
1118
|
- spec/arachni/element/path_spec.rb
|
1101
1119
|
- spec/arachni/element/server_spec.rb
|
1102
1120
|
- spec/arachni/element/ui_form/dom_spec.rb
|
@@ -1393,6 +1411,7 @@ files:
|
|
1393
1411
|
- spec/support/fixtures/empty/placeholder
|
1394
1412
|
- spec/support/fixtures/executables/node.rb
|
1395
1413
|
- spec/support/fixtures/fingerprinters/test.rb
|
1414
|
+
- spec/support/fixtures/nested_cookies.txt
|
1396
1415
|
- spec/support/fixtures/option_groups/input.yml
|
1397
1416
|
- spec/support/fixtures/passwords.txt
|
1398
1417
|
- spec/support/fixtures/plugins/bad.rb
|
@@ -1484,6 +1503,7 @@ files:
|
|
1484
1503
|
- spec/support/servers/arachni/element/link/link_dom.rb
|
1485
1504
|
- spec/support/servers/arachni/element/link_template.rb
|
1486
1505
|
- spec/support/servers/arachni/element/link_template/link_template_dom.rb
|
1506
|
+
- spec/support/servers/arachni/element/nested_cookie.rb
|
1487
1507
|
- spec/support/servers/arachni/element/ui_form/ui_form_dom.rb
|
1488
1508
|
- spec/support/servers/arachni/element/xml.rb
|
1489
1509
|
- spec/support/servers/arachni/framework.rb
|
@@ -1681,7 +1701,7 @@ post_install_message: |2+
|
|
1681
1701
|
(https://github.com/Arachni/arachni/blob/master/LICENSE.md)
|
1682
1702
|
Author - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
|
1683
1703
|
Twitter - http://twitter.com/ArachniScanner
|
1684
|
-
Copyright - 2010-
|
1704
|
+
Copyright - 2010-2022 Ecsypno (http://www.ecsypno.com)
|
1685
1705
|
|
1686
1706
|
Please do not hesitate to ask for assistance (via the support portal)
|
1687
1707
|
or report a bug (via GitHub Issues) if you come across any problem.
|
@@ -1694,622 +1714,624 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
1694
1714
|
requirements:
|
1695
1715
|
- - ">="
|
1696
1716
|
- !ruby/object:Gem::Version
|
1697
|
-
version: 2.
|
1717
|
+
version: 2.3.0
|
1698
1718
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
1699
1719
|
requirements:
|
1700
1720
|
- - ">="
|
1701
1721
|
- !ruby/object:Gem::Version
|
1702
1722
|
version: '0'
|
1703
1723
|
requirements: []
|
1704
|
-
|
1705
|
-
rubygems_version: 2.5.1
|
1724
|
+
rubygems_version: 3.1.6
|
1706
1725
|
signing_key:
|
1707
1726
|
specification_version: 4
|
1708
1727
|
summary: Arachni is a feature-full, modular, high-performance Ruby framework aimed
|
1709
1728
|
towards helping penetration testers and administrators evaluate the security of
|
1710
1729
|
web applications.
|
1711
1730
|
test_files:
|
1731
|
+
- spec/components/fingerprinters/os/solaris_spec.rb
|
1732
|
+
- spec/components/fingerprinters/os/linux_spec.rb
|
1733
|
+
- spec/components/fingerprinters/os/unix_spec.rb
|
1734
|
+
- spec/components/fingerprinters/os/bsd_spec.rb
|
1735
|
+
- spec/components/fingerprinters/os/windows_spec.rb
|
1736
|
+
- spec/components/fingerprinters/languages/php_spec.rb
|
1737
|
+
- spec/components/fingerprinters/languages/aspx_spec.rb
|
1738
|
+
- spec/components/fingerprinters/languages/asp_spec.rb
|
1739
|
+
- spec/components/fingerprinters/languages/java_spec.rb
|
1740
|
+
- spec/components/fingerprinters/languages/ruby.rb
|
1741
|
+
- spec/components/fingerprinters/languages/python_spec.rb
|
1742
|
+
- spec/components/fingerprinters/frameworks/cakephp_spec.rb
|
1743
|
+
- spec/components/fingerprinters/frameworks/rails_spec.rb
|
1744
|
+
- spec/components/fingerprinters/frameworks/symphony_spec.rb
|
1745
|
+
- spec/components/fingerprinters/frameworks/jsf_spec.rb
|
1746
|
+
- spec/components/fingerprinters/frameworks/cherrypy_spec.rb
|
1747
|
+
- spec/components/fingerprinters/frameworks/django_spec.rb
|
1748
|
+
- spec/components/fingerprinters/frameworks/aspx_mvc_spec.rb
|
1749
|
+
- spec/components/fingerprinters/frameworks/rack_spec.rb
|
1750
|
+
- spec/components/fingerprinters/frameworks/nette_spec.rb
|
1751
|
+
- spec/components/fingerprinters/servers/nginx_spec.rb
|
1752
|
+
- spec/components/fingerprinters/servers/gunicorn_spec.rb
|
1753
|
+
- spec/components/fingerprinters/servers/apache_spec.rb
|
1754
|
+
- spec/components/fingerprinters/servers/tomcat_spec.rb
|
1755
|
+
- spec/components/fingerprinters/servers/jetty_spec.rb
|
1756
|
+
- spec/components/fingerprinters/servers/iis_spec.rb
|
1757
|
+
- spec/components/reporters/html_spec.rb
|
1758
|
+
- spec/components/reporters/xml_spec.rb
|
1759
|
+
- spec/components/reporters/txt_spec.rb
|
1760
|
+
- spec/components/reporters/marshal_spec.rb
|
1761
|
+
- spec/components/reporters/ap_spec.rb
|
1762
|
+
- spec/components/reporters/yaml_spec.rb
|
1763
|
+
- spec/components/reporters/stdout_spec.rb
|
1764
|
+
- spec/components/reporters/json_spec.rb
|
1765
|
+
- spec/components/plugins/exec_spec.rb
|
1766
|
+
- spec/components/plugins/vector_feed_spec.rb
|
1767
|
+
- spec/components/plugins/meta/remedies/timing_attacks_spec.rb
|
1768
|
+
- spec/components/plugins/meta/remedies/discovery_spec.rb
|
1769
|
+
- spec/components/plugins/meta/uniformity_spec.rb
|
1770
|
+
- spec/components/plugins/login_script_spec.rb
|
1771
|
+
- spec/components/plugins/content_types_spec.rb
|
1772
|
+
- spec/components/plugins/autologin_spec.rb
|
1773
|
+
- spec/components/plugins/form_dicattack_spec.rb
|
1774
|
+
- spec/components/plugins/autothrottle_spec.rb
|
1775
|
+
- spec/components/plugins/cookie_collector_spec.rb
|
1776
|
+
- spec/components/plugins/restrict_to_dom_state_spec.rb
|
1777
|
+
- spec/components/plugins/healthmap_spec.rb
|
1778
|
+
- spec/components/plugins/webhook_notify_spec.rb
|
1779
|
+
- spec/components/plugins/script_spec.rb
|
1780
|
+
- spec/components/plugins/waf_detector_spec.rb
|
1781
|
+
- spec/components/plugins/http_dicattack_spec.rb
|
1782
|
+
- spec/components/plugins/uncommon_headers_spec.rb
|
1783
|
+
- spec/components/plugins/vector_collector_spec.rb
|
1784
|
+
- spec/components/plugins/headers_collector_spec.rb
|
1785
|
+
- spec/components/path_extractors/meta_refresh_spec.rb
|
1786
|
+
- spec/components/path_extractors/comments_spec.rb
|
1787
|
+
- spec/components/path_extractors/scripts_spec.rb
|
1788
|
+
- spec/components/path_extractors/links_spec.rb
|
1789
|
+
- spec/components/path_extractors/frames_spec.rb
|
1790
|
+
- spec/components/path_extractors/forms_spec.rb
|
1791
|
+
- spec/components/path_extractors/areas_spec.rb
|
1792
|
+
- spec/components/path_extractors/data_url_spec.rb
|
1793
|
+
- spec/components/path_extractors/anchors_spec.rb
|
1794
|
+
- spec/components/path_extractors/generic_spec.rb
|
1795
|
+
- spec/components/checks/active/xss_tag_spec.rb
|
1796
|
+
- spec/components/checks/active/unvalidated_redirect_dom_spec.rb
|
1797
|
+
- spec/components/checks/active/xpath_injection_spec.rb
|
1798
|
+
- spec/components/checks/active/csrf_spec.rb
|
1799
|
+
- spec/components/checks/active/os_cmd_injection_spec.rb
|
1800
|
+
- spec/components/checks/active/xss_path_spec.rb
|
1801
|
+
- spec/components/checks/active/xss_dom_spec.rb
|
1802
|
+
- spec/components/checks/active/sql_injection_spec.rb
|
1803
|
+
- spec/components/checks/active/trainer_spec.rb
|
1804
|
+
- spec/components/checks/active/os_cmd_injection_timing_spec.rb
|
1805
|
+
- spec/components/checks/active/sql_injection_differential_spec.rb
|
1806
|
+
- spec/components/checks/active/xxe_spec.rb
|
1807
|
+
- spec/components/checks/active/path_traversal_spec.rb
|
1808
|
+
- spec/components/checks/active/source_code_disclosure_spec.rb
|
1809
|
+
- spec/components/checks/active/ldap_injection_spec.rb
|
1810
|
+
- spec/components/checks/active/xss_event_spec.rb
|
1811
|
+
- spec/components/checks/active/session_fixation_spec.rb
|
1812
|
+
- spec/components/checks/active/code_injection_spec.rb
|
1813
|
+
- spec/components/checks/active/unvalidated_redirect_spec.rb
|
1814
|
+
- spec/components/checks/active/no_sql_injection_spec.rb
|
1815
|
+
- spec/components/checks/active/code_injection_timing_spec.rb
|
1816
|
+
- spec/components/checks/active/response_splitting_spec.rb
|
1817
|
+
- spec/components/checks/active/rfi_spec.rb
|
1818
|
+
- spec/components/checks/active/xss_dom_script_context_spec.rb
|
1819
|
+
- spec/components/checks/active/xss_spec.rb
|
1820
|
+
- spec/components/checks/active/no_sql_injection_differential_spec.rb
|
1821
|
+
- spec/components/checks/active/sql_injection_timing_spec.rb
|
1822
|
+
- spec/components/checks/active/file_inclusion_spec.rb
