watobo 0.9.21 → 0.9.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/CHANGELOG.md +46 -1
- data/bin/nfq_server.rb +0 -9
- data/bin/watobo_gui.rb +3 -13
- data/custom-views/prettify-json.rb +9 -18
- data/icons/watobo.ico +0 -0
- data/icons/watobo.ico.old +0 -0
- data/lib/watobo.rb +10 -19
- data/lib/watobo/adapters.rb +5 -14
- data/lib/watobo/adapters/data_store.rb +50 -59
- data/lib/watobo/adapters/file/file_store.rb +287 -296
- data/lib/watobo/adapters/file/marshal_store.rb +293 -296
- data/lib/watobo/adapters/session_store.rb +5 -14
- data/lib/watobo/ca.rb +1 -10
- data/lib/watobo/config.rb +197 -206
- data/lib/watobo/constants.rb +0 -9
- data/lib/watobo/core.rb +3 -12
- data/lib/watobo/core/active_check.rb +72 -135
- data/lib/watobo/core/active_checks.rb +49 -58
- data/lib/watobo/core/ca.rb +369 -389
- data/lib/watobo/core/cert_store.rb +34 -43
- data/lib/watobo/core/chat.rb +92 -101
- data/lib/watobo/core/chats.rb +271 -280
- data/lib/watobo/core/client_cert_store.rb +106 -35
- data/lib/watobo/core/conversation.rb +48 -57
- data/lib/watobo/core/cookie.rb +23 -32
- data/lib/watobo/core/egress_handlers.rb +98 -0
- data/lib/watobo/core/finding.rb +66 -75
- data/lib/watobo/core/findings.rb +107 -114
- data/lib/watobo/core/forwarding_proxy.rb +13 -22
- data/lib/watobo/core/fuzz_gen.rb +0 -9
- data/lib/watobo/core/intercept_carver.rb +166 -177
- data/lib/watobo/core/intercept_filter.rb +235 -244
- data/lib/watobo/core/interceptor.rb +98 -107
- data/lib/watobo/core/min_class.rb +4 -13
- data/lib/watobo/core/netfilter_queue.rb +170 -179
- data/lib/watobo/core/ott_cache.rb +132 -141
- data/lib/watobo/core/parameter.rb +43 -52
- data/lib/watobo/core/passive_check.rb +103 -102
- data/lib/watobo/core/passive_checks.rb +48 -57
- data/lib/watobo/core/passive_scanner.rb +54 -55
- data/lib/watobo/core/plugin.rb +11 -20
- data/lib/watobo/core/project.rb +3 -9
- data/lib/watobo/core/proxy.rb +43 -52
- data/lib/watobo/core/request.rb +125 -123
- data/lib/watobo/core/response.rb +44 -53
- data/lib/watobo/core/scanner.rb +0 -9
- data/lib/watobo/core/scanner3.rb +405 -414
- data/lib/watobo/core/scope.rb +83 -92
- data/lib/watobo/core/session.rb +1043 -1026
- data/lib/watobo/core/sid_cache.rb +98 -107
- data/lib/watobo/core/subscriber.rb +25 -34
- data/lib/watobo/defaults.rb +21 -30
- data/lib/watobo/external/diff/lcs.rb +0 -9
- data/lib/watobo/external/diff/lcs/array.rb +0 -9
- data/lib/watobo/external/diff/lcs/block.rb +0 -9
- data/lib/watobo/external/diff/lcs/callbacks.rb +0 -9
- data/lib/watobo/external/diff/lcs/change.rb +0 -9
- data/lib/watobo/external/diff/lcs/hunk.rb +0 -9
- data/lib/watobo/external/diff/lcs/ldiff.rb +0 -9
- data/lib/watobo/external/diff/lcs/string.rb +0 -9
- data/lib/watobo/externals.rb +6 -15
- data/lib/watobo/framework.rb +4 -13
- data/lib/watobo/framework/create_project.rb +60 -69
- data/lib/watobo/framework/init.rb +0 -9
- data/lib/watobo/framework/init_modules.rb +0 -9
- data/lib/watobo/framework/license_text.rb +28 -37
- data/lib/watobo/framework/load_chat.rb +13 -22
- data/lib/watobo/gui.rb +132 -123
- data/lib/watobo/gui/about_watobo.rb +0 -9
- data/lib/watobo/gui/browser_preview.rb +0 -9
- data/lib/watobo/gui/certificate_dialog.rb +0 -9
- data/lib/watobo/gui/chat_diff.rb +0 -9
- data/lib/watobo/gui/chatviewer_frame.rb +73 -72
- data/lib/watobo/gui/checkboxtree.rb +0 -9
- data/lib/watobo/gui/checks_policy_frame.rb +0 -9
- data/lib/watobo/gui/client_cert_dialog.rb +96 -87
- data/lib/watobo/gui/confirm_scan_dialog.rb +0 -9
- data/lib/watobo/gui/conversation_table.rb +158 -164
- data/lib/watobo/gui/conversation_table_ctrl.rb +207 -216
- data/lib/watobo/gui/conversation_table_ctrl2.rb +373 -382
- data/lib/watobo/gui/csrf_token_dialog.rb +0 -9
- data/lib/watobo/gui/custom_viewer.rb +374 -383
- data/lib/watobo/gui/dashboard.rb +296 -303
- data/lib/watobo/gui/define_scope_frame.rb +0 -9
- data/lib/watobo/gui/differ_frame.rb +215 -224
- data/lib/watobo/gui/edit_comment.rb +0 -9
- data/lib/watobo/gui/edit_scope_dialog.rb +0 -9
- data/lib/watobo/gui/export_dialog.rb +104 -113
- data/lib/watobo/gui/finding_info.rb +0 -9
- data/lib/watobo/gui/findings_tree.rb +210 -217
- data/lib/watobo/gui/full_scan_dialog.rb +0 -9
- data/lib/watobo/gui/fuzzer_gui.rb +1295 -1313
- data/lib/watobo/gui/fxsave_thread.rb +14 -0
- data/lib/watobo/gui/goto_url_dialog.rb +70 -79
- data/lib/watobo/gui/hex_viewer.rb +0 -9
- data/lib/watobo/gui/html_viewer.rb +287 -296
- data/lib/watobo/gui/intercept_filter_dialog.rb +188 -197
- data/lib/watobo/gui/interceptor_gui.rb +1041 -1051
- data/lib/watobo/gui/interceptor_settings_dialog.rb +0 -9
- data/lib/watobo/gui/json_viewer.rb +287 -0
- data/lib/watobo/gui/list_box.rb +101 -110
- data/lib/watobo/gui/log_file_viewer.rb +32 -41
- data/lib/watobo/gui/log_viewer.rb +83 -88
- data/lib/watobo/gui/login_wizzard.rb +0 -9
- data/lib/watobo/gui/main_window.rb +587 -618
- data/lib/watobo/gui/manual_request_editor.rb +620 -565
- data/lib/watobo/gui/master_pw_dialog.rb +0 -9
- data/lib/watobo/gui/mixins/gui_settings.rb +29 -38
- data/lib/watobo/gui/page_tree.rb +217 -226
- data/lib/watobo/gui/password_policy_dialog.rb +0 -9
- data/lib/watobo/gui/plugin_board.rb +0 -9
- data/lib/watobo/gui/preferences_dialog.rb +0 -9
- data/lib/watobo/gui/progress_window.rb +17 -27
- data/lib/watobo/gui/project_wizzard.rb +0 -9
