dradis-acunetix 5.3.0 → 5.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 07772dd083a630e83ad509227e38d105c89fc4de4ae462aa0fe95c4af94f44cb
-  data.tar.gz: 6e8cb4b2f2f584c07b430b0e3f7f047b508d51727d2fb3eca8d0cf03df019854
+  metadata.gz: 256e519af402fcde7728ce0d0d4841b488111981bc7db9f72fcd7f31bc26401d
+  data.tar.gz: 27f86ca1f0a1261a03f0deb1fbf8f661cc835a0b1091ff919e8ff3a964e5b66e
 SHA512:
-  metadata.gz: 5649369d46f3c3d0425b32a2c67e989ea9d4921aaa89816f8f9cedf4f35102ee04ad9051e5ede769279b30ea89135d475bb6f40c7bbad9327375c4156673d338
-  data.tar.gz: f10bcd7f5d84abeb1f7efba2ce0f6a1077540092ede4646b074aeee2eef256bf9c170839c402a3c581005f23b73386fec5496b015d579cc75fbcc7e80e254d9b
+  metadata.gz: 0371aa8c0c0fb728fec6deebbff650af1a41f3823739e2ba0d21f6c9c540d0c7335cbcce6d1664c38a88679f49249cb69cb65840b701c27f3e5f1f074fe509fe
+  data.tar.gz: 611d9af6fe0654547645e49064edd0c48216cc42b90d926cc5918549d7aeea03d4eb2aaa396a1791180db4a83da5d0a1d617c7e30186acd6e49f5b13a3462b06

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+v5.4.0 (September 2026)
+  - No changes
+
 v5.3.0 (August 2026)
   - No changes
 

data/lib/dradis/plugins/acunetix/gem_version.rb

@@ -8,7 +8,7 @@ module Dradis
 
       module VERSION
         MAJOR = 5
-        MINOR = 3
+        MINOR = 4
         TINY = 0
         PRE = nil
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dradis-acunetix
 version: !ruby/object:Gem::Version
-  version: 5.3.0
+  version: 5.4.0
 platform: ruby
 authors:
 - Daniel Martin
@@ -99,19 +99,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/issue_template.md"
-- ".github/pull_request_template.md"
-- ".gitignore"
-- ".rspec"
-- ".ruby-version"
 - CHANGELOG.md
-- CHANGELOG.template
-- CONTRIBUTING.md
-- Gemfile
 - LICENSE
 - README.md
 - Rakefile
-- dradis-acunetix.gemspec
 - lib/acunetix/concerns/cleanup.rb
 - lib/acunetix/report_item.rb
 - lib/acunetix/scan.rb
@@ -126,15 +117,6 @@ files:
 - lib/dradis/plugins/acunetix/standard/importer.rb
 - lib/dradis/plugins/acunetix/version.rb
 - lib/tasks/thorfile.rb
-- spec/acunetix/acunetix360/importer_spec.rb
-- spec/acunetix/standard/importer_spec.rb
-- spec/fixtures/files/acunetix360.xml
-- spec/fixtures/files/code-pre.acunetix.xml
-- spec/fixtures/files/commas-format.acunetix.xml
-- spec/fixtures/files/simple.acunetix.xml
-- spec/fixtures/files/testphp.vulnweb.com.export.acunetix.xml
-- spec/models/acunetix/scan_spec.rb
-- spec/spec_helper.rb
 - templates/evidence.sample
 - templates/evidence_360.sample
 - templates/report_item.sample
@@ -161,13 +143,4 @@ requirements: []
 rubygems_version: 3.6.9
 specification_version: 4
 summary: Acunetix add-on for the Dradis Framework.
-test_files:
-- spec/acunetix/acunetix360/importer_spec.rb
-- spec/acunetix/standard/importer_spec.rb
-- spec/fixtures/files/acunetix360.xml
-- spec/fixtures/files/code-pre.acunetix.xml
-- spec/fixtures/files/commas-format.acunetix.xml
-- spec/fixtures/files/simple.acunetix.xml
-- spec/fixtures/files/testphp.vulnweb.com.export.acunetix.xml
-- spec/models/acunetix/scan_spec.rb
-- spec/spec_helper.rb
+test_files: []

