watobo 0.9.19 → 0.9.20

data/plugins/wshell/lib/core.rb

@@ -1,101 +1,89 @@
-# .
+#.
 # core.rb
-# 
-# Copyright 2013 by siberas, http://www.siberas.de
-# 
-# This file is part of WATOBO (Web Application Tool Box)
-#        http://watobo.sourceforge.com
-# 
-# WATOBO is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation version 2 of the License.
-# 
-# WATOBO is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-# 
-# You should have received a copy of the GNU General Public License
-# along with WATOBO; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-# .
-# @private 
-module Watobo#:nodoc: all::Plugin
-  module Plugin
-  class WShell
-    @executions = Queue.new
-    @history = []
-HELP_TEXT =<<'EOF'
-____    __    ____   _______. __    __  
-\   \  /  \  /   /  /       ||  |  |  | 
- \   \/    \/   /  |   (----`|  |__|  | 
-  \            /    \   \    |   __   | 
-   \    /\    / .----)   |   |  |  |  | 
-    \__/  \__/  |_______/    |__|  |__| 
-    
-Welcome to the WATOBO Shell!
-Simply enter your ruby code you want to execute and press enter.
-To get your output written to the textbox use the <out> stream, e.g. 
-out << "Hello World"
-For command history use Up- and Down-Keys.
-A good starting point to explore WATOBO is the Watobo object itself.
-
-Example 1: List all sites
->> Watobo::Chats.sites do |s| out << "#{s}\n";end
-
-Example 2: Get all values of URL parameter <raid>
->> Watobo::Chats.each do |c| v = c.request.get_parm_value('raid'); out << "#{v}\n" unless v.empty?;end
+#.
+# Copyright 2014 by siberas, http://www.siberas.de
+# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
+# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
+# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
-Example 3: List all URL where chat comment contains 'Session-Test'
->> out << Watobo::Chats.map { |c| c.comment =~ /Session-Test/i ? c.request.url : nil }.compact.join("\n")
-
-EOF
-         
-    def self.help
-      HELP_TEXT
-    end
-     
-    def self.executions
-      @executions
-    end
-    
-    
-    def self.history_length
-      @history.length
-    end
-    
-    def self.history_at(index)
-      if index >= 0 and index < @history.length
-        return @history[index]
-      end
-      return nil
-    end
-    
-    def self.execute_cmd(command)
-      
-       Thread.new(command){ |cmd|
-         begin
-           @history << cmd unless @history.include? cmd
-           @history.shift if @history.length > 20
-           
-           command = "out = StringIO.new; #{cmd}; out.string"
-           r = eval(command)           
-                       
-           @executions << [ cmd, r ]
+# @private 
+module Watobo#:nodoc: all::Plugin
+  module Plugin
+  class WShell
+    @executions = Queue.new
+    @history = []
+HELP_TEXT =<<'EOF'
+____    __    ____   _______. __    __  
+\   \  /  \  /   /  /       ||  |  |  | 
+ \   \/    \/   /  |   (----`|  |__|  | 
+  \            /    \   \    |   __   | 
+   \    /\    / .----)   |   |  |  |  | 
+    \__/  \__/  |_______/    |__|  |__| 
+    
+Welcome to the WATOBO Shell!
+Simply enter your ruby code you want to execute and press enter.
+To get your output written to the textbox use the <out> stream, e.g. 
+out << "Hello World"
+For command history use Up- and Down-Keys.
+A good starting point to explore WATOBO is the Watobo object itself.
+
+Example 1: List all sites
+>> Watobo::Chats.sites do |s| out << "#{s}\n";end
+
+Example 2: Get all values of URL parameter <raid>
+>> Watobo::Chats.each do |c| v = c.request.get_parm_value('raid'); out << "#{v}\n" unless v.empty?;end
+
+Example 3: List all URL where chat comment contains 'Session-Test'
+>> out << Watobo::Chats.map { |c| c.comment =~ /Session-Test/i ? c.request.url : nil }.compact.join("\n")
+
+EOF
+         
+    def self.help
+      HELP_TEXT
+    end
+     
+    def self.executions
+      @executions
+    end
+    
+    
+    def self.history_length
+      @history.length
+    end
+    
+    def self.history_at(index)
+      if index >= 0 and index < @history.length
+        return @history[index]
+      end
+      return nil
+    end
+    
+    def self.execute_cmd(command)
+      
+       Thread.new(command){ |cmd|
+         begin
+           @history << cmd unless @history.include? cmd
+           @history.shift if @history.length > 20
+           
+           command = "out = StringIO.new; #{cmd}; out.string"
+           r = eval(command)           
+                       
+           @executions << [ cmd, r ]
          rescue SyntaxError, LocalJumpError, NameError => e
            out = e.to_s
-           out << e.backtrace.join("\n")
-           @executions << [ cmd, "#{out}" ]
-         rescue => bang
-           puts bang.backtrace
-           @executions << [ cmd, bang ]
-           
-         end
-       }
-    end
-    
-    
-    end
-  end
-end
-
+           out << e.backtrace.join("\n")
+           @executions << [ cmd, "#{out}" ]
+         rescue => bang
+           puts bang.backtrace
+           @executions << [ cmd, bang ]
+           
+         end
+       }
+    end
+    
+    
+    end
+  end
+end
+