- data/lib/watobo/gui/proxy_dialog.rb +1 -10
- data/lib/watobo/gui/quick_scan_dialog.rb +0 -9
- data/lib/watobo/gui/request_builder_frame.rb +102 -111
- data/lib/watobo/gui/request_editor.rb +181 -137
- data/lib/watobo/gui/rewrite_filters_dialog.rb +394 -403
- data/lib/watobo/gui/rewrite_rules_dialog.rb +372 -381
- data/lib/watobo/gui/save_chat_dialog.rb +140 -149
- data/lib/watobo/gui/scanner_settings_dialog.rb +0 -9
- data/lib/watobo/gui/select_chat_dialog.rb +0 -9
- data/lib/watobo/gui/session_management_dialog.rb +0 -9
- data/lib/watobo/gui/sites_tree.rb +0 -9
- data/lib/watobo/gui/status_bar.rb +0 -9
- data/lib/watobo/gui/table_editor.rb +0 -9
- data/lib/watobo/gui/tagless_viewer.rb +0 -9
- data/lib/watobo/gui/templates/plugin.rb +0 -9
- data/lib/watobo/gui/templates/plugin2.rb +92 -100
- data/lib/watobo/gui/templates/plugin_base.rb +144 -153
- data/lib/watobo/gui/text_viewer.rb +0 -9
- data/lib/watobo/gui/transcoder_window.rb +0 -9
- data/lib/watobo/gui/utils/gui_utils.rb +0 -9
- data/lib/watobo/gui/utils/init_icons.rb +86 -95
- data/lib/watobo/gui/utils/load_icons.rb +33 -42
- data/lib/watobo/gui/utils/load_plugins.rb +116 -119
- data/lib/watobo/gui/utils/master_password.rb +68 -77
- data/lib/watobo/gui/utils/save_default_settings.rb +113 -122
- data/lib/watobo/gui/utils/save_project_settings.rb +0 -9
- data/lib/watobo/gui/utils/save_proxy_settings.rb +41 -50
- data/lib/watobo/gui/utils/save_scanner_settings.rb +18 -27
- data/lib/watobo/gui/utils/session_history.rb +112 -121
- data/lib/watobo/gui/workspace_dialog.rb +0 -9
- data/lib/watobo/gui/www_auth_dialog.rb +0 -9
- data/lib/watobo/gui/xml_viewer_frame.rb +0 -9
- data/lib/watobo/http.rb +4 -13
- data/lib/watobo/http/cookies/cookies.rb +26 -35
- data/lib/watobo/http/data/data.rb +45 -54
- data/lib/watobo/http/data/json.rb +47 -55
- data/lib/watobo/http/url/url.rb +38 -47
- data/lib/watobo/http/xml/xml.rb +124 -130
- data/lib/watobo/interceptor.rb +3 -12
- data/lib/watobo/interceptor/proxy.rb +742 -739
- data/lib/watobo/interceptor/transparent.rb +22 -24
- data/lib/watobo/mixins.rb +10 -19
- data/lib/watobo/mixins/check_info.rb +27 -36
- data/lib/watobo/mixins/httpparser.rb +613 -637
- data/lib/watobo/mixins/request_parser.rb +88 -97
- data/lib/watobo/mixins/shapers.rb +515 -529
- data/lib/watobo/mixins/transcoders.rb +3 -11
- data/lib/watobo/parser.rb +1 -10
- data/lib/watobo/parser/html.rb +83 -92
- data/lib/watobo/patch_fxruby_setfocus.rb +26 -0
- data/lib/watobo/sockets.rb +3 -12
- data/lib/watobo/sockets/agent.rb +828 -837
- data/lib/watobo/sockets/client_socket.rb +308 -312
- data/lib/watobo/sockets/connection.rb +401 -410
- data/lib/watobo/sockets/http_socket.rb +11 -13
- data/lib/watobo/sockets/ntlm_auth.rb +129 -138
- data/lib/watobo/utils.rb +10 -19
- data/lib/watobo/utils/check_regex.rb +0 -9
- data/lib/watobo/utils/copy_object.rb +0 -9
- data/lib/watobo/utils/crypto.rb +0 -9
- data/lib/watobo/utils/expand_range.rb +23 -32
- data/lib/watobo/utils/export_xml.rb +97 -106
- data/lib/watobo/utils/file_management.rb +9 -11
- data/lib/watobo/utils/hexprint.rb +9 -18
- data/lib/watobo/utils/load_chat.rb +0 -9
- data/lib/watobo/utils/load_icon.rb +0 -9
- data/lib/watobo/utils/ntlm.rb +866 -875
- data/lib/watobo/utils/print_debug.rb +12 -21
- data/lib/watobo/utils/response_builder.rb +90 -99
- data/lib/watobo/utils/response_hash.rb +0 -9
- data/lib/watobo/utils/secure_eval.rb +0 -9
- data/lib/watobo/utils/strings.rb +10 -19
- data/lib/watobo/utils/text2request.rb +0 -9
- data/lib/watobo/utils/url.rb +23 -32
- data/lib/watobo/utils/utf16.rb +11 -20
- data/modules/active/Apache/mod_status.rb +0 -9
- data/modules/active/Apache/multiview.rb +151 -160
- data/modules/active/Flash/crossdomain.rb +0 -9
- data/modules/active/JWT/jwt_oauth2_none.rb +111 -0
- data/modules/active/cq5/cq5_default_selectors.rb +106 -115
- data/modules/active/cq5/cqp_user_enumeration.rb +125 -134
- data/modules/active/directories/dirwalker.rb +0 -9
- data/modules/active/discovery/fileextensions.rb +0 -9
- data/modules/active/discovery/http_methods.rb +0 -9
- data/modules/active/discovery/jsmapfiles.rb +79 -0
- data/modules/active/domino/domino_db.rb +68 -76
- data/modules/active/dotNET/custom_errors.rb +102 -111
- data/modules/active/dotNET/dotnet_files.rb +90 -99
- data/modules/active/fileinclusion/lfi_simple.rb +0 -9
- data/modules/active/jboss/jboss_basic.rb +0 -9
- data/modules/active/sap/business_objects.rb +51 -60
- data/modules/active/sap/its_commands.rb +0 -9
- data/modules/active/sap/its_service_parameter.rb +0 -9
- data/modules/active/sap/its_services.rb +0 -9
- data/modules/active/sap/its_xss.rb +0 -9
- data/modules/active/shell_shock/shell_shock.rb +139 -148
- data/modules/active/siebel/siebel_apps.rb +160 -169
- data/modules/active/sqlinjection/sql_boolean.rb +0 -9
- data/modules/active/sqlinjection/sql_numerical.rb +198 -0
- data/modules/active/sqlinjection/sqli_error.rb +0 -9
- data/modules/active/sqlinjection/sqli_timing.rb +220 -229
- data/modules/active/struts2/default_handler_ognl.rb +106 -115
- data/modules/active/struts2/include_params_ognl.rb +105 -114
- data/modules/active/xml/xml_xxe.rb +112 -123
- data/modules/active/xss/xss_ng.rb +214 -223
- data/modules/active/xss/xss_simple.rb +0 -9
- data/modules/passive/ajax.rb +68 -77
