watobo 0.9.20 → 0.9.21

Sign up to get free protection for your applications and to get access to all the features.
Files changed (51) hide show
  1. data/CHANGELOG.md +54 -2
  2. data/README.md +1 -1
  3. data/config/scanner.yml +1 -0
  4. data/custom-views/prettify-json.rb +19 -0
  5. data/lib/watobo/adapters/file/marshal_store.rb +297 -0
  6. data/lib/watobo/adapters.rb +2 -1
  7. data/lib/watobo/core/active_check.rb +4 -0
  8. data/lib/watobo/core/chat.rb +8 -0
  9. data/lib/watobo/core/chats.rb +2 -1
  10. data/lib/watobo/core/cookie.rb +3 -3
  11. data/lib/watobo/core/finding.rb +7 -0
  12. data/lib/watobo/core/request.rb +3 -3
  13. data/lib/watobo/core/session.rb +6 -2
  14. data/lib/watobo/framework/init_modules.rb +18 -16
  15. data/lib/watobo/gui/conversation_table.rb +13 -16
  16. data/lib/watobo/gui/conversation_table_ctrl2.rb +1 -0
  17. data/lib/watobo/gui/custom_viewer.rb +101 -76
  18. data/lib/watobo/gui/define_scope_frame.rb +44 -10
  19. data/lib/watobo/gui/edit_scope_dialog.rb +1 -1
  20. data/lib/watobo/gui/fuzzer_gui.rb +61 -23
  21. data/lib/watobo/gui/main_window.rb +1 -1
  22. data/lib/watobo/gui/scanner_settings_dialog.rb +15 -0
  23. data/lib/watobo/http/data/json.rb +6 -0
  24. data/lib/watobo/interceptor/html/favicon.ico +0 -0
  25. data/lib/watobo/interceptor/html/index.html +13 -0
  26. data/lib/watobo/interceptor/proxy.rb +70 -18
  27. data/lib/watobo/mixins/httpparser.rb +26 -16
  28. data/lib/watobo/mixins/shapers.rb +49 -5
  29. data/lib/watobo/mixins/transcoders.rb +8 -8
  30. data/lib/watobo/sockets/connection.rb +1 -1
  31. data/lib/watobo/utils/load_chat.rb +62 -0
  32. data/lib/watobo/utils/response_hash.rb +3 -3
  33. data/lib/watobo.rb +1 -1
  34. data/modules/active/cq5/cq5_default_selectors.rb +116 -0
  35. data/modules/active/cq5/cqp_user_enumeration.rb +134 -0
  36. data/modules/active/struts2/include_params_ognl.rb +1 -1
  37. data/modules/active/xml/xml_xxe.rb +6 -1
  38. data/modules/passive/disclosure_domino.rb +1 -1
  39. data/modules/passive/in_script_parameter.rb +9 -4
  40. data/plugins/aem/aem.rb +21 -0
  41. data/plugins/aem/gui/main.rb +128 -0
  42. data/plugins/aem/gui/tree_view.rb +180 -0
  43. data/plugins/aem/icons/aem.ico +0 -0
  44. data/plugins/aem/lib/agent.rb +140 -0
  45. data/plugins/aem/lib/dispatcher.rb +53 -0
  46. data/plugins/aem/lib/engine.rb +187 -0
  47. data/plugins/filefinder/dbs/cq5.db +23 -0
  48. data/plugins/filefinder/dbs/subs-big.lst +44 -44
  49. data/plugins/filefinder/filefinder.rb +4 -4
  50. data/plugins/sqlmap/lib/sqlmap_ctrl.rb +11 -10
  51. metadata +16 -2
@@ -701,10 +701,10 @@ module Watobo#:nodoc: all
701
701
  @log_viewer.log(LOG_INFO,m)
702
702
 
