enchant 0.99.0 → 1.0.0.pre1

data/lib/enchant/engine.rb

@@ -1,68 +1,128 @@
 require 'net/http'
+require 'httpclient'
 require 'uri'
+require 'progressbar'
 
 module Enchant
-
   class Engine
-    attr_reader :server, :code
-    attr_accessor :host, :port, :domain
+    attr_reader :urls_open
+    attr_reader :urls_internal_error
+    attr_reader :urls_private
 
-    def initialize(*urls)
-      url = urls.pop || ""
+    def initialize(options={})
+      @host = options[:host]
+      @port = options[:port]
+      @wordlist = options[:wordlist] 
+      @verbose = options[:verbose]
+    end
+    def self.help
+      puts "usage: enchant -wVvh target"
+      puts "       -w file: specifiy the text file to be used as dictionary"
+      puts "       -V: be verbose"
+      puts "       -v: shows version"
+      puts "       -h: this help"
+    end
 
-      if url != "" 
-        tmp = URI.parse(url)
-        @host = tmp.host
-        @port = tmp.port
+    
+    def fuzz(*) 
+      # in future some perturbation will be done here
+      get_list
+    end
 
-        if @host == nil && @port == nil
-          @sane = nil
-        else 
-          @sane = 1
-        end
-      else
-        @sane = 1
+    def scan
+      http = Net::HTTP.new(@host, @port)
+      list = get_list
+      if list.empty?
+        return 0
       end
-    end
 
-    def is_sane?
-      @sane
+      refused=0
+      @urls_open=[]
+      @urls_internal_error=[]
+      @urls_private=[]
+
+      
+      pbar = ProgressBar.new("urls", list.size)
+      list.each do |path|
+        pbar.inc
+        if ! path.start_with? '#'
+          begin
+            response = http.get('/'+path.chop)
+            c = response.code.to_i
+            refused = 0
+            if c == 200
+              @urls_open << path
+            end
+            if c == 401
+              @urls_private << path
+            end
+            if c >= 500
+              @urls_internal_error << path
+            end
+          rescue  Errno::ECONNREFUSED
+            refused += 1
+            if refused > 5
+              pbar.finish
+              puts "received 5 connection refused. #{@host} went down".color(:red)
+              return @urls_open.count 
+            else
+              puts "[WARNING] connection refused".color(:yellow)
+              sleep 2 * refused
+            end
+            
+          rescue Net::HTTPBadResponse
+            refused = 0
+            if @verbose
+              puts "#{$!}".color(:red)
+            end
+          rescue Errno::ETIMEDOUT
+            refused = 0
+            if @verbose
+              puts "#{$!}".color(:red)
+            end
+          end
+        end
+      end
+      pbar.finish
+      @urls_open.count
     end
 
-    def list(wordlist) 
+    def up?
       begin
-        File.open(wordlist, 'r') { |f|
-          @list = f.readlines
-        }
-      rescue Errno::ENOENT
-        puts "It seems the wordlist file is not present (#{wordlist})"
-        @list = nil
+        Net::HTTP.new(@host, @port).get('/')
+        return true
+      rescue Errno::ECONNREFUSED
+        return false
+      rescue Errno::ETIMEDOUT
+        return false
       end
-    end
+    end  
 
-    def fuzz(*) 
-      # in future some perturbation will be done here
-      @list
-    end
 
-    def get(path)
-      http = Net::HTTP.new(host, port)
+    private
+    def get_list
+
+      if @wordlist.nil?
+        if File.exists?('../../db/directory-list-2.3-small.txt')
+          @wordlist='../../db/directory-list-2.3-small.txt'
+        end
+        if File.exists?('./db/directory-list-2.3-small.txt')
+          @wordlist='./db/directory-list-2.3-small.txt'
+        else
+          @list = {}
+        end
+
+      end
+
       begin
-        response = http.get(path)
-        @code = response.code
-      rescue Net::HTTPBadResponse
-        puts #{$!}
-        @code=-1
-      rescue Errno::ETIMEDOUT
-        puts #{$!}
-        @code=-1
+        File.open(@wordlist, 'r') { |f|
+          @list = f.readlines
+        }
+      rescue Errno::ENOENT
+        puts "it seems the wordlist file is not present (#{@wordlist})".color(:red)
+        @list = {}
       end
-      @code
     end
 
-    def up?(site)
-      Net::HTTP.new(site).head('/').kind_of? Net::HTTPOK
-    end  
-
   end
 end

data/lib/enchant/version.rb

@@ -1,92 +1,16 @@
 module Enchant
-  # Handles enchant version number taken from VERSION file. 
-  # The way Haml gem handles it's version.rb inspired me for creating this
-  # file. 
-  class Version
+  module Version
+    MAJOR = 1 
+    MINOR = 0
+    PATCH = 0
+    BUILD = 'pre1'
 