- data/modules/passive/autocomplete.rb +56 -65
- data/modules/passive/cookie_options.rb +0 -9
- data/modules/passive/cookie_xss.rb +0 -9
- data/modules/passive/detect_code.rb +0 -9
- data/modules/passive/detect_fileupload.rb +0 -9
- data/modules/passive/detect_infrastructure.rb +0 -9
- data/modules/passive/detect_one_time_tokens.rb +0 -9
- data/modules/passive/dirindexing.rb +0 -9
- data/modules/passive/disclosure_domino.rb +55 -64
- data/modules/passive/disclosure_emails.rb +0 -9
- data/modules/passive/disclosure_ipaddr.rb +55 -53
- data/modules/passive/filename_as_parameter.rb +0 -9
- data/modules/passive/form_spotter.rb +0 -9
- data/modules/passive/hidden_fields.rb +50 -59
- data/modules/passive/hotspots.rb +0 -9
- data/modules/passive/in_script_parameter.rb +0 -9
- data/modules/passive/json_web_token.rb +93 -0
- data/modules/passive/multiple_server_headers.rb +0 -9
- data/modules/passive/possible_login.rb +0 -9
- data/modules/passive/redirect_url.rb +0 -9
- data/modules/passive/redirectionz.rb +0 -9
- data/modules/passive/sap-headers.rb +56 -65
- data/modules/passive/xss_dom.rb +0 -9
- data/plugins/aem/aem.rb +11 -20
- data/plugins/aem/gui/main.rb +118 -127
- data/plugins/aem/gui/tree_view.rb +171 -180
- data/plugins/aem/lib/agent.rb +130 -138
- data/plugins/aem/lib/dispatcher.rb +45 -51
- data/plugins/aem/lib/engine.rb +177 -186
- data/plugins/catalog/catalog.rb +345 -355
- data/plugins/crawler/crawler.rb +4 -13
- data/plugins/crawler/gui.rb +5 -14
- data/plugins/crawler/gui/auth_frame.rb +270 -279
- data/plugins/crawler/gui/crawler_gui.rb +271 -276
- data/plugins/crawler/gui/general_settings_frame.rb +96 -105
- data/plugins/crawler/gui/hooks_frame.rb +80 -89
- data/plugins/crawler/gui/scope_frame.rb +50 -59
- data/plugins/crawler/gui/settings_tabbook.rb +38 -47
- data/plugins/crawler/gui/status_frame.rb +59 -68
- data/plugins/crawler/lib/bags.rb +18 -27
- data/plugins/crawler/lib/constants.rb +11 -20
- data/plugins/crawler/lib/engine.rb +488 -497
- data/plugins/crawler/lib/grabber.rb +68 -77
- data/plugins/crawler/lib/status.rb +71 -80
- data/plugins/crawler/lib/uri_mp.rb +12 -21
- data/plugins/filefinder/filefinder.rb +326 -333
- data/plugins/sqlmap/bin/test.rb +78 -87
- data/plugins/sqlmap/gui.rb +4 -13
- data/plugins/sqlmap/gui/main.rb +218 -227
- data/plugins/sqlmap/gui/options_frame.rb +97 -106
- data/plugins/sqlmap/lib/sqlmap_ctrl.rb +90 -100
- data/plugins/sqlmap/sqlmap.rb +2 -11
- data/plugins/sslchecker/cli/sslchecker_cli.rb +0 -9
- data/plugins/sslchecker/gui/cipher_table.rb +246 -254
- data/plugins/sslchecker/gui/gui.rb +258 -264
- data/plugins/sslchecker/gui/sslchecker.rb +4 -13
- data/plugins/sslchecker/lib/check.rb +127 -133
- data/plugins/wshell/gui/main.rb +119 -117
- data/plugins/wshell/lib/core.rb +38 -88
- data/plugins/wshell/wshell.rb +11 -20
- metadata +170 -164
data/plugins/wshell/lib/core.rb
CHANGED
|
@@ -1,89 +1,39 @@
|
|
|
1
|
-
#.
|
|
2
|
-
# core.rb
|
|
3
|
-
#.
|
|
4
|
-
# Copyright 2014 by siberas, http://www.siberas.de
|
|
5
|
-
# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
|
|
6
|
-
# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
|
|
7
|
-
# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
8
|
-
# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
9
|
-
|
|
10
1
|
# @private
|
|
11
|
-
module Watobo#:nodoc: all::Plugin
|
|
12
|
-
module Plugin
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
HELP_TEXT =<<'EOF'
|
|
17
|
-
____ __ ____ _______. __ __
|
|
18
|
-
\ \ / \ / / / || | | |
|
|
19
|
-
\ \/ \/ / | (----`| |__| |
|
|
20
|
-
\ / \ \ | __ |
|
|
21
|
-
\ /\ / .----) | | | | |
|
|
22
|
-
\__/ \__/ |_______/ |__| |__|
|
|
23
|
-
|
|
24
|
-
Welcome to the WATOBO Shell!
|
|
25
|
-
Simply enter your ruby code you want to execute and press enter.
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
def self.history_length
|
|
52
|
-
@history.length
|
|
53
|
-
end
|
|
54
|
-
|
|
55
|
-
def self.history_at(index)
|
|
56
|
-
if index >= 0 and index < @history.length
|
|
57
|
-
return @history[index]
|
|
58
|
-
end
|
|
59
|
-
return nil
|
|
60
|
-
end
|
|
61
|
-
|
|
62
|
-
def self.execute_cmd(command)
|
|
63
|
-
|
|
64
|
-
Thread.new(command){ |cmd|
|
|
65
|
-
begin
|
|
66
|
-
@history << cmd unless @history.include? cmd
|
|
67
|
-
@history.shift if @history.length > 20
|
|
68
|
-
|
|
69
|
-
command = "out = StringIO.new; #{cmd}; out.string"
|
|
70
|
-
r = eval(command)
|
|
71
|
-
|
|
72
|
-
@executions << [ cmd, r ]
|
|
73
|
-
rescue SyntaxError, LocalJumpError, NameError => e
|
|
74
|
-
out = e.to_s
|
|
75
|
-
out << e.backtrace.join("\n")
|
|
76
|
-
@executions << [ cmd, "#{out}" ]
|
|
77
|
-
rescue => bang
|
|
78
|
-
puts bang.backtrace
|
|
79
|
-
@executions << [ cmd, bang ]
|
|
80
|
-
|
|
81
|
-
end
|
|
82
|
-
}
|
|
83
|
-
end
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
end
|
|
87
|
-
end
|
|
88
|
-
end
|
|
89
|
-
|
|
2
|
+
module Watobo#:nodoc: all::Plugin
|
|
3
|
+
module Plugin
|
|
4
|
+
class WShell
|
|
5
|
+
@executions = Queue.new
|
|
6
|
+
@history = []
|
|
7
|
+
HELP_TEXT =<<'EOF'
|
|
8
|
+
____ __ ____ _______. __ __
|
|
9
|
+
\ \ / \ / / / || | | |
|
|
10
|
+
\ \/ \/ / | (----`| |__| |
|
|
11
|
+
\ / \ \ | __ |
|
|
12
|
+
\ /\ / .----) | | | | |
|
|
13
|
+
\__/ \__/ |_______/ |__| |__|
|
|
14
|
+
|
|
15
|
+
Welcome to the WATOBO Shell!
