watobo 0.9.20 → 0.9.21
Sign up to get free protection for your applications and to get access to all the features.
- data/CHANGELOG.md +54 -2
- data/README.md +1 -1
- data/config/scanner.yml +1 -0
- data/custom-views/prettify-json.rb +19 -0
- data/lib/watobo/adapters/file/marshal_store.rb +297 -0
- data/lib/watobo/adapters.rb +2 -1
- data/lib/watobo/core/active_check.rb +4 -0
- data/lib/watobo/core/chat.rb +8 -0
- data/lib/watobo/core/chats.rb +2 -1
- data/lib/watobo/core/cookie.rb +3 -3
- data/lib/watobo/core/finding.rb +7 -0
- data/lib/watobo/core/request.rb +3 -3
- data/lib/watobo/core/session.rb +6 -2
- data/lib/watobo/framework/init_modules.rb +18 -16
- data/lib/watobo/gui/conversation_table.rb +13 -16
- data/lib/watobo/gui/conversation_table_ctrl2.rb +1 -0
- data/lib/watobo/gui/custom_viewer.rb +101 -76
- data/lib/watobo/gui/define_scope_frame.rb +44 -10
- data/lib/watobo/gui/edit_scope_dialog.rb +1 -1
- data/lib/watobo/gui/fuzzer_gui.rb +61 -23
- data/lib/watobo/gui/main_window.rb +1 -1
- data/lib/watobo/gui/scanner_settings_dialog.rb +15 -0
- data/lib/watobo/http/data/json.rb +6 -0
- data/lib/watobo/interceptor/html/favicon.ico +0 -0
- data/lib/watobo/interceptor/html/index.html +13 -0
- data/lib/watobo/interceptor/proxy.rb +70 -18
- data/lib/watobo/mixins/httpparser.rb +26 -16
- data/lib/watobo/mixins/shapers.rb +49 -5
- data/lib/watobo/mixins/transcoders.rb +8 -8
- data/lib/watobo/sockets/connection.rb +1 -1
- data/lib/watobo/utils/load_chat.rb +62 -0
- data/lib/watobo/utils/response_hash.rb +3 -3
- data/lib/watobo.rb +1 -1
- data/modules/active/cq5/cq5_default_selectors.rb +116 -0
- data/modules/active/cq5/cqp_user_enumeration.rb +134 -0
- data/modules/active/struts2/include_params_ognl.rb +1 -1
- data/modules/active/xml/xml_xxe.rb +6 -1
- data/modules/passive/disclosure_domino.rb +1 -1
- data/modules/passive/in_script_parameter.rb +9 -4
- data/plugins/aem/aem.rb +21 -0
- data/plugins/aem/gui/main.rb +128 -0
- data/plugins/aem/gui/tree_view.rb +180 -0
- data/plugins/aem/icons/aem.ico +0 -0
- data/plugins/aem/lib/agent.rb +140 -0
- data/plugins/aem/lib/dispatcher.rb +53 -0
- data/plugins/aem/lib/engine.rb +187 -0
- data/plugins/filefinder/dbs/cq5.db +23 -0
- data/plugins/filefinder/dbs/subs-big.lst +44 -44
- data/plugins/filefinder/filefinder.rb +4 -4
- data/plugins/sqlmap/lib/sqlmap_ctrl.rb +11 -10
- metadata +16 -2
@@ -701,10 +701,10 @@ module Watobo#:nodoc: all
|
|
701
701
|
@log_viewer.log(LOG_INFO,m)
|
702
702
|
|
703
703
|
|
704
|
-
|
705
|
-
|
706
|
-
|
707
|
-
|
704
|
+
begin
|
705
|
+
m = "start scanning..."
|
706
|
+
@log_viewer.log(LOG_INFO,m)
|
707
|
+
long_log = ["Scan started"]
|
708
708
|
long_log << "Source: #{name}"
|
709
709
|
long_log << "Target Dirs:"
|
710
710
|
chatlist.each do |c|
|
@@ -13,28 +13,29 @@ module Watobo#:nodoc: all
|
|
13
13
|
class Sqlmap
|
14
14
|
@well_known_paths = [
|
15
15
|
"/pentest/database/sqlmap/", # BackTrack
|
16
|
-
"/usr/share/sqlmap/" # Samurai WTF
|
16
|
+
"/usr/share/sqlmap/" # Kali Linux, Samurai WTF
|
17
17
|
]
|
18
18
|
@binary_path = ''
|
19
19
|
@command = ""
|
20
20
|
@tmp_dir = nil
|
21
21
|
# set sqlmap binary path, leave it empty to check well-know-locaitons
|
22
22
|
# it returns the path if any or an empty string
|
23
|
-
def self.set_binary_path(path=nil)
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
23
|
+
def self.set_binary_path(path=nil)
|
24
|
+
search_paths = @well_known_paths
|
25
|
+
search_paths = [ path ] unless path.nil?
