watobo 0.9.20 → 0.9.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/CHANGELOG.md +54 -2
- data/README.md +1 -1
- data/config/scanner.yml +1 -0
- data/custom-views/prettify-json.rb +19 -0
- data/lib/watobo/adapters/file/marshal_store.rb +297 -0
- data/lib/watobo/adapters.rb +2 -1
- data/lib/watobo/core/active_check.rb +4 -0
- data/lib/watobo/core/chat.rb +8 -0
- data/lib/watobo/core/chats.rb +2 -1
- data/lib/watobo/core/cookie.rb +3 -3
- data/lib/watobo/core/finding.rb +7 -0
- data/lib/watobo/core/request.rb +3 -3
- data/lib/watobo/core/session.rb +6 -2
- data/lib/watobo/framework/init_modules.rb +18 -16
- data/lib/watobo/gui/conversation_table.rb +13 -16
- data/lib/watobo/gui/conversation_table_ctrl2.rb +1 -0
- data/lib/watobo/gui/custom_viewer.rb +101 -76
- data/lib/watobo/gui/define_scope_frame.rb +44 -10
- data/lib/watobo/gui/edit_scope_dialog.rb +1 -1
- data/lib/watobo/gui/fuzzer_gui.rb +61 -23
- data/lib/watobo/gui/main_window.rb +1 -1
- data/lib/watobo/gui/scanner_settings_dialog.rb +15 -0
- data/lib/watobo/http/data/json.rb +6 -0
- data/lib/watobo/interceptor/html/favicon.ico +0 -0
- data/lib/watobo/interceptor/html/index.html +13 -0
- data/lib/watobo/interceptor/proxy.rb +70 -18
- data/lib/watobo/mixins/httpparser.rb +26 -16
- data/lib/watobo/mixins/shapers.rb +49 -5
- data/lib/watobo/mixins/transcoders.rb +8 -8
- data/lib/watobo/sockets/connection.rb +1 -1
- data/lib/watobo/utils/load_chat.rb +62 -0
- data/lib/watobo/utils/response_hash.rb +3 -3
- data/lib/watobo.rb +1 -1
- data/modules/active/cq5/cq5_default_selectors.rb +116 -0
- data/modules/active/cq5/cqp_user_enumeration.rb +134 -0
- data/modules/active/struts2/include_params_ognl.rb +1 -1
- data/modules/active/xml/xml_xxe.rb +6 -1
- data/modules/passive/disclosure_domino.rb +1 -1
- data/modules/passive/in_script_parameter.rb +9 -4
- data/plugins/aem/aem.rb +21 -0
- data/plugins/aem/gui/main.rb +128 -0
- data/plugins/aem/gui/tree_view.rb +180 -0
- data/plugins/aem/icons/aem.ico +0 -0
- data/plugins/aem/lib/agent.rb +140 -0
- data/plugins/aem/lib/dispatcher.rb +53 -0
- data/plugins/aem/lib/engine.rb +187 -0
- data/plugins/filefinder/dbs/cq5.db +23 -0
- data/plugins/filefinder/dbs/subs-big.lst +44 -44
- data/plugins/filefinder/filefinder.rb +4 -4
- data/plugins/sqlmap/lib/sqlmap_ctrl.rb +11 -10
- metadata +16 -2
|
@@ -701,10 +701,10 @@ module Watobo#:nodoc: all
|
|
|
701
701
|
@log_viewer.log(LOG_INFO,m)
|
|
702
702
|
|
|
703
703
|
|
|
704
|
-
|
|
705
|
-
|
|
706
|
-
|
|
707
|
-
|
|
704
|
+
begin
|
|
705
|
+
m = "start scanning..."
|
|
706
|
+
@log_viewer.log(LOG_INFO,m)
|
|
707
|
+
long_log = ["Scan started"]
|
|
708
708
|
long_log << "Source: #{name}"
|
|
709
709
|
long_log << "Target Dirs:"
|
|
710
710
|
chatlist.each do |c|
|
|
@@ -13,28 +13,29 @@ module Watobo#:nodoc: all
|
|
|
13
13
|
class Sqlmap
|
|
14
14
|
@well_known_paths = [
|
|
15
15
|
"/pentest/database/sqlmap/", # BackTrack
|
|
16
|
-
"/usr/share/sqlmap/" # Samurai WTF
|
|
16
|
+
"/usr/share/sqlmap/" # Kali Linux, Samurai WTF
|
|
17
17
|
]
|
|
18
18
|
@binary_path = ''
|
|
19
19
|
@command = ""
|
|
20
20
|
@tmp_dir = nil
|
|
21
21
|
# set sqlmap binary path, leave it empty to check well-know-locaitons
|
|
22
22
|
# it returns the path if any or an empty string
|
|
23
|
-
def self.set_binary_path(path=nil)
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
23
|
+
def self.set_binary_path(path=nil)
|
|
24
|
+
search_paths = @well_known_paths
|
|
25
|
+
search_paths = [ path ] unless path.nil?