|
1823
|
+
- spec/components/checks/active/xss_script_context_spec.rb
|
1824
|
+
- spec/components/checks/passive/directory_listing_spec.rb
|
1825
|
+
- spec/components/checks/passive/backup_directories_spec.rb
|
1826
|
+
- spec/components/checks/passive/common_admin_interfaces_spec.rb
|
1827
|
+
- spec/components/checks/passive/localstart_asp_spec.rb
|
1828
|
+
- spec/components/checks/passive/insecure_cross_domain_policy_headers_spec.rb
|
1829
|
+
- spec/components/checks/passive/allowed_methods_spec.rb
|
1830
|
+
- spec/components/checks/passive/xst_spec.rb
|
1831
|
+
- spec/components/checks/passive/insecure_cross_domain_policy_access_spec.rb
|
1832
|
+
- spec/components/checks/passive/interesting_responses_spec.rb
|
1833
|
+
- spec/components/checks/passive/htaccess_limit_spec.rb
|
1834
|
+
- spec/components/checks/passive/http_put_spec.rb
|
1835
|
+
- spec/components/checks/passive/origin_spoof_access_restriction_bypass_spec.rb
|
1836
|
+
- spec/components/checks/passive/grep/credit_card_spec.rb
|
1837
|
+
- spec/components/checks/passive/grep/emails_spec.rb
|
1838
|
+
- spec/components/checks/passive/grep/insecure_cors_policy_spec.rb
|
1839
|
+
- spec/components/checks/passive/grep/html_objects_spec.rb
|
1840
|
+
- spec/components/checks/passive/grep/insecure_cookies_spec.rb
|
1841
|
+
- spec/components/checks/passive/grep/cvs_svn_users_spec.rb
|
1842
|
+
- spec/components/checks/passive/grep/unencrypted_password_forms_spec.rb
|
1843
|
+
- spec/components/checks/passive/grep/captcha_spec.rb
|
1844
|
+
- spec/components/checks/passive/grep/private_ip_spec.rb
|
1845
|
+
- spec/components/checks/passive/grep/cookie_set_for_parent_domain_spec.rb
|
1846
|
+
- spec/components/checks/passive/grep/password_autocomplete_spec.rb
|
1847
|
+
- spec/components/checks/passive/grep/x_frame_options_spec.rb
|
1848
|
+
- spec/components/checks/passive/grep/http_only_cookies_spec.rb
|
1849
|
+
- spec/components/checks/passive/grep/mixed_resource_spec.rb
|
1850
|
+
- spec/components/checks/passive/grep/ssn_spec.rb
|
1851
|
+
- spec/components/checks/passive/grep/hsts_spec.rb
|
1852
|
+
- spec/components/checks/passive/grep/form_upload_spec.rb
|
1853
|
+
- spec/components/checks/passive/common_directories_spec.rb
|
1854
|
+
- spec/components/checks/passive/webdav_spec.rb
|
1855
|
+
- spec/components/checks/passive/backdoors_spec.rb
|
1856
|
+
- spec/components/checks/passive/backup_files_spec.rb
|
1857
|
+
- spec/components/checks/passive/common_files_spec.rb
|
1858
|
+
- spec/components/checks/passive/insecure_client_access_policy_spec.rb
|
1859
|
+
- spec/external/wavsep/active/xss_dom_spec.rb
|
1860
|
+
- spec/external/wavsep/active/obsolete_files_spec.rb
|
1861
|
+
- spec/external/wavsep/active/sqli_spec.rb
|
1862
|
+
- spec/external/wavsep/active/unvalidated_redirect_spec.rb
|
1863
|
+
- spec/external/wavsep/active/rfi_spec.rb
|
1864
|
+
- spec/external/wavsep/active/xss_spec.rb
|
1865
|
+
- spec/external/wavsep/active/lfi_spec.rb
|
1866
|
+
- spec/external/wavsep/false_positives/obsolete_files_spec.rb
|
1867
|
+
- spec/external/wavsep/false_positives/sqli_spec.rb
|
1868
|
+
- spec/external/wavsep/false_positives/unvalidated_redirect_spec.rb
|
1869
|
+
- spec/external/wavsep/false_positives/rfi_spec.rb
|
1870
|
+
- spec/external/wavsep/false_positives/xss_spec.rb
|
1871
|
+
- spec/external/wavsep/false_positives/lfi_spec.rb
|
1872
|
+
- spec/support/shared/plugin.rb
|
1873
|
+
- spec/support/shared/element/dom.rb
|
1874
|
+
- spec/support/shared/element/base.rb
|
1875
|
+
- spec/support/shared/element/capabilities/inputtable.rb
|
1876
|
+
- spec/support/shared/element/capabilities/with_source.rb
|
1877
|
+
- spec/support/shared/element/capabilities/mutable.rb
|
1878
|
+
- spec/support/shared/element/capabilities/with_scope.rb
|
1879
|
+
- spec/support/shared/element/capabilities/with_node.rb
|
1880
|
+
- spec/support/shared/element/capabilities/dom_only.rb
|
1881
|
+
- spec/support/shared/element/capabilities/refreshable.rb
|
1882
|
+
- spec/support/shared/element/capabilities/with_auditor.rb
|
1883
|
+
- spec/support/shared/element/capabilities/submittable.rb
|
1884
|
+
- spec/support/shared/element/capabilities/with_dom.rb
|
1885
|
+
- spec/support/shared/element/capabilities/auditable/buffered.rb
|
1886
|
+
- spec/support/shared/element/capabilities/auditable/line_buffered.rb
|
1887
|
+
- spec/support/shared/element/capabilities/auditable.rb
|
1888
|
+
- spec/support/shared/element/dom/inputtable.rb
|
1889
|
+
- spec/support/shared/element/dom/mutable.rb
|
1890
|
+
- spec/support/shared/element/dom/submittable.rb
|
1891
|
+
- spec/support/shared/element/dom/auditable.rb
|
1892
|
+
- spec/support/shared/element/dom/locatable.rb
|
1893
|
+
- spec/support/shared/reporter.rb
|
1894
|
+
- spec/support/shared/path_extractor.rb
|
1895
|
+
- spec/support/shared/framework.rb
|
1896
|
+
- spec/support/shared/external/wavsep.rb
|
1897
|
+
- spec/support/shared/support/cache.rb
|
1898
|
+
- spec/support/shared/support/lookup.rb
|
1899
|
+
- spec/support/shared/http/message.rb
|
1900
|
+
- spec/support/shared/component/options/base.rb
|
1901
|
+
- spec/support/shared/check.rb
|
1902
|
+
- spec/support/shared/component.rb
|
1903
|
+
- spec/support/shared/option_group.rb
|
1904
|
+
- spec/support/shared/browser/javascript/taint_tracer/sink/base.rb
|
1905
|
+
- spec/support/shared/fingerprinter.rb
|
1906
|
+
- spec/support/lib/web_server_manager.rb
|
1907
|
+
- spec/support/lib/web_server_dispatcher.rb
|
1908
|
+
- spec/support/lib/factory.rb
|
1909
|
+
- spec/support/lib/web_server_client.rb
|
1910
|
+
- spec/support/pems/cacert.pem
|
1712
1911
|
- spec/support/pems/server/cert.pem
|
1713
1912
|
- spec/support/pems/server/key.pem
|
1714
|
-
- spec/support/pems/cacert.pem
|
1715
|
-
- spec/support/pems/client/foo-key.pem
|
1716
|
-
- spec/support/pems/client/cert.pem
|
1717
1913
|
- spec/support/pems/client/foo-cert.pem
|
1914
|
+
- spec/support/pems/client/cert.pem
|
1915
|
+
- spec/support/pems/client/foo-key.pem
|
1718
1916
|
- spec/support/pems/client/key.pem
|
1719
|
-
- spec/support/
|
1720
|
-
- spec/support/
|
1721
|
-
- spec/support/
|
1722
|
-
- spec/support/
|
1723
|
-
- spec/support/fixtures/plugins/defaults/default.rb
|
1724
|
-
- spec/support/fixtures/plugins/wait.rb
|
1725
|
-
- spec/support/fixtures/plugins/with_options.rb
|
1726
|
-
- spec/support/fixtures/plugins/distributable.rb
|
1727
|
-
- spec/support/fixtures/plugins/suspendable.rb
|
1728
|
-
- spec/support/fixtures/services/echo.rb
|
1729
|
-
- spec/support/fixtures/report.afr
|
1730
|
-
- spec/support/fixtures/script_plugin.rb
|
1731
|
-
- spec/support/fixtures/empty/placeholder
|
1732
|
-
- spec/support/fixtures/wait_check/wait.rb
|
1733
|
-
- spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb
|
1734
|
-
- spec/support/fixtures/reporters/base_spec/with_formatters.rb
|
1735
|
-
- spec/support/fixtures/reporters/base_spec/without_outfile.rb
|
1736
|
-
- spec/support/fixtures/reporters/base_spec/with_outfile.rb
|
1737
|
-
- spec/support/fixtures/reporters/manager_spec/error.rb
|
1738
|
-
- spec/support/fixtures/reporters/manager_spec/foo.rb
|
1739
|
-
- spec/support/fixtures/reporters/manager_spec/afr.rb
|
1740
|
-
- spec/support/fixtures/checks/test3.rb
|
1741
|
-
- spec/support/fixtures/checks/test2.rb
|
1742
|
-
- spec/support/fixtures/checks/test.rb
|
1743
|
-
- spec/support/fixtures/executables/node.rb
|
1744
|
-
- spec/support/fixtures/passwords.txt
|
1745
|
-
- spec/support/fixtures/cookies.txt
|
1746
|
-
- spec/support/fixtures/fingerprinters/test.rb
|
1747
|
-
- spec/support/fixtures/signature_check/signature.rb
|
1748
|
-
- spec/support/fixtures/usernames.txt
|
1749
|
-
- spec/support/fixtures/run_check/links.rb
|
1750
|
-
- spec/support/fixtures/run_check/flch.rb
|
1751
|
-
- spec/support/fixtures/run_check/body.rb
|
1752
|
-
- spec/support/fixtures/run_check/forms.rb
|
1753
|
-
- spec/support/fixtures/run_check/headers.rb
|
1754
|
-
- spec/support/fixtures/run_check/path.rb
|
1755
|
-
- spec/support/fixtures/run_check/nil.rb
|
1756
|
-
- spec/support/fixtures/run_check/cookies.rb
|
1757
|
-
- spec/support/fixtures/run_check/empty.rb
|
1758
|
-
- spec/support/fixtures/run_check/server.rb
|
1759
|
-
- spec/support/fixtures/plugins_with_priorities/p0.rb
