ronin-app 0.1.0.rc1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (163) hide show
  1. checksums.yaml +7 -0
  2. data/.dockerignore +3 -0
  3. data/.document +6 -0
  4. data/.env.dev +1 -0
  5. data/.github/workflows/ruby.yml +44 -0
  6. data/.gitignore +16 -0
  7. data/.rspec +1 -0
  8. data/.rubocop.yml +26 -0
  9. data/.ruby-version +1 -0
  10. data/.yardopts +1 -0
  11. data/CONTRIBUTING.md +34 -0
  12. data/COPYING.txt +661 -0
  13. data/ChangeLog.md +38 -0
  14. data/Dockerfile +27 -0
  15. data/Gemfile +61 -0
  16. data/Procfile +2 -0
  17. data/Procfile.dev +2 -0
  18. data/README.md +215 -0
  19. data/Rakefile +44 -0
  20. data/app/db.rb +680 -0
  21. data/app/scanning.rb +173 -0
  22. data/app.rb +372 -0
  23. data/bin/ronin-app +34 -0
  24. data/config/database.rb +17 -0
  25. data/config/puma.rb +24 -0
  26. data/config/redis.rb +4 -0
  27. data/config/sidekiq.rb +23 -0
  28. data/config/sidekiq.yml +12 -0
  29. data/config.ru +33 -0
  30. data/docker-compose.yml +45 -0
  31. data/etc/systemd/user/ronin-app-sidekiq.1.service +17 -0
  32. data/etc/systemd/user/ronin-app-web.1.service +18 -0
  33. data/etc/systemd/user/ronin-app.target +5 -0
  34. data/gemspec.yml +55 -0
  35. data/lib/middleware/sidekiq/active_record_connection_pool.rb +47 -0
  36. data/lib/ronin/app/cli.rb +197 -0
  37. data/lib/ronin/app/helpers/html.rb +71 -0
  38. data/lib/ronin/app/root.rb +28 -0
  39. data/lib/ronin/app/schemas/params_schema.rb +66 -0
  40. data/lib/ronin/app/schemas/payloads/build_schema.rb +56 -0
  41. data/lib/ronin/app/schemas/payloads/encoders/encode_schema.rb +60 -0
  42. data/lib/ronin/app/types/import.rb +35 -0
  43. data/lib/ronin/app/types/nmap.rb +81 -0
  44. data/lib/ronin/app/types/spider.rb +49 -0
  45. data/lib/ronin/app/types/vulns.rb +69 -0
  46. data/lib/ronin/app/types.rb +66 -0
  47. data/lib/ronin/app/validations/import_params.rb +71 -0
  48. data/lib/ronin/app/validations/install_repo_params.rb +78 -0
  49. data/lib/ronin/app/validations/masscan_params.rb +122 -0
  50. data/lib/ronin/app/validations/nmap_params.rb +183 -0
  51. data/lib/ronin/app/validations/recon_params.rb +86 -0
  52. data/lib/ronin/app/validations/spider_params.rb +103 -0
  53. data/lib/ronin/app/validations/vulns_params.rb +83 -0
  54. data/lib/ronin/app/version.rb +26 -0
  55. data/log/.gitkeep +0 -0
  56. data/man/ronin-app.1 +63 -0
  57. data/man/ronin-app.1.md +61 -0
  58. data/public/images/favicon.png +0 -0
  59. data/public/images/favicon.svg +78 -0
  60. data/public/images/logo.svg +78 -0
  61. data/public/images/sidekiq.svg +24 -0
  62. data/public/javascript/app.js +60 -0
  63. data/public/javascript/notes.js +28 -0
  64. data/public/javascript/tabs.js +40 -0
  65. data/public/stylesheets/app.css +216 -0
  66. data/public/stylesheets/bulma.min.css +1 -0
  67. data/ronin-app.gemspec +63 -0
  68. data/scripts/console +7 -0
  69. data/scripts/server +134 -0
  70. data/scripts/setup +447 -0
  71. data/scripts/update +55 -0
  72. data/tmp/.gitkeep +0 -0
  73. data/views/_authors.erb +62 -0
  74. data/views/_delete.erb +4 -0
  75. data/views/_delete_all.erb +4 -0
  76. data/views/_encoding_tabs.erb +25 -0
  77. data/views/_notes.erb +33 -0
  78. data/views/_pagination.erb +1 -0
  79. data/views/_param_fields.erb +66 -0
