owasp_zap 0.0.92 → 0.0.93

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c1b779895d80df8a635b7fbde0d401da38f4fca9
-  data.tar.gz: ede4cfa204fe46f112ccd476e327799d31ab0714
+  metadata.gz: 4c0be2d9be7723a3c4aec0b6852eb66327cfbac0
+  data.tar.gz: c6bde44fad6b0aaba6557efe2ae3380cc578ea4a
 SHA512:
-  metadata.gz: 88c8e352c89f35240f6c3031f622b268848f34d4d41f58bca42df309365d90404d168b8fb2463b07cc5389453e8d66a46e1a80fb4b9fa7c108586aba206056f9
-  data.tar.gz: 4626dad253d58793c4d193c793a346ca7786b48474b7d86831a5d8bbfd80faa3b0768b1bedf0b9f66c7347a9e9e968c797fb861029110f4804f4ce992348d965
+  metadata.gz: ccf28c761a1fb3248fe8c02c753400d3d469c5275bb52e17785fe24211ff1e2822462e28d822099bc7ba2cc507f6e3c232042932dec95a8bff3288facb8f7dc3
+  data.tar.gz: 1b4ef5d319cf28f10810a3dd2a70218dcd34bf81627c2a9d2344913026807b8874bc28a2495c181641cf92d8c2dc8ab6091d731cba966572104c30d318b19281

data/README.md

@@ -28,8 +28,9 @@ Or install it yourself as:
     
     include OwaspZap 
 
-    z = Zap.new :target=>'http://xxx.xxx.xxx' #create new Zap instance with default params
-    z = Zap.new :target=>'http://yyy.yyy.yyy', :zap=>"/usr/share/owasp-zap/zap.sh" #if you got my obs package
+    z = Zap.new :target=>'http://xxx.xxx.xxx' # create new Zap instance with default params
+    z = Zap.new :target=>'http://yyy.yyy.yyy', :zap=>"/usr/share/owasp-zap/zap.sh" # if you got my obs package
+    z = Zap.new :output=>'logfile.txt' # it will log the stdout log from Zap Proxy to a file
     z.start # start interactive
     # TODO
     # document it further :) 

data/lib/owasp_zap/scanner.rb

@@ -0,0 +1,30 @@
+module OwaspZap
+    # TODO 
+    # maybe create a policy class as well
+    class Scanner
+        def initialize(params = {})
+            @base = params[:base]
+        end
+
+        def view(policy_id = 0)
+            # http://127.0.0.1:8080/JSON/ascan/view/scanners/?zapapiformat=JSON&policyId=0
+            url = Addressable::URI.parse("#{@base}/JSON/ascan/view/scanners/")
+            url.query_values = {:zapapiformat=>"JSON",:policyId=>policy_id}
+            RestClient::get url.normalize.to_str
+        end
+
+        def disable(policy_ids=[0])
+            # http://127.0.0.1:8080/JSON/ascan/action/disableScanners/?zapapiformat=JSON&ids=0
+            url = Addressable::URI.parse("#{@base}/JSON/ascan/action/disableScanners/")
+            url.query_values = {:zapapiformat=>"JSON",:ids=>policy_ids.join(',')}
+            RestClient::get url.normalize.to_str
+        end
+
+        def enable(policy_ids=[0])
+            # http://127.0.0.1:8080/JSON/ascan/action/enableScanners/?zapapiformat=JSON&ids=0
+            url = Addressable::URI.parse("#{@base}/JSON/ascan/action/enableScanners/")
+            url.query_values = {:zapapiformat=>"JSON",:ids=>policy_ids.join(',')}
+            RestClient::get url.normalize.to_str
+        end
+    end
+end

data/lib/owasp_zap/version.rb

@@ -1,3 +1,3 @@
 module OwaspZap
-  VERSION = "0.0.92"
+  VERSION = "0.0.93"
 end

data/lib/owasp_zap.rb

@@ -11,6 +11,7 @@ require_relative "owasp_zap/spider"
 require_relative "owasp_zap/attack"
 require_relative "owasp_zap/alert"
 require_relative "owasp_zap/auth"
+require_relative "owasp_zap/scanner"
 
 module OwaspZap
     class ZapException < Exception;end
@@ -57,6 +58,10 @@ module OwaspZap
             Zap::Alert.new(:base=>@base,:target=>@target)
         end
         
+        def scanner
+            Zap::Scanner.new(:base=>@base)
+        end
+
         #attack
         def ascan
             Zap::Attack.new(:base=>@base,:target=>@target)

data/spec/scanner_spec.rb

@@ -0,0 +1,21 @@
+require 'helper'
+
+describe OwaspZap::Alert do
+    before do
+        @scanner = OwaspZap::Scanner.new :base=>"http://127.0.0.1:8080"
+    end
+    it "should not be_nil" do
+        refute @scanner.nil?
+    end
+    it "should respond_to view" do
+        @scanner.must_respond_to :view
+    end
+    it "enable should return true" do
+        stub_request(:get, "http://127.0.0.1:8080/JSON/ascan/action/enableScanners/?ids=0,1&zapapiformat=JSON").to_return(:status => 200, :body => "{\"Result\":\"OK\"}" , :headers => {})
+        @scanner.enable([0,1]).wont_be_nil
+    end
+    it "disable should return true" do
+        stub_request(:get, "http://127.0.0.1:8080/JSON/ascan/action/disableScanners/?ids=0,1&zapapiformat=JSON").to_return(:status => 200, :body => "{\"Result\":\"OK\"}" , :headers => {})
+        @scanner.disable([0,1]).wont_be_nil
+    end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: owasp_zap
 version: !ruby/object:Gem::Version
-  version: 0.0.92
+  version: 0.0.93
 platform: ruby
 authors:
 - Victor Pereira
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-08-05 00:00:00.000000000 Z
+date: 2014-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -126,6 +126,7 @@ files:
 - lib/owasp_zap/attack.rb
 - lib/owasp_zap/auth.rb
 - lib/owasp_zap/error.rb
+- lib/owasp_zap/scanner.rb
 - lib/owasp_zap/spider.rb
 - lib/owasp_zap/string_extension.rb
 - lib/owasp_zap/version.rb
@@ -133,6 +134,7 @@ files:
 - spec/alert_spec.rb
 - spec/auth_spec.rb
 - spec/helper.rb
+- spec/scanner_spec.rb
 - spec/zap_spec.rb
 homepage: ''
 licenses:
@@ -162,4 +164,5 @@ test_files:
 - spec/alert_spec.rb
 - spec/auth_spec.rb
 - spec/helper.rb
+- spec/scanner_spec.rb
 - spec/zap_spec.rb