-    # Returns a hash representing the version of enchant.
-    # The `:major`, `:minor`, and `:patch` keys have their respective numbers as Fixnums.
-    # The `:name` key has the name of the version.
-    # The `:string` key contains a human-readable string representation of the version.
-    # The `:number` key is the major, minor, and patch keys separated by periods.
-    # If enchant is checked out from Git, the `:rev` key will have the revision hash.  
-    # 
-    # For example:
-    #
-    #     {
-    #       :string => "0.1.4.160676a",
-    #       :rev    => "160676ab8924ef36639c7e82aa88a51a24d16949",
-    #       :number => "0.1.4",
-    #       :major  => 0, :minor => 1, :patch => 4
-    #     }
-    # 
-    # If a prerelease version of enchant is being used,
-    # the `:string` and `:number` fields will reflect the full version
-    # (e.g. `"1.0.beta.1"`), and the `:patch` field will be `-1`.
-    #
-    # A `:prerelease` key will contain the name of the prerelease (e.g. `"beta"`),
-    # and a `:prerelease_number` key will contain the rerelease number.
-    #
-    # For example:
-    #
-    #     {
-    #       :string => "1.0.beta.1",
-    #       :number => "1.0.beta.1",
-    #       :major => 1, :minor => 0, :patch => -1,
-    #       :prerelease => "beta",
-    #       :prerelease_number => 1
-    #     }
-    # 
-    # @return [{Symbol => String/Fixnum}] The version hash  
     def self.version
-      return @@version if defined?(@@version)
-      numbers = File.read('VERSION').strip.split('.').map {|n| n =~ /^[0-9]+$/ ? n.to_i : n}
-      @@version = {
-        :major => numbers[0],
-        :minor => numbers[1],
-        :patch => numbers[2]
-      }
-      if numbers[3].is_a?(String)
-        @@version[:patch] = -1
-        @@version[:prerelease] = numbers[3]
-        @@version[:prerelease_number] = numbers[4]
+      if BUILD.empty?
+        return [MAJOR, MINOR, PATCH].compact.join('.')
+      else
+        return [MAJOR, MINOR, PATCH, BUILD].compact.join('.')
       end
-      @@version[:number] = numbers.join('.')
-      @@version[:string] = @@version[:number].dup
-      
-      rev = revision_number
-      @@version[:rev] = rev
-      unless rev[0] == ?(
-        @@version[:string] << "." << rev[0...7]
-      end
-      
-      @@version
-    end
-
-    def self.revision_number
-      if File.exists?('REVISION')
-        rev = File.read('REVISION').strip
-        return rev unless rev =~ /^([a-f0-9]+|\(.*\))$/ || rev == '(unknown)'
-      end
-
-      return unless File.exists?('.git/HEAD')
-      rev = File.read('.git/HEAD').strip
-      return rev unless rev =~ /^ref: (.*)$/
-
-        ref_name = $1
-      ref_file = "./.git/#{ref_name}"
-      info_file = "./.git/info/refs"
-      return File.read(ref_file).strip if File.exists?(ref_file)
-      return unless File.exists?(info_file)
-      File.open(info_file) do |f|
-        f.each do |l|
-          sha, ref = l.strip.split("\t", 2)
-          next unless ref == ref_name
-          return sha
-        end
-      end
-      return nil
     end
-
   end
 end

data/spec/enchant_spec.rb

@@ -0,0 +1,8 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "enchant " do
+  it "must fail" do
+    fail
+  end
+
+end

data/spec/spec_helper.rb

@@ -0,0 +1,12 @@
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(File.dirname(__FILE__))
+require 'rspec'
+require 'enchant'
+
+# Requires supporting files with custom matchers and macros, etc,
+# in ./support/ and its subdirectories.
+Dir["#{File.dirname(__FILE__)}/support/**/*.rb"].each {|f| require f}
+
+RSpec.configure do |config|
+  
+end