  80. data/views/_params.erb +35 -0
  81. data/views/about.erb +30 -0
  82. data/views/db/advisories/index.erb +30 -0
  83. data/views/db/advisories/show.erb +105 -0
  84. data/views/db/asns/index.erb +19 -0
  85. data/views/db/asns/show.erb +61 -0
  86. data/views/db/credentials/index.erb +30 -0
  87. data/views/db/credentials/show.erb +51 -0
  88. data/views/db/email_addresses/index.erb +30 -0
  89. data/views/db/email_addresses/show.erb +44 -0
  90. data/views/db/host_names/index.erb +30 -0
  91. data/views/db/host_names/show.erb +52 -0
  92. data/views/db/ip_addresses/index.erb +19 -0
  93. data/views/db/ip_addresses/show.erb +98 -0
  94. data/views/db/mac_addresses/index.erb +19 -0
  95. data/views/db/mac_addresses/show.erb +62 -0
  96. data/views/db/open_ports/index.erb +19 -0
  97. data/views/db/open_ports/show.erb +87 -0
  98. data/views/db/organizations/departments/show.erb +82 -0
  99. data/views/db/organizations/index.erb +28 -0
  100. data/views/db/organizations/members/show.erb +87 -0
  101. data/views/db/organizations/show.erb +111 -0
  102. data/views/db/oses/index.erb +19 -0
  103. data/views/db/oses/show.erb +46 -0
  104. data/views/db/passwords/index.erb +30 -0
  105. data/views/db/passwords/show.erb +52 -0
  106. data/views/db/people/index.erb +31 -0
  107. data/views/db/people/show.erb +120 -0
  108. data/views/db/phone_numbers/index.erb +30 -0
  109. data/views/db/phone_numbers/show.erb +63 -0
  110. data/views/db/ports/index.erb +30 -0
  111. data/views/db/ports/show.erb +70 -0
  112. data/views/db/services/index.erb +30 -0
  113. data/views/db/services/show.erb +65 -0
  114. data/views/db/software/index.erb +19 -0
  115. data/views/db/software/show.erb +52 -0
  116. data/views/db/software_vendors/index.erb +19 -0
  117. data/views/db/software_vendors/show.erb +36 -0
  118. data/views/db/street_addresses/index.erb +19 -0
  119. data/views/db/street_addresses/show.erb +63 -0
  120. data/views/db/url_query_param_names/index.erb +19 -0
  121. data/views/db/url_query_param_names/show.erb +50 -0
  122. data/views/db/url_schemes/index.erb +19 -0
  123. data/views/db/url_schemes/show.erb +36 -0
  124. data/views/db/urls/index.erb +30 -0
  125. data/views/db/urls/show.erb +103 -0
  126. data/views/db/user_names/index.erb +30 -0
  127. data/views/db/user_names/show.erb +48 -0
  128. data/views/db/vulns/index.erb +19 -0
  129. data/views/db/vulns/show.erb +104 -0
  130. data/views/db.erb +152 -0
  131. data/views/exploits/index.erb +9 -0
  132. data/views/exploits/show.erb +100 -0
  133. data/views/import.erb +30 -0
  134. data/views/index.erb +7 -0
  135. data/views/layout.erb +98 -0
  136. data/views/masscan.erb +459 -0
  137. data/views/nmap.erb +1009 -0
  138. data/views/payloads/build.erb +19 -0
  139. data/views/payloads/encoders/encode.erb +35 -0
  140. data/views/payloads/encoders/index.erb +9 -0
  141. data/views/payloads/encoders/show.erb +47 -0
  142. data/views/payloads/index.erb +9 -0
  143. data/views/payloads/show.erb +47 -0
  144. data/views/queue.erb +28 -0
  145. data/views/recon.erb +55 -0
  146. data/views/repos/index.erb +30 -0
  147. data/views/repos/install.erb +45 -0
  148. data/views/repos/show.erb +39 -0
  149. data/views/spider.erb +372 -0
  150. data/views/vulns.erb +214 -0
  151. data/workers/import.rb +96 -0