|
26
|
+
@binary_path = ""
|
27
|
+
|
28
|
+
[ "sqlmap.py",
|
29
|
+
"sqlmap" # on some distributions no .py extension, e.g. kali linux
|
30
|
+
].each do |binary_name|
|
31
|
+
search_paths.each do |p|
|
28
32
|
bp = File.join(p, binary_name)
|
29
33
|
if File.exist? bp
|
30
34
|
@binary_path = bp
|
31
|
-
|
35
|
+
break
|
32
36
|
end
|
33
37
|
end
|
34
|
-
else
|
35
|
-
@binary_path = path
|
36
38
|
end
|
37
|
-
|
38
39
|
save_config
|
39
40
|
|
40
41
|
@binary_path
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: watobo
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.9.
|
4
|
+
version: 0.9.21
|
5
5
|
prerelease:
|
6
6
|
platform: ruby
|
7
7
|
authors:
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date:
|
12
|
+
date: 2015-08-12 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: json
|
@@ -90,6 +90,7 @@ files:
|
|
90
90
|
- extras/watobo-transparent.sh
|
91
91
|
- lib/watobo/adapters/data_store.rb
|
92
92
|
- lib/watobo/adapters/file/file_store.rb
|
93
|
+
- lib/watobo/adapters/file/marshal_store.rb
|
93
94
|
- lib/watobo/adapters/session_store.rb
|
94
95
|
- lib/watobo/adapters.rb
|
95
96
|
- lib/watobo/ca.rb
|
@@ -229,6 +230,8 @@ files:
|
|
229
230
|
- lib/watobo/http/url/url.rb
|
230
231
|
- lib/watobo/http/xml/xml.rb
|
231
232
|
- lib/watobo/http.rb
|
233
|
+
- lib/watobo/interceptor/html/favicon.ico
|
234
|
+
- lib/watobo/interceptor/html/index.html
|
232
235
|
- lib/watobo/interceptor/proxy.rb
|
233
236
|
- lib/watobo/interceptor/transparent.rb
|
234
237
|
- lib/watobo/interceptor.rb
|
@@ -277,6 +280,8 @@ files:
|
|
277
280
|
- config/sid_cache.yml
|
278
281
|
- modules/active/Apache/mod_status.rb
|
279
282
|
- modules/active/Apache/multiview.rb
|
283
|
+
- modules/active/cq5/cq5_default_selectors.rb
|
284
|
+
- modules/active/cq5/cqp_user_enumeration.rb
|
280
285
|
- modules/active/directories/dirwalker.rb
|
281
286
|
- modules/active/discovery/fileextensions.rb
|
282
287
|
- modules/active/discovery/http_methods.rb
|
@@ -325,6 +330,13 @@ files:
|
|
325
330
|
- modules/passive/redirect_url.rb
|
326
331
|
- modules/passive/sap-headers.rb
|
327
332
|
- modules/passive/xss_dom.rb
|
333
|
+
- plugins/aem/aem.rb
|
334
|
+
- plugins/aem/gui/main.rb
|
335
|
+
- plugins/aem/gui/tree_view.rb
|
336
|
+
- plugins/aem/icons/aem.ico
|
337
|
+
- plugins/aem/lib/agent.rb
|
338
|
+
- plugins/aem/lib/dispatcher.rb
|
339
|
+
- plugins/aem/lib/engine.rb
|
328
340
|
- plugins/catalog/catalog.ico
|
329
341
|
- plugins/catalog/catalog.rb
|
330
342
|
- plugins/catalog/db_tests
|
@@ -345,6 +357,7 @@ files:
|
|
345
357
|
- plugins/crawler/lib/grabber.rb
|
346
358
|
- plugins/crawler/lib/status.rb
|
347
359
|
- plugins/crawler/lib/uri_mp.rb
|
360
|
+
- plugins/filefinder/dbs/cq5.db
|
348
361
|
- plugins/filefinder/dbs/hbci.db
|
349
362
|
- plugins/filefinder/dbs/sap.db
|
350
363
|
- plugins/filefinder/dbs/siebel_paths.txt
|
@@ -457,6 +470,7 @@ files:
|
|
457
470
|
- icons/Yellow Ball.ico
|
458
471
|
- icons/Yellow Ball_16x16.ico
|
459
472
|
- icons/Yellow Ball_24x24.ico
|
473
|
+
- custom-views/prettify-json.rb
|
460
474
|
- README.md
|
461
475
|
- CHANGELOG.md
|
462
476
|
- bin/watobo_gui.rb
|