|
|
16
|
+
Simply enter your ruby code you want to execute and press enter.
|
|
17
|
+
|
|
18
|
+
For command history use Up- and Down-Keys.
|
|
19
|
+
A good starting point to explore WATOBO is the Watobo object itself.
|
|
20
|
+
|
|
21
|
+
Example 1: List all sites
|
|
22
|
+
>> Watobo::Chats.sites.join("\n")
|
|
23
|
+
|
|
24
|
+
Example 2: Get all values of URL parameter <raid>
|
|
25
|
+
>> Watobo::Chats.each do |c| v = c.request.get_parm_value('raid'); out << "#{v}\n" unless v.empty?;end
|
|
26
|
+
|
|
27
|
+
Example 3: List all URL where chat comment contains 'Session-Test'
|
|
28
|
+
>> out << Watobo::Chats.map { |c| c.comment =~ /Session-Test/i ? c.request.url : nil }.compact.join("\n")
|
|
29
|
+
|
|
30
|
+
EOF
|
|
31
|
+
|
|
32
|
+
def self.help
|
|
33
|
+
HELP_TEXT
|
|
34
|
+
end
|
|
35
|
+
|
|
36
|
+
end
|
|
37
|
+
end
|
|
38
|
+
end
|
|
39
|
+
|
data/plugins/wshell/wshell.rb
CHANGED
|
@@ -1,21 +1,12 @@
|
|
|
1
|
-
#.
|
|
2
|
-
# wshell.rb
|
|
3
|
-
#.
|
|
4
|
-
# Copyright 2014 by siberas, http://www.siberas.de
|
|
5
|
-
# This file is part of WATOBO (Web Application Tool Box) http://watobo.sourceforge.com
|
|
6
|
-
# WATOBO is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License.
|
|
7
|
-
# WATOBO is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
8
|
-
# You should have received a copy of the GNU General Public License along with WATOBO; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
9
|
-
|
|
10
1
|
# @private
|
|
11
|
-
module Watobo#:nodoc: all::Plugin
|
|
12
|
-
module Plugin
|
|
13
|
-
class WShell < Watobo::PluginBase
|
|
14
|
-
plugin_name "WShell"
|
|
15
|
-
description "With WShell you can execute ruby commands in the context of WATOBO.\nVery useful for advanced analysis of conversations or debugging purposes - or simply to explore WATOBO."
|
|
16
|
-
load_libs
|
|
17
|
-
load_gui :main
|
|
18
|
-
end
|
|
19
|
-
end
|
|
20
|
-
end
|
|
21
|
-
|
|
2
|
+
module Watobo#:nodoc: all::Plugin
|
|
3
|
+
module Plugin
|
|
4
|
+
class WShell < Watobo::PluginBase
|
|
5
|
+
plugin_name "WShell"
|
|
6
|
+
description "With WShell you can execute ruby commands in the context of WATOBO.\nVery useful for advanced analysis of conversations or debugging purposes - or simply to explore WATOBO."
|
|
7
|
+
load_libs
|
|
8
|
+
load_gui :main
|
|
9
|
+
end
|
|
10
|
+
end
|
|
11
|
+
end
|
|
12
|
+
|
metadata
CHANGED
|
@@ -1,80 +1,77 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: watobo
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.9.
|
|
5
|
-
prerelease:
|
|
4
|
+
version: 0.9.23
|
|
6
5
|
platform: ruby
|
|
7
6
|
authors:
|
|
8
7
|
- Andreas Schmidt
|
|
9
8
|
autorequire:
|
|
10
9
|
bindir: bin
|
|
11
10
|
cert_chain: []
|
|
12
|
-
date:
|
|
11
|
+
date: 2016-09-02 00:00:00.000000000 Z
|
|
13
12
|
dependencies:
|
|
14
13
|
- !ruby/object:Gem::Dependency
|
|
15
|
-
name:
|
|
14
|
+
name: mechanize
|
|
16
15
|
requirement: !ruby/object:Gem::Requirement
|
|
17
|
-
none: false
|
|
18
16
|
requirements:
|
|
19
|
-
- -
|
|
17
|
+
- - '='
|
|
20
18
|
- !ruby/object:Gem::Version
|
|
21
|
-
version:
|
|
19
|
+
version: 2.7.4
|
|
22
20
|
type: :runtime
|
|
23
21
|
prerelease: false
|
|
24
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
25
|
-
none: false
|
|
26
23
|
requirements:
|
|
27
|
-
- -
|
|
24
|
+
- - '='
|
|
28
25
|
- !ruby/object:Gem::Version
|
|
29
|
-
version:
|
|
26
|
+
version: 2.7.4
|
|
30
27
|
- !ruby/object:Gem::Dependency
|
|
31
|
-
name:
|
|
28
|
+
name: fxruby
|
|
32
29
|
requirement: !ruby/object:Gem::Requirement
|
|
33
|
-
none: false
|
|
34
30
|
requirements:
|
|
35
|
-
- -
|
|
31
|
+
- - '='
|
|
36
32
|
- !ruby/object:Gem::Version
|
|
37
|
-
version:
|
|
33
|
+
version: 1.6.29
|
|
38
34
|
type: :runtime
|
|
39
35
|
prerelease: false
|
|
40
36
|
version_requirements: !ruby/object:Gem::Requirement
|
|
41
|
-
none: false
|
|
42
37
|
requirements:
|
|
43
|
-
- -
|
|
38
|
+
- - '='
|
|
44
39
|
- !ruby/object:Gem::Version
|
|
45
|
-
version:
|
|
40
|
+
version: 1.6.29
|
|
46
41
|
- !ruby/object:Gem::Dependency
|
|
47
|
-
name:
|
|
42
|
+
name: jwt
|
|
48
43
|
requirement: !ruby/object:Gem::Requirement
|
|
49
|
-
none: false
|
|
50
44
|
requirements:
|
|
51
|
-
- -
|
|
45
|
+
- - '='
|
|
52
46
|
- !ruby/object:Gem::Version
|
|
53
|
-
version:
|
|
47
|
+
version: 1.5.4
|
|
54
48
|
type: :runtime
|
|
55
49
|
prerelease: false
|
|
56
50
|
version_requirements: !ruby/object:Gem::Requirement
|
|
57
|
-
none: false
|
|
58
51
|
requirements:
|
|
59
|
-
- -
|
|
52
|
+
- - '='
|
|
60
53
|
- !ruby/object:Gem::Version
|
|
61
|
-
version:
|
|
54
|
+
version: 1.5.4
|
|
62
55
|
- !ruby/object:Gem::Dependency
|
|
63
|
-
name:
|
|
56
|
+
name: bundler
|
|
64
57
|
requirement: !ruby/object:Gem::Requirement
|
|
65
|
-
none: false
|
|
66
58
|
requirements:
|
|
67
|
-
- -
|
|
59
|
+
- - ">="
|
|
68
60
|
- !ruby/object:Gem::Version
|
|
69
|
-
version:
|
|
61
|
+
version: 1.11.0
|
|
62
|
+
- - "<"
|
|
63
|
+
- !ruby/object:Gem::Version
|
|
64
|
+
version: '2.0'
|
|
70
65
|
type: :runtime
|
|
71
66
|
prerelease: false
|
|
72
67
|
version_requirements: !ruby/object:Gem::Requirement
|
|
73
|
-
none: false
|
|
74
68
|
requirements:
|
|
75
|
-
- -
|
|
69
|
+
- - ">="
|
|
70
|
+
- !ruby/object:Gem::Version
|
|
71
|
+
version: 1.11.0
|
|
72
|
+
- - "<"
|
|
76
73
|
- !ruby/object:Gem::Version
|
|
77
|
-
version: '0'
|
|
74
|
+
version: '2.0'
|
|
78
75
|
description: WATOBO is intended to enable security professionals to perform efficient
|
|
79
76
|
(semi-automated ) web application security audits. It works like a local web proxy.