|
|
26
|
+
@binary_path = ""
|
|
27
|
+
|
|
28
|
+
[ "sqlmap.py",
|
|
29
|
+
"sqlmap" # on some distributions no .py extension, e.g. kali linux
|
|
30
|
+
].each do |binary_name|
|
|
31
|
+
search_paths.each do |p|
|
|
28
32
|
bp = File.join(p, binary_name)
|
|
29
33
|
if File.exist? bp
|
|
30
34
|
@binary_path = bp
|
|
31
|
-
|
|
35
|
+
break
|
|
32
36
|
end
|
|
33
37
|
end
|
|
34
|
-
else
|
|
35
|
-
@binary_path = path
|
|
36
38
|
end
|
|
37
|
-
|
|
38
39
|
save_config
|
|
39
40
|
|
|
40
41
|
@binary_path
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: watobo
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.9.
|
|
4
|
+
version: 0.9.21
|
|
5
5
|
prerelease:
|
|
6
6
|
platform: ruby
|
|
7
7
|
authors:
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date:
|
|
12
|
+
date: 2015-08-12 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: json
|
|
@@ -90,6 +90,7 @@ files:
|
|
|
90
90
|
- extras/watobo-transparent.sh
|
|
91
91
|
- lib/watobo/adapters/data_store.rb
|
|
92
92
|
- lib/watobo/adapters/file/file_store.rb
|
|
93
|
+
- lib/watobo/adapters/file/marshal_store.rb
|
|
93
94
|
- lib/watobo/adapters/session_store.rb
|
|
94
95
|
- lib/watobo/adapters.rb
|
|
95
96
|
- lib/watobo/ca.rb
|
|
@@ -229,6 +230,8 @@ files:
|
|
|
229
230
|
- lib/watobo/http/url/url.rb
|
|
230
231
|
- lib/watobo/http/xml/xml.rb
|
|
231
232
|
- lib/watobo/http.rb
|
|
233
|
+
- lib/watobo/interceptor/html/favicon.ico
|
|
234
|
+
- lib/watobo/interceptor/html/index.html
|
|
232
235
|
- lib/watobo/interceptor/proxy.rb
|
|
233
236
|
- lib/watobo/interceptor/transparent.rb
|
|
234
237
|
- lib/watobo/interceptor.rb
|
|
@@ -277,6 +280,8 @@ files:
|
|
|
277
280
|
- config/sid_cache.yml
|
|
278
281
|
- modules/active/Apache/mod_status.rb
|
|
279
282
|
- modules/active/Apache/multiview.rb
|
|
283
|
+
- modules/active/cq5/cq5_default_selectors.rb
|
|
284
|
+
- modules/active/cq5/cqp_user_enumeration.rb
|
|
280
285
|
- modules/active/directories/dirwalker.rb
|
|
281
286
|
- modules/active/discovery/fileextensions.rb
|
|
282
287
|
- modules/active/discovery/http_methods.rb
|
|
@@ -325,6 +330,13 @@ files:
|
|
|
325
330
|
- modules/passive/redirect_url.rb
|
|
326
331
|
- modules/passive/sap-headers.rb
|
|
327
332
|
- modules/passive/xss_dom.rb
|
|
333
|
+
- plugins/aem/aem.rb
|
|
334
|
+
- plugins/aem/gui/main.rb
|
|
335
|
+
- plugins/aem/gui/tree_view.rb
|
|
336
|
+
- plugins/aem/icons/aem.ico
|
|
337
|
+
- plugins/aem/lib/agent.rb
|
|
338
|
+
- plugins/aem/lib/dispatcher.rb
|
|
339
|
+
- plugins/aem/lib/engine.rb
|
|
328
340
|
- plugins/catalog/catalog.ico
|
|
329
341
|
- plugins/catalog/catalog.rb
|
|
330
342
|
- plugins/catalog/db_tests
|
|
@@ -345,6 +357,7 @@ files:
|
|
|
345
357
|
- plugins/crawler/lib/grabber.rb
|
|
346
358
|
- plugins/crawler/lib/status.rb
|
|
347
359
|
- plugins/crawler/lib/uri_mp.rb
|
|
360
|
+
- plugins/filefinder/dbs/cq5.db
|
|
348
361
|
- plugins/filefinder/dbs/hbci.db
|
|
349
362
|
- plugins/filefinder/dbs/sap.db
|
|
350
363
|
- plugins/filefinder/dbs/siebel_paths.txt
|
|
@@ -457,6 +470,7 @@ files:
|
|
|
457
470
|
- icons/Yellow Ball.ico
|
|
458
471
|
- icons/Yellow Ball_16x16.ico
|
|
459
472
|
- icons/Yellow Ball_24x24.ico
|
|
473
|
+
- custom-views/prettify-json.rb
|
|
460
474
|
- README.md
|
|
461
475
|
- CHANGELOG.md
|
|
462
476
|
- bin/watobo_gui.rb
|