|
1760
|
-
- spec/support/fixtures/plugins_with_priorities/p22.rb
|
1761
|
-
- spec/support/fixtures/plugins_with_priorities/p_nil.rb
|
1762
|
-
- spec/support/fixtures/plugins_with_priorities/p_nil2.rb
|
1763
|
-
- spec/support/fixtures/plugins_with_priorities/p222.rb
|
1764
|
-
- spec/support/fixtures/plugins_with_priorities/p00.rb
|
1765
|
-
- spec/support/fixtures/plugins_with_priorities/p2.rb
|
1766
|
-
- spec/support/fixtures/plugins_with_priorities/p1.rb
|
1767
|
-
- spec/support/fixtures/rescan.afr.tpl
|
1768
|
-
- spec/support/servers/plugins/content_types.rb
|
1769
|
-
- spec/support/servers/plugins/waf_detector.rb
|
1770
|
-
- spec/support/servers/plugins/cookie_collector.rb
|
1917
|
+
- spec/support/servers/plugins/restrict_to_dom_state.rb
|
1918
|
+
- spec/support/servers/plugins/http_dicattack.rb
|
1919
|
+
- spec/support/servers/plugins/autothrottle.rb
|
1920
|
+
- spec/support/servers/plugins/autologin.rb
|
1771
1921
|
- spec/support/servers/plugins/healthmap.rb
|
1772
1922
|
- spec/support/servers/plugins/form_dicattack.rb
|
1923
|
+
- spec/support/servers/plugins/uncommon_headers.rb
|
1924
|
+
- spec/support/servers/plugins/meta/remedies/discovery.rb
|
1925
|
+
- spec/support/servers/plugins/meta/remedies/timing_attacks.rb
|
1926
|
+
- spec/support/servers/plugins/webhook_notify.rb
|
1773
1927
|
- spec/support/servers/plugins/headers_collector.rb
|
1774
1928
|
- spec/support/servers/plugins/vector_collector.rb
|
1775
|
-
- spec/support/servers/plugins/
|
1776
|
-
- spec/support/servers/plugins/
|
1777
|
-
- spec/support/servers/plugins/
|
1929
|
+
- spec/support/servers/plugins/cookie_collector.rb
|
1930
|
+
- spec/support/servers/plugins/content_types.rb
|
1931
|
+
- spec/support/servers/plugins/waf_detector.rb
|
1778
1932
|
- spec/support/servers/plugins/login_script.rb
|
1779
|
-
- spec/support/servers/plugins/http_dicattack.rb
|
1780
|
-
- spec/support/servers/plugins/meta/remedies/timing_attacks.rb
|
1781
|
-
- spec/support/servers/plugins/meta/remedies/discovery.rb
|
1782
1933
|
- spec/support/servers/plugins/http_dicattack_secure.rb
|
1783
|
-
- spec/support/servers/plugins/
|
1784
|
-
- spec/support/servers/
|
1785
|
-
- spec/support/servers/
|
1786
|
-
- spec/support/servers/checks/
|
1934
|
+
- spec/support/servers/plugins/http_dicattack_unprotected.rb
|
1935
|
+
- spec/support/servers/checks/active/no_sql_injection_differential.rb
|
1936
|
+
- spec/support/servers/checks/active/xss_path.rb
|
1937
|
+
- spec/support/servers/checks/active/unvalidated_redirect_dom.rb
|
1787
1938
|
- spec/support/servers/checks/active/csrf.rb
|
1939
|
+
- spec/support/servers/checks/active/ldap_injection.rb
|
1940
|
+
- spec/support/servers/checks/active/xss_script_context.rb
|
1941
|
+
- spec/support/servers/checks/active/os_cmd_injection_timing.rb
|
1788
1942
|
- spec/support/servers/checks/active/xss_tag.rb
|
1789
|
-
- spec/support/servers/checks/active/
|
1790
|
-
- spec/support/servers/checks/active/
|
1791
|
-
- spec/support/servers/checks/active/
|
1943
|
+
- spec/support/servers/checks/active/xpath_injection.rb
|
1944
|
+
- spec/support/servers/checks/active/sql_injection.rb
|
1945
|
+
- spec/support/servers/checks/active/xss_event.rb
|
1946
|
+
- spec/support/servers/checks/active/path_traversal.rb
|
1947
|
+
- spec/support/servers/checks/active/xxe.rb
|
1948
|
+
- spec/support/servers/checks/active/no_sql_injection/mongodb
|
1949
|
+
- spec/support/servers/checks/active/xpath_injection/dotnet
|
1792
1950
|
- spec/support/servers/checks/active/xpath_injection/libxml2
|
1951
|
+
- spec/support/servers/checks/active/xpath_injection/java
|
1793
1952
|
- spec/support/servers/checks/active/xpath_injection/general
|
1794
1953
|
- spec/support/servers/checks/active/xpath_injection/php
|
1795
|
-
- spec/support/servers/checks/active/
|
1796
|
-
- spec/support/servers/checks/active/
|
1797
|
-
- spec/support/servers/checks/active/
|
1798
|
-
- spec/support/servers/checks/active/
|
1954
|
+
- spec/support/servers/checks/active/sql_injection_timing.rb
|
1955
|
+
- spec/support/servers/checks/active/file_inclusion.rb
|
1956
|
+
- spec/support/servers/checks/active/rfi.rb
|
1957
|
+
- spec/support/servers/checks/active/code_injection_timing.rb
|
1958
|
+
- spec/support/servers/checks/active/response_splitting.rb
|
1959
|
+
- spec/support/servers/checks/active/os_cmd_injection.rb
|
1960
|
+
- spec/support/servers/checks/active/sql_injection_differential.rb
|
1799
1961
|
- spec/support/servers/checks/active/no_sql_injection.rb
|
1800
|
-
- spec/support/servers/checks/active/
|
1962
|
+
- spec/support/servers/checks/active/code_injection.rb
|
1963
|
+
- spec/support/servers/checks/active/source_code_disclosure.rb
|
1964
|
+
- spec/support/servers/checks/active/session_fixation.rb
|
1965
|
+
- spec/support/servers/checks/active/xss.rb
|
1966
|
+
- spec/support/servers/checks/active/sql_injection/informix
|
1967
|
+
- spec/support/servers/checks/active/sql_injection/maxdb
|
1968
|
+
- spec/support/servers/checks/active/sql_injection/firebird
|
1969
|
+
- spec/support/servers/checks/active/sql_injection/coldfusion
|
1970
|
+
- spec/support/servers/checks/active/sql_injection/oracle
|
1801
1971
|
- spec/support/servers/checks/active/sql_injection/java
|
1972
|
+
- spec/support/servers/checks/active/sql_injection/frontbase
|
1802
1973
|
- spec/support/servers/checks/active/sql_injection/sqlite
|
1803
|
-
- spec/support/servers/checks/active/sql_injection/ingres
|
1804
|
-
- spec/support/servers/checks/active/sql_injection/access
|
1805
|
-
- spec/support/servers/checks/active/sql_injection/db2
|
1806
|
-
- spec/support/servers/checks/active/sql_injection/pgsql
|
1807
|
-
- spec/support/servers/checks/active/sql_injection/jdbc
|
1808
1974
|
- spec/support/servers/checks/active/sql_injection/emc
|
1809
|
-
- spec/support/servers/checks/active/sql_injection/hsqldb
|
1810
|
-
- spec/support/servers/checks/active/sql_injection/interbase
|
1811
|
-
- spec/support/servers/checks/active/sql_injection/informix
|
1812
|
-
- spec/support/servers/checks/active/sql_injection/frontbase
|
1813
|
-
- spec/support/servers/checks/active/sql_injection/maxdb
|
1814
1975
|
- spec/support/servers/checks/active/sql_injection/sybase
|
1976
|
+
- spec/support/servers/checks/active/sql_injection/interbase
|
1977
|
+
- spec/support/servers/checks/active/sql_injection/db2
|
1978
|
+
- spec/support/servers/checks/active/sql_injection/access
|
1815
1979
|
- spec/support/servers/checks/active/sql_injection/mssql
|
1816
|
-
- spec/support/servers/checks/active/sql_injection/oracle
|
1817
|
-
- spec/support/servers/checks/active/sql_injection/firebird
|
1818
|
-
- spec/support/servers/checks/active/sql_injection/coldfusion
|
1819
1980
|
- spec/support/servers/checks/active/sql_injection/mysql
|
1820
|
-
- spec/support/servers/checks/active/
|
1821
|
-
- spec/support/servers/checks/active/
|
1822
|
-
- spec/support/servers/checks/active/
|
1823
|
-
- spec/support/servers/checks/active/
|
1824
|
-
- spec/support/servers/checks/active/
|
1825
|
-
- spec/support/servers/checks/active/
|
1826
|
-
- spec/support/servers/checks/active/trainer_check.rb
|
1827
|
-
- spec/support/servers/checks/active/source_code_disclosure.rb
|
1828
|
-
- spec/support/servers/checks/active/xss_path.rb
|
1829
|
-
- spec/support/servers/checks/active/os_cmd_injection_timing.rb
|
1830
|
-
- spec/support/servers/checks/active/path_traversal.rb
|
1831
|
-
- spec/support/servers/checks/active/rfi.rb
|
1832
|
-
- spec/support/servers/checks/active/xxe.rb
|
1833
|
-
- spec/support/servers/checks/active/unvalidated_redirect_dom.rb
|
1834
|
-
- spec/support/servers/checks/active/xss_event.rb
|
1835
|
-
- spec/support/servers/checks/active/code_injection.rb
|
1981
|
+
- spec/support/servers/checks/active/sql_injection/hsqldb
|
1982
|
+
- spec/support/servers/checks/active/sql_injection/jdbc
|
1983
|
+
- spec/support/servers/checks/active/sql_injection/ingres
|
1984
|
+
- spec/support/servers/checks/active/sql_injection/pgsql
|
1985
|
+
- spec/support/servers/checks/active/xss_dom.rb
|
1986
|
+
- spec/support/servers/checks/active/xss_dom_script_context.rb
|
1836
1987
|
- spec/support/servers/checks/active/unvalidated_redirect.rb
|
1837
|
-
- spec/support/servers/checks/active/
|
1838
|
-