|
|
80
77
|
email: watobo@siberas.de
|
|
@@ -85,17 +82,121 @@ executables:
|
|
|
85
82
|
extensions: []
|
|
86
83
|
extra_rdoc_files: []
|
|
87
84
|
files:
|
|
85
|
+
- CHANGELOG.md
|
|
86
|
+
- README.md
|
|
87
|
+
- bin/nfq_server.rb
|
|
88
|
+
- bin/watobo
|
|
89
|
+
- bin/watobo_gui.rb
|
|
90
|
+
- config/datastore.yml
|
|
91
|
+
- config/forwarding_proxy.yml
|
|
92
|
+
- config/general.yml
|
|
93
|
+
- config/gui.yml
|
|
94
|
+
- config/interceptor.yml
|
|
95
|
+
- config/ott_cache.yml
|
|
96
|
+
- config/scan_policy.yml
|
|
97
|
+
- config/scanner.yml
|
|
98
|
+
- config/sid_cache.yml
|
|
99
|
+
- custom-views/prettify-json.rb
|
|
88
100
|
- extras/private-hostspot.sh
|
|
89
101
|
- extras/watobo-installer.sh
|
|
90
102
|
- extras/watobo-transparent.sh
|
|
103
|
+
- icons/Add.ico
|
|
104
|
+
- icons/Add_24x24.ico
|
|
105
|
+
- icons/Bandwidth.ico
|
|
106
|
+
- icons/Bandwidth_24x24.ico
|
|
107
|
+
- icons/BestPractice_16x16.ico
|
|
108
|
+
- icons/BestPractice_24x24.ico
|
|
109
|
+
- icons/Mr. Bomb.ico
|
|
110
|
+
- icons/Mr. Bomb_16x16.ico
|
|
111
|
+
- icons/Mr. Bomb_24x24.ico
|
|
112
|
+
- icons/Orange Ball.ico
|
|
113
|
+
- icons/Orange Ball_16x16.ico
|
|
114
|
+
- icons/Orange Ball_24x24.ico
|
|
115
|
+
- icons/Pause.ico
|
|
116
|
+
- icons/Play.ico
|
|
117
|
+
- icons/Play_24x24.ico
|
|
118
|
+
- icons/Red Ball.ico
|
|
119
|
+
- icons/Red Ball_16x16.ico
|
|
120
|
+
- icons/Red Ball_24x24.ico
|
|
121
|
+
- icons/Run.ico
|
|
122
|
+
- icons/Stop.ico
|
|
123
|
+
- icons/Stop_24x24.ico
|
|
124
|
+
- icons/Terminal.ico
|
|
125
|
+
- icons/Transfer.ico
|
|
126
|
+
- icons/Transfer_16x16.ico
|
|
127
|
+
- icons/User.ico
|
|
128
|
+
- icons/User_16x16.ico
|
|
129
|
+
- icons/User_24x24.ico
|
|
130
|
+
- icons/Web Browser.ico
|
|
131
|
+
- icons/Web Browser_16x16.ico
|
|
132
|
+
- icons/Write Document.ico
|
|
133
|
+
- icons/Yellow Ball.ico
|
|
134
|
+
- icons/Yellow Ball_16x16.ico
|
|
135
|
+
- icons/Yellow Ball_24x24.ico
|
|
136
|
+
- icons/advanced.ico
|
|
137
|
+
- icons/advanced_16x16.ico
|
|
138
|
+
- icons/advanced_24x24.ico
|
|
139
|
+
- icons/applications.ico
|
|
140
|
+
- icons/applications_16x16.ico
|
|
141
|
+
- icons/applications_24x24.ico
|
|
142
|
+
- icons/browser_16x16.ico
|
|
143
|
+
- icons/browser_24x24.ico
|
|
144
|
+
- icons/burn.ico
|
|
145
|
+
- icons/burn_16x16.ico
|
|
146
|
+
- icons/burn_24x24.ico
|
|
147
|
+
- icons/calculator.ico
|
|
148
|
+
- icons/calculator_24x24.ico
|
|
149
|
+
- icons/cb_checked.ico
|
|
150
|
+
- icons/cb_checked_orange.ico
|
|
151
|
+
- icons/cb_unchecked.ico
|
|
152
|
+
- icons/coin_24x24.ico
|
|
153
|
+
- icons/conversation.ico
|
|
154
|
+
- icons/conversation_24x24.ico
|
|
155
|
+
- icons/engine.ico
|
|
156
|
+
- icons/filter.ico
|
|
157
|
+
- icons/folder.ico
|
|
158
|
+
- icons/folder_16x16.ico
|
|
159
|
+
- icons/fuzzer_16x16.ico
|
|
160
|
+
- icons/fuzzer_24x24.ico
|
|
161
|
+
- icons/go-down_16x16.png
|
|
162
|
+
- icons/go-up_16x16.png
|
|
163
|
+
- icons/help.ico
|
|
164
|
+
- icons/help_16x16.ico
|
|
165
|
+
- icons/help_24x24.ico
|
|
166
|
+
- icons/iChat.ico
|
|
167
|
+
- icons/iChat_16x16.ico
|
|
168
|
+
- icons/iChat_24x24.ico
|
|
169
|
+
- icons/icons.txt
|
|
170
|
+
- icons/info.ico
|
|
171
|
+
- icons/info_16x16.ico
|
|
172
|
+
- icons/info_24x24.ico
|
|
173
|
+
- icons/interceptor_24x24.ico
|
|
174
|
+
- icons/lock.ico
|
|
175
|
+
- icons/lock_12x12.ico
|
|
176
|
+
- icons/lock_16x16.ico
|
|
177
|
+
- icons/monitor.ico
|
|
178
|
+
- icons/plugin.ico
|
|
179
|
+
- icons/plugin_24x24.ico
|
|
180
|
+
- icons/scan_16x16.png
|
|
181
|
+
- icons/send.ico
|
|
182
|
+
- icons/server.ico
|
|
183
|
+
- icons/server_16x16.ico
|
|
184
|
+
- icons/siberas_logo_x24.gif
|
|
185
|
+
- icons/tag_blue_32x32.ico
|
|
186
|
+
- icons/watobo-48x48.png
|
|
187
|
+
- icons/watobo-logo.png
|
|
188
|
+
- icons/watobo.ico
|
|
189
|
+
- icons/watobo.ico.old
|
|
190
|
+
- lib/watobo.rb
|
|
191
|
+
- lib/watobo/adapters.rb
|
|
91
192
|
- lib/watobo/adapters/data_store.rb
|
|
92
193
|
- lib/watobo/adapters/file/file_store.rb
|
|
93
194
|
- lib/watobo/adapters/file/marshal_store.rb
|
|
94
195
|
- lib/watobo/adapters/session_store.rb
|
|
95
|
-
- lib/watobo/adapters.rb
|
|
96
196
|
- lib/watobo/ca.rb
|
|
97
197
|
- lib/watobo/config.rb
|
|
98
198
|
- lib/watobo/constants.rb
|
|
199
|
+
- lib/watobo/core.rb
|
|
99
200
|
- lib/watobo/core/active_check.rb
|
|
100
201
|
- lib/watobo/core/active_checks.rb
|
|
101
202
|
- lib/watobo/core/ca.rb
|
|
@@ -105,13 +206,14 @@ files:
|
|
|
105
206
|
- lib/watobo/core/client_cert_store.rb
|
|
106
207
|
- lib/watobo/core/conversation.rb
