watobo 0.9.8.677

data/lib/watobo/externals.rb

@@ -0,0 +1,28 @@
+# .
+# externals.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+require 'watobo/external/diff/lcs'
+require 'watobo/external/diff/lcs/hunk'
+require 'watobo/external/diff/lcs/callbacks'
+require 'watobo/external/diff/lcs/block'
+require 'watobo/external/diff/lcs/change'
+
+require 'watobo/external/ntlm/ntlm'

data/lib/watobo/framework/create_project.rb

@@ -0,0 +1,55 @@
+# .
+# create_project.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+  # create_project is a wrapper function to create a new project
+  # you can either create a project by giving a URL (:url),
+  # or by giving a :project_name AND a :session_name
+  def self.create_project(prefs={})
+    project_settings = Hash.new
+   # project_settings.update @settings
+
+    if prefs.has_key? :url
+    #TODO: create project_settings from url
+    else
+    project_settings[:project_name] = prefs[:project_name]
+    project_settings[:session_name] = prefs[:session_name]
+    end
+
+    ds = Watobo::DataStore.aquire(project_settings[:project_name], project_settings[:session_name])
+    project_settings[:session_store] = ds
+
+    puts "= initialize passive checks ="
+    project_settings[:passive_checks] = init_passive_modules
+    puts "Total: " + project_settings[:passive_checks].length.to_s
+    puts
+    puts "= initialize active checks ="
+    project_settings[:active_checks] = init_active_modules
+    #  project_settings[:active_checks].each do |ac|
+    #    puts ac.class
+    #  end
+    puts "Total: " + project_settings[:active_checks].length.to_s
+
+    project = Project.new(project_settings)
+    
+  end
+  
+end

data/lib/watobo/framework/init.rb

@@ -0,0 +1,149 @@
+# .
+# init.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+
+  @active_checks = []
+  @passive_checks = []
+  def self.active_checks
+    @active_checks
+  end
+
+  def self.passive_checks
+    @passive_checks
+  end
+
+  def self.init_framework()
+    puts "* Initializing Framework"
+    init_working_directory
+
+    # @settings.update settings
+
+    puts "* loading custom settings ..."
+    Watobo::Conf.each do |cm|
+      cm.update
+    end
+
+    init_workspace_path
+    init_active_modules
+    init_passive_modules
+  end
+
+  def self.working_directory
+    # puts "Method Obsolet! use Watobo::Conf::General.working_directory instead."
+    Watobo::Conf::General.working_directory
+  end
+
+  def self.workspace_path=(new_wsp)
+    # puts "Method Obsolet! use Watobo::Conf::General.workspace_path instead."
+    Watobo::Conf::General.workspace_path = new_wsp
+  end
+
+  def self.workspace_path
+    Watobo::Conf::General.workspace_path
+  end
+
+  private
+
+  def self.init_workspace_path
+    # gs = @settings[:general]
+    if Conf::General.respond_to? :working_directory
+      unless Conf::General.respond_to? :workspace_path
+        if File.exist? Conf::General.working_directory
+          dir = ''
+          dir = Conf::General.workspace_name if Conf::General.respond_to? :workspace_name
+          wsp = File.join(Conf::General.working_directory, dir)
+          unless File.exist? wsp
+            Dir.mkdir(wsp)
+            puts "* created workspace folder #{wsp}"
+          end
+          Conf::General.workspace_path = wsp
+        else
+          puts "! working directory #{Conf::General.working_directory} does not exist."
+          exit
+        end
+      else
+        unless File.exist? Conf::General.workspace_path
+          begin
+            print "* Create Workspace Directory '#{Conf::General.workspace_path}' .."
+            Dir.mkdir(Conf::General.workspace_path)
+            print "OK\n"
+          rescue => bang
+            print "Autsch!\n"
+            puts "!!! Could Not Create Workspace Directory"
+            exit
+          end
+        end
+      end
+    else
+      puts "! working directory not set."
+      puts Conf::General.dump.to_yaml
+      exit
+    end
+  end
+
+  def self.init_working_directory
+    puts "* init_working_directory ..."
+
+    watobo_folder = ".watobo"
+    watobo_folder = Conf::General.watobo_folder if Conf::General.respond_to? :watobo_folder
+
+    unless Conf::General.respond_to? :working_directory
+      case RUBY_PLATFORM
+
+      when /mswin|mingw|bccwin/
+
+        Conf::General.working_directory = File.join(ENV['HOME'], watobo_folder)
+
+      when /linux|bsd|solaris|hpux|darwin/i
+
+        Conf::General.working_directory = File.join(ENV['HOME'], watobo_folder)
+
+      else # cygwin|java
+      puts "!!! WATOBO is not tested for this platform (#{RUBY_PLATFORM})!!!"
+      exit
+      end
+      puts ">> " + Conf::General.working_directory
+    end
+
+    unless File.exist? Conf::General.working_directory
+      $first_time_watobo = true
+      begin
+        print "Creating WATOBO's working directory #{Conf::General.working_directory}."
+        Dir.mkdir(Conf::General.working_directory)
+      rescue => bang
+        puts "Could not create working directory for WATOBO."
+        puts bang
+        puts bang.backtrace if $DEBUG
+        exit
+      end
+    end
+    
+    if File.exist? Conf::General.working_directory
+      cfg_dir = File.join(Conf::General.working_directory, "conf")
+      unless File.exist? cfg_dir
+        puts "* create configuration directory '#{cfg_dir}' ..."
+        Dir.mkdir(cfg_dir)
+        print "OK\n"
+      end
+    end
+  end
+end

