watobo 0.9.11 → 0.9.12

data/modules/active/Apache/mod_status.rb

@@ -25,7 +25,7 @@ module Watobo
       module Apache
         class Mod_status < Watobo::ActiveCheck
           def reset()
-            #@checked_dirs.clear
+            @checked_sites.clear
           end
 
           def initialize(project, prefs={})
@@ -52,11 +52,12 @@ module Watobo
           end
 
           def generateChecks(chat)
+           
             if not @checked_sites.has_key?(chat.request.site)
               @checked_sites[chat.request.site] = :checked
               @status_checks.each do |status_path|
                 checker = proc {
-
+                 
                   test_request = nil
                   test_response = nil
 
@@ -67,7 +68,7 @@ module Watobo
 
                   status, test_request, test_response = fileExists?(test, :default => true)
 
-                  if test_response.status =~ /200/ and test_response.join =~ /Apache Server Status for/ then
+                  if test_response.status =~ /200/ and test_response.join =~ /Apache Server Status for/i then
 
                     addFinding( test_request, test_response,
                     :check_pattern => "#{status_path}",

data/modules/active/sap/its_commands.rb

@@ -68,7 +68,7 @@ module Watobo
                     
                     test_request,test_response = doRequest(test,:default => true)
                     if test_response.status =~ /200/i then
-                      test_chat = Chat.new(test,test_response,chat.id)
+                     # test_chat = Chat.new(test,test_response,chat.id)
                       addFinding( test_request,test_response,
                       :test_item => chat.request.url,
                                  :check_pattern => "#{cmd.dup}",

data/modules/active/sap/its_service_parameter.rb

@@ -76,7 +76,7 @@ module Watobo
                     test_request,test_response = doRequest(test,:default => true)
                     
                     if test_response.status =~ /200/i then
-                      test_chat = Chat.new(test,test_response,chat.id)
+                     # test_chat = Chat.new(test,test_response,chat.id)
                       addFinding( test_request,test_response,
                       :test_item => chat.request.url,
                                  :check_pattern => "#{sparm}",