- spec/support/servers/checks/
|
1839
|
-
- spec/support/servers/checks/active/sql_injection_differential.rb
|
1840
|
-
- spec/support/servers/checks/active/response_splitting.rb
|
1841
|
-
- spec/support/servers/checks/passive/insecure_cross_domain_policy_access.rb
|
1988
|
+
- spec/support/servers/checks/active/trainer_check.rb
|
1989
|
+
- spec/support/servers/checks/check_server.rb
|
1842
1990
|
- spec/support/servers/checks/passive/common_files.rb
|
1843
|
-
- spec/support/servers/checks/passive/
|
1991
|
+
- spec/support/servers/checks/passive/insecure_cross_domain_policy_access.rb
|
1992
|
+
- spec/support/servers/checks/passive/backup_directories.rb
|
1993
|
+
- spec/support/servers/checks/passive/interesting_responses.rb
|
1844
1994
|
- spec/support/servers/checks/passive/common_directories.rb
|
1995
|
+
- spec/support/servers/checks/passive/webdav.rb
|
1845
1996
|
- spec/support/servers/checks/passive/localstart_asp.rb
|
1997
|
+
- spec/support/servers/checks/passive/htaccess_limit.rb
|
1846
1998
|
- spec/support/servers/checks/passive/backup_files.rb
|
1847
|
-
- spec/support/servers/checks/passive/
|
1999
|
+
- spec/support/servers/checks/passive/allowed_methods.rb
|
2000
|
+
- spec/support/servers/checks/passive/common_admin_interfaces.rb
|
2001
|
+
- spec/support/servers/checks/passive/origin_spoof_access_restriction_bypass.rb
|
2002
|
+
- spec/support/servers/checks/passive/insecure_cross_domain_policy_headers.rb
|
2003
|
+
- spec/support/servers/checks/passive/grep/x_frame_options.rb
|
2004
|
+
- spec/support/servers/checks/passive/grep/captcha.rb
|
2005
|
+
- spec/support/servers/checks/passive/grep/insecure_cors_policy.rb
|
2006
|
+
- spec/support/servers/checks/passive/grep/mixed_resource_https.rb
|
1848
2007
|
- spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
|
1849
|
-
- spec/support/servers/checks/passive/grep/form_upload.rb
|
1850
2008
|
- spec/support/servers/checks/passive/grep/ssn.rb
|
1851
|
-
- spec/support/servers/checks/passive/grep/
|
1852
|
-
- spec/support/servers/checks/passive/grep/
|
1853
|
-
- spec/support/servers/checks/passive/grep/private_ip.rb
|
2009
|
+
- spec/support/servers/checks/passive/grep/emails.rb
|
2010
|
+
- spec/support/servers/checks/passive/grep/password_autocomplete.rb
|
1854
2011
|
- spec/support/servers/checks/passive/grep/cookie_set_for_parent_domain.rb
|
1855
|
-
- spec/support/servers/checks/passive/grep/x_frame_options.rb
|
1856
2012
|
- spec/support/servers/checks/passive/grep/cvs_svn_users.rb
|
1857
|
-
- spec/support/servers/checks/passive/grep/
|
2013
|
+
- spec/support/servers/checks/passive/grep/credit_card.rb
|
1858
2014
|
- spec/support/servers/checks/passive/grep/html_objects.rb
|
1859
2015
|
- spec/support/servers/checks/passive/grep/hsts_https.rb
|
1860
|
-
- spec/support/servers/checks/passive/grep/
|
1861
|
-
- spec/support/servers/checks/passive/grep/
|
1862
|
-
- spec/support/servers/checks/passive/grep/
|
1863
|
-
- spec/support/servers/checks/passive/grep/
|
1864
|
-
- spec/support/servers/checks/passive/origin_spoof_access_restriction_bypass.rb
|
1865
|
-
- spec/support/servers/checks/passive/backup_directories.rb
|
2016
|
+
- spec/support/servers/checks/passive/grep/http_only_cookies.rb
|
2017
|
+
- spec/support/servers/checks/passive/grep/unencrypted_password_forms.rb
|
2018
|
+
- spec/support/servers/checks/passive/grep/private_ip.rb
|
2019
|
+
- spec/support/servers/checks/passive/grep/form_upload.rb
|
1866
2020
|
- spec/support/servers/checks/passive/http_put.rb
|
1867
|
-
- spec/support/servers/checks/passive/interesting_responses.rb
|
1868
|
-
- spec/support/servers/checks/passive/allowed_methods.rb
|
1869
2021
|
- spec/support/servers/checks/passive/insecure_client_access_policy.rb
|
1870
|
-
- spec/support/servers/checks/passive/
|
2022
|
+
- spec/support/servers/checks/passive/xst.rb
|
1871
2023
|
- spec/support/servers/checks/passive/backdoors.rb
|
1872
2024
|
- spec/support/servers/checks/passive/directory_listing.rb
|
1873
|
-
- spec/support/servers/checks/passive/common_admin_interfaces.rb
|
1874
|
-
- spec/support/servers/checks/passive/xst.rb
|
1875
|
-
- spec/support/servers/checks/passive/insecure_cross_domain_policy_headers.rb
|
1876
|
-
- spec/support/servers/arachni/browser/javascript/dom_monitor.rb
|
1877
|
-
- spec/support/servers/arachni/browser/javascript/proxy.rb
|
1878
|
-
- spec/support/servers/arachni/browser/javascript/angular-route.js
|
1879
|
-
- spec/support/servers/arachni/browser/javascript/angular-1.2.8.js
|
1880
|
-
- spec/support/servers/arachni/browser/javascript/jquery.cookie.js
|
1881
|
-
- spec/support/servers/arachni/browser/javascript/taint_tracer.rb
|
1882
|
-
- spec/support/servers/arachni/browser/javascript/jquery-2.0.3.js
|
1883
|
-
- spec/support/servers/arachni/browser/javascript.rb
|
1884
|
-
- spec/support/servers/arachni/rpc/server/framework_multi.rb
|
1885
|
-
- spec/support/servers/arachni/page/page_dom.rb
|
1886
|
-
- spec/support/servers/arachni/trainer.rb
|
1887
|
-
- spec/support/servers/arachni/element/body.rb
|
1888
|
-
- spec/support/servers/arachni/element/form.rb
|
1889
|
-
- spec/support/servers/arachni/element/cookie.rb
|
1890
|
-
- spec/support/servers/arachni/element/link_template.rb
|
1891
|
-
- spec/support/servers/arachni/element/xml.rb
|
1892
|
-
- spec/support/servers/arachni/element/ui_form/ui_form_dom.rb
|
1893
|
-
- spec/support/servers/arachni/element/link/link_dom.rb
|
1894
2025
|
- spec/support/servers/arachni/element/link.rb
|
1895
2026
|
- spec/support/servers/arachni/element/form/form_dom.rb
|
2027
|
+
- spec/support/servers/arachni/element/link/link_dom.rb
|
2028
|
+
- spec/support/servers/arachni/element/ui_form/ui_form_dom.rb
|
2029
|
+
- spec/support/servers/arachni/element/capabilities/analyzable/timeout.rb
|
1896
2030
|
- spec/support/servers/arachni/element/capabilities/analyzable/signature.rb
|
1897
2031
|
- spec/support/servers/arachni/element/capabilities/analyzable/differential.rb
|
1898
|
-
- spec/support/servers/arachni/element/
|
2032
|
+
- spec/support/servers/arachni/element/nested_cookie.rb
|
2033
|
+
- spec/support/servers/arachni/element/link_template/link_template_dom.rb
|
2034
|
+
- spec/support/servers/arachni/element/form.rb
|
1899
2035
|
- spec/support/servers/arachni/element/cookie/cookie_dom.rb
|
1900
|
-
- spec/support/servers/arachni/element/input/input_dom.rb
|
1901
2036
|
- spec/support/servers/arachni/element/json.rb
|
1902
|
-
- spec/support/servers/arachni/element/
|
2037
|
+
- spec/support/servers/arachni/element/cookie.rb
|
2038
|
+
- spec/support/servers/arachni/element/body.rb
|
2039
|
+
- spec/support/servers/arachni/element/xml.rb
|
2040
|
+
- spec/support/servers/arachni/element/input/input_dom.rb
|
1903
2041
|
- spec/support/servers/arachni/element/header.rb
|
1904
|
-
- spec/support/servers/arachni/
|
2042
|
+
- spec/support/servers/arachni/element/link_template.rb
|
2043
|
+
- spec/support/servers/arachni/browser_https.rb
|
1905
2044
|
- spec/support/servers/arachni/browser.rb
|
1906
2045
|
- spec/support/servers/arachni/framework.rb
|
2046
|
+
- spec/support/servers/arachni/rpc/server/framework_multi.rb
|
2047
|
+
- spec/support/servers/arachni/trainer.rb
|
2048
|
+
- spec/support/servers/arachni/http/client.rb
|
2049
|
+
- spec/support/servers/arachni/http/proxy_server.rb
|
1907
2050
|
- spec/support/servers/arachni/http/proxy_server_https.rb
|
1908
2051
|
- spec/support/servers/arachni/http/client/dynamic_404_handler_redirect_1.rb
|
1909
|
-
- spec/support/servers/arachni/http/client/dynamic_404_handler.rb
|
1910
2052
|
- spec/support/servers/arachni/http/client/dynamic_404_handler_redirect_2.rb
|
1911
|
-
- spec/support/servers/arachni/http/client.rb
|
1912
|
-
- spec/support/servers/arachni/
|
2053
|
+
- spec/support/servers/arachni/http/client/dynamic_404_handler.rb
|
2054
|
+
- spec/support/servers/arachni/check/auditor.rb
|
2055
|
+
- spec/support/servers/arachni/page/page_dom.rb
|
1913
2056
|
- spec/support/servers/arachni/browser_cluster/jobs/event_trigger.rb
|
1914
|
-
- spec/support/servers/arachni/session.rb
|
1915
|
-
- spec/support/servers/arachni/browser_https.rb
|
1916
2057
|
- spec/support/servers/arachni/parser.rb
|
1917
|
-
- spec/support/
|
1918
|
-
- spec/support/
|
1919
|
-
- spec/support/
|
1920