data/plugins/wshell/wshell.rb

@@ -1,33 +1,21 @@
-# .
+#.
 # wshell.rb
-# 
-# Copyright 2013 by siberas, http://www.siberas.de
-# 
-# This file is part of WATOBO (Web Application Tool Box)
-#        http://watobo.sourceforge.com
-# 
-# WATOBO is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation version 2 of the License.
-# 
-# WATOBO is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-# 
-# You should have received a copy of the GNU General Public License
-# along with WATOBO; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-# .
-# @private 
-module Watobo#:nodoc: all::Plugin
-  module Plugin
-    class WShell < Watobo::PluginBase
-      plugin_name "WShell"
-      description "With WShell you can execute ruby commands in the context of WATOBO.\nVery useful for advanced analysis of conversations or debugging purposes - or simply to explore WATOBO."
-      load_libs
-      load_gui :main
-    end
-  end
-end
+#.
+# Copyright 2014 by siberas, http://www.siberas.de
+# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
+# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
+# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
+# @private 
+module Watobo#:nodoc: all::Plugin
+  module Plugin
+    class WShell < Watobo::PluginBase
+      plugin_name "WShell"
+      description "With WShell you can execute ruby commands in the context of WATOBO.\nVery useful for advanced analysis of conversations or debugging purposes - or simply to explore WATOBO."
+      load_libs
+      load_gui :main
+    end
+  end
+end
+