  152. data/workers/install_repo.rb +40 -0
  153. data/workers/masscan.rb +135 -0
  154. data/workers/nmap.rb +216 -0
  155. data/workers/purge_repos.rb +40 -0
  156. data/workers/recon.rb +95 -0
  157. data/workers/remove_repo.rb +40 -0
  158. data/workers/spider.rb +148 -0
  159. data/workers/update_repo.rb +42 -0
  160. data/workers/update_repos.rb +40 -0
  161. data/workers/vulns.rb +111 -0
  162. data/workers.rb +37 -0
  163. metadata +538 -0
@@ -0,0 +1,36 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/software">Software</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>Software Vendor: <%=h @software_vendor %></h1>
13
+ <%= partial(:delete, record: @software_vendor, path: "software_vendors") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Name:</strong></td>
20
+ <td><%=h @software_vendor.name %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>Software:</strong></td>
25
+ <td>
26
+ <% @software_vendor.software.each do |software| %>
27
+ <p>
28
+ <a href="/db/software/<%=h software.id %>">
29
+ <%=h software %>
30
+ </a>
31
+ </p>
32
+ <% end %>
33
+ </td>
34
+ </tr>
35
+ </tbody>
36
+ </table>
@@ -0,0 +1,19 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ </ul>
7
+ </nav>
8
+ <% end %>
9
+
10
+ <div class="is-flex is-justify-content-space-between">
11
+ <h1>Street Addresses</h1>
12
+ <%= partial(:delete_all, path: "street_addresses") %>
13
+ </div>
14
+
15
+ <% @street_addresses.each do |street_address| %>
16
+ <p><a href="/db/street_addresses/<%=h street_address.id %>"><%=h street_address %></a></p>
17
+ <% end %>
18
+
19
+ <%= partial(:pagination, pagy: @pagy) %>
@@ -0,0 +1,63 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/street_addresses">Street Addresses</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>Street Address: <%=h @street_address %></h1>
13
+ <%= partial(:delete, record: @street_address, path: "street_addresses") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Address:</strong></td>
20
+ <td><%=h @street_address.address %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>City:</strong></td>
25
+ <td><%=h @street_address.city %></td>
26
+ </tr>
27
+
28
+ <tr>
29
+ <td><strong>State:</strong></td>
30
+ <td><%=h @street_address.state %></td>
31
+ </tr>
32
+
33
+ <tr>
34
+ <td><strong>Zipcode:</strong></td>
35
+ <td><%=h @street_address.zipcode %></td>
36
+ </tr>
37
+
38
+ <tr>
39
+ <td><strong>Country:</strong></td>
40
+ <td><%=h @street_address.country %></td>
41
+ </tr>
42
+
43
+ <tr>
44
+ <td><strong>Created:</strong></td>
45
+ <td><%=h @street_address.created_at %></td>
46
+ </tr>
47
+
48
+ <tr>
49
+ <td><strong>People:</strong></td>
50
+ <td>
51
+ <% @street_address.people.each do |person| %>
52
+ <p>
53
+ <a href="/db/people/<%=h person.id %>">
54
+ <%=h person %>
55
+ </a>
56
+ </p>
57
+ <% end %>
58
+ </td>
59
+ </tr>
60
+ </tbody>
61
+ </table>
62
+
63
+ <%= partial(:notes, notes: @street_address.notes) %>
@@ -0,0 +1,19 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ </ul>
7
+ </nav>
8
+ <% end %>
9
+
10
+ <div class="is-flex is-justify-content-space-between">
11
+ <h1>URL Query Param Names</h1>
12
+ <%= partial(:delete_all, path: "url_query_param_names") %>
13
+ </div>
14
+
15
+ <% @url_query_param_names.each do |url_query_param_name| %>
16