data/.github/issue_template.md

@@ -1,16 +0,0 @@
-### Steps to reproduce
-
-Help us help you, how can we reproduce the problem?
-
-### Expected behavior
-Tell us what should happen
-
-### Actual behavior
-Tell us what happens instead
-
-### System configuration
-**Dradis version**:
-
-**Ruby version**:
-
-**OS version**:

data/.github/pull_request_template.md

@@ -1,45 +0,0 @@
-Please review [CONTRIBUTING.md](https://github.com/dradis/dradis-ce/blob/develop/CONTRIBUTING.md) and remove this line.
-
-### Summary
-
-Provide a general description of the code changes in your pull
-request... were there any bugs you had fixed? If so, mention them. If
-these bugs have open GitHub issues, be sure to tag them here as well,
-to keep the conversation linked together.
-
-
-### Testing Steps
-
-Provide steps to test functionality, described in detail for someone not familiar with this part of the application / code base
-
-
-### Other Information
-
-If there's anything else that's important and relevant to your pull
-request, mention that information here. This could include
-benchmarks, or other information.
-
-Thanks for contributing to Dradis!
-
-
-### Copyright assignment
-
-Collaboration is difficult with commercial closed source but we want
-to keep as much of the OSS ethos as possible available to users
-who want to fix it themselves.
-
-In order to unambiguously own and sell Dradis Framework commercial
-products, we must have the copyright associated with the entire
-codebase. Any code you create which is merged must be owned by us.
-That's not us trying to be a jerks, that's just the way it works.
-
-You can delete this section, but the following sentence needs to
-remain in the PR's description:
-
-> I assign all rights, including copyright, to any future Dradis
-> work by myself to Security Roots.
-
-### Check List
-
-- [ ] Added a CHANGELOG entry
-- [ ] Added specs

data/.gitignore

@@ -1,13 +0,0 @@
-
-# Bundler config
-Gemfile.lock
-/.bundle/
-/vendor/bundle/
-
-# Combustion (engine testing)
-/spec/internal/
-
-# Gem artifacts
-/pkg/
-
-.DS_Store

data/.rspec

@@ -1,2 +0,0 @@
---color
--f d

data/.ruby-version

@@ -1 +0,0 @@
-3.4.6

data/CHANGELOG.template

@@ -1,12 +0,0 @@
-[v#.#.#] ([month] [YYYY])
-  - [future tense verb] [feature]
-  - Upgraded gems:
-    - [gem]
-  - Bugs fixes:
-    - [future tense verb] [bug fix]
-    - Bug tracker items:
-      - [item]
-  - Security Fixes:
-    - High: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
-    - Medium: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
-    - Low: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]

data/CONTRIBUTING.md

@@ -1,3 +0,0 @@
-# Plugin contribution guidelines
-
-See the Dradis Framework's [CONTRIBUTING.md](https://github.com/dradis/dradisframework/blob/master/CONTRIBUTING.md)

data/Gemfile

@@ -1,23 +0,0 @@
-source 'https://rubygems.org'
-
-# Declare your gem's dependencies in dradispro-duoweb.gemspec.
-# Bundler will treat runtime dependencies like base dependencies, and
-# development dependencies will be added by default to the :development group.
-gemspec
-
-# jquery-rails is used by the dummy application
-# gem "jquery-rails"
-
-# Declare any dependencies that are still in development here instead of in
-# your gemspec. These might include edge Rails or gems from your path or
-# Git. Remember to move these dependencies to your gemspec before releasing
-# your gem to rubygems.org.
-
-# To use debugger
-# gem 'debugger'
-
-if Dir.exist?('../dradis-plugins')
-  gem 'dradis-plugins', path: '../dradis-plugins'
-else
-  gem 'dradis-plugins', github: 'dradis/dradis-plugins'
-end