data/modules/active/siebel/siebel_apps.rb

@@ -0,0 +1,184 @@
+# .
+# siebel_apps.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+  module Modules
+    module Active
+      module Siebel
+        
+        
+        class Siebel_apps < Watobo::ActiveCheck
+          
+           @@tested_directories = Hash.new
+          
+          def initialize(project, prefs={})
+           
+            super(project, prefs)
+            
+            check_group = File.dirname(File.expand_path(__FILE__)).split("/").last.capitalize!
+            
+            @info.update(
+                         :check_name => 'Siebel Applications',    # name of check which briefly describes functionality, will be used for tree and progress views
+            :description => "Enumerate Siebel Applications And Default Files, e.g. base.txt",   # description of checkfunction
+            :author => "Andreas Schmidt", # author of check
+            :version => "1.0",   # check version
+            :check_group =>  check_group
+            )
+            
+            @finding.update(
+                            :threat => 'Information',        # thread of vulnerability, e.g. loss of information
+            :class => "Siebel: Default Applications",    # vulnerability class, e.g. Stored XSS, SQL-Injection, ...
+            :type => FINDING_TYPE_INFO         # FINDING_TYPE_HINT, FINDING_TYPE_INFO, FINDING_TYPE_VULN 
+            )
+            
+            @apps = %w( callcenter cgce cra eCommunicationsWireless eEnergyOilGasChemicals eaf eai eai_anon eauctionswexml eautomotive echannelaf echannelcg echannelcme eclinical ecommunications econsumer econsumerpharma econsumersector ecustomer ecustomercme edealer edealerscw eenergy eevents ehospitality eloyalty emarketing emedia emedical ememb epharma epharmace eprofessionalpharma epublicsector eretail erm ermadmin esales esalescme eservice esitesclinical etraining finesales fins finsconsole finscustomer finsebanking finsebrokerage finsechannel finseenenrollment finssalespam htim htimpim loyalty loyaltyscw marketing medicalce pimportal pmmanager prmmanager prmportal pseservice sales salesce service servicece siasalesce siaservicece sismarketing smc wpeserv wppm wpsales wpserv )
+            @langs = %w( cat chs cht csy dan deu ell enu esn euq fin fra frc heb hun ita jpn kor nld nor plk pse psl ptb ptg rus shl sky slv sve tha trk )
+            
+            
+          end
+          
+           def reset()
+            @@tested_directories.clear
+
+          end
+          
+          
+          def generateChecks(chat)
+            
+            begin
+              path = chat.request.dir
+             # puts "!!!!#{self}: #{path}"
+              unless @@tested_directories.has_key?(path)
+                @@tested_directories[path] = true
+                
+                @apps.each do |app|
+                  @langs.each do |lang|
+                    
+                    
+                  checker = proc{
+                    begin
+                    app_dir = "#{app}_#{lang}"
+                    #puts app_dir
+                    test_request = nil
+                    test_response = nil
+                    test = chat.copyRequest
+                    test.appendDir app_dir
+                    
+                    status, test_request, test_response = fileExists?(test, :default => true)
+                    
+                    if status == true 
+                     
+                   #   test_chat = Chat.new(test,test_response, :id => chat.id)
+                      
+                        addFinding( test_request,test_response,
+                          :test_item => chat.request.url,
+                          :check_pattern => "#{app_dir}",
+                          :proof_pattern => "#{test_response.status}",
+                          :chat => chat,
+                          :title => "#{app_dir}"
+                      )
+                      
+                      # check for _stats.swe
+                      stats_test = chat.copyRequest
+                      stats_test.replaceFileExt("_stats.swe")
+                      status, stats_request, stats_response = fileExists?( stats_test, :default => true)
+                    
+                      if status == true and stats_response.has_body?
+                         addFinding( stats_request,stats_response,
+                          :test_item => stats_request.url,
+                          :check_pattern => "#{app_dir}",
+                          :proof_pattern => "#{stats_response.status}",
+                          :chat => chat,
+                          :title => "#{app_dir}",
+                          :check_name => "Siebel Stats Page",
+                          :class => "Siebel: Stats Page"
+                        )
+                      end
+                      
+                      # check for base.txt
+                      base_test = chat.copyRequest
+                      base_test.appendDir app_dir
+                      base_test.replaceFileExt("base.txt")
+                     # puts base_test.url
+                      status, base_request, base_response = fileExists?(base_test, :default => true)
+                    
+                      if status == true and base_response.has_body?
+                        version = nil
+                        if base_response.body.strip =~ /^([0-9.]*) /
+                          version = $1
+                        end
+                         addFinding( base_request,base_response,
+                          :test_item => base_request.url,
+                          :check_pattern => "base.txt",
+                          :proof_pattern => "#{base_response.status}",
+                          :chat => chat,
+                          :title => "#{app_dir}",
+                          :check_name => "Siebel Version #{version}",
+                          :class => "Siebel: Version #{version}"
+                        )
+                      end
+                      
+                      # check for About_Siebel.htm and siebindex.htm                      
+                      %w( About_Siebel.htm help/siebindex.htm siebindex.htm ).each do |df|
+                        default_test = chat.copyRequest
+                      default_test.appendDir app_dir
+                      default_test.replaceFileExt(df)
+                      status, default_request, default_response = fileExists?(default_test, :default => true)
+                    
+                      if status == true 
+                         addFinding( default_request,default_response,
+                          :test_item => "#{default_request.url}",
+                          :check_pattern => "#{df}",
+                          :proof_pattern => "#{default_response.status}",
+                          :chat => chat,
+                          :title => "#{df}",
+                          #:check_name => "Siebel Version #{version}",
+                          :class => "Siebel: Default Files"
+                        )
+                      end
+                      end
+                    
+                    end
+                    rescue => bang
+                      puts bang
+                      puts bang.backtrace
+                    end
+                    [ test_request, test_response ]
+                  }
+                  yield checker
+                  end
+                end
+              end            
+              
+            rescue => bang
+              puts bang
+              puts "ERROR!! #{Module.nesting[0].name}"
+              raise
+              
+            end
+          end
+          
+        end
+        # --> eo namespace    
+      end
+    end
+  end
+end