+ <p><a href="/db/url_query_param_names/<%=h url_query_param_name.id %>"><%=h url_query_param_name %></a></p>
17
+ <% end %>
18
+
19
+ <%= partial(:pagination, pagy: @pagy) %>
@@ -0,0 +1,50 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/url_query_param_names">URL Query Param Names</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>URL Query Param Name: <%=h @url_query_param_name %></h1>
13
+ <%= partial(:delete, record: @url_query_param_name, path: "url_query_param_names") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Name:</strong></td>
20
+ <td><%=h @url_query_param_name.name %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>Values:</strong></td>
25
+ <td>
26
+ <% @url_query_param_name.query_params.each do |query_param| %>
27
+ <p><kbd><%=h query_param.value %></kbd></p>
28
+ <% end %>
29
+ </td>
30
+ </tr>
31
+
32
+ <tr>
33
+ <td><strong>URLs:</strong></td>
34
+ <td>
35
+ <% @url_query_param_name.urls.each do |url| %>
36
+ <p>
37
+ <a href="/db/urls/<%=h url.id %>">
38
+ <%=h url %>
39
+ </a>
40
+ </p>
41
+ <% end %>
42
+ </td>
43
+ </tr>
44
+
45
+ <tr>
46
+ <td><strong>Created:</strong></td>
47
+ <td><%=h @url_query_param_name.created_at %></td>
48
+ </tr>
49
+ </tbody>
50
+ </table>
@@ -0,0 +1,19 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ </ul>
7
+ </nav>
8
+ <% end %>
9
+
10
+ <div class="is-flex is-justify-content-space-between">
11
+ <h1>URL Schemes</h1>
12
+ <%= partial(:delete_all, path: "url_schemes") %>
13
+ </div>
14
+
15
+ <% @url_schemes.each do |url_scheme| %>
16
+ <p><a href="/db/url_schemes/<%=h url_scheme.id %>"><%=h url_scheme %></a></p>
17
+ <% end %>
18
+
19
+ <%= partial(:pagination, pagy: @pagy) %>
@@ -0,0 +1,36 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/url_schemes">URL Schemes</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>URL Scheme: <%=h @url_scheme %></h1>
13
+ <%= partial(:delete, record: @url_scheme, path: "url_schemes") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Name:</strong></td>
20
+ <td><%=h @url_scheme.name %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>URLs:</strong></td>
25
+ <td>
26
+ <% @url_scheme.urls.each do |url| %>
27
+ <p>
28
+ <a href="/db/urls/<%=h url.id %>">
29
+ <%=h url %>
30
+ </a>
31
+ </p>
32
+ <% end %>
33
+ </td>
34
+ </tr>
35
+ </tbody>
36
+ </table>
@@ -0,0 +1,30 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ </ul>
7
+ </nav>
8
+ <% end %>
9
+
10
+ <div class="is-flex is-justify-content-space-between">
11
+ <h1>URLs</h1>
12
+ <%= partial(:delete_all, path: "urls") %>
13
+ </div>
14
+
15
+ <form action="/db/urls/import" method="post" class="mb-5">
16
+ <div class="field has-addons">
17
+ <div class="mr-1">
18
+ <input class="input" name="url" placeholder="http://example.com/"></input>
19
+ </div>
20
+ <div>
21
+ <button type="submit" class="button is-primary">Import</button>
22
+ </div>
23
+ </div>
24
+ </form>
25
+
26
+ <% @urls.each do |url| %>
27
+ <p><a href="/db/urls/<%=h url.id %>"><%=h url %></a></p>
28
+ <% end %>
29
+
30
+ <%= partial(:pagination, pagy: @pagy) %>
@@ -0,0 +1,103 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/urls">URLs</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>URL: <%=h @url %></h1>
13
+ <%= partial(:delete, record: @url, path: "urls") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Scheme:</strong></td>
