watobo 0.9.19 → 0.9.20

data/plugins/sqlmap/gui/options_frame.rb

@@ -1,120 +1,108 @@
-# .
+#.
 # options_frame.rb
-# 
-# Copyright 2013 by siberas, http://www.siberas.de
-# 
-# This file is part of WATOBO (Web Application Tool Box)
-#        http://watobo.sourceforge.com
-# 
-# WATOBO is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation version 2 of the License.
-# 
-# WATOBO is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-# 
-# You should have received a copy of the GNU General Public License
-# along with WATOBO; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-# .
-# @private 
-module Watobo#:nodoc: all
-  module Plugin
-    class Sqlmap
-      class OptionsFrame < FXVerticalFrame
-        def to_h
-
-        end
-
-        def set(settings)
-
-        end
-        
-        def request=(req)
-          @request_txt.text = req.join.gsub("\r",'')
-        end
-        
-        def request
-          @request_txt.to_s
-        end
-        
-        def level
-          @level_combo.getItemData(@level_combo.currentItem)
-        end
-        
-        def risk
-          @risk_combo.getItemData(@risk_combo.currentItem)
-        end
-
-        def technique
-          return "BEUST" if @technique_combo.currentItem == 0
-          @technique_combo.getItemData(@technique_combo.currentItem)
-        end
-        
-        def manual_options
-          "#{@manual_options_txt.text.strip}"
-        end
-
-        def initialize(owner, opts)
-          super(owner, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_RAISED)
-          
-          self.extend Watobo::Subscriber
-          
-          groupbox = FXGroupBox.new(self, "Request", FRAME_GROOVE|LAYOUT_FILL_Y|LAYOUT_FILL_X, 0, 0, 0, 0)
-          FXLabel.new(groupbox, "Enter a test request below or use 'SEND TO -> SQLMap' from the conversation-table menu (right-click).")
-          frame = FXVerticalFrame.new(groupbox, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_SUNKEN|FRAME_THICK, :padding => 0)
-          
-          @request_txt = FXText.new(frame,  nil, 0, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
-          @request_txt.editable = true
-          @request_txt.connect(SEL_CHANGED){ notify(:request_changed) }
-          
+#.
+# Copyright 2014 by siberas, http://www.siberas.de
+# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
+# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
+# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
-          matrix = FXMatrix.new(self, 6, :opts => MATRIX_BY_COLUMNS|LAYOUT_FILL_X)
-
-          techniques = %w( All Time-based Error Boolean Union Stacked )
-          FXLabel.new(matrix, "Technique:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
-          @technique_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
-          techniques.each do |t|
-            @technique_combo.appendItem(t, t[0])
-            @technique_combo.numVisible = @technique_combo.numItems
-          end
-
-          #dbs = %w( MySQL Oracle PostgreSQL )
-          #FXLabel.new(matrix, "DB:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
-          #@db_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
-          #dbs.each do |t|
-          #  @db_combo.appendItem(t, t[0])
-          #  @db_combo.numVisible = @db_combo.numItems
-          #end
-
-          risks = %w( 1 2 3 )
-          FXLabel.new(matrix, "Risk:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
-          @risk_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
-          risks.each do |r|
-            @risk_combo.appendItem(r, r)
-            @risk_combo.numVisible = @risk_combo.numItems
-          end
-          
-           levels = (1..5)
-          FXLabel.new(matrix, "Level:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
-          @level_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
-          levels.each do |l|
-            @level_combo.appendItem(l.to_s, l.to_s)
-            @level_combo.numVisible = @level_combo.numItems
-          end
-          