|
-
- spec/support/
|
1921
|
-
- spec/support/
|
1922
|
-
- spec/support/
|
1923
|
-
- spec/support/
|
1924
|
-
- spec/support/
|
1925
|
-
- spec/support/
|
1926
|
-
- spec/support/
|
1927
|
-
- spec/support/helpers/misc.rb
|
1928
|
-
- spec/support/factories/browser/javascript/taint_tracer/frame.rb
|
1929
|
-
- spec/support/factories/browser/javascript/taint_tracer/frame/called_function.rb
|
1930
|
-
- spec/support/factories/browser/javascript/taint_tracer/sink/execution_flow.rb
|
1931
|
-
- spec/support/factories/browser/javascript/taint_tracer/sink/data_flow.rb
|
1932
|
-
- spec/support/factories/scan_report.rb
|
1933
|
-
- spec/support/factories/page/dom.rb
|
1934
|
-
- spec/support/factories/page/dom/transition.rb
|
1935
|
-
- spec/support/factories/element/body.rb
|
1936
|
-
- spec/support/factories/element/form.rb
|
1937
|
-
- spec/support/factories/element/cookie.rb
|
1938
|
-
- spec/support/factories/element/path.rb
|
1939
|
-
- spec/support/factories/element/link_template.rb
|
1940
|
-
- spec/support/factories/element/xml.rb
|
1941
|
-
- spec/support/factories/element/link.rb
|
1942
|
-
- spec/support/factories/element/ui_input.rb
|
1943
|
-
- spec/support/factories/element/json.rb
|
1944
|
-
- spec/support/factories/element/generic_dom.rb
|
1945
|
-
- spec/support/factories/element/header.rb
|
1946
|
-
- spec/support/factories/element/server.rb
|
2058
|
+
- spec/support/servers/arachni/session.rb
|
2059
|
+
- spec/support/servers/arachni/browser/javascript.rb
|
2060
|
+
- spec/support/servers/arachni/browser/javascript/angular-route.js
|
2061
|
+
- spec/support/servers/arachni/browser/javascript/angular-1.2.8.js
|
2062
|
+
- spec/support/servers/arachni/browser/javascript/jquery-2.0.3.js
|
2063
|
+
- spec/support/servers/arachni/browser/javascript/proxy.rb
|
2064
|
+
- spec/support/servers/arachni/browser/javascript/taint_tracer.rb
|
2065
|
+
- spec/support/servers/arachni/browser/javascript/jquery.cookie.js
|
2066
|
+
- spec/support/servers/arachni/browser/javascript/dom_monitor.rb
|
2067
|
+
- spec/support/factories/element/link.rb
|
1947
2068
|
- spec/support/factories/element/ui_form.rb
|
2069
|
+
- spec/support/factories/element/generic_dom.rb
|
2070
|
+
- spec/support/factories/element/form.rb
|
2071
|
+
- spec/support/factories/element/server.rb
|
2072
|
+
- spec/support/factories/element/json.rb
|
2073
|
+
- spec/support/factories/element/ui_input.rb
|
2074
|
+
- spec/support/factories/element/cookie.rb
|
2075
|
+
- spec/support/factories/element/path.rb
|
2076
|
+
- spec/support/factories/element/body.rb
|
2077
|
+
- spec/support/factories/element/xml.rb
|
2078
|
+
- spec/support/factories/element/header.rb
|
2079
|
+
- spec/support/factories/element/link_template.rb
|
2080
|
+
- spec/support/factories/scan_report.rb
|
1948
2081
|
- spec/support/factories/page.rb
|
1949
2082
|
- spec/support/factories/http/request.rb
|
1950
2083
|
- spec/support/factories/http/response.rb
|
1951
|
-
- spec/support/factories/browser_cluster/job.rb
|
1952
2084
|
- spec/support/factories/vector.rb
|
2085
|
+
- spec/support/factories/page/dom.rb
|
2086
|
+
- spec/support/factories/page/dom/transition.rb
|
2087
|
+
- spec/support/factories/browser_cluster/job.rb
|
1953
2088
|
- spec/support/factories/issue.rb
|
1954
|
-
- spec/support/
|
1955
|
-
- spec/support/
|
1956
|
-
- spec/support/
|
1957
|
-
- spec/support/
|
1958
|
-
- spec/support/
|
1959
|
-
- spec/support/
|
1960
|
-
- spec/support/
|
1961
|
-
- spec/support/
|
1962
|
-
- spec/support/
|
1963
|
-
- spec/support/
|
1964
|
-
- spec/support/
|
1965
|
-
- spec/support/
|
1966
|
-
- spec/support/
|
1967
|
-
- spec/support/
|
1968
|
-
- spec/support/
|
1969
|
-
- spec/support/
|
1970
|
-
- spec/support/
|
1971
|
-
- spec/support/
|
1972
|
-
- spec/support/
|
1973
|
-
- spec/support/
|
1974
|
-
- spec/support/
|
1975
|
-
- spec/support/
|
1976
|
-
- spec/support/
|
1977
|
-
- spec/support/
|
1978
|
-
- spec/support/
|
1979
|
-
- spec/support/
|
1980
|
-
- spec/support/
|
1981
|
-
- spec/support/
|
1982
|
-
- spec/support/
|
1983
|
-
- spec/support/
|
1984
|
-
- spec/support/
|
1985
|
-
- spec/support/
|
1986
|
-
- spec/support/
|
1987
|
-
- spec/support/
|
1988
|
-
- spec/support/
|
1989
|
-
- spec/support/
|
1990
|
-
- spec/support/
|
1991
|
-
- spec/support/
|
1992
|
-
- spec/support/
|
1993
|
-
- spec/
|
1994
|
-
- spec/
|
1995
|
-
- spec/
|
1996
|
-
- spec/
|
1997
|
-
- spec/
|
1998
|
-
- spec/
|
1999
|
-
- spec/
|
2000
|
-
- spec/
|
2001
|
-
- spec/
|
2002
|
-
- spec/
|
2003
|
-
- spec/
|
2004
|
-
- spec/
|
2005
|
-
- spec/
|
2006
|
-
- spec/
|
2007
|
-
- spec/
|
2008
|
-
- spec/
|
2009
|
-
- spec/
|
2010
|
-
- spec/
|
2011
|
-
- spec/
|
2012
|
-
- spec/
|
2013
|
-
- spec/
|
2014
|
-
- spec/
|
2015
|
-
- spec/
|
2016
|
-
- spec/
|
2017
|
-
- spec/
|
2018
|
-
- spec/
|
2019
|
-
- spec/
|
2020
|
-
- spec/
|
2021
|
-
- spec/
|
2022
|
-
- spec/
|
2023
|
-
- spec/
|
2024
|
-
- spec/
|
2025
|
-
- spec/
|
2026
|
-
- spec/components/plugins/uncommon_headers_spec.rb
|
2027
|
-
- spec/components/plugins/login_script_spec.rb
|
2028
|
-
- spec/components/plugins/autologin_spec.rb
|
2029
|
-
- spec/components/plugins/vector_collector_spec.rb
|
2030
|
-
- spec/components/plugins/meta/uniformity_spec.rb
|
2031
|
-
- spec/components/plugins/meta/remedies/discovery_spec.rb
|
2032
|
-
- spec/components/plugins/meta/remedies/timing_attacks_spec.rb
|
2033
|
-
- spec/components/plugins/form_dicattack_spec.rb
|
2034
|
-
- spec/components/plugins/headers_collector_spec.rb
|
2035
|
-
- spec/components/plugins/content_types_spec.rb
|
2036
|
-
- spec/components/reporters/txt_spec.rb
|
2037
|
-
- spec/components/reporters/stdout_spec.rb
|
2038
|
-
- spec/components/reporters/ap_spec.rb
|
2039
|
-
- spec/components/reporters/html_spec.rb
|
2040
|
-
- spec/components/reporters/marshal_spec.rb
|
2041
|
-
- spec/components/reporters/json_spec.rb
|
2042
|
-
- spec/components/reporters/yaml_spec.rb
|
2043
|
-
- spec/components/reporters/xml_spec.rb
|
2044
|
-
- spec/components/checks/active/sql_injection_differential_spec.rb
|
2045
|
-
- spec/components/checks/active/code_injection_timing_spec.rb
|
2046
|
-
- spec/components/checks/active/xpath_injection_spec.rb
|
2047
|
-
- spec/components/checks/active/trainer_spec.rb
|
2048
|
-
- spec/components/checks/active/xss_script_context_spec.rb
|
2049
|
-
- spec/components/checks/active/unvalidated_redirect_dom_spec.rb
|
2050
|
-
- spec/components/checks/active/os_cmd_injection_spec.rb
|
2051
|
-
- spec/components/checks/active/no_sql_injection_spec.rb
|
2052
|
-
- spec/components/checks/active/path_traversal_spec.rb
|
2053
|
-
- spec/components/checks/active/sql_injection_timing_spec.rb
|
2054
|
-
- spec/components/checks/active/xss_dom_script_context_spec.rb
|
2055
|
-
- spec/components/checks/active/xss_spec.rb
|
2056
|
-
- spec/components/checks/active/source_code_disclosure_spec.rb
|
2057
|
-
- spec/components/checks/active/ldap_injection_spec.rb
|
2058
|
-
- spec/components/checks/active/response_splitting_spec.rb
|
2059
|
-
- spec/components/checks/active/xxe_spec.rb
|
2060
|
-
- spec/components/checks/active/code_injection_spec.rb
|
2061
|
-
- spec/components/checks/active/xss_tag_spec.rb
|
2062
|
-
- spec/components/checks/active/session_fixation_spec.rb
|
2063
|
-
- spec/components/checks/active/xss_dom_spec.rb
|
2064
|
-
- spec/components/checks/active/csrf_spec.rb
|
2065
|
-
- spec/components/checks/active/rfi_spec.rb
|
2066
|
-
- spec/components/checks/active/file_inclusion_spec.rb
|
2067
|
-
- spec/components/checks/active/xss_path_spec.rb
|
2068
|
-
- spec/components/checks/active/os_cmd_injection_timing_spec.rb
|
2069
|
-
- spec/components/checks/active/xss_event_spec.rb
|
2070
|
-
- spec/components/checks/active/sql_injection_spec.rb
|
2071
|
-
- spec/components/checks/active/unvalidated_redirect_spec.rb
|
2072
|
-
- spec/components/checks/active/no_sql_injection_differential_spec.rb
|
2073
|
-
- spec/components/checks/passive/interesting_responses_spec.rb
|
2074
|
-
- spec/components/checks/passive/localstart_asp_spec.rb
|
2075
|
-
- spec/components/checks/passive/http_put_spec.rb
|
2076
|
-
- spec/components/checks/passive/insecure_client_access_policy_spec.rb
|
2077
|
-
- spec/components/checks/passive/htaccess_limit_spec.rb
|
2078
|
