watobo 0.9.11 → 0.9.12
Sign up to get free protection for your applications and to get access to all the features.
- data/CHANGELOG +12 -0
- data/bin/watobo +9 -1
- data/lib/watobo/adapters/data_store.rb +14 -1
- data/lib/watobo/adapters/file/file_store.rb +33 -0
- data/lib/watobo/core/active_check.rb +3 -2
- data/lib/watobo/core/project.rb +6 -2
- data/lib/watobo/core/scanner.rb +7 -1
- data/lib/watobo/core/session.rb +3 -1
- data/lib/watobo/gui/checkboxtree.rb +243 -101
- data/lib/watobo/gui/checks_policy_frame.rb +60 -22
- data/lib/watobo/gui/dashboard.rb +25 -4
- data/lib/watobo/gui/findings_tree.rb +35 -46
- data/lib/watobo/gui/full_scan_dialog.rb +2 -1
- data/lib/watobo/gui/fuzzer_gui.rb +1 -1
- data/lib/watobo/gui/interceptor_settings_dialog.rb +1 -1
- data/lib/watobo/gui/log_viewer.rb +3 -1
- data/lib/watobo/gui/main_window.rb +9 -9
- data/lib/watobo/gui/manual_request_editor.rb +11 -1
- data/lib/watobo/gui/progress_window.rb +16 -6
- data/lib/watobo/gui/quick_scan_dialog.rb +5 -5
- data/lib/watobo/gui/templates/plugin2.rb +13 -26
- data/lib/watobo/mixins/shapers.rb +4 -2
- data/lib/watobo.rb +1 -1
- data/modules/active/Apache/mod_status.rb +4 -3
- data/modules/active/sap/its_commands.rb +1 -1
- data/modules/active/sap/its_service_parameter.rb +1 -1
- data/modules/active/siebel/siebel_apps.rb +184 -0
- data/modules/passive/disclosure_domino.rb +82 -0
- data/modules/passive/form_spotter.rb +2 -1
- data/plugins/catalog/catalog.rb +63 -25
- data/plugins/crawler/gui/crawler_gui.rb +8 -6
- data/plugins/crawler/gui/general_settings_frame.rb +4 -4
- data/plugins/crawler/lib/grabber.rb +2 -2
- data/plugins/filefinder/dbs/hbci.db +1 -0
- data/plugins/filefinder/dbs/well_known.db +4 -0
- data/plugins/filefinder/filefinder.rb +11 -8
- data/plugins/sqlmap/gui/main.rb +17 -5
- data/plugins/sslchecker/gui/cipher_table.rb +1 -1
- data/plugins/sslchecker/gui/gui.rb +33 -14
- metadata +5 -2
data/plugins/sqlmap/gui/main.rb
CHANGED
@@ -68,15 +68,27 @@ module Watobo
|
|
68
68
|
@change_btn.enable
|
69
69
|
|
70
70
|
@change_btn.connect(SEL_COMMAND){
|
71
|
-
|
72
|
-
|
71
|
+
open_path = nil
|
72
|
+
unless @binary_path_txt.text.empty?
|
73
|
+
dir_name = File.dirname(@binary_path_txt.text)
|
74
|
+
unless dir_name.empty?
|
75
|
+
open_path = dir_name unless File.exist? dir_name
|
76
|
+
end
|
77
|
+
end
|
78
|
+
bin_path_old = @binary_path_txt.text
|
79
|
+
bin_path = FXFileDialog.getOpenFilename(self, "Select SQLmap Path", open_path)
|
73
80
|
unless bin_path.empty?