20
+ <td><%=h @url.scheme %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>Host Name:</strong></td>
25
+ <td><a href="/db/host_names/<%=hattr @url.host_name.id %>"><%=h @url.host_name %></a></td>
26
+ </tr>
27
+
28
+ <tr>
29
+ <td><strong>Port:</strong></td>
30
+ <td><%=h @url.port.number %></td>
31
+ </tr>
32
+
33
+ <tr>
34
+ <td><strong>Path:</strong></td>
35
+ <td><%=h @url.path %></td>
36
+ </tr>
37
+
38
+ <% if @url.query %>
39
+ <tr>
40
+ <td><strong>Query:</strong></td>
41
+ <td><%=h @url.query %></td>
42
+ </tr>
43
+ <% end %>
44
+
45
+ <% unless @url.query_params.empty? %>
46
+ <tr>
47
+ <td><strong>Query Params:</strong></td>
48
+ <td>
49
+ <ul>
50
+ <% @url.query_params.each do |query_param| %>
51
+ <li><%=h query_param %></li>
52
+ <% end %>
53
+ </ul>
54
+ </td>
55
+ </tr>
56
+ <% end %>
57
+
58
+ <% if @url.fragment %>
59
+ <tr>
60
+ <td><strong>Fragment:</strong></td>
61
+ <td><%=h @url.fragment %></td>
62
+ </tr>
63
+ <% end %>
64
+
65
+ <tr>
66
+ <td><strong>Credentials:</strong></td>
67
+ <td>
68
+ <% @url.credentials.each do |credential| %>
69
+ <p>
70
+ <a href="/db/credentials/<%=h credential.id %>">
71
+ <%=h credential %>
72
+ </a>
73
+ </p>
74
+ <% end %>
75
+ </td>
76
+ </tr>
77
+
78
+ <tr>
79
+ <td><strong>Advisories:</strong></td>
80
+ <td>
81
+ <% @url.advisories.each do |advisory| %>
82
+ <p>
83
+ <a href="/db/advisories/<%=h advisory.id %>">
84
+ <%=h advisory %>
85
+ </a>
86
+ </p>
87
+ <% end %>
88
+ </td>
89
+ </tr>
90
+
91
+ <tr>
92
+ <td><strong>Created:</strong></td>
93
+ <td><%=h @url.created_at %></td>
94
+ </tr>
95
+
96
+ <tr>
97
+ <td><strong>Scanned:</strong></td>
98
+ <td><%=h @url.last_scanned_at %></td>
99
+ </tr>
100
+ </tbody>
101
+ </table>
102
+
103
+ <%= partial(:notes, notes: @url.notes) %>
@@ -0,0 +1,30 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ </ul>
7
+ </nav>
8
+ <% end %>
9
+
10
+ <div class="is-flex is-justify-content-space-between">
11
+ <h1>User Names</h1>
12
+ <%= partial(:delete_all, path: "user_names") %>
13
+ </div>
14
+
15
+ <form action="/db/user_names/import" method="post" class="mb-5">
16
+ <div class="field has-addons">
17
+ <div class="mr-1">
18
+ <input class="input" name="user_name" placeholder="foobar"></input>
19
+ </div>
20
+ <div>
21
+ <button type="submit" class="button is-primary">Import</button>
22
+ </div>
23
+ </div>
24
+ </form>
25
+
26
+ <% @user_names.each do |user_name| %>
27
+ <p><a href="/db/user_names/<%=h user_name.id %>"><%=h user_name %></a></p>
28
+ <% end %>
29
+
30
+ <%= partial(:pagination, pagy: @pagy) %>
@@ -0,0 +1,48 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/user_names">Host Names</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>User Name: <%=h @user_name %></h1>
13
+ <%= partial(:delete, record: @user_name, path: "user_names") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Email Addresses:</strong></td>
20
+ <td><%=h @user_name.name %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>Email Addresses:</strong></td>
25
+ <td>
26
+ <% @user_name.email_addresses.each do |email_address| %>
27
+ <p><a href="/db/email_addresses/<%=h email_address.id %>"><%=h email_address %></a></p>
28
+ <% end %>
29
+ </td>
30
+ </tr>
31
+
32
+ <tr>
33
+ <td><strong>Credentials:</strong></td>