-
- spec/components/checks/passive/common_files_spec.rb
|
2079
|
-
- spec/components/checks/passive/allowed_methods_spec.rb
|
2080
|
-
- spec/components/checks/passive/common_admin_interfaces_spec.rb
|
2081
|
-
- spec/components/checks/passive/xst_spec.rb
|
2082
|
-
- spec/components/checks/passive/backup_files_spec.rb
|
2083
|
-
- spec/components/checks/passive/insecure_cross_domain_policy_headers_spec.rb
|
2084
|
-
- spec/components/checks/passive/backup_directories_spec.rb
|
2085
|
-
- spec/components/checks/passive/grep/mixed_resource_spec.rb
|
2086
|
-
- spec/components/checks/passive/grep/cvs_svn_users_spec.rb
|
2087
|
-
- spec/components/checks/passive/grep/ssn_spec.rb
|
2088
|
-
- spec/components/checks/passive/grep/http_only_cookies_spec.rb
|
2089
|
-
- spec/components/checks/passive/grep/password_autocomplete_spec.rb
|
2090
|
-
- spec/components/checks/passive/grep/unencrypted_password_forms_spec.rb
|
2091
|
-
- spec/components/checks/passive/grep/private_ip_spec.rb
|
2092
|
-
- spec/components/checks/passive/grep/credit_card_spec.rb
|
2093
|
-
- spec/components/checks/passive/grep/captcha_spec.rb
|
2094
|
-
- spec/components/checks/passive/grep/insecure_cookies_spec.rb
|
2095
|
-
- spec/components/checks/passive/grep/insecure_cors_policy_spec.rb
|
2096
|
-
- spec/components/checks/passive/grep/form_upload_spec.rb
|
2097
|
-
- spec/components/checks/passive/grep/x_frame_options_spec.rb
|
2098
|
-
- spec/components/checks/passive/grep/cookie_set_for_parent_domain_spec.rb
|
2099
|
-
- spec/components/checks/passive/grep/html_objects_spec.rb
|
2100
|
-
- spec/components/checks/passive/grep/hsts_spec.rb
|
2101
|
-
- spec/components/checks/passive/grep/emails_spec.rb
|
2102
|
-
- spec/components/checks/passive/directory_listing_spec.rb
|
2103
|
-
- spec/components/checks/passive/origin_spoof_access_restriction_bypass_spec.rb
|
2104
|
-
- spec/components/checks/passive/common_directories_spec.rb
|
2105
|
-
- spec/components/checks/passive/webdav_spec.rb
|
2106
|
-
- spec/components/checks/passive/insecure_cross_domain_policy_access_spec.rb
|
2107
|
-
- spec/components/checks/passive/backdoors_spec.rb
|
2108
|
-
- spec/components/fingerprinters/os/solaris_spec.rb
|
2109
|
-
- spec/components/fingerprinters/os/windows_spec.rb
|
2110
|
-
- spec/components/fingerprinters/os/linux_spec.rb
|
2111
|
-
- spec/components/fingerprinters/os/unix_spec.rb
|
2112
|
-
- spec/components/fingerprinters/os/bsd_spec.rb
|
2113
|
-
- spec/components/fingerprinters/servers/nginx_spec.rb
|
2114
|
-
- spec/components/fingerprinters/servers/jetty_spec.rb
|
2115
|
-
- spec/components/fingerprinters/servers/iis_spec.rb
|
2116
|
-
- spec/components/fingerprinters/servers/tomcat_spec.rb
|
2117
|
-
- spec/components/fingerprinters/servers/gunicorn_spec.rb
|
2118
|
-
- spec/components/fingerprinters/servers/apache_spec.rb
|
2119
|
-
- spec/components/fingerprinters/languages/aspx_spec.rb
|
2120
|
-
- spec/components/fingerprinters/languages/php_spec.rb
|
2121
|
-
- spec/components/fingerprinters/languages/python_spec.rb
|
2122
|
-
- spec/components/fingerprinters/languages/ruby.rb
|
2123
|
-
- spec/components/fingerprinters/languages/java_spec.rb
|
2124
|
-
- spec/components/fingerprinters/languages/asp_spec.rb
|
2125
|
-
- spec/components/fingerprinters/frameworks/rails_spec.rb
|
2126
|
-
- spec/components/fingerprinters/frameworks/django_spec.rb
|
2127
|
-
- spec/components/fingerprinters/frameworks/symphony_spec.rb
|
2128
|
-
- spec/components/fingerprinters/frameworks/rack_spec.rb
|
2129
|
-
- spec/components/fingerprinters/frameworks/aspx_mvc_spec.rb
|
2130
|
-
- spec/components/fingerprinters/frameworks/cakephp_spec.rb
|
2131
|
-
- spec/components/fingerprinters/frameworks/nette_spec.rb
|
2132
|
-
- spec/components/fingerprinters/frameworks/jsf_spec.rb
|
2133
|
-
- spec/components/fingerprinters/frameworks/cherrypy_spec.rb
|
2134
|
-
- spec/spec_helper.rb
|
2135
|
-
- spec/arachni/session_spec.rb
|
2136
|
-
- spec/arachni/browser/javascript/polyfills_spec.rb
|
2137
|
-
- spec/arachni/browser/javascript/dom_monitor_spec.rb
|
2138
|
-
- spec/arachni/browser/javascript/proxy/stub_spec.rb
|
2139
|
-
- spec/arachni/browser/javascript/taint_tracer_spec.rb
|
2140
|
-
- spec/arachni/browser/javascript/taint_tracer/frame/called_function_spec.rb
|
2141
|
-
- spec/arachni/browser/javascript/taint_tracer/frame_spec.rb
|
2142
|
-
- spec/arachni/browser/javascript/taint_tracer/sink/execution_flow_spec.rb
|
2143
|
-
- spec/arachni/browser/javascript/taint_tracer/sink/data_flow_spec.rb
|
2144
|
-
- spec/arachni/browser/javascript/proxy_spec.rb
|
2145
|
-
- spec/arachni/browser/element_locator_spec.rb
|
2146
|
-
- spec/arachni/browser/javascript_spec.rb
|
2147
|
-
- spec/arachni/option_groups/session_spec.rb
|
2148
|
-
- spec/arachni/option_groups/paths_spec.rb
|
2149
|
-
- spec/arachni/option_groups/dispatcher_spec.rb
|
2150
|
-
- spec/arachni/option_groups/browser_cluster_spec.rb
|
2151
|
-
- spec/arachni/option_groups/datastore_spec.rb
|
2152
|
-
- spec/arachni/option_groups/http_spec.rb
|
2153
|
-
- spec/arachni/option_groups/rpc_spec.rb
|
2154
|
-
- spec/arachni/option_groups/snapshot_spec.rb
|
2155
|
-
- spec/arachni/option_groups/output_spec.rb
|
2156
|
-
- spec/arachni/option_groups/scope_spec.rb
|
2157
|
-
- spec/arachni/option_groups/input_spec.rb
|
2158
|
-
- spec/arachni/option_groups/audit_spec.rb
|
2159
|
-
- spec/arachni/component/utilities_spec.rb
|
2160
|
-
- spec/arachni/component/utilities_spec/read_file.txt
|
2161
|
-
- spec/arachni/component/options/int_spec.rb
|
2162
|
-
- spec/arachni/component/options/path_spec.rb
|
2163
|
-
- spec/arachni/component/options/multiple_choice_spec.rb
|
2164
|
-
- spec/arachni/component/options/port_spec.rb
|
2165
|
-
- spec/arachni/component/options/string_spec.rb
|
2166
|
-
- spec/arachni/component/options/object_spec.rb
|
2167
|
-
- spec/arachni/component/options/float_spec.rb
|
2168
|
-
- spec/arachni/component/options/bool_spec.rb
|
2169
|
-
- spec/arachni/component/options/url_spec.rb
|
2170
|
-
- spec/arachni/component/options/address_spec.rb
|
2171
|
-
- spec/arachni/component/options/base_spec.rb
|
2172
|
-
- spec/arachni/component/manager_spec.rb
|
2173
|
-
- spec/arachni/component/base_spec.rb
|
2174
|
-
- spec/arachni/utilities_spec.rb
|
2175
|
-
- spec/arachni/rpc/server/dispatcher_spec.rb
|
2176
|
-
- spec/arachni/rpc/server/dispatcher/service_spec.rb
|
2177
|
-
- spec/arachni/rpc/server/dispatcher/node_spec.rb
|
2178
|
-
- spec/arachni/rpc/server/framework_multi_spec.rb
|
2179
|
-
- spec/arachni/rpc/server/framework/distributor_spec.rb
|
2180
|
-
- spec/arachni/rpc/server/output_spec.rb
|
2181
|
-
- spec/arachni/rpc/server/checks/manager_spec.rb
|
2182
|
-
- spec/arachni/rpc/server/framework_spec.rb
|
2183
|
-
- spec/arachni/rpc/server/active_options_spec.rb
|
2184
|
-
- spec/arachni/rpc/server/instance_spec.rb
|
2185
|
-
- spec/arachni/rpc/server/plugin/manager_spec.rb
|
2186
|
-
- spec/arachni/rpc/server/base_spec.rb
|
2187
|
-
- spec/arachni/rpc/client/dispatcher_spec.rb
|
2188
|
-
- spec/arachni/rpc/client/instance_spec.rb
|
2189
|
-
- spec/arachni/rpc/client/base_spec.rb
|
2190
|
-
- spec/arachni/page/dom_spec.rb
|
2191
|
-
- spec/arachni/page/scope_spec.rb
|
2192
|
-
- spec/arachni/page/dom/transition_spec.rb
|
2193
|
-
- spec/arachni/uri/scope_spec.rb
|
2194
|
-
- spec/arachni/support/buffer/autoflush_spec.rb
|
2195
|
-
- spec/arachni/support/buffer/base_spec.rb
|
2196
|
-
- spec/arachni/support/crypto/rsa_aes_cbc_spec.rb
|
2197
|
-
- spec/arachni/support/mixins/observable_spec.rb
|
2198
|
-
- spec/arachni/support/cache/least_recently_used_spec.rb
|
2199
|
-
- spec/arachni/support/cache/least_cost_replacement_spec.rb
|
2200
|
-
- spec/arachni/support/cache/preference_spec.rb
|
2201
|
-
- spec/arachni/support/cache/random_replacement_spec.rb
|
2202
|
-
- spec/arachni/support/cache/least_recently_pushed_spec.rb
|
2203
|
-
- spec/arachni/support/lookup/moolb_spec.rb
|
2204
|
-
- spec/arachni/support/lookup/hash_set_spec.rb
|
2205
|
-
- spec/arachni/support/signature_spec.rb
|
2206
|
-
- spec/arachni/support/glob_spec.rb
|
2207
|
-
- spec/arachni/support/database/queue_spec.rb
|
2208
|
-
- spec/arachni/support/database/hash_spec.rb
|
2209
|
-
- spec/arachni/element/body_spec.rb
|
2210
|
-