data/dradis-acunetix.gemspec

@@ -1,33 +0,0 @@
-$:.push File.expand_path('../lib', __FILE__)
-require 'dradis/plugins/acunetix/version'
-version = Dradis::Plugins::Acunetix::VERSION::STRING
-
-# Describe your gem and declare its dependencies:
-Gem::Specification.new do |spec|
-  spec.platform = Gem::Platform::RUBY
-  spec.name = 'dradis-acunetix'
-  spec.version = version
-  spec.summary = 'Acunetix add-on for the Dradis Framework.'
-  spec.description = 'This add-on allows you to upload and parse output produced from Acunetix Web Vulnerability Scanner into Dradis.'
-
-  spec.license = 'GPL-2'
-
-  spec.authors = ['Daniel Martin']
-  spec.homepage = 'https://dradis.com/integrations/acunetix.html'
-
-  spec.files = `git ls-files`.split($\)
-  spec.executables = spec.files.grep(%r{^bin/}).map { |f| File.basename(f) }
-  spec.test_files = spec.files.grep(%r{^(test|spec|features)/})
-
-  # By not including Rails as a dependency, we can use the gem with different
-  # versions of Rails (a sure recipe for disaster, I'm sure), which is needed
-  # until we bump Dradis Pro to 4.1.
-  # s.add_dependency 'rails', '~> 4.1.1'
-  spec.add_dependency 'dradis-plugins', '>= 4.0'
-  spec.add_dependency 'nokogiri', '~> 1.3'
-
-  spec.add_development_dependency 'bundler', '~> 2'
-  spec.add_development_dependency 'rake', '~> 13.0'
-  spec.add_development_dependency 'rspec-rails'
-  spec.add_development_dependency 'combustion', '~> 0.5.2'
-end

data/spec/acunetix/acunetix360/importer_spec.rb

@@ -1,71 +0,0 @@
-# To run, execute from Dradis main app folder:
-# bin/rspec [dradis-acunetix path]/spec/acunetix/acunetix360/importer_spec.rb
-require 'rails_helper'
-require 'ostruct'
-require File.expand_path('../../../../../dradis-plugins/spec/support/spec_macros.rb', __FILE__)
-
-include Dradis::Plugins::SpecMacros
-
-module Dradis::Plugins
-  describe Acunetix::Acunetix360::Importer do
-    before do
-      @fixtures_dir = File.expand_path('../../../fixtures/files/', __FILE__)
-    end
-
-    before(:each) do
-      stub_content_service
-
-      @importer = described_class.new(content_service: @content_service)
-    end
-
-    def run_import!
-      @importer.import(file: @fixtures_dir + '/acunetix360.xml')
-    end
-
-    it 'creates nodes as needed' do
-      expect(@content_service).to receive(:create_node).with(hash_including label: 'http://aspnet.testsparker.com/', type: :host).once
-
-      run_import!
-    end
-
-    it 'creates issues from vulnerability elements' do
-      expect(@content_service).to receive(:create_issue) do |args|
-        expect(args[:text]).to include("#[Title]#\nBlind SQL Injection")
-        expect(args[:id]).to eq('ConfirmedBlindSqlInjection')
-      end.once
-
-      expect(@content_service).to receive(:create_issue) do |args|
-        expect(args[:text]).to include("#[Title]#\nCross-site Scripting")
-        expect(args[:id]).to eq('Xss')
-      end.once
-
-      run_import!
-    end
-
-    it 'creates evidence from vulnerability elements' do
-      expect(@content_service).to receive(:create_evidence) do |args|
-        expect(args[:content]).to include('POST /blog/%27))%20WAITFOR%20DELAY%20%270%3a0%3a25%27')
-        expect(args[:issue].id).to eq('ConfirmedBlindSqlInjection')
-        expect(args[:node].label).to eq('http://aspnet.testsparker.com/')
-      end.once
-
-      expect(@content_service).to receive(:create_evidence) do |args|
-        expect(args[:content]).to include('GET /About.aspx HTTP/1.1')
-        expect(args[:issue].id).to eq('Xss')
-        expect(args[:node].label).to eq('http://aspnet.testsparker.com/')
-      end
-
-      run_import!
-    end
-
-    it 'parses links in <external-references> tag' do
-      expect(@content_service).to receive(:create_issue) do |args|
-        expect(args[:text]).to include('"Blind SQL Injection":https://www.owasp.org/index.php/Blind_SQL_Injection')
-        expect(args[:text]).to include('"SQL Injection Cheat Sheet[#Blind]":https://www.acunetix.com/blog/web-security/sql-injection-cheat-sheet/#BlindSQLInjections')
-        OpenStruct.new(args)
-      end
-
-      run_import!
-    end
-  end
-end