|
|
107
208
|
- lib/watobo/core/cookie.rb
|
|
209
|
+
- lib/watobo/core/egress_handlers.rb
|
|
108
210
|
- lib/watobo/core/finding.rb
|
|
109
211
|
- lib/watobo/core/findings.rb
|
|
110
212
|
- lib/watobo/core/forwarding_proxy.rb
|
|
111
213
|
- lib/watobo/core/fuzz_gen.rb
|
|
112
|
-
- lib/watobo/core/interceptor.rb
|
|
113
214
|
- lib/watobo/core/intercept_carver.rb
|
|
114
215
|
- lib/watobo/core/intercept_filter.rb
|
|
216
|
+
- lib/watobo/core/interceptor.rb
|
|
115
217
|
- lib/watobo/core/min_class.rb
|
|
116
218
|
- lib/watobo/core/netfilter_queue.rb
|
|
117
219
|
- lib/watobo/core/ott_cache.rb
|
|
@@ -130,8 +232,8 @@ files:
|
|
|
130
232
|
- lib/watobo/core/session.rb
|
|
131
233
|
- lib/watobo/core/sid_cache.rb
|
|
132
234
|
- lib/watobo/core/subscriber.rb
|
|
133
|
-
- lib/watobo/core.rb
|
|
134
235
|
- lib/watobo/defaults.rb
|
|
236
|
+
- lib/watobo/external/diff/lcs.rb
|
|
135
237
|
- lib/watobo/external/diff/lcs/array.rb
|
|
136
238
|
- lib/watobo/external/diff/lcs/block.rb
|
|
137
239
|
- lib/watobo/external/diff/lcs/callbacks.rb
|
|
@@ -139,19 +241,19 @@ files:
|
|
|
139
241
|
- lib/watobo/external/diff/lcs/hunk.rb
|
|
140
242
|
- lib/watobo/external/diff/lcs/ldiff.rb
|
|
141
243
|
- lib/watobo/external/diff/lcs/string.rb
|
|
142
|
-
- lib/watobo/external/diff/lcs.rb
|
|
143
244
|
- lib/watobo/externals.rb
|
|
245
|
+
- lib/watobo/framework.rb
|
|
144
246
|
- lib/watobo/framework/create_project.rb
|
|
145
247
|
- lib/watobo/framework/init.rb
|
|
146
248
|
- lib/watobo/framework/init_modules.rb
|
|
147
249
|
- lib/watobo/framework/license_text.rb
|
|
148
250
|
- lib/watobo/framework/load_chat.rb
|
|
149
|
-
- lib/watobo/
|
|
251
|
+
- lib/watobo/gui.rb
|
|
150
252
|
- lib/watobo/gui/about_watobo.rb
|
|
151
253
|
- lib/watobo/gui/browser_preview.rb
|
|
152
254
|
- lib/watobo/gui/certificate_dialog.rb
|
|
153
|
-
- lib/watobo/gui/chatviewer_frame.rb
|
|
154
255
|
- lib/watobo/gui/chat_diff.rb
|
|
256
|
+
- lib/watobo/gui/chatviewer_frame.rb
|
|
155
257
|
- lib/watobo/gui/checkboxtree.rb
|
|
156
258
|
- lib/watobo/gui/checks_policy_frame.rb
|
|
157
259
|
- lib/watobo/gui/client_cert_dialog.rb
|
|
@@ -167,20 +269,22 @@ files:
|
|
|
167
269
|
- lib/watobo/gui/edit_comment.rb
|
|
168
270
|
- lib/watobo/gui/edit_scope_dialog.rb
|
|
169
271
|
- lib/watobo/gui/export_dialog.rb
|
|
170
|
-
- lib/watobo/gui/findings_tree.rb
|
|
171
272
|
- lib/watobo/gui/finding_info.rb
|
|
273
|
+
- lib/watobo/gui/findings_tree.rb
|
|
172
274
|
- lib/watobo/gui/full_scan_dialog.rb
|
|
173
275
|
- lib/watobo/gui/fuzzer_gui.rb
|
|
276
|
+
- lib/watobo/gui/fxsave_thread.rb
|
|
174
277
|
- lib/watobo/gui/goto_url_dialog.rb
|
|
175
278
|
- lib/watobo/gui/hex_viewer.rb
|
|
176
279
|
- lib/watobo/gui/html_viewer.rb
|
|
280
|
+
- lib/watobo/gui/intercept_filter_dialog.rb
|
|
177
281
|
- lib/watobo/gui/interceptor_gui.rb
|
|
178
282
|
- lib/watobo/gui/interceptor_settings_dialog.rb
|
|
179
|
-
- lib/watobo/gui/
|
|
283
|
+
- lib/watobo/gui/json_viewer.rb
|
|
180
284
|
- lib/watobo/gui/list_box.rb
|
|
181
|
-
- lib/watobo/gui/login_wizzard.rb
|
|
182
285
|
- lib/watobo/gui/log_file_viewer.rb
|
|
183
286
|
- lib/watobo/gui/log_viewer.rb
|
|
287
|
+
- lib/watobo/gui/login_wizzard.rb
|
|
184
288
|
- lib/watobo/gui/main_window.rb
|
|
185
289
|
- lib/watobo/gui/manual_request_editor.rb
|
|
186
290
|
- lib/watobo/gui/master_pw_dialog.rb
|
|
@@ -223,32 +327,33 @@ files:
|
|
|
223
327
|
- lib/watobo/gui/workspace_dialog.rb
|
|
224
328
|
- lib/watobo/gui/www_auth_dialog.rb
|
|
225
329
|
- lib/watobo/gui/xml_viewer_frame.rb
|
|
226
|
-
- lib/watobo/
|
|
330
|
+
- lib/watobo/http.rb
|
|
227
331
|
- lib/watobo/http/cookies/cookies.rb
|
|
228
332
|
- lib/watobo/http/data/data.rb
|
|
229
333
|
- lib/watobo/http/data/json.rb
|
|
230
334
|
- lib/watobo/http/url/url.rb
|
|
231
335
|
- lib/watobo/http/xml/xml.rb
|
|
232
|
-
- lib/watobo/
|
|
336
|
+
- lib/watobo/interceptor.rb
|
|
233
337
|
- lib/watobo/interceptor/html/favicon.ico
|
|
234
338
|
- lib/watobo/interceptor/html/index.html
|
|
235
339
|
- lib/watobo/interceptor/proxy.rb
|
|
236
340
|
- lib/watobo/interceptor/transparent.rb
|
|
237
|
-
- lib/watobo/
|
|
341
|
+
- lib/watobo/mixins.rb
|
|
238
342
|
- lib/watobo/mixins/check_info.rb
|
|
239
343
|
- lib/watobo/mixins/httpparser.rb
|
|
240
344
|
- lib/watobo/mixins/request_parser.rb
|
|
241
345
|
- lib/watobo/mixins/shapers.rb
|
|
242
346
|
- lib/watobo/mixins/transcoders.rb
|
|
243
|
-
- lib/watobo/mixins.rb
|
|
244
|
-
- lib/watobo/parser/html.rb
|
|
245
347
|
- lib/watobo/parser.rb
|
|
348
|
+
- lib/watobo/parser/html.rb
|
|
