watobo 0.9.20 → 0.9.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. data/CHANGELOG.md +54 -2
  2. data/README.md +1 -1
  3. data/config/scanner.yml +1 -0
  4. data/custom-views/prettify-json.rb +19 -0
  5. data/lib/watobo/adapters/file/marshal_store.rb +297 -0
  6. data/lib/watobo/adapters.rb +2 -1
  7. data/lib/watobo/core/active_check.rb +4 -0
  8. data/lib/watobo/core/chat.rb +8 -0
  9. data/lib/watobo/core/chats.rb +2 -1
  10. data/lib/watobo/core/cookie.rb +3 -3
  11. data/lib/watobo/core/finding.rb +7 -0
  12. data/lib/watobo/core/request.rb +3 -3
  13. data/lib/watobo/core/session.rb +6 -2
  14. data/lib/watobo/framework/init_modules.rb +18 -16
  15. data/lib/watobo/gui/conversation_table.rb +13 -16
  16. data/lib/watobo/gui/conversation_table_ctrl2.rb +1 -0
  17. data/lib/watobo/gui/custom_viewer.rb +101 -76
  18. data/lib/watobo/gui/define_scope_frame.rb +44 -10
  19. data/lib/watobo/gui/edit_scope_dialog.rb +1 -1
  20. data/lib/watobo/gui/fuzzer_gui.rb +61 -23
  21. data/lib/watobo/gui/main_window.rb +1 -1
  22. data/lib/watobo/gui/scanner_settings_dialog.rb +15 -0
  23. data/lib/watobo/http/data/json.rb +6 -0
  24. data/lib/watobo/interceptor/html/favicon.ico +0 -0
  25. data/lib/watobo/interceptor/html/index.html +13 -0
  26. data/lib/watobo/interceptor/proxy.rb +70 -18
  27. data/lib/watobo/mixins/httpparser.rb +26 -16
  28. data/lib/watobo/mixins/shapers.rb +49 -5
  29. data/lib/watobo/mixins/transcoders.rb +8 -8
  30. data/lib/watobo/sockets/connection.rb +1 -1
  31. data/lib/watobo/utils/load_chat.rb +62 -0
  32. data/lib/watobo/utils/response_hash.rb +3 -3
  33. data/lib/watobo.rb +1 -1
  34. data/modules/active/cq5/cq5_default_selectors.rb +116 -0
  35. data/modules/active/cq5/cqp_user_enumeration.rb +134 -0
  36. data/modules/active/struts2/include_params_ognl.rb +1 -1
  37. data/modules/active/xml/xml_xxe.rb +6 -1
  38. data/modules/passive/disclosure_domino.rb +1 -1
  39. data/modules/passive/in_script_parameter.rb +9 -4
  40. data/plugins/aem/aem.rb +21 -0
  41. data/plugins/aem/gui/main.rb +128 -0
  42. data/plugins/aem/gui/tree_view.rb +180 -0
  43. data/plugins/aem/icons/aem.ico +0 -0
  44. data/plugins/aem/lib/agent.rb +140 -0
  45. data/plugins/aem/lib/dispatcher.rb +53 -0
  46. data/plugins/aem/lib/engine.rb +187 -0
  47. data/plugins/filefinder/dbs/cq5.db +23 -0
  48. data/plugins/filefinder/dbs/subs-big.lst +44 -44
  49. data/plugins/filefinder/filefinder.rb +4 -4
  50. data/plugins/sqlmap/lib/sqlmap_ctrl.rb +11 -10
  51. metadata +16 -2
@@ -701,10 +701,10 @@ module Watobo#:nodoc: all
701
701
  @log_viewer.log(LOG_INFO,m)
702
702
 