data/spec/acunetix/standard/importer_spec.rb

@@ -1,100 +0,0 @@
-# To run, execute from Dradis main app folder:
-# bin/rspec [dradis-acunetix path]/spec/acunetix/standard/importer_spec.rb
-require 'rails_helper'
-require 'ostruct'
-require File.expand_path('../../../../../dradis-plugins/spec/support/spec_macros.rb', __FILE__)
-
-include Dradis::Plugins::SpecMacros
-
-module Dradis::Plugins
-  describe Acunetix::Standard::Importer do
-    before do
-      @fixtures_dir = File.expand_path('../../../fixtures/files/', __FILE__)
-    end
-
-    before(:each) do
-      stub_content_service
-
-      @importer = described_class.new(content_service: @content_service)
-    end
-
-    def run_import!
-      @importer.import(file: @fixtures_dir + '/simple.acunetix.xml')
-    end
-
-    it 'creates nodes as needed' do
-      expect(@content_service).to receive(:create_node).with(hash_including label: 'testphp.vulnweb.com', type: :host).once
-
-      run_import!
-    end
-
-    it 'creates notes as needed' do
-      expect(@content_service).to receive(:create_note) do |args|
-        expect(args[:text]).to include('Scan Thread 1')
-        expect(args[:node].label).to eq('testphp.vulnweb.com')
-      end.once
-
-      run_import!
-    end
-
-    it 'creates issues from report_item elements' do
-      expect(@content_service).to receive(:create_issue) do |args|
-        expect(args[:text]).to include('HTML form without CSRF protection')
-        expect(args[:id]).to eq('Crawler/HTML form without CSRF protection')
-      end.once
-
-      expect(@content_service).to receive(:create_issue) do |args|
-        expect(args[:text]).to include('Clickjacking: X-Frame-Options header missing')
-        expect(args[:id]).to eq('Scripting (Clickjacking_X_Frame_Options.script)/Clickjacking: X-Frame-Options header missing')
-      end.once
-
-      run_import!
-    end
-
-    it 'creates evidence from report_item elements' do
-      expect(@content_service).to receive(:create_evidence) do |args|
-        expect(args[:content]).to include('Form name:')
-        expect(args[:issue].id).to eq('Crawler/HTML form without CSRF protection')
-        expect(args[:node].label).to eq('testphp.vulnweb.com')
-      end.once
-
-      expect(@content_service).to receive(:create_evidence) do |args|
-        expect(args[:content]).to include('Web Server')
-        expect(args[:issue].id).to eq('Scripting (Clickjacking_X_Frame_Options.script)/Clickjacking: X-Frame-Options header missing')
-        expect(args[:node].label).to eq('testphp.vulnweb.com')
-      end
-
-      run_import!
-    end
-
-    describe 'Regression tests' do
-      # Regression test for github.com/dradis/dradis-nexpose/issues/1
-      describe 'Source HTML parsing' do
-        it 'identifies code/pre blocks and replaces them with the Textile equivalent' do
-
-          expect(@content_service).to receive(:create_issue) do |args|
-            expect(args[:text]).to include('SQL injection (verified)')
-            expect(args[:text]).not_to include('<code>')
-            expect(args[:text]).not_to include('<pre')
-            expect(args[:id]).to eq('Scripting (Sql_Injection.script)/SQL injection (verified)')
-          end.once
-
-          @importer.import(file: @fixtures_dir + '/code-pre.acunetix.xml')
-        end
-      end
-
-      # Regression test to make sure that commas are replaced with decimals in the CVSSv3 scores
-      describe 'CVSS clean up decimals' do
-        it 'identifies commas used as decimals in CVSSv3 scores and replaces them with periods' do
-
-          expect(@content_service).to receive(:create_issue) do |args|
-            expect(args[:text]).to include('5.3')
-          end
-
-          @importer.import(file: @fixtures_dir + '/commas-format.acunetix.xml')
-        end
-      end
-
-    end
-  end
-end