-          frame = FXHorizontalFrame.new(self, :opts => LAYOUT_FILL_X|LAYOUT_TOP)
-          FXLabel.new(frame, "Manual Options:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
-            @manual_options_txt = FXTextField.new(frame, 60, nil, 0, :opts => TEXTFIELD_NORMAL|LAYOUT_SIDE_RIGHT|LAYOUT_FILL_X)
-          
-          
-        end
-
-        private
-
-      end
-    end
-  end
+# @private 
+module Watobo#:nodoc: all
+  module Plugin
+    class Sqlmap
+      class OptionsFrame < FXVerticalFrame
+        def to_h
+
+        end
+
+        def set(settings)
+
+        end
+        
+        def request=(req)
+          @request_txt.text = req.join.gsub("\r",'')
+        end
+        
+        def request
+          @request_txt.to_s
+        end
+        
+        def level
+          @level_combo.getItemData(@level_combo.currentItem)
+        end
+        
+        def risk
+          @risk_combo.getItemData(@risk_combo.currentItem)
+        end
+
+        def technique
+          return "BEUST" if @technique_combo.currentItem == 0
+          @technique_combo.getItemData(@technique_combo.currentItem)
+        end
+        
+        def manual_options
+          "#{@manual_options_txt.text.strip}"
+        end
+
+        def initialize(owner, opts)
+          super(owner, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_RAISED)
+          
+          self.extend Watobo::Subscriber
+          
+          groupbox = FXGroupBox.new(self, "Request", FRAME_GROOVE|LAYOUT_FILL_Y|LAYOUT_FILL_X, 0, 0, 0, 0)
+          FXLabel.new(groupbox, "Enter a test request below or use 'SEND TO -> SQLMap' from the conversation-table menu (right-click).")
+          frame = FXVerticalFrame.new(groupbox, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_SUNKEN|FRAME_THICK, :padding => 0)
+          
+          @request_txt = FXText.new(frame,  nil, 0, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
+          @request_txt.editable = true
+          @request_txt.connect(SEL_CHANGED){ notify(:request_changed) }
+          
+
+          matrix = FXMatrix.new(self, 6, :opts => MATRIX_BY_COLUMNS|LAYOUT_FILL_X)
+
+          techniques = %w( All Time-based Error Boolean Union Stacked )
+          FXLabel.new(matrix, "Technique:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
+          @technique_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
+          techniques.each do |t|
+            @technique_combo.appendItem(t, t[0])
+            @technique_combo.numVisible = @technique_combo.numItems
+          end
+
+          #dbs = %w( MySQL Oracle PostgreSQL )
+          #FXLabel.new(matrix, "DB:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
+          #@db_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
+          #dbs.each do |t|
+          #  @db_combo.appendItem(t, t[0])
+          #  @db_combo.numVisible = @db_combo.numItems
+          #end
+
+          risks = %w( 1 2 3 )
+          FXLabel.new(matrix, "Risk:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
+          @risk_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
+          risks.each do |r|
+            @risk_combo.appendItem(r, r)
+            @risk_combo.numVisible = @risk_combo.numItems
+          end
+          
+           levels = (1..5)
+          FXLabel.new(matrix, "Level:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
+          @level_combo = FXComboBox.new(matrix, 20, nil, 0, FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
+          levels.each do |l|
+            @level_combo.appendItem(l.to_s, l.to_s)
+            @level_combo.numVisible = @level_combo.numItems
+          end
+          
+          frame = FXHorizontalFrame.new(self, :opts => LAYOUT_FILL_X|LAYOUT_TOP)
+          FXLabel.new(frame, "Manual Options:", nil, LAYOUT_TOP|JUSTIFY_RIGHT)
+            @manual_options_txt = FXTextField.new(frame, 60, nil, 0, :opts => TEXTFIELD_NORMAL|LAYOUT_SIDE_RIGHT|LAYOUT_FILL_X)
+          
+          
+        end
+
+        private
+
+      end
+    end
+  end
 end