|
74
81
|
@binary_path_txt.text = bin_path
|
75
|
-
|
82
|
+
else
|
83
|
+
@binary_path_txt.text = bin_path_old
|
84
|
+
|
85
|
+
end
|
86
|
+
if File.exist? @binary_path_txt.text
|
87
|
+
Watobo::Plugin::Sqlmap.set_binary_path bin_path
|
76
88
|
@accept_btn.enable
|
77
89
|
else
|
78
|
-
|
79
|
-
@
|
90
|
+
Watobo::Plugin::Sqlmap.set_binary_path ''
|
91
|
+
@accept_btn.disable
|
80
92
|
end
|
81
93
|
}
|
82
94
|
|
@@ -210,7 +210,7 @@ module Watobo
|
|
210
210
|
end
|
211
211
|
|
212
212
|
def add_cipher_row(cipher)
|
213
|
-
add_cipher = @filter == CTF_ALL ? true : false
|
213
|
+
add_cipher = ( @filter == CTF_ALL ) ? true : false
|
214
214
|
|
215
215
|
if cipher[:result] == false
|
216
216
|
# @result_viewer.appendStyledText("checked: #{cipher} - #{bits} - #{result}\n",0)
|
@@ -33,7 +33,12 @@ module Watobo
|
|
33
33
|
|
34
34
|
def createChat(site)
|
35
35
|
chat = nil
|
36
|
-
|
36
|
+
u = URI.parse site
|
37
|
+
if u.scheme.nil?
|
38
|
+
url = "https://#{site}/"
|
39
|
+
else
|
40
|
+
url = u.to_s
|
41
|
+
end
|
37
42
|
request = []
|
38
43
|
request << "GET #{url} HTTP/1.1\r\n"
|
39
44
|
request << "Host: #{site}\r\n"
|
@@ -75,8 +80,8 @@ module Watobo
|
|
75
80
|
@sites_combo.setCurrentItem(0)
|
76
81
|
@site = @sites_combo.getItemData(0)
|
77
82
|
@sites_combo.numVisible = ( @sites_combo.numItems > 15 ) ? 15 : @sites_combo.numItems
|
78
|
-
|
79
|
-
|
83
|
+
# else
|
84
|
+
# @log_viewer.log(LOG_INFO,"No SSL Sites available - you need to visit a SSL Site first!")
|
80
85
|
end
|
81
86
|
end
|
82
87
|
|
@@ -111,10 +116,11 @@ module Watobo
|
|
111
116
|
unless @project.getCurrentProxy().nil?
|
112
117
|
@log_viewer.log(LOG_INFO,"!!! WARNING FORWARDING PROXY IS SET !!! - SSL-Check running against proxy may not make sense!")
|
113
118
|
end
|
114
|
-
@
|
119
|
+
@update_lock.synchronize do
|
115
120
|
@status = :running
|
116
121
|
end
|
117
|
-
|
122
|
+
|
123
|
+
# add_update_timer(50)
|
118
124
|
|
119
125
|
@log_viewer.log LOG_INFO, "Scan started ..."
|
120
126
|
@scan_thread = Thread.new(scanner) { |scan|
|
@@ -122,11 +128,11 @@ module Watobo
|
|
122
128
|
|
123
129
|
scan.run(:default => true)
|
124
130
|
@log_viewer.log LOG_INFO, "Scan finished."