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: watobo
 version: !ruby/object:Gem::Version
-  version: 0.9.19
+  version: 0.9.20
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-11-21 00:00:00.000000000 Z
+date: 2014-12-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
@@ -139,7 +139,6 @@ files:
 - lib/watobo/external/diff/lcs/ldiff.rb
 - lib/watobo/external/diff/lcs/string.rb
 - lib/watobo/external/diff/lcs.rb
-- lib/watobo/external/ntlm/ntlm.rb
 - lib/watobo/externals.rb
 - lib/watobo/framework/create_project.rb
 - lib/watobo/framework/init.rb
@@ -166,6 +165,7 @@ files:
 - lib/watobo/gui/differ_frame.rb
 - lib/watobo/gui/edit_comment.rb
 - lib/watobo/gui/edit_scope_dialog.rb
+- lib/watobo/gui/export_dialog.rb
 - lib/watobo/gui/findings_tree.rb
 - lib/watobo/gui/finding_info.rb
 - lib/watobo/gui/full_scan_dialog.rb
@@ -225,6 +225,7 @@ files:
 - lib/watobo/gui.rb
 - lib/watobo/http/cookies/cookies.rb
 - lib/watobo/http/data/data.rb
+- lib/watobo/http/data/json.rb
 - lib/watobo/http/url/url.rb
 - lib/watobo/http/xml/xml.rb
 - lib/watobo/http.rb
@@ -249,10 +250,12 @@ files:
 - lib/watobo/utils/copy_object.rb
 - lib/watobo/utils/crypto.rb
 - lib/watobo/utils/expand_range.rb
+- lib/watobo/utils/export_xml.rb
 - lib/watobo/utils/file_management.rb
 - lib/watobo/utils/hexprint.rb
 - lib/watobo/utils/load_chat.rb
 - lib/watobo/utils/load_icon.rb
+- lib/watobo/utils/ntlm.rb
 - lib/watobo/utils/print_debug.rb
 - lib/watobo/utils/response_builder.rb
 - lib/watobo/utils/response_hash.rb
@@ -260,6 +263,7 @@ files:
 - lib/watobo/utils/strings.rb
 - lib/watobo/utils/text2request.rb
 - lib/watobo/utils/url.rb
+- lib/watobo/utils/utf16.rb
 - lib/watobo/utils.rb
 - lib/watobo.rb
 - config/datastore.yml
@@ -272,6 +276,7 @@ files:
 - config/scan_policy.yml
 - config/sid_cache.yml
 - modules/active/Apache/mod_status.rb
+- modules/active/Apache/multiview.rb
 - modules/active/directories/dirwalker.rb
 - modules/active/discovery/fileextensions.rb
 - modules/active/discovery/http_methods.rb
@@ -282,10 +287,12 @@ files:
 - modules/active/fileinclusion/lfi_simple.rb
 - modules/active/Flash/crossdomain.rb
 - modules/active/jboss/jboss_basic.rb
+- modules/active/sap/business_objects.rb
 - modules/active/sap/its_commands.rb
 - modules/active/sap/its_services.rb
 - modules/active/sap/its_service_parameter.rb
 - modules/active/sap/its_xss.rb
+- modules/active/shell_shock/shell_shock.rb
 - modules/active/siebel/siebel_apps.rb
 - modules/active/sqlinjection/sqli_error.rb
 - modules/active/sqlinjection/sqli_timing.rb
@@ -336,9 +343,12 @@ files:
 - plugins/crawler/lib/constants.rb
 - plugins/crawler/lib/engine.rb
 - plugins/crawler/lib/grabber.rb
+- plugins/crawler/lib/status.rb
 - plugins/crawler/lib/uri_mp.rb
 - plugins/filefinder/dbs/hbci.db
 - plugins/filefinder/dbs/sap.db
+- plugins/filefinder/dbs/siebel_paths.txt
+- plugins/filefinder/dbs/subs-big.lst
 - plugins/filefinder/dbs/well_known.db
 - plugins/filefinder/filefinder.rb
 - plugins/sqlmap/bin/test.rb
@@ -449,7 +459,6 @@ files:
 - icons/Yellow Ball_24x24.ico
 - README.md
 - CHANGELOG.md
-- .yardopts
 - bin/watobo_gui.rb
 - bin/watobo
 - bin/nfq_server.rb
@@ -473,9 +482,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.24
+rubygems_version: 1.8.28
 signing_key: 
 specification_version: 3
 summary: WATOBO - Web Application Toolbox
 test_files: []
-has_rdoc: 

data/.yardopts

@@ -1,24 +0,0 @@
-# .
-# .yardopts
-# 
-# Copyright 2013 by siberas, http://www.siberas.de
-# 
-# This file is part of WATOBO (Web Application Tool Box)
-#        http://watobo.sourceforge.com
-# 
-# WATOBO is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation version 2 of the License.
-# 
-# WATOBO is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-# 
-# You should have received a copy of the GNU General Public License
-# along with WATOBO; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-# .
---no-private
-*.xxx
---files CHANGELOG.md