data/modules/passive/disclosure_domino.rb

@@ -0,0 +1,82 @@
+# .
+# disclosure_domino.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+  module Modules
+    module Passive
+      
+      
+      class Disclosure_domino < Watobo::PassiveCheck
+        
+        def initialize(project)
+           @project = project
+          super(project)
+          
+          @info.update(
+            :check_name => 'Domino DB name disclosure.',    # name of check which briefly describes functionality, will be used for tree and progress views
+            :description => "Identifies Domino DB names.",   # description of checkfunction
+            :author => "Andreas Schmidt", # author of check
+            :version => "1.0"   # check version
+            )
+            
+          @finding.update(
+            :threat => 'Unintended disclosure of Domino DB name can lead to data breach.',        # thread of vulnerability, e.g. loss of information
+            :class => "Domino DB Names",    # vulnerability class, e.g. Stored XSS, SQL-Injection, ...
+            :type => FINDING_TYPE_INFO         # FINDING_TYPE_HINT, FINDING_TYPE_INFO, FINDING_TYPE_VULN 
+          )
+          
+        
+          @pattern = '([\w\/\-0-9\.:]+\.nsf)'
+          @dbs = []
+        end
+        
+        def do_test(chat)
+          begin
+            #  puts "running module: #{Module.nesting[0].name}"
+            if chat.response.content_type =~ /text/ and not chat.response.content_type =~ /text.csv/ then
+            if chat.response.each do |line|
+                if line =~ /#{@pattern}/ then
+                  match = $1
+                  if not @dbs.include?(match) then
+                    @dbs.push match
+                    addFinding( 
+                                         :proof_pattern => "#{match}", 
+                                         :chat => chat,
+                                         :title => match
+                                         )
+                                         end
+                end
+                
+              end
+            end
+            end
+          rescue => bang
+          #  raise
+            puts "ERROR!! #{self.class}"
+            puts bang
+            puts bang.backtrace if $DEBUG
+          end
+        end
+      end
+      
+    end
+  end
+end

data/modules/passive/form_spotter.rb

@@ -52,10 +52,11 @@ module Watobo
             off = chat.response.body.index(/<form/i, 0)
             until off.nil?
               action = chat.response.body[off..-1] =~ /<form [^<\/form]*action="([^"]*)"/i ? $1 : "undefined" 
+              title = action.strip.empty? ? "[none]" : "#{action}"
             #  puts "!FOUND FORM #{action}"
               addFinding(  
                          :proof_pattern => "<form [^>]*>", 
-              :title => "#{action}",
+              :title => title,
               :chat => chat
               )  
               off = chat.response.body.index(/<form/i, off+1)

data/plugins/catalog/catalog.rb

@@ -201,13 +201,22 @@ about_txt.disable
                 end
 
                 status, test_request, test_response = fileExists?(test, :default => true)
-                # puts "[#{status}] - #{test_request.url}"
+               
+                
                 unless test_request.nil? or test_response.nil? then
                   test_result = false
                   response = test_response.join
                   if status == true
+                    if test_request.url =~ /splashAdmin/
+                      puts "splashAdmin.php exists!"
+                      puts "Match: #{match}"
+                      puts "Or-Match: #{or_match}"
+                      puts "Fail: #{fail}"
+                      puts "Or-Fail: #{or_fail}"
+                     
+                    end
 