|
125
|
-
@
|
131
|
+
@update_lock.synchronize do
|
126
132
|
@status = :idle
|
127
133
|
end
|
128
|
-
|
129
|
-
|
134
|
+
# sleep 1 # to let the update_timer finish its work
|
135
|
+
# getApp().removeTimeout(@update_timer)
|
130
136
|
rescue => bang
|
131
137
|
puts bang
|
132
138
|
puts bang.backtrace if $DEBUG
|
@@ -147,7 +153,7 @@ module Watobo
|
|
147
153
|
|
148
154
|
@results = []
|
149
155
|
@results_lock = Mutex.new
|
150
|
-
|
156
|
+
# @status_lock = Mutex.new
|
151
157
|
@status = :idle
|
152
158
|
|
153
159
|
@clipboard_text = ""
|
@@ -179,9 +185,9 @@ module Watobo
|
|
179
185
|
frame = FXVerticalFrame.new(result_frame, LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_SUNKEN|FRAME_THICK, :padding=>0)
|
180
186
|
@cipher_table = CipherTable.new(frame, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
|
181
187
|
|
182
|
-
FXLabel.new(@settings_frame, "
|
183
|
-
@sites_combo = FXComboBox.new(@settings_frame, 5, nil, 0,
|
184
|
-
|
188
|
+
FXLabel.new(@settings_frame, "Enter or select site to test:")
|
189
|
+
@sites_combo = FXComboBox.new(@settings_frame, 5, nil, 0, COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
|
190
|
+
#@sites_combo = FXTextField.new(@settings_frame, 25, :opts => TEXTFIELD_NORMAL|LAYOUT_FILL_COLUMN|LAYOUT_RIGHT)
|
185
191
|
#@filterCombo.width =200
|
186
192
|
|
187
193
|
@sites_combo.numColumns = 35
|
@@ -238,8 +244,21 @@ module Watobo
|
|
238
244
|
end
|
239
245
|
|
240
246
|
private
|
247
|
+
def on_update_timer
|
248
|
+
unless @status == :idle
|
249
|
+
@results_lock.synchronize do
|
250
|
+
@results.each do |r|
|
251
|
+
@cipher_table.add_cipher(r)
|
252
|
+
end
|
253
|
+
@results.clear
|
254
|
+
end
|
255
|
+
else
|
256
|
+
@pbar.barColor = 'grey' unless @pbar.barColor == 'grey'
|
257
|
+
end
|
258
|
+
|
259
|
+
end
|
241
260
|
|
242
|
-
def
|
261
|
+
def add_update_timer_UNUSED(ms)
|
243
262
|
@update_timer = FXApp.instance.addTimeout( ms, :repeat => true) do
|
244
263
|
@results_lock.synchronize do
|
245
264
|
@results.each do |r|
|
@@ -248,7 +267,7 @@ module Watobo
|
|
248
267
|
@results.clear
|
249
268
|
end
|
250
269
|
|
251
|
-
@
|
270
|
+
@update_lock.synchronize do
|
252
271
|
@pbar.barColor = 'grey' if @status == :idle
|
253
272
|
end
|
254
273
|
end
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: watobo
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.9.
|
4
|
+
version: 0.9.12
|
5
5
|
prerelease:
|
6
6
|
platform: ruby
|
7
7
|
authors:
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date: 2012-
|
12
|
+
date: 2012-11-20 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: mechanize
|
@@ -206,6 +206,7 @@ files:
|
|
206
206
|
- modules/active/sap/its_services.rb
|
207
207
|
- modules/active/sap/its_service_parameter.rb
|
208
208
|
- modules/active/sap/its_xss.rb
|
209
|
+
- modules/active/siebel/siebel_apps.rb
|
209
210
|
- modules/active/sqlinjection/sqli_error.rb
|
210
211
|
- modules/active/sqlinjection/sqli_timing.rb
|
211
212
|
- modules/active/sqlinjection/sql_boolean.rb
|
@@ -218,6 +219,7 @@ files:
|
|
218
219
|
- modules/passive/detect_infrastructure.rb
|
219
220
|
- modules/passive/detect_one_time_tokens.rb
|
220
221
|
- modules/passive/dirindexing.rb
|
222
|
+
- modules/passive/disclosure_domino.rb
|
221
223
|
- modules/passive/disclosure_emails.rb
|
222
224
|
- modules/passive/disclosure_ipaddr.rb
|
223
225
|
- modules/passive/filename_as_parameter.rb
|
@@ -249,6 +251,7 @@ files:
|
|
249
251
|
- plugins/crawler/lib/grabber.rb
|
250
252
|
- plugins/crawler/lib/uri_mp.rb
|
251
253
|
- plugins/filefinder/dbs/hbci.db
|
254
|
+
- plugins/filefinder/dbs/well_known.db
|
252
255
|
- plugins/filefinder/filefinder.rb
|
253
256
|
- plugins/sqlmap/bin/test.rb
|
254
257
|
- plugins/sqlmap/gui/main.rb
|