349
|
+
- lib/watobo/patch_fxruby_setfocus.rb
|
|
350
|
+
- lib/watobo/sockets.rb
|
|
246
351
|
- lib/watobo/sockets/agent.rb
|
|
247
352
|
- lib/watobo/sockets/client_socket.rb
|
|
248
353
|
- lib/watobo/sockets/connection.rb
|
|
249
354
|
- lib/watobo/sockets/http_socket.rb
|
|
250
355
|
- lib/watobo/sockets/ntlm_auth.rb
|
|
251
|
-
- lib/watobo/
|
|
356
|
+
- lib/watobo/utils.rb
|
|
252
357
|
- lib/watobo/utils/check_regex.rb
|
|
253
358
|
- lib/watobo/utils/copy_object.rb
|
|
254
359
|
- lib/watobo/utils/crypto.rb
|
|
@@ -267,41 +372,33 @@ files:
|
|
|
267
372
|
- lib/watobo/utils/text2request.rb
|
|
268
373
|
- lib/watobo/utils/url.rb
|
|
269
374
|
- lib/watobo/utils/utf16.rb
|
|
270
|
-
- lib/watobo/utils.rb
|
|
271
|
-
- lib/watobo.rb
|
|
272
|
-
- config/datastore.yml
|
|
273
|
-
- config/forwarding_proxy.yml
|
|
274
|
-
- config/general.yml
|
|
275
|
-
- config/gui.yml
|
|
276
|
-
- config/interceptor.yml
|
|
277
|
-
- config/ott_cache.yml
|
|
278
|
-
- config/scanner.yml
|
|
279
|
-
- config/scan_policy.yml
|
|
280
|
-
- config/sid_cache.yml
|
|
281
375
|
- modules/active/Apache/mod_status.rb
|
|
282
376
|
- modules/active/Apache/multiview.rb
|
|
377
|
+
- modules/active/Flash/crossdomain.rb
|
|
378
|
+
- modules/active/JWT/jwt_oauth2_none.rb
|
|
283
379
|
- modules/active/cq5/cq5_default_selectors.rb
|
|
284
380
|
- modules/active/cq5/cqp_user_enumeration.rb
|
|
285
381
|
- modules/active/directories/dirwalker.rb
|
|
286
382
|
- modules/active/discovery/fileextensions.rb
|
|
287
383
|
- modules/active/discovery/http_methods.rb
|
|
384
|
+
- modules/active/discovery/jsmapfiles.rb
|
|
288
385
|
- modules/active/domino/domino_db.lst
|
|
289
386
|
- modules/active/domino/domino_db.rb
|
|
290
387
|
- modules/active/dotNET/custom_errors.rb
|
|
291
388
|
- modules/active/dotNET/dotnet_files.rb
|
|
292
389
|
- modules/active/fileinclusion/lfi_simple.rb
|
|
293
|
-
- modules/active/Flash/crossdomain.rb
|
|
294
390
|
- modules/active/jboss/jboss_basic.rb
|
|
295
391
|
- modules/active/sap/business_objects.rb
|
|
296
392
|
- modules/active/sap/its_commands.rb
|
|
297
|
-
- modules/active/sap/its_services.rb
|
|
298
393
|
- modules/active/sap/its_service_parameter.rb
|
|
394
|
+
- modules/active/sap/its_services.rb
|
|
299
395
|
- modules/active/sap/its_xss.rb
|
|
300
396
|
- modules/active/shell_shock/shell_shock.rb
|
|
301
397
|
- modules/active/siebel/siebel_apps.rb
|
|
398
|
+
- modules/active/sqlinjection/sql_boolean.rb
|
|
399
|
+
- modules/active/sqlinjection/sql_numerical.rb
|
|
302
400
|
- modules/active/sqlinjection/sqli_error.rb
|
|
303
401
|
- modules/active/sqlinjection/sqli_timing.rb
|
|
304
|
-
- modules/active/sqlinjection/sql_boolean.rb
|
|
305
402
|
- modules/active/struts2/default_handler_ognl.rb
|
|
306
403
|
- modules/active/struts2/include_params_ognl.rb
|
|
307
404
|
- modules/active/xml/xml_xxe.rb
|
|
@@ -324,10 +421,11 @@ files:
|
|
|
324
421
|
- modules/passive/hidden_fields.rb
|
|
325
422
|
- modules/passive/hotspots.rb
|
|
326
423
|
- modules/passive/in_script_parameter.rb
|
|
424
|
+
- modules/passive/json_web_token.rb
|
|
327
425
|
- modules/passive/multiple_server_headers.rb
|
|
328
426
|
- modules/passive/possible_login.rb
|
|
329
|
-
- modules/passive/redirectionz.rb
|
|
330
427
|
- modules/passive/redirect_url.rb
|
|
428
|
+
- modules/passive/redirectionz.rb
|
|
331
429
|
- modules/passive/sap-headers.rb
|
|
332
430
|
- modules/passive/xss_dom.rb
|
|
333
431
|
- plugins/aem/aem.rb
|
|
@@ -342,6 +440,7 @@ files:
|
|
|
342
440
|
- plugins/catalog/db_tests
|
|
343
441
|
- plugins/catalog/db_variables
|
|
344
442
|
- plugins/crawler/crawler.rb
|
|
443
|
+
- plugins/crawler/gui.rb
|
|
345
444
|
- plugins/crawler/gui/auth_frame.rb
|
|
346
445
|
- plugins/crawler/gui/crawler_gui.rb
|
|
347
446
|
- plugins/crawler/gui/general_settings_frame.rb
|
|
@@ -349,7 +448,6 @@ files:
|
|
|
349
448
|
- plugins/crawler/gui/scope_frame.rb
|
|
350
449
|
- plugins/crawler/gui/settings_tabbook.rb
|
|
351
450
|
- plugins/crawler/gui/status_frame.rb
|
|
352
|
-
- plugins/crawler/gui.rb
|
|
353
451
|
- plugins/crawler/icons/crawler.ico
|
|
354
452
|
- plugins/crawler/lib/bags.rb
|
|
355
453
|
- plugins/crawler/lib/constants.rb
|
|
@@ -365,9 +463,9 @@ files:
|
|
|
365
463
|
- plugins/filefinder/dbs/well_known.db
|
|
366
464
|
- plugins/filefinder/filefinder.rb
|
|
367
465
|
- plugins/sqlmap/bin/test.rb
|
|
466
|
+
- plugins/sqlmap/gui.rb
|
|
368
467
|
- plugins/sqlmap/gui/main.rb
|
|
369
468
|
- plugins/sqlmap/gui/options_frame.rb
|
|
370
|
-
- plugins/sqlmap/gui.rb
|
|
371
469
|
- plugins/sqlmap/icons/sqlmap.ico