- spec/arachni/element/server_spec.rb
|
2211
|
-
- spec/arachni/element/ui_form_spec.rb
|
2212
|
-
- spec/arachni/element/path_spec.rb
|
2213
|
-
- spec/arachni/element/ui_input_spec.rb
|
2214
|
-
- spec/arachni/element/ui_form/dom_spec.rb
|
2215
|
-
- spec/arachni/element/link/dom_spec.rb
|
2089
|
+
- spec/support/factories/browser/javascript/taint_tracer/frame/called_function.rb
|
2090
|
+
- spec/support/factories/browser/javascript/taint_tracer/sink/execution_flow.rb
|
2091
|
+
- spec/support/factories/browser/javascript/taint_tracer/sink/data_flow.rb
|
2092
|
+
- spec/support/factories/browser/javascript/taint_tracer/frame.rb
|
2093
|
+
- spec/support/fixtures/report.afr
|
2094
|
+
- spec/support/fixtures/fingerprinters/test.rb
|
2095
|
+
- spec/support/fixtures/reporters/base_spec/with_outfile.rb
|
2096
|
+
- spec/support/fixtures/reporters/base_spec/without_outfile.rb
|
2097
|
+
- spec/support/fixtures/reporters/base_spec/with_formatters.rb
|
2098
|
+
- spec/support/fixtures/reporters/base_spec/plugin_formatters/with_formatters/foobar.rb
|
2099
|
+
- spec/support/fixtures/reporters/manager_spec/foo.rb
|
2100
|
+
- spec/support/fixtures/reporters/manager_spec/afr.rb
|
2101
|
+
- spec/support/fixtures/reporters/manager_spec/error.rb
|
2102
|
+
- spec/support/fixtures/script_plugin.rb
|
2103
|
+
- spec/support/fixtures/run_check/flch.rb
|
2104
|
+
- spec/support/fixtures/run_check/forms.rb
|
2105
|
+
- spec/support/fixtures/run_check/links.rb
|
2106
|
+
- spec/support/fixtures/run_check/headers.rb
|
2107
|
+
- spec/support/fixtures/run_check/server.rb
|
2108
|
+
- spec/support/fixtures/run_check/nil.rb
|
2109
|
+
- spec/support/fixtures/run_check/path.rb
|
2110
|
+
- spec/support/fixtures/run_check/body.rb
|
2111
|
+
- spec/support/fixtures/run_check/cookies.rb
|
2112
|
+
- spec/support/fixtures/run_check/empty.rb
|
2113
|
+
- spec/support/fixtures/option_groups/input.yml
|
2114
|
+
- spec/support/fixtures/plugins_with_priorities/p2.rb
|
2115
|
+
- spec/support/fixtures/plugins_with_priorities/p00.rb
|
2116
|
+
- spec/support/fixtures/plugins_with_priorities/p_nil.rb
|
2117
|
+
- spec/support/fixtures/plugins_with_priorities/p22.rb
|
2118
|
+
- spec/support/fixtures/plugins_with_priorities/p_nil2.rb
|
2119
|
+
- spec/support/fixtures/plugins_with_priorities/p0.rb
|
2120
|
+
- spec/support/fixtures/plugins_with_priorities/p1.rb
|
2121
|
+
- spec/support/fixtures/plugins_with_priorities/p222.rb
|
2122
|
+
- spec/support/fixtures/empty/placeholder
|
2123
|
+
- spec/support/fixtures/signature_check/signature.rb
|
2124
|
+
- spec/support/fixtures/wait_check/wait.rb
|
2125
|
+
- spec/support/fixtures/executables/node.rb
|
2126
|
+
- spec/support/fixtures/cookies.txt
|
2127
|
+
- spec/support/fixtures/usernames.txt
|
2128
|
+
- spec/support/fixtures/plugins/defaults/default.rb
|
2129
|
+
- spec/support/fixtures/plugins/loop.rb
|
2130
|
+
- spec/support/fixtures/plugins/with_options.rb
|
2131
|
+
- spec/support/fixtures/plugins/wait.rb
|
2132
|
+
- spec/support/fixtures/plugins/bad.rb
|
2133
|
+
- spec/support/fixtures/plugins/distributable.rb
|
2134
|
+
- spec/support/fixtures/plugins/suspendable.rb
|
2135
|
+
- spec/support/fixtures/passwords.txt
|
2136
|
+
- spec/support/fixtures/nested_cookies.txt
|
2137
|
+
- spec/support/fixtures/check_with_invalid_platforms/with_invalid_platforms.rb
|
2138
|
+
- spec/support/fixtures/rescan.afr.tpl
|
2139
|
+
- spec/support/fixtures/checks/test3.rb
|
2140
|
+
- spec/support/fixtures/checks/test2.rb
|
2141
|
+
- spec/support/fixtures/checks/test.rb
|
2142
|
+
- spec/support/fixtures/services/echo.rb
|
2143
|
+
- spec/support/logs/placeholder
|
2144
|
+
- spec/support/helpers/browser.rb
|
2145
|
+
- spec/support/helpers/auditor.rb
|
2146
|
+
- spec/support/helpers/framework.rb
|
2147
|
+
- spec/support/helpers/paths.rb
|
2148
|
+
- spec/support/helpers/requires.rb
|
2149
|
+
- spec/support/helpers/pages.rb
|
2150
|
+
- spec/support/helpers/resets.rb
|
2151
|
+
- spec/support/helpers/request_helpers.rb
|
2152
|
+
- spec/support/helpers/browser_cluster/jobs/taint_tracer.rb
|
2153
|
+
- spec/support/helpers/misc.rb
|
2154
|
+
- spec/support/helpers/web_server.rb
|
2155
|
+
- spec/spec_helper.rb
|
2156
|
+
- spec/arachni/data/plugins_spec.rb
|
2157
|
+
- spec/arachni/data/framework/rpc_spec.rb
|
2158
|
+
- spec/arachni/data/session_spec.rb
|
2159
|
+
- spec/arachni/data/issues_spec.rb
|
2160
|
+
- spec/arachni/data/framework_spec.rb
|
2216
2161
|
- spec/arachni/element/form/dom_spec.rb
|
2217
2162
|
- spec/arachni/element/ui_input/dom_spec.rb
|
2163
|
+
- spec/arachni/element/link/dom_spec.rb
|
2164
|
+
- spec/arachni/element/xml_spec.rb
|
2165
|
+
- spec/arachni/element/path_spec.rb
|
2166
|
+
- spec/arachni/element/header_spec.rb
|
2167
|
+
- spec/arachni/element/ui_form/dom_spec.rb
|
2168
|
+
- spec/arachni/element/form_spec.rb
|
2169
|
+
- spec/arachni/element/server_spec.rb
|
2170
|
+
- spec/arachni/element/link_template_spec.rb
|
2171
|
+
- spec/arachni/element/nested_cookie_spec.rb
|
2218
2172
|
- spec/arachni/element/capabilities/analyzable/differential_spec.rb
|
2219
2173
|
- spec/arachni/element/capabilities/analyzable/signature_spec.rb
|
2220
2174
|
- spec/arachni/element/capabilities/analyzable/timeout_spec.rb
|
2221
2175
|
- spec/arachni/element/capabilities/with_scope/scope_spec.rb
|
2222
|
-
- spec/arachni/element/cookie/dom_spec.rb
|
2223
|
-
- spec/arachni/element/header_spec.rb
|
2224
2176
|
- spec/arachni/element/generic_dom_spec.rb
|
2177
|
+
- spec/arachni/element/link_template/dom_spec.rb
|
2178
|
+
- spec/arachni/element/cookie/dom_spec.rb
|
2179
|
+
- spec/arachni/element/ui_form_spec.rb
|
2180
|
+
- spec/arachni/element/body_spec.rb
|
2225
2181
|
- spec/arachni/element/cookie_spec.rb
|
2226
2182
|
- spec/arachni/element/json_spec.rb
|
2227
|
-
- spec/arachni/element/form_spec.rb
|
2228
|
-
- spec/arachni/element/link_template/dom_spec.rb
|
2229
2183
|
- spec/arachni/element/link_spec.rb
|
2230
|
-
- spec/arachni/element/
|
2231
|
-
- spec/arachni/
|
2232
|
-
- spec/arachni/
|
2233
|
-
- spec/arachni/
|
2234
|
-
- spec/arachni/
|
2235
|
-
- spec/arachni/
|
2236
|
-
- spec/arachni/
|
2237
|
-
- spec/arachni/
|
2238
|
-
- spec/arachni/
|
2239
|
-
- spec/arachni/
|
2240
|
-
- spec/arachni/
|
2241
|
-
- spec/arachni/
|
2242
|
-
- spec/arachni/
|
2243
|
-
- spec/arachni/
|
2244
|
-
- spec/arachni/
|
2245
|
-
- spec/arachni/
|
2246
|
-
- spec/arachni/
|
2247
|
-
- spec/arachni/
|
2184
|
+
- spec/arachni/element/ui_input_spec.rb
|
2185
|
+
- spec/arachni/uri/scope_spec.rb
|
2186
|
+
- spec/arachni/issue/severity/base_spec.rb
|
2187
|
+
- spec/arachni/issue/severity_spec.rb
|
2188
|
+
- spec/arachni/scope_spec.rb
|
2189
|
+
- spec/arachni/error_spec.rb
|
2190
|
+
- spec/arachni/option_groups/audit_spec.rb
|
2191
|
+
- spec/arachni/option_groups/scope_spec.rb
|
2192
|
+
- spec/arachni/option_groups/browser_cluster_spec.rb
|
2193
|
+
- spec/arachni/option_groups/input_spec.rb
|
2194
|
+
- spec/arachni/option_groups/snapshot_spec.rb
|
2195
|
+
- spec/arachni/option_groups/datastore_spec.rb
|
2196
|
+
- spec/arachni/option_groups/output_spec.rb
|
2197
|
+
- spec/arachni/option_groups/paths_spec.rb
|
2198
|
+
- spec/arachni/option_groups/http_spec.rb
|
2199
|
+
- spec/arachni/option_groups/session_spec.rb
|
2200
|
+
- spec/arachni/option_groups/rpc_spec.rb
|
2201
|
+
- spec/arachni/option_groups/dispatcher_spec.rb
|
2248
2202
|
- spec/arachni/browser_cluster_spec.rb
|
2249
|
-
- spec/arachni/
|
2203
|
+
- spec/arachni/typhoeus/hydra_spec.rb
|
2204
|
+
- spec/arachni/state_spec.rb
|
2250
2205
|
- spec/arachni/trainer_spec.rb
|
2206
|
+
- spec/arachni/support/database/hash_spec.rb
|
2207
|
+
- spec/arachni/support/database/queue_spec.rb
|
2208
|
+
- spec/arachni/support/cache/least_recently_pushed_spec.rb
|
2209
|
+
- spec/arachni/support/cache/preference_spec.rb
|
2210
|
+
- spec/arachni/support/cache/least_recently_used_spec.rb
|
2211
|
+
- spec/arachni/support/cache/random_replacement_spec.rb
|
2212
|
+
- spec/arachni/support/cache/least_cost_replacement_spec.rb
|
2213
|
+
- spec/arachni/support/signature_spec.rb
|
2214
|
+
- spec/arachni/support/buffer/base_spec.rb
|
2215
|
+
- spec/arachni/support/buffer/autoflush_spec.rb
|
2216
|
+
- spec/arachni/support/mixins/observable_spec.rb
|