34
+ <td>
35
+ <% @user_name.credentials.each do |credential| %>
36
+ <p><a href="/db/credentials/<%=h credential.id %>"><%=h credential%></a></p>
37
+ <% end %>
38
+ </td>
39
+ </tr>
40
+
41
+ <tr>
42
+ <td><strong>Created:</strong></td>
43
+ <td><%=h @user_name.created_at %></td>
44
+ </tr>
45
+ </tbody>
46
+ </table>
47
+
48
+ <%= partial(:notes, notes: @user_name.notes) %>
@@ -0,0 +1,19 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ </ul>
7
+ </nav>
8
+ <% end %>
9
+
10
+ <div class="is-flex is-justify-content-space-between">
11
+ <h1>Vulnerabilities</h1>
12
+ <%= partial(:delete_all, path: "vulns") %>
13
+ </div>
14
+
15
+ <% @vulns.each do |vuln| %>
16
+ <p><a href="/db/vulns/<%=h vuln.id %>"><%=h vuln.url %></a></p>
17
+ <% end %>
18
+
19
+ <%= partial(:pagination, pagy: @pagy) %>
@@ -0,0 +1,104 @@
1
+ <% content_for :breadcrumbs do %>
2
+ <nav class="breadcrumb" aria-label="breadcrumbs">
3
+ <ul>
4
+ <li><a href="/">Home</a></li>
5
+ <li><a href="/db">Database</a></li>
6
+ <li><a href="/db/vulns">Vulnerabilities</a></li>
7
+ </ul>
8
+ </nav>
9
+ <% end %>
10
+
11
+ <div class="is-flex is-justify-content-space-between">
12
+ <h1>Vulnerability: <%=h @vuln.url %></h1>
13
+ <%= partial(:delete, record: @vuln, path: "vulns") %>
14
+ </div>
15
+
16
+ <table class="table">
17
+ <tbody>
18
+ <tr>
19
+ <td><strong>Type:</strong></td>
20
+ <td><%=h @vuln.type %></td>
21
+ </tr>
22
+
23
+ <tr>
24
+ <td><strong>URL:</strong></td>
25
+ <td><a href="/db/urls/<%= @vuln.url_id %>"><%= h @vuln.url %></a></td>
26
+ </tr>
27
+
28
+ <tr>
29
+ <td><strong>Query Param:</strong></td>
30
+ <td><%=h @vuln.query_param %></td>
31
+ </tr>
32
+
33
+ <tr>
34
+ <td><strong>Header Name::</strong></td>
35
+ <td><%=h @vuln.header_name %></td>
36
+ </tr>
37
+
38
+ <tr>
39
+ <td><strong>Cookie Param:</strong></td>
40
+ <td><%=h @vuln.cookie_param %></td>
41
+ </tr>
42
+
43
+ <tr>
44
+ <td><strong>Form Param:</strong></td>
45
+ <td><%=h @vuln.form_param %></td>
46
+ </tr>
47
+
48
+ <tr>
49
+ <td><strong>Request Method:</strong></td>
50
+ <td><%=h @vuln.request_method %></td>
51
+ </tr>
52
+
53
+ <tr>
54
+ <td><strong>LFI OS:</strong></td>
55
+ <td><%=h @vuln.lfi_os %></td>
56
+ </tr>
57
+
58
+ <tr>
59
+ <td><strong>LFI Depth:</strong></td>
60
+ <td><%=h @vuln.lfi_depth %></td>
61
+ </tr>
62
+
63
+ <tr>
64
+ <td><strong>LFI Filter Bypass:</strong></td>
65
+ <td><%=h @vuln.lfi_filter_bypass %></td>
66
+ </tr>
67
+
68
+ <tr>
69
+ <td><strong>RFI Script Lang:</strong></td>
70
+ <td><%=h @vuln.rfi_script_lang %></td>
71
+ </tr>
72
+
73
+ <tr>
74
+ <td><strong>RFI Filter Bypass:</strong></td>
75
+ <td><%=h @vuln.rfi_filter_bypass %></td>
76
+ </tr>
77
+
78
+ <tr>
79
+ <td><strong>SSTI Escape Type:</strong></td>
80
+ <td><%=h @vuln.ssti_escape_type %></td>
81
+ </tr>
82
+
83
+ <tr>
84
+ <td><strong>SQLI Escape Quote:</strong></td>
85
+ <td><%=h @vuln.sqli_escape_quote %></td>
86
+ </tr>
87
+
88
+ <tr>
89
+ <td><strong>SQLI Escape Parens:</strong></td>
90
+ <td><%=h @vuln.sqli_escape_parens %></td>
91
+ </tr>
92
+
93
+ <tr>
94
+ <td><strong>SQLI Terminate:</strong></td>
95
+ <td><%=h @vuln.sqli_terminate %></td>
96
+ </tr>
97
+
98
+ <tr>
99
+ <td><strong>Created:</strong></td>
100
+ <td><%=h @vuln.created_at %></td>
101
+ </tr>
102
+ </tbody>
103
+ </table>
104
+