watobo 0.9.11 → 0.9.12

Sign up to get free protection for your applications and to get access to all the features.
Files changed (40) hide show
  1. data/CHANGELOG +12 -0
  2. data/bin/watobo +9 -1
  3. data/lib/watobo/adapters/data_store.rb +14 -1
  4. data/lib/watobo/adapters/file/file_store.rb +33 -0
  5. data/lib/watobo/core/active_check.rb +3 -2
  6. data/lib/watobo/core/project.rb +6 -2
  7. data/lib/watobo/core/scanner.rb +7 -1
  8. data/lib/watobo/core/session.rb +3 -1
  9. data/lib/watobo/gui/checkboxtree.rb +243 -101
  10. data/lib/watobo/gui/checks_policy_frame.rb +60 -22
  11. data/lib/watobo/gui/dashboard.rb +25 -4
  12. data/lib/watobo/gui/findings_tree.rb +35 -46
  13. data/lib/watobo/gui/full_scan_dialog.rb +2 -1
  14. data/lib/watobo/gui/fuzzer_gui.rb +1 -1
  15. data/lib/watobo/gui/interceptor_settings_dialog.rb +1 -1
  16. data/lib/watobo/gui/log_viewer.rb +3 -1
  17. data/lib/watobo/gui/main_window.rb +9 -9
  18. data/lib/watobo/gui/manual_request_editor.rb +11 -1
  19. data/lib/watobo/gui/progress_window.rb +16 -6
  20. data/lib/watobo/gui/quick_scan_dialog.rb +5 -5
  21. data/lib/watobo/gui/templates/plugin2.rb +13 -26
  22. data/lib/watobo/mixins/shapers.rb +4 -2
  23. data/lib/watobo.rb +1 -1
  24. data/modules/active/Apache/mod_status.rb +4 -3
  25. data/modules/active/sap/its_commands.rb +1 -1
  26. data/modules/active/sap/its_service_parameter.rb +1 -1
  27. data/modules/active/siebel/siebel_apps.rb +184 -0
  28. data/modules/passive/disclosure_domino.rb +82 -0
  29. data/modules/passive/form_spotter.rb +2 -1
  30. data/plugins/catalog/catalog.rb +63 -25
  31. data/plugins/crawler/gui/crawler_gui.rb +8 -6
  32. data/plugins/crawler/gui/general_settings_frame.rb +4 -4
  33. data/plugins/crawler/lib/grabber.rb +2 -2
  34. data/plugins/filefinder/dbs/hbci.db +1 -0
  35. data/plugins/filefinder/dbs/well_known.db +4 -0
  36. data/plugins/filefinder/filefinder.rb +11 -8
  37. data/plugins/sqlmap/gui/main.rb +17 -5
  38. data/plugins/sslchecker/gui/cipher_table.rb +1 -1
  39. data/plugins/sslchecker/gui/gui.rb +33 -14
  40. metadata +5 -2
@@ -68,15 +68,27 @@ module Watobo
68
68
  @change_btn.enable
69
69
 
70
70
  @change_btn.connect(SEL_COMMAND){
71
- @bin_path = nil
72
- bin_path = FXFileDialog.getOpenFilename(self, "Select SQLmap Path", @bin_path)
71
+ open_path = nil
72
+ unless @binary_path_txt.text.empty?
73
+ dir_name = File.dirname(@binary_path_txt.text)
74
+ unless dir_name.empty?
75
+ open_path = dir_name unless File.exist? dir_name
76
+ end
77
+ end
78
+ bin_path_old = @binary_path_txt.text
79
+ bin_path = FXFileDialog.getOpenFilename(self, "Select SQLmap Path", open_path)
73
80
  unless bin_path.empty?
74
81
  @binary_path_txt.text = bin_path
75
- Watobo::Plugin::Sqlmap.set_binary_path bin_path
82
+ else
83
+ @binary_path_txt.text = bin_path_old
84
+
85
+ end
86
+ if File.exist? @binary_path_txt.text
87
+ Watobo::Plugin::Sqlmap.set_binary_path bin_path
76
88
  @accept_btn.enable
77
89
  else
78
- @accept_btn.disable
79
- @binary_path_txt.text = "not defined"
90
+ Watobo::Plugin::Sqlmap.set_binary_path ''
91
+ @accept_btn.disable
80
92
  end
81
93
  }
82
94
 
@@ -210,7 +210,7 @@ module Watobo
210
210
  end
211
211
 
212
212
  def add_cipher_row(cipher)
213
- add_cipher = @filter == CTF_ALL ? true : false
213
+ add_cipher = ( @filter == CTF_ALL ) ? true : false
214
214
 
215
215
  if cipher[:result] == false
216
216
  # @result_viewer.appendStyledText("checked: #{cipher} - #{bits} - #{result}\n",0)
@@ -33,7 +33,12 @@ module Watobo
33
33
 
34
34
  def createChat(site)
35
35
  chat = nil
36
- url = "https://#{site}/"
36
+ u = URI.parse site
37
+ if u.scheme.nil?
38
+ url = "https://#{site}/"
39
+ else
40
+ url = u.to_s
41
+ end
37
42
  request = []
38
43
  request << "GET #{url} HTTP/1.1\r\n"
39
44
  request << "Host: #{site}\r\n"
@@ -75,8 +80,8 @@ module Watobo
75
80
  @sites_combo.setCurrentItem(0)
76
81
  @site = @sites_combo.getItemData(0)
77
82
  @sites_combo.numVisible = ( @sites_combo.numItems > 15 ) ? 15 : @sites_combo.numItems
78
- else
79
- @log_viewer.log(LOG_INFO,"No SSL Sites available - you need to visit a SSL Site first!")
83
+ # else
84
+ # @log_viewer.log(LOG_INFO,"No SSL Sites available - you need to visit a SSL Site first!")
80
85
  end
81
86
  end
82
87
 