-                    if ( ( match != "" and response =~ /#{Regexp.quote(match)}/i) or ( or_match != "" and response =~ /#{Regexp.quote(or_match)}/i )) then
+                    if ( (match.empty? and or_match.empty?) or ( match != "" and response =~ /#{Regexp.quote(match)}/i) or ( or_match != "" and response =~ /#{Regexp.quote(or_match)}/i )) then
                       test_result = true
                       if and_match != "" then
                         test_result = false
@@ -221,8 +230,10 @@ about_txt.disable
                     # test_chat = Chat.new(test_request, test_response, chat.id)
 
                     if test_result then
+                      
                       #  path = test_request.url.gsub(/#{uri}/,"")
                       path = test_request.path
+                    #  puts "ADD FINDING!"
                       addFinding(  test_request, test_response,
                       :test_item => uri,
                       :proof_pattern => "#{Regexp.quote(match)}",
@@ -232,6 +243,7 @@ about_txt.disable
                       :title => "[#{uri}] - #{path}"
 
                       )
+                    #  puts "OK"
 
                     end
                   end
@@ -261,7 +273,13 @@ about_txt.disable
 
           if @project then
             @sites_combo.appendItem("no site selected", nil)
-            @project.listSites(:in_scope => Watobo.project.has_scope? ).each do |site|
+            scope_only = Watobo.project.has_scope?
+            sites = @project.listSites(:in_scope => Watobo.project.has_scope? )
+            if sites.empty?
+              scope_only = false
+              @log_viewer.log(LOG_INFO, "Defined scope does not match one site. Using all sites.")
+            end
+            @project.listSites(:in_scope => scope_only ).each do |site|
               #puts "Site: #{site}"
               site_string = site
               if site.length > 60
@@ -661,24 +679,31 @@ about_txt.disable
           end
         end
         
-        def set_db_path(path)
+        def set_db_path(dbpath)
+          path = File.expand_path(dbpath)
           if db_path?(path)
-              puts "New DB Path >> #{path}"
-                @path = path
-          @known_db_paths << @path unless @known_db_paths.include? @path
-          @start_button.enable
-          unless @db_path_combo.findItemByData(@path)
-            item = @db_path_combo.appendItem(dbp)
-                   @db_path_combo.setItemData(item, @path)
-                   @db_path_combo.currentItem = @db_path_combo.numItems - 1
+             puts "New DB Path >> #{path}"
+             @path = path
+            @known_db_paths << @path unless @known_db_paths.include? @path
+            @start_button.enable
+         
+            @db_path_combo.clearItems
+            @known_db_paths.each_with_index do |dbp,i|              
+               if File.exist? dbp               
+                   item = @db_path_combo.appendItem(dbp)
+                   @db_path_combo.setItemData(item, dbp)
+                   path_index = i if dbp == @path
+               end
+            end
             
-          end
+            @db_path_combo.currentItem = @db_path_combo.numItems - 1
+            @db_path_combo.numVisible = @db_path_combo.numItems
               
-              save_config
-            else
-               @catalog_ready = false
+            save_config
+          else
+              @catalog_ready = false
               @start_button.disable
-            end
+          end
         end
 
         def enableOptions()
@@ -709,7 +734,7 @@ about_txt.disable
           #  puts "* #{self.class} closed"
           @scanner.cancel() if @scanner
 
-          self.destroy
+         super
 
         end
         
@@ -717,7 +742,9 @@ about_txt.disable
           @db_files.each do |file|
             fname = File.join( path, file)
             unless File.exists?(fname)
-              puts "WARNING: Missing catalog db file: #{fname}"
+              m = "WARNING: Missing catalog db file: #{fname}"
+              puts m
+              @log_viewer.log( LOG_INFO, m)
               return false
             end
             
@@ -758,6 +785,7 @@ about_txt.disable
             @scanner.cancel()
             @start_button.text = "Start"
             @pbar.progress = 0
+             Watobo.log("Scan Canceled By User", :sender => "Catalog")
             return
           end
 
@@ -783,16 +811,16 @@ about_txt.disable
 
           #}
 
-          @check.subscribe(:new_finding) { |f|
-             @project.addFinding(f) 
-          }
 
+        
           @check.path = @path
 
           chatlist = []
           checklist = []
           checklist.push @check
           @check.resetCounters()
+          
+          
 
           @log_viewer.log( LOG_INFO, "Starting ...")
           puts "Site: #{@site}"
@@ -803,7 +831,7 @@ about_txt.disable
           #  progressWindow.newProject(@active_project, project_settings)
 