703
703
 
704
- begin
705
- m = "start scanning..."
706
- @log_viewer.log(LOG_INFO,m)
707
- long_log = ["Scan started"]
704
+ begin
705
+ m = "start scanning..."
706
+ @log_viewer.log(LOG_INFO,m)
707
+ long_log = ["Scan started"]
708
708
  long_log << "Source: #{name}"
709
709
  long_log << "Target Dirs:"
710
710
  chatlist.each do |c|
@@ -13,28 +13,29 @@ module Watobo#:nodoc: all
13
13
  class Sqlmap
14
14
  @well_known_paths = [
15
15
  "/pentest/database/sqlmap/", # BackTrack
16
- "/usr/share/sqlmap/" # Samurai WTF
16
+ "/usr/share/sqlmap/" # Kali Linux, Samurai WTF
17
17
  ]
18
18
  @binary_path = ''
19
19
  @command = ""
20
20
  @tmp_dir = nil
21
21
  # set sqlmap binary path, leave it empty to check well-know-locaitons
22
22
  # it returns the path if any or an empty string
23
- def self.set_binary_path(path=nil)
24
- binary_name = "sqlmap.py"
25
- @binary_path = ""
26
- if path.nil?
27
- @well_known_paths.each do |p|
23
+ def self.set_binary_path(path=nil)
24
+ search_paths = @well_known_paths
25
+ search_paths = [ path ] unless path.nil?
26
+ @binary_path = ""
27
+
28
+ [ "sqlmap.py",
29
+ "sqlmap" # on some distributions no .py extension, e.g. kali linux
30
+ ].each do |binary_name|
31
+ search_paths.each do |p|
28
32
  bp = File.join(p, binary_name)
29
33
  if File.exist? bp
30
34
  @binary_path = bp
31
- break
35
+ break
32
36
  end
33
37
  end
34
- else
35
- @binary_path = path
36
38
  end
37
-
38
39
  save_config
39
40
 
40
41
  @binary_path
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: watobo
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.9.20
4
+ version: 0.9.21
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2014-12-24 00:00:00.000000000 Z
12
+ date: 2015-08-12 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: json
@@ -90,6 +90,7 @@ files:
90
90
  - extras/watobo-transparent.sh
91
91
  - lib/watobo/adapters/data_store.rb
92
92
  - lib/watobo/adapters/file/file_store.rb
93
+ - lib/watobo/adapters/file/marshal_store.rb
93
94
  - lib/watobo/adapters/session_store.rb
94
95
  - lib/watobo/adapters.rb
95
96
  - lib/watobo/ca.rb
@@ -229,6 +230,8 @@ files:
229
230
  - lib/watobo/http/url/url.rb
230
231
  - lib/watobo/http/xml/xml.rb
231
232
  - lib/watobo/http.rb
233
+ - lib/watobo/interceptor/html/favicon.ico
234
+ - lib/watobo/interceptor/html/index.html
232
235
  - lib/watobo/interceptor/proxy.rb
233
236
  - lib/watobo/interceptor/transparent.rb
234
237
  - lib/watobo/interceptor.rb
@@ -277,6 +280,8 @@ files:
277
280
  - config/sid_cache.yml
278
281
  - modules/active/Apache/mod_status.rb
279
282
  - modules/active/Apache/multiview.rb
283
+ - modules/active/cq5/cq5_default_selectors.rb
284
+ - modules/active/cq5/cqp_user_enumeration.rb
280
285
  - modules/active/directories/dirwalker.rb
281
286
  - modules/active/discovery/fileextensions.rb
282
287
  - modules/active/discovery/http_methods.rb
@@ -325,6 +330,13 @@ files:
325
330
  - modules/passive/redirect_url.rb
326
331
  - modules/passive/sap-headers.rb
327
332
  - modules/passive/xss_dom.rb
333
+ - plugins/aem/aem.rb
334
+ - plugins/aem/gui/main.rb
335
+ - plugins/aem/gui/tree_view.rb
336
+ - plugins/aem/icons/aem.ico
337
+ - plugins/aem/lib/agent.rb
338
+ - plugins/aem/lib/dispatcher.rb
339
+ - plugins/aem/lib/engine.rb
328
340
  - plugins/catalog/catalog.ico
329
341
  - plugins/catalog/catalog.rb
330
342
  - plugins/catalog/db_tests
@@ -345,6 +357,7 @@ files:
345
357
  - plugins/crawler/lib/grabber.rb
346
358
  - plugins/crawler/lib/status.rb
347
359
  - plugins/crawler/lib/uri_mp.rb
360
+ - plugins/filefinder/dbs/cq5.db
348
361
  - plugins/filefinder/dbs/hbci.db
349
362
  - plugins/filefinder/dbs/sap.db
350
363
  - plugins/filefinder/dbs/siebel_paths.txt
@@ -457,6 +470,7 @@ files:
457
470
  - icons/Yellow Ball.ico
458
471
  - icons/Yellow Ball_16x16.ico
459
472
  - icons/Yellow Ball_24x24.ico
473
+ - custom-views/prettify-json.rb
460
474
  - README.md
461
475
  - CHANGELOG.md
462
476
  - bin/watobo_gui.rb