703
703
 
704
- begin
705
- m = "start scanning..."
706
- @log_viewer.log(LOG_INFO,m)
707
- long_log = ["Scan started"]
704
+ begin
705
+ m = "start scanning..."
706
+ @log_viewer.log(LOG_INFO,m)
707
+ long_log = ["Scan started"]
708
708
  long_log << "Source: #{name}"
709
709
  long_log << "Target Dirs:"
710
710
  chatlist.each do |c|
@@ -13,28 +13,29 @@ module Watobo#:nodoc: all
13
13
  class Sqlmap
14
14
  @well_known_paths = [
15
15
  "/pentest/database/sqlmap/", # BackTrack
16
- "/usr/share/sqlmap/" # Samurai WTF
16
+ "/usr/share/sqlmap/" # Kali Linux, Samurai WTF
17
17
  ]
18
18
  @binary_path = ''
19
19
  @command = ""
20
20
  @tmp_dir = nil
21
21
  # set sqlmap binary path, leave it empty to check well-know-locaitons
22
22
  # it returns the path if any or an empty string
23
- def self.set_binary_path(path=nil)
24
- binary_name = "sqlmap.py"
25
- @binary_path = ""
26
- if path.nil?
27
- @well_known_paths.each do |p|
23
+ def self.set_binary_path(path=nil)
24
+ search_paths = @well_known_paths
25
+ search_paths = [ path ] unless path.nil?
26
+ @binary_path = ""
27
+
28
+ [ "sqlmap.py",
29
+ "sqlmap" # on some distributions no .py extension, e.g. kali linux
30
+ ].each do |binary_name|
31
+ search_paths.each do |p|
28
32
  bp = File.join(p, binary_name)
29
33
  if File.exist? bp
30
34
  @binary_path = bp
31
- break
35
+ break
32
36
  end
33
37
  end
34
- else
35
- @binary_path = path
36
38
  end
37
-
38
39
  save_config
39
40
 
40
41
  @binary_path
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: watobo
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.9.20
4
+ version: 0.9.21
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2014-12-24 00:00:00.000000000 Z
12
+ date: 2015-08-12 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: json
@@ -90,6 +90,7 @@ files:
90
90
  - extras/watobo-transparent.sh
91
91
  - lib/watobo/adapters/data_store.rb
92
92
  - lib/watobo/adapters/file/file_store.rb
93
+ - lib/watobo/adapters/file/marshal_store.rb
93
94
  - lib/watobo/adapters/session_store.rb
94
95
  - lib/watobo/adapters.rb
95
96
  - lib/watobo/ca.rb
@@ -229,6 +230,8 @@ files:
229
230
  - lib/watobo/http/url/url.rb
230
231
  - lib/watobo/http/xml/xml.rb
231
232
  - lib/watobo/http.rb
233
+ - lib/watobo/interceptor/html/favicon.ico
234
+ - lib/watobo/interceptor/html/index.html
232
235
  - lib/watobo/interceptor/proxy.rb
233
236
  - lib/watobo/interceptor/transparent.rb
234
237
  - lib/watobo/interceptor.rb
@@ -277,6 +280,8 @@ files:
277
280
  - config/sid_cache.yml
278
281
  - modules/active/Apache/mod_status.rb
279
282
  - modules/active/Apache/multiview.rb
283
+ - modules/active/cq5/cq5_default_selectors.rb
284
+ - modules/active/cq5/cqp_user_enumeration.rb
280
285
  - modules/active/directories/dirwalker.rb
281
286
  - modules/active/discovery/fileextensions.rb
282
287
  - modules/active/discovery/http_methods.rb
@@ -325,6 +330,13 @@ files:
325
330
  - modules/passive/redirect_url.rb
326
331
  - modules/passive/sap-headers.rb
327
332
  - modules/passive/xss_dom.rb
333
+ - plugins/aem/aem.rb
334
+ - plugins/aem/gui/main.rb
335
+ - plugins/aem/gui/tree_view.rb
336
+ - plugins/aem/icons/aem.ico
337
+ - plugins/aem/lib/agent.rb
338
+ - plugins/aem/lib/dispatcher.rb
339
+ - plugins/aem/lib/engine.rb
328
340
  - plugins/catalog/catalog.ico
329
341
  - plugins/catalog/catalog.rb
330
342
  - plugins/catalog/db_tests
@@ -345,6 +357,7 @@ files:
345
357
  - plugins/crawler/lib/grabber.rb
346
358
  - plugins/crawler/lib/status.rb
347
359
  - plugins/crawler/lib/uri_mp.rb
360
+ - plugins/filefinder/dbs/cq5.db
348
361
  - plugins/filefinder/dbs/hbci.db
349
362
  - plugins/filefinder/dbs/sap.db
350
363
  - plugins/filefinder/dbs/siebel_paths.txt
@@ -457,6 +470,7 @@ files:
457
470
  - icons/Yellow Ball.ico
458
471
  - icons/Yellow Ball_16x16.ico
459
472
  - icons/Yellow Ball_24x24.ico
473
+ - custom-views/prettify-json.rb
460
474
  - README.md
461
475
  - CHANGELOG.md
462
476
  - bin/watobo_gui.rb