        #   progressWindow.register(self)
-progressWindow = nil
+          progressWindow = nil
   #        Thread.new(progressWindow){ |pw|
             begin
               c=1
@@ -812,8 +840,9 @@ progressWindow = nil
                 @project.listDirs(@site, :base_dir => @dir, :include_subdirs => @test_all_dirs.checked?) { c += 1 }
                 notify(:update_progress, :total => c, :job => @dir)
                 @project.listDirs(@site, :base_dir => @dir, :include_subdirs => @test_all_dirs.checked?) do |dir|
-                  msg = "running checks on #{dir}"
+                  msg = "running checks in #{@path} on #{@site} for /#{dir}"
                   puts msg
+                  Watobo.log(msg, :sender => "Catalog")
                   @log_viewer.log(LOG_INFO, msg)
                   chat = createChat()
                   chat.request.replaceFileExt('')
@@ -825,8 +854,9 @@ progressWindow = nil
                 end
               else
             #    notify(:update_progress, :total => c, :job => @dir)
-                msg = "running checks on #{@dir}"
+                msg = "running checks in #{@path} on #{@site} for /#{@dir}"
                 puts msg
+                Watobo.log(msg, :sender => "Catalog")
                 @log_viewer.log(LOG_INFO, msg)
                 chat = createChat()
              #   puts chat.request.first
@@ -856,6 +886,7 @@ progressWindow = nil
           
 
           @scanner = Watobo::Scanner2.new(chatlist, checklist, @project.passive_checks, scan_prefs)
+          
           @pbar.total = @check.numChecks * chatlist.length
           @pbar.progress = 0
           @pbar.barColor = 'red'
@@ -873,6 +904,12 @@ progressWindow = nil
             end
             @pbar.increment(1)
           }
+          
+            @scanner.subscribe(:new_finding) { |f|
+          #  puts "Project.addFinding"
+             @project.addFinding(f) 
+          }
+
 
           msg= "Total Requests: #{@check.numChecks}"
           @log_viewer.log(LOG_INFO, msg)
@@ -887,6 +924,7 @@ progressWindow = nil
               
               msg = "scanning finished!"
               @log_viewer.log(LOG_INFO, msg)
+                Watobo.log("Scan finished", :sender => "Catalog")
             rescue => bang
               puts bang
               puts bang.backtrace if $DEBUG

data/plugins/crawler/gui/crawler_gui.rb

@@ -153,12 +153,14 @@ module Watobo
           end
         end
 
-        def add_update_timer(ms=50)
-          @update_timer = FXApp.instance.addTimeout( ms, :repeat => true) {
-           update_status
-          }
-
-        end
+     #   def add_update_timer(ms=50)
+     #     @update_timer = FXApp.instance.addTimeout( ms, :repeat => true) {
+     #      update_status
+     #     }
+     # end
+       def on_update_timer
+         update_status
+       end
 
         def update_status
           @status_lock.synchronize do

data/plugins/crawler/gui/general_settings_frame.rb

@@ -87,7 +87,7 @@ module Watobo
             @fill_forms_cb.checkState = false
             @fill_forms_cb.disable
             
-            FXLabel.new(iframe, "Don't send forms if they contain following field names:")
+            FXLabel.new(iframe, "Don't send forms if they contain following field names (regex):")
             @excluded_field_patterns = Watobo::Gui::ListBox.new(iframe)
 
             #f = FXVerticalFrame.new(outer_matrix, :opts =>LAYOUT_FILL_X|LAYOUT_FILL_Y)
@@ -97,8 +97,8 @@ module Watobo
             fxtext.backColor = fxtext.parent.backColor
             fxtext.disable
             text = "To speed up the crawl process and to save bandwidth it is recommended to use HEAD requests for specific document extensions."
-            text << "The response to a HEAD request only includes the http headers but no body. The extensions pattern is defined as an regular expression,"
-            text << "e.g. '(pdf|swf|doc|flv|jpg|png|gif)' - without single quotes."
+            text << "The response to a HEAD request only includes the http headers but no body. The extensions pattern is defined as an regular expression (case insesitive),"
+            text << "e.g. '(pdf|swf|doc|flv|jpg|png|gif)' - without quotes."
 