2217
|
+
- spec/arachni/support/glob_spec.rb
|
2218
|
+
- spec/arachni/support/crypto/rsa_aes_cbc_spec.rb
|
2219
|
+
- spec/arachni/support/lookup/hash_set_spec.rb
|
2220
|
+
- spec/arachni/support/lookup/moolb_spec.rb
|
2221
|
+
- spec/arachni/parser_spec.rb
|
2222
|
+
- spec/arachni/rpc/server/framework_multi_spec.rb
|
2223
|
+
- spec/arachni/rpc/server/dispatcher/service_spec.rb
|
2224
|
+
- spec/arachni/rpc/server/dispatcher/node_spec.rb
|
2225
|
+
- spec/arachni/rpc/server/active_options_spec.rb
|
2226
|
+
- spec/arachni/rpc/server/plugin/manager_spec.rb
|
2227
|
+
- spec/arachni/rpc/server/output_spec.rb
|
2228
|
+
- spec/arachni/rpc/server/base_spec.rb
|
2229
|
+
- spec/arachni/rpc/server/framework/distributor_spec.rb
|
2230
|
+
- spec/arachni/rpc/server/instance_spec.rb
|
2231
|
+
- spec/arachni/rpc/server/checks/manager_spec.rb
|
2232
|
+
- spec/arachni/rpc/server/dispatcher_spec.rb
|
2233
|
+
- spec/arachni/rpc/server/framework_spec.rb
|
2234
|
+
- spec/arachni/rpc/client/base_spec.rb
|
2235
|
+
- spec/arachni/rpc/client/instance_spec.rb
|
2236
|
+
- spec/arachni/rpc/client/dispatcher_spec.rb
|
2237
|
+
- spec/arachni/page_spec.rb
|
2238
|
+
- spec/arachni/options_spec.rb
|
2239
|
+
- spec/arachni/data_spec.rb
|
2240
|
+
- spec/arachni/snapshot_spec.rb
|
2241
|
+
- spec/arachni/report_spec.rb
|
2251
2242
|
- spec/arachni/uri_spec.rb
|
2252
|
-
- spec/arachni/framework/parts/plugin_spec.rb
|
2253
|
-
- spec/arachni/framework/parts/browser_spec.rb
|
2254
|
-
- spec/arachni/framework/parts/scope_spec.rb
|
2255
|
-
- spec/arachni/framework/parts/report_spec.rb
|
2256
|
-
- spec/arachni/framework/parts/state_spec.rb
|
2257
|
-
- spec/arachni/framework/parts/platform_spec.rb
|
2258
|
-
- spec/arachni/framework/parts/check_spec.rb
|
2259
|
-
- spec/arachni/framework/parts/data_spec.rb
|
2260
|
-
- spec/arachni/framework/parts/audit_spec.rb
|
2261
2243
|
- spec/arachni/browser_spec.rb
|
2262
|
-
- spec/arachni/
|
2263
|
-
- spec/arachni/
|
2264
|
-
- spec/arachni/
|
2244
|
+
- spec/arachni/http/message_spec.rb
|
2245
|
+
- spec/arachni/http/cookie_jar_spec.rb
|
2246
|
+
- spec/arachni/http/response/scope_spec.rb
|
2247
|
+
- spec/arachni/http/response_spec.rb
|
2265
2248
|
- spec/arachni/http/client_spec.rb
|
2266
|
-
- spec/arachni/http/request_spec.rb
|
2267
2249
|
- spec/arachni/http/client/dynamic_404_handlers_spec.rb
|
2268
|
-
- spec/arachni/http/response/scope_spec.rb
|
2269
2250
|
- spec/arachni/http/proxy_server_spec.rb
|
2270
|
-
- spec/arachni/http/
|
2271
|
-
- spec/arachni/http/response_spec.rb
|
2272
|
-
- spec/arachni/http/cookie_jar_spec.rb
|
2251
|
+
- spec/arachni/http/request_spec.rb
|
2273
2252
|
- spec/arachni/http/headers_spec.rb
|
2274
|
-
- spec/arachni/
|
2275
|
-
- spec/arachni/
|
2253
|
+
- spec/arachni/component/options/port_spec.rb
|
2254
|
+
- spec/arachni/component/options/string_spec.rb
|
2255
|
+
- spec/arachni/component/options/path_spec.rb
|
2256
|
+
- spec/arachni/component/options/url_spec.rb
|
2257
|
+
- spec/arachni/component/options/float_spec.rb
|
2258
|
+
- spec/arachni/component/options/int_spec.rb
|
2259
|
+
- spec/arachni/component/options/multiple_choice_spec.rb
|
2260
|
+
- spec/arachni/component/options/base_spec.rb
|
2261
|
+
- spec/arachni/component/options/address_spec.rb
|
2262
|
+
- spec/arachni/component/options/object_spec.rb
|
2263
|
+
- spec/arachni/component/options/bool_spec.rb
|
2264
|
+
- spec/arachni/component/manager_spec.rb
|
2265
|
+
- spec/arachni/component/utilities_spec/read_file.txt
|
2266
|
+
- spec/arachni/component/base_spec.rb
|
2267
|
+
- spec/arachni/component/utilities_spec.rb
|
2276
2268
|
- spec/arachni/ruby/string_spec.rb
|
2277
2269
|
- spec/arachni/ruby/hash_spec.rb
|
2270
|
+
- spec/arachni/ruby/webrick_spec.rb
|
2278
2271
|
- spec/arachni/ruby/object_spec.rb
|
2279
2272
|
- spec/arachni/ruby/array_spec.rb
|
2280
2273
|
- spec/arachni/ruby/set_spec.rb
|
2281
|
-
- spec/arachni/
|
2282
|
-
- spec/arachni/
|
2283
|
-
- spec/arachni/
|
2284
|
-
- spec/arachni/
|
2285
|
-
- spec/arachni/
|
2286
|
-
- spec/arachni/
|
2274
|
+
- spec/arachni/check/manager_spec.rb
|
2275
|
+
- spec/arachni/check/base_spec.rb
|
2276
|
+
- spec/arachni/check/auditor_spec.rb
|
2277
|
+
- spec/arachni/page/scope_spec.rb
|
2278
|
+
- spec/arachni/page/dom/transition_spec.rb
|
2279
|
+
- spec/arachni/page/dom_spec.rb
|
2280
|
+
- spec/arachni/element_filter_spec.rb
|
2281
|
+
- spec/arachni/plugin/manager_spec.rb
|
2282
|
+
- spec/arachni/plugin/base_spec.rb
|
2287
2283
|
- spec/arachni/issue_spec.rb
|
2288
2284
|
- spec/arachni/browser_cluster/job_spec.rb
|
2289
2285
|
- spec/arachni/browser_cluster/job/result_spec.rb
|
2290
|
-
- spec/arachni/browser_cluster/
|
2291
|
-
- spec/arachni/browser_cluster/jobs/dom_exploration_spec.rb
|
2286
|
+
- spec/arachni/browser_cluster/worker_spec.rb
|
2292
2287
|
- spec/arachni/browser_cluster/jobs/dom_exploration/result_spec.rb
|
2293
2288
|
- spec/arachni/browser_cluster/jobs/dom_exploration/event_trigger_spec.rb
|
2294
2289
|
- spec/arachni/browser_cluster/jobs/dom_exploration/event_trigger/result_spec.rb
|
2295
|
-
- spec/arachni/browser_cluster/
|
2296
|
-
- spec/arachni/
|
2297
|
-
- spec/arachni/
|
2298
|
-
- spec/arachni/
|
2299
|
-
- spec/arachni/
|
2290
|
+
- spec/arachni/browser_cluster/jobs/dom_exploration_spec.rb
|
2291
|
+
- spec/arachni/browser_cluster/jobs/taint_tracer_spec.rb
|
2292
|
+
- spec/arachni/state/audit_spec.rb
|
2293
|
+
- spec/arachni/state/plugins_spec.rb
|
2294
|
+
- spec/arachni/state/options_spec.rb
|
2295
|
+
- spec/arachni/state/element_filter_spec.rb
|
2296
|
+
- spec/arachni/state/http_spec.rb
|
2297
|
+
- spec/arachni/state/framework/rpc_spec.rb
|
2298
|
+
- spec/arachni/state/framework_spec.rb
|
2299
|
+
- spec/arachni/framework/parts/audit_spec.rb
|
2300
|
+
- spec/arachni/framework/parts/scope_spec.rb
|
2301
|
+
- spec/arachni/framework/parts/state_spec.rb
|
2302
|
+
- spec/arachni/framework/parts/data_spec.rb
|
2303
|
+
- spec/arachni/framework/parts/report_spec.rb
|
2304
|
+
- spec/arachni/framework/parts/platform_spec.rb
|
2305
|
+
- spec/arachni/framework/parts/browser_spec.rb
|
2306
|
+
- spec/arachni/framework/parts/plugin_spec.rb
|
2307
|
+
- spec/arachni/framework/parts/check_spec.rb
|
2308
|
+
- spec/arachni/session_spec.rb
|
2309
|
+
- spec/arachni/platform/manager_spec.rb
|
2310
|
+
- spec/arachni/platform/fingerprinter_spec.rb
|
2311
|
+
- spec/arachni/platform/list_spec.rb
|
2300
2312
|
- spec/arachni/reporter/manager_spec.rb
|
2313
|
+
- spec/arachni/reporter/options_spec.rb
|
2301
2314
|
- spec/arachni/reporter/base_spec.rb
|
2315
|
+
- spec/arachni/rest/server_spec.rb
|
2302
2316
|
- spec/arachni/parser/document_spec.rb
|
2303
|
-
- spec/arachni/parser/
|
2317
|
+
- spec/arachni/parser/sax_spec.rb
|
2318
|
+
- spec/arachni/parser/with_children_spec.rb
|
2319
|
+
- spec/arachni/parser/with_children/search_spec.rb
|
2304
2320
|
- spec/arachni/parser/nodes/element/with_attributes/attributes_spec.rb
|
2305
2321
|
- spec/arachni/parser/nodes/element/with_attributes_spec.rb
|
2306
2322
|
- spec/arachni/parser/nodes/element_spec.rb
|
2307
2323
|
- spec/arachni/parser/nodes/text_spec.rb
|
2308
|
-
- spec/arachni/parser/
|
2309
|
-
- spec/arachni/
|
2310
|
-
- spec/arachni/
|
2311
|
-
- spec/arachni/
|
2312
|
-
- spec/arachni/
|
2313
|
-
- spec/arachni/
|
2314
|
-
- spec/arachni/
|
2315
|
-
- spec/arachni/
|
2324
|
+
- spec/arachni/parser/nodes/comment_spec.rb
|
2325
|
+
- spec/arachni/browser/element_locator_spec.rb
|
2326
|
+
- spec/arachni/browser/javascript/polyfills_spec.rb
|
2327
|
+
- spec/arachni/browser/javascript/proxy_spec.rb
|
2328
|
+
- spec/arachni/browser/javascript/proxy/stub_spec.rb
|
2329
|
+
- spec/arachni/browser/javascript/dom_monitor_spec.rb
|
2330
|
+
- spec/arachni/browser/javascript/taint_tracer/frame/called_function_spec.rb
|
2331
|
+
- spec/arachni/browser/javascript/taint_tracer/sink/execution_flow_spec.rb
|
2332
|
+
- spec/arachni/browser/javascript/taint_tracer/sink/data_flow_spec.rb
|
2333
|
+
- spec/arachni/browser/javascript/taint_tracer/frame_spec.rb
|
2334
|
+
- spec/arachni/browser/javascript/taint_tracer_spec.rb
|
2335
|
+
- spec/arachni/browser/javascript_spec.rb
|
2336
|
+
- spec/arachni/utilities_spec.rb
|
2337
|
+
- spec/arachni/framework_spec.rb
|