metadata

@@ -1,19 +1,19 @@
 --- !ruby/object:Gem::Specification
 name: enchant
 version: !ruby/object:Gem::Version
-  version: 0.99.0
-  prerelease: 
+  version: 1.0.0.pre1
+  prerelease: 6
 platform: ruby
 authors:
 - Paolo Perego
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-01-08 00:00:00.000000000Z
+date: 2012-02-16 00:00:00.000000000Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rainbow
-  requirement: &74330310 !ruby/object:Gem::Requirement
+  requirement: &70223617410300 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -21,10 +21,10 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *74330310
+  version_requirements: *70223617410300
 - !ruby/object:Gem::Dependency
   name: progressbar
-  requirement: &74329910 !ruby/object:Gem::Requirement
+  requirement: &70223617407820 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -32,10 +32,10 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *74329910
+  version_requirements: *70223617407820
 - !ruby/object:Gem::Dependency
-  name: awesome_print
-  requirement: &74329590 !ruby/object:Gem::Requirement
+  name: httpclient
+  requirement: &70223617405260 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -43,21 +43,10 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *74329590
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: &73873170 !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ! '>='
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: *73873170
+  version_requirements: *70223617405260
 - !ruby/object:Gem::Dependency
   name: rspec
-  requirement: &73872830 !ruby/object:Gem::Requirement
+  requirement: &70223617401900 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -65,10 +54,10 @@ dependencies:
         version: 2.3.0
   type: :development
   prerelease: false
-  version_requirements: *73872830
+  version_requirements: *70223617401900
 - !ruby/object:Gem::Dependency
   name: yard
-  requirement: &73872380 !ruby/object:Gem::Requirement
+  requirement: &70223617399720 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -76,10 +65,10 @@ dependencies:
         version: 0.6.0
   type: :development
   prerelease: false
-  version_requirements: *73872380
+  version_requirements: *70223617399720
 - !ruby/object:Gem::Dependency
   name: bundler
-  requirement: &73872100 !ruby/object:Gem::Requirement
+  requirement: &70223617383320 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -87,10 +76,10 @@ dependencies:
         version: 1.0.0
   type: :development
   prerelease: false
-  version_requirements: *73872100
+  version_requirements: *70223617383320
 - !ruby/object:Gem::Dependency
   name: jeweler
-  requirement: &73871830 !ruby/object:Gem::Requirement
+  requirement: &70223617381780 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -98,10 +87,10 @@ dependencies:
         version: 1.6.0
   type: :development
   prerelease: false
-  version_requirements: *73871830
+  version_requirements: *70223617381780
 - !ruby/object:Gem::Dependency
   name: rcov
-  requirement: &73871490 !ruby/object:Gem::Requirement
+  requirement: &70223617380060 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -109,10 +98,10 @@ dependencies:
         version: '0'
   type: :development
   prerelease: false
-  version_requirements: *73871490
+  version_requirements: *70223617380060
 - !ruby/object:Gem::Dependency
-  name: ruby-progressbar
-  requirement: &73871190 !ruby/object:Gem::Requirement
+  name: progressbar
+  requirement: &70223617378300 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -120,10 +109,10 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *73871190
+  version_requirements: *70223617378300
 - !ruby/object:Gem::Dependency
   name: rainbow
-  requirement: &73870930 !ruby/object:Gem::Requirement
+  requirement: &70223617376540 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -131,31 +120,48 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *73870930
-description: Enchant is tool aimed to discover web application directory and pages
-  by fuzzing the requests using a dictionary approach
-email: paolo@armoredcode.com
+  version_requirements: *70223617376540
+- !ruby/object:Gem::Dependency
+  name: httpclient
+  requirement: &70223617336360 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: *70223617336360
+description: ciphersurfer is a security tool that evaluates web server SSL configuration
+email: thesp0nge@gmail.com
 executables:
 - enchant
 extensions: []
 extra_rdoc_files:
 - ChangeLog
-- README.textile
+- LICENSE.txt
+- README.md
 files:
 - COPYING
 - ChangeLog
 - Gemfile
 - Gemfile.lock
-- README.textile
+- LICENSE.txt
+- README.md
 - Rakefile
 - VERSION
 - bin/enchant
-- enchant.gemspec
+- db/directory-list-1.0.txt
+- db/directory-list-2.3-medium.txt
+- db/directory-list-2.3-small.txt
 - lib/enchant.rb
 - lib/enchant/engine.rb
 - lib/enchant/version.rb
+- spec/enchant_spec.rb
+- spec/spec_helper.rb
 homepage: http://github.com/thesp0nge/enchant
-licenses: []
+licenses:
+- BSD
 post_install_message: 
 rdoc_options: []
 require_paths:
@@ -165,17 +171,17 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ! '>='
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.8.7
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements:
-  - - ! '>='
+  - - ! '>'
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project: 
 rubygems_version: 1.8.10
 signing_key: 
 specification_version: 3
-summary: Your magical web application fuzzer
+summary: evaluates web server SSL configuration
 test_files: []