data/plugins/sqlmap/lib/sqlmap_ctrl.rb

@@ -1,118 +1,106 @@
-# .
+#.
 # sqlmap_ctrl.rb
-# 
-# Copyright 2013 by siberas, http://www.siberas.de
-# 
-# This file is part of WATOBO (Web Application Tool Box)
-#        http://watobo.sourceforge.com
-# 
-# WATOBO is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation version 2 of the License.
-# 
-# WATOBO is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-# 
-# You should have received a copy of the GNU General Public License
-# along with WATOBO; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-# .
-# @private 
-module Watobo#:nodoc: all
-  module Plugin
-    class Sqlmap
-      @well_known_paths = [
-        "/pentest/database/sqlmap/", # BackTrack
-        "/usr/share/sqlmap/"         # Samurai WTF
-      ]
-      @binary_path = ''
-      @command = ""
-      @tmp_dir = nil
-      # set sqlmap binary path, leave it empty to check well-know-locaitons
-      # it returns the path if any or an empty string
-      def self.set_binary_path(path=nil)
-        binary_name = "sqlmap.py"
-        @binary_path = ""
-        if path.nil?
-          @well_known_paths.each do |p|
-            bp = File.join(p, binary_name)
-            if File.exist? bp
-              @binary_path = bp
-            break
-            end
-          end
-        else
-          @binary_path = path
-        end
-        
-        save_config
-
-        @binary_path
-      end
-
-      def self.method_missing(name, *args, &block)
-        iv_name = "@#{name}"
-        super unless instance_variable_defined? iv_name
-
-        v = instance_variable_get(iv_name)
-      end
-
-      def self.set_tmp_dir(dir=nil)
-        # get project path
-        if dir.nil?
-          @tmp_dir = File.join(Watobo.temp_directory,"sqlmap")
-          Dir.mkdir @tmp_dir unless File.exist? @tmp_dir
-        else
-          @tmp_dir = dir if File.exist? dir
-        end
-        save_config
-        @tmp_dir
-      end
-
-      def self.run(request, opts)
+#.
+# Copyright 2014 by siberas, http://www.siberas.de
+# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
+# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
+# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
-      end
-
-      def self.save_config()
-        wd = Watobo.working_directory
-
-        dir_name = Watobo::Utils.snakecase self.name.gsub(/.*::/,'')
-        path = File.join(wd, "conf", "plugins")
-        Dir.mkdir path unless File.exist? path
-        conf_dir = File.join(path, dir_name)
-        Dir.mkdir conf_dir unless File.exist? conf_dir
-        file = File.join(conf_dir, dir_name + "_config.yml")
-        config = { 
-                   :tmp_dir => @tmp_dir,
-                   :binary_path => @binary_path
-                   }
-        Watobo::Utils.save_settings(file, config)
-      end
-
-      def self.load_config()
-        wd = Watobo.working_directory
-        dir_name = Watobo::Utils.snakecase self.name.gsub(/.*::/,'')
-        path = File.join(wd, "conf", "plugins")
-        Dir.mkdir path unless File.exist? path
-        conf_dir = File.join(path, dir_name)
-        Dir.mkdir conf_dir unless File.exist? conf_dir
-        file = File.join(conf_dir, dir_name + "_config.yml")
-        config = Watobo::Utils.load_settings(file)
-      end
-
-      # set default values
-      config = load_config
-      puts config.class
-      unless config.nil?
-        set_binary_path config[:binary_path]
-        set_tmp_dir config[:tmp_dir]
-      else
-        set_binary_path
-        set_tmp_dir
-      end
-
-    end
-  end
+# @private 
+module Watobo#:nodoc: all
+  module Plugin
+    class Sqlmap
+      @well_known_paths = [
+        "/pentest/database/sqlmap/", # BackTrack
+        "/usr/share/sqlmap/"         # Samurai WTF
+      ]
+      @binary_path = ''
+      @command = ""
+      @tmp_dir = nil
+      # set sqlmap binary path, leave it empty to check well-know-locaitons
+      # it returns the path if any or an empty string
+      def self.set_binary_path(path=nil)
+        binary_name = "sqlmap.py"
+        @binary_path = ""
+        if path.nil?
+          @well_known_paths.each do |p|
+            bp = File.join(p, binary_name)
+            if File.exist? bp
+              @binary_path = bp
+            break
+            end
+          end
+        else
+          @binary_path = path
+        end
+        
+        save_config
+
+        @binary_path
+      end
+
+      def self.method_missing(name, *args, &block)
+        iv_name = "@#{name}"
+        super unless instance_variable_defined? iv_name
+
+        v = instance_variable_get(iv_name)
+      end
+
+      def self.set_tmp_dir(dir=nil)
+        # get project path
+        if dir.nil?
+          @tmp_dir = File.join(Watobo.temp_directory,"sqlmap")
+          Dir.mkdir @tmp_dir unless File.exist? @tmp_dir
+        else
+          @tmp_dir = dir if File.exist? dir
+        end
+        save_config
+        @tmp_dir
+      end
+
+      def self.run(request, opts)
+
+      end
+
+      def self.save_config()
+        wd = Watobo.working_directory
+
+        dir_name = Watobo::Utils.snakecase self.name.gsub(/.*::/,'')
+        path = File.join(wd, "conf", "plugins")
+        Dir.mkdir path unless File.exist? path
+        conf_dir = File.join(path, dir_name)
+        Dir.mkdir conf_dir unless File.exist? conf_dir
+        file = File.join(conf_dir, dir_name + "_config.yml")
+        config = { 
+                   :tmp_dir => @tmp_dir,
+                   :binary_path => @binary_path
+                   }
+        Watobo::Utils.save_settings(file, config)
+      end
+
+      def self.load_config()
+        wd = Watobo.working_directory
+        dir_name = Watobo::Utils.snakecase self.name.gsub(/.*::/,'')
+        path = File.join(wd, "conf", "plugins")
+        Dir.mkdir path unless File.exist? path
+        conf_dir = File.join(path, dir_name)
+        Dir.mkdir conf_dir unless File.exist? conf_dir
+        file = File.join(conf_dir, dir_name + "_config.yml")
+        config = Watobo::Utils.load_settings(file)
+      end
+
+      # set default values
+      config = load_config
+      puts config.class
+      unless config.nil?
+        set_binary_path config[:binary_path]
+        set_tmp_dir config[:tmp_dir]
+      else
+        set_binary_path
+        set_tmp_dir
+      end
+
+    end
+  end
 end

data/plugins/sqlmap/sqlmap.rb

@@ -1,24 +1,12 @@
-# .
+#.
 # sqlmap.rb
-# 
-# Copyright 2013 by siberas, http://www.siberas.de
-# 
-# This file is part of WATOBO (Web Application Tool Box)
-#        http://watobo.sourceforge.com
-# 
-# WATOBO is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation version 2 of the License.
-# 
-# WATOBO is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-# 
-# You should have received a copy of the GNU General Public License
-# along with WATOBO; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-# .
-%w( sqlmap_ctrl ).each do |l|
-  require_relative File.join("lib", l )
+#.
+# Copyright 2014 by siberas, http://www.siberas.de
+# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
+# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
+# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+
+%w( sqlmap_ctrl ).each do |l|
+  require_relative File.join("lib", l )
 end