@@ -111,10 +116,11 @@ module Watobo
111
116
  unless @project.getCurrentProxy().nil?
112
117
  @log_viewer.log(LOG_INFO,"!!! WARNING FORWARDING PROXY IS SET !!! - SSL-Check running against proxy may not make sense!")
113
118
  end
114
- @status_lock.synchronize do
119
+ @update_lock.synchronize do
115
120
  @status = :running
116
121
  end
117
- add_update_timer(50)
122
+
123
+ # add_update_timer(50)
118
124
 
119
125
  @log_viewer.log LOG_INFO, "Scan started ..."
120
126
  @scan_thread = Thread.new(scanner) { |scan|
@@ -122,11 +128,11 @@ module Watobo
122
128
 
123
129
  scan.run(:default => true)
124
130
  @log_viewer.log LOG_INFO, "Scan finished."
125
- @status_lock.synchronize do
131
+ @update_lock.synchronize do
126
132
  @status = :idle
127
133
  end
128
- sleep 1 # to let the update_timer finish its work
129
- getApp().removeTimeout(@update_timer)
134
+ # sleep 1 # to let the update_timer finish its work
135
+ # getApp().removeTimeout(@update_timer)
130
136
  rescue => bang
131
137
  puts bang
132
138
  puts bang.backtrace if $DEBUG
@@ -147,7 +153,7 @@ module Watobo
147
153
 
148
154
  @results = []
149
155
  @results_lock = Mutex.new
150
- @status_lock = Mutex.new
156
+ # @status_lock = Mutex.new
151
157
  @status = :idle
152
158
 
153
159
  @clipboard_text = ""
@@ -179,9 +185,9 @@ module Watobo
179
185
  frame = FXVerticalFrame.new(result_frame, LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_SUNKEN|FRAME_THICK, :padding=>0)
180
186
  @cipher_table = CipherTable.new(frame, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
181
187
 
182
- FXLabel.new(@settings_frame, "Available Sites:")
183
- @sites_combo = FXComboBox.new(@settings_frame, 5, nil, 0,
184
- COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
188
+ FXLabel.new(@settings_frame, "Enter or select site to test:")
189
+ @sites_combo = FXComboBox.new(@settings_frame, 5, nil, 0, COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
190
+ #@sites_combo = FXTextField.new(@settings_frame, 25, :opts => TEXTFIELD_NORMAL|LAYOUT_FILL_COLUMN|LAYOUT_RIGHT)
185
191
  #@filterCombo.width =200
186
192
 
187
193
  @sites_combo.numColumns = 35
@@ -238,8 +244,21 @@ module Watobo
238
244
  end
239
245
 
240
246
  private
247
+ def on_update_timer
248
+ unless @status == :idle
249
+ @results_lock.synchronize do
250
+ @results.each do |r|
251
+ @cipher_table.add_cipher(r)
252
+ end
253
+ @results.clear
254
+ end
255
+ else
256
+ @pbar.barColor = 'grey' unless @pbar.barColor == 'grey'
257
+ end
258
+
259
+ end
241
260
 
242
- def add_update_timer(ms)
261
+ def add_update_timer_UNUSED(ms)
243
262
  @update_timer = FXApp.instance.addTimeout( ms, :repeat => true) do
244
263
  @results_lock.synchronize do
245
264
  @results.each do |r|
@@ -248,7 +267,7 @@ module Watobo
248
267
  @results.clear
249
268
  end
250
269
 
251
- @status_lock.synchronize do
270
+ @update_lock.synchronize do
252
271
  @pbar.barColor = 'grey' if @status == :idle
253
272
  end
254
273
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: watobo
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.9.11
4
+ version: 0.9.12
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2012-09-24 00:00:00.000000000 Z
12
+ date: 2012-11-20 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: mechanize
@@ -206,6 +206,7 @@ files:
206
206
  - modules/active/sap/its_services.rb
207
207
  - modules/active/sap/its_service_parameter.rb
208
208
  - modules/active/sap/its_xss.rb
209
+ - modules/active/siebel/siebel_apps.rb
209
210
  - modules/active/sqlinjection/sqli_error.rb
210
211
  - modules/active/sqlinjection/sqli_timing.rb
211
212
  - modules/active/sqlinjection/sql_boolean.rb
@@ -218,6 +219,7 @@ files:
218
219
  - modules/passive/detect_infrastructure.rb
219
220
  - modules/passive/detect_one_time_tokens.rb
220
221
  - modules/passive/dirindexing.rb
222
+ - modules/passive/disclosure_domino.rb
221
223
  - modules/passive/disclosure_emails.rb
222
224
  - modules/passive/disclosure_ipaddr.rb
223
225
  - modules/passive/filename_as_parameter.rb
@@ -249,6 +251,7 @@ files:
249
251
  - plugins/crawler/lib/grabber.rb
250
252
  - plugins/crawler/lib/uri_mp.rb
251
253
  - plugins/filefinder/dbs/hbci.db
254
+ - plugins/filefinder/dbs/well_known.db
252
255
  - plugins/filefinder/filefinder.rb
253
256
  - plugins/sqlmap/bin/test.rb
254
257
  - plugins/sqlmap/gui/main.rb