             fxtext.setText(text)
             
@@ -107,7 +107,7 @@ module Watobo
             f = FXHorizontalFrame.new(iframe, :opts => LAYOUT_FILL_X)
             FXLabel.new(f, "Ext. Pattern:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
             @head_request_pattern_txt = FXTextField.new(f, 10, nil, 0, :opts => TEXTFIELD_NORMAL|LAYOUT_SIDE_RIGHT|LAYOUT_FILL_X)
-            @head_request_pattern_txt.text = '(pdf|swf|doc|flv|jpg|png|gif)'
+            @head_request_pattern_txt.text = '(pdf|swf|doc|flv|jpg|png|gif|zip|tar|gz|bz2|tgz)'
 
           end
 

data/plugins/crawler/lib/grabber.rb

@@ -32,9 +32,9 @@ module Watobo
           uri = linkbag.link.uri if linkbag.link.respond_to? :uri
 
           unless @opts[:head_request_pattern].empty?
-            pext = uri.path.match(/[^\.]*$/)
+            pext = uri.path.match(/\.[^\.]*$/)
             unless pext.nil?
-              if pext[0] =~ /#{@opts[:head_request_pattern]}/
+              if pext[0] =~ /\.#{@opts[:head_request_pattern]}/i
               page = @agent.head uri
               end
             end

data/plugins/filefinder/dbs/hbci.db

@@ -10,3 +10,4 @@ banking/hbci.do
 hbciTunnel/hbciTransfer.jsp
 pintan/PinTanServlet
 cgi-bin/hbciservlet
+OnlineBankingFinTS/pintan

data/plugins/filefinder/dbs/well_known.db

@@ -0,0 +1,4 @@
+genesisrest.svc/v3.0/version/server # http://demo.cas.de
+smartaccess
+AutoDiscover		# mobile sync nokia
+Microsoft-Server-ActiveSync #ActiveSync

data/plugins/filefinder/filefinder.rb

@@ -81,8 +81,9 @@ module Watobo
               next if uri.strip =~ /^#/
               # cleanup dir
               uri.strip!
-              uri.gsub!(/^\/+/,'')
+              uri.gsub!(/^[\/\.]+/,'')
               uri.gsub!(/\/$/,'')
+              next if uri.strip.empty?
              
               checker = proc {
                 test_request = nil
@@ -95,13 +96,16 @@ module Watobo
                   new_uri << ".#{ext}"                 
                   end 
                 new_uri << "/" if @append_slash == true
-                puts ">> #{new_uri}"
+               # puts ">> #{new_uri}"
                 test.replaceFileExt(new_uri)
                # puts test.url
                 status, test_request, test_response = fileExists?(test, @prefs)
                 
                 
                 if status == true
+                  
+                  puts "FileFinder >> #{test.url}"
+                  
                   addFinding(  test_request, test_response,
                              :test_item => new_uri,
                             # :proof_pattern => "#{Regexp.quote(uri)}",
@@ -570,7 +574,7 @@ module Watobo
           #puts "* #{self.class} closed"
           @scanner.cancel() if @scanner
           
-          self.destroy
+        super
           
         end
         
@@ -603,10 +607,7 @@ module Watobo
           
           @check.append_slash = @append_slash_cb.checked?
           
-          @check.subscribe(:new_finding) { |f|
-            Thread.new { @project.addFinding(f) }
-          }
-          
+                  
           @check.path = @path
           
           checklist.push @check
@@ -682,7 +683,9 @@ module Watobo
             @pbar.increment(1)
           }
           
-          
+          @scanner.subscribe(:new_finding) { |f|
+            Thread.new { @project.addFinding(f) }
+          } 
           
           m= "Total Requests: #{@check.numChecks}"
           @log_viewer.log(LOG_INFO,m)