|
|
372
470
|
- plugins/sqlmap/lib/sqlmap_ctrl.rb
|
|
373
471
|
- plugins/sqlmap/sqlmap.rb
|
|
@@ -384,120 +482,28 @@ files:
|
|
|
384
482
|
- plugins/wshell/icons/wsh.ico
|
|
385
483
|
- plugins/wshell/lib/core.rb
|
|
386
484
|
- plugins/wshell/wshell.rb
|
|
387
|
-
- icons/Add.ico
|
|
388
|
-
- icons/Add_24x24.ico
|
|
389
|
-
- icons/advanced.ico
|
|
390
|
-
- icons/advanced_16x16.ico
|
|
391
|
-
- icons/advanced_24x24.ico
|
|
392
|
-
- icons/applications.ico
|
|
393
|
-
- icons/applications_16x16.ico
|
|
394
|
-
- icons/applications_24x24.ico
|
|
395
|
-
- icons/Bandwidth.ico
|
|
396
|
-
- icons/Bandwidth_24x24.ico
|
|
397
|
-
- icons/BestPractice_16x16.ico
|
|
398
|
-
- icons/BestPractice_24x24.ico
|
|
399
|
-
- icons/browser_16x16.ico
|
|
400
|
-
- icons/browser_24x24.ico
|
|
401
|
-
- icons/burn.ico
|
|
402
|
-
- icons/burn_16x16.ico
|
|
403
|
-
- icons/burn_24x24.ico
|
|
404
|
-
- icons/calculator.ico
|
|
405
|
-
- icons/calculator_24x24.ico
|
|
406
|
-
- icons/cb_checked.ico
|
|
407
|
-
- icons/cb_checked_orange.ico
|
|
408
|
-
- icons/cb_unchecked.ico
|
|
409
|
-
- icons/coin_24x24.ico
|
|
410
|
-
- icons/conversation.ico
|
|
411
|
-
- icons/conversation_24x24.ico
|
|
412
|
-
- icons/engine.ico
|
|
413
|
-
- icons/filter.ico
|
|
414
|
-
- icons/folder.ico
|
|
415
|
-
- icons/folder_16x16.ico
|
|
416
|
-
- icons/fuzzer_16x16.ico
|
|
417
|
-
- icons/fuzzer_24x24.ico
|
|
418
|
-
- icons/go-down_16x16.png
|
|
419
|
-
- icons/go-up_16x16.png
|
|
420
|
-
- icons/help.ico
|
|
421
|
-
- icons/help_16x16.ico
|
|
422
|
-
- icons/help_24x24.ico
|
|
423
|
-
- icons/iChat.ico
|
|
424
|
-
- icons/iChat_16x16.ico
|
|
425
|
-
- icons/iChat_24x24.ico
|
|
426
|
-
- icons/icons.txt
|
|
427
|
-
- icons/info.ico
|
|
428
|
-
- icons/info_16x16.ico
|
|
429
|
-
- icons/info_24x24.ico
|
|
430
|
-
- icons/interceptor_24x24.ico
|
|
431
|
-
- icons/lock.ico
|
|
432
|
-
- icons/lock_12x12.ico
|
|
433
|
-
- icons/lock_16x16.ico
|
|
434
|
-
- icons/monitor.ico
|
|
435
|
-
- icons/Mr. Bomb.ico
|
|
436
|
-
- icons/Mr. Bomb_16x16.ico
|
|
437
|
-
- icons/Mr. Bomb_24x24.ico
|
|
438
|
-
- icons/Orange Ball.ico
|
|
439
|
-
- icons/Orange Ball_16x16.ico
|
|
440
|
-
- icons/Orange Ball_24x24.ico
|
|
441
|
-
- icons/Pause.ico
|
|
442
|
-
- icons/Play.ico
|
|
443
|
-
- icons/Play_24x24.ico
|
|
444
|
-
- icons/plugin.ico
|
|
445
|
-
- icons/plugin_24x24.ico
|
|
446
|
-
- icons/Red Ball.ico
|
|
447
|
-
- icons/Red Ball_16x16.ico
|
|
448
|
-
- icons/Red Ball_24x24.ico
|
|
449
|
-
- icons/Run.ico
|
|
450
|
-
- icons/scan_16x16.png
|
|
451
|
-
- icons/send.ico
|
|
452
|
-
- icons/server.ico
|
|
453
|
-
- icons/server_16x16.ico
|
|
454
|
-
- icons/siberas_logo_x24.gif
|
|
455
|
-
- icons/Stop.ico
|
|
456
|
-
- icons/Stop_24x24.ico
|
|
457
|
-
- icons/tag_blue_32x32.ico
|
|
458
|
-
- icons/Terminal.ico
|
|
459
|
-
- icons/Transfer.ico
|
|
460
|
-
- icons/Transfer_16x16.ico
|
|
461
|
-
- icons/User.ico
|
|
462
|
-
- icons/User_16x16.ico
|
|
463
|
-
- icons/User_24x24.ico
|
|
464
|
-
- icons/watobo-48x48.png
|
|
465
|
-
- icons/watobo-logo.png
|
|
466
|
-
- icons/watobo.ico
|
|
467
|
-
- icons/Web Browser.ico
|
|
468
|
-
- icons/Web Browser_16x16.ico
|
|
469
|
-
- icons/Write Document.ico
|
|
470
|
-
- icons/Yellow Ball.ico
|
|
471
|
-
- icons/Yellow Ball_16x16.ico
|
|
472
|
-
- icons/Yellow Ball_24x24.ico
|
|
473
|
-
- custom-views/prettify-json.rb
|
|
474
|
-
- README.md
|
|
475
|
-
- CHANGELOG.md
|
|
476
|
-
- bin/watobo_gui.rb
|
|
477
|
-
- bin/watobo
|
|
478
|
-
- bin/nfq_server.rb
|
|
479
485
|
homepage: http://watobo.sourceforge.net
|
|
480
|
-
licenses:
|
|
486
|
+
licenses:
|
|
487
|
+
- GPLv2
|
|
488
|
+
metadata: {}
|
|
481
489
|
post_install_message:
|
|
482
490
|
rdoc_options: []
|
|
483
491
|
require_paths:
|
|
484
492
|
- lib
|
|
485
493
|
required_ruby_version: !ruby/object:Gem::Requirement
|
|
486
|
-
none: false
|
|
487
494
|
requirements:
|
|
488
|
-
- -
|
|
495
|
+
- - ">="
|
|
489
496
|
- !ruby/object:Gem::Version
|
|
490
|
-
version:
|
|
497
|
+
version: 2.2.2
|
|
491
498
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
492
|
-
none: false
|
|
493
499
|
requirements:
|
|
494
|
-
- -
|
|
500
|
+
- - ">="
|
|
495
501
|
- !ruby/object:Gem::Version
|
|
496
|
-
version:
|
|
502
|
+
version: 1.8.11
|
|
497
503
|
requirements: []
|
|
498
504
|
rubyforge_project:
|
|
499
|
-
rubygems_version:
|
|
505
|
+
rubygems_version: 2.4.5.1
|
|
500
506
|
signing_key:
|
|
501
|
-
specification_version:
|
|
507
|
+
specification_version: 4
|
|
502
508
|
summary: WATOBO - Web Application Toolbox
|
|
503
509
|
test_files: []
|