data/lib/watobo/framework/init_modules.rb

@@ -0,0 +1,116 @@
+# .
+# init_modules.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+
+  private
+  def self.init_passive_modules(filter='')
+    # puts "get passive modules from path #{@settings[:module_path]}/passive"
+    passive_modules = []
+    passive_path = Watobo.passive_module_path
+
+    Dir["#{passive_path}/*.rb"].each do |mod_file|
+      begin
+        mod = File.basename(mod_file)
+
+        require mod_file
+        #  puts "+ #{modules}"
+        # load "#{@settings[:module_path]}/#{modules}/#{check}"
+        classname = mod.slice(0..0).upcase + mod.slice(1..-1).downcase
+        classname.sub!(".rb","")
+
+        # How to get a class constant out of a string ??? Here we go ...
+
+        class_constant = Watobo::Modules::Passive.const_get(classname)
+
+        # passive_modules.push class_constant.new(self)
+        passive_modules.push class_constant
+        #  puts "+ #{classname}"
+        #  notify(:logger, LOG_DEBUG, "#{modules} loaded.")
+
+      rescue => bang
+      puts "!!!"
+      puts bang
+      end
+    end
+    passive_modules
+  end
+
+  def self.init_active_modules()
+
+    active_path = Watobo.active_module_path
+    Dir["#{active_path}/**"].each do |group|
+      if File.ftype(group) == "directory"
+        Dir["#{group}/*.rb"].each do |mod_file|
+          begin
+          #           module_file = File.join(active_path, group, modules)
+            mod = File.basename(mod_file)
+            group_name = File.basename(group)# notify(:logger, LOG_DEBUG, "loading module: #{module_file}")
+            #require "#{active_path}/#{group}/#{modules}"
+            require mod_file
+            # load "#{@settings[:module_path]}/#{modules}/#{check}"
+            group_class = group_name.slice(0..0).upcase + group_name.slice(1..-1).downcase
+            #
+            module_class = mod.slice(0..0).upcase + mod.slice(1..-1).downcase
+            module_class.sub!(".rb","")
+            # How to get a class constant out of a string ??? Here we go ...
+
+            #  class_constant = Watobo.class_eval("Watobo::Modules::Active::#{group_class}::#{module_class}")
+            class_constant = Watobo::Modules::Active.const_get(group_class).const_get(module_class)
+            #@active_checks.push class_constant.new(self)
+            # notify(:logger, LOG_INFO, "#{module_class} loaded.")
+            active_checks.push class_constant
+          rescue => bang
+          puts bang
+          # notify(:logger, LOG_DEBUG, "problems loading module: #{@settings[:module_path]}/active/#{group}/#{modules}")
+          end
+        end
+      end
+
+    end
+    active_checks
+  end
+
+  def self.createModule(filename)
+    begin
+    #@interface.log("loading module: /active/#{group}/#{modules}")
+    #require "#{@settings[:module_path]}/active/#{group}/#{modules}"
+    #require "#{module_path}/#{group}/#{modules}"
+      require filename
+      # load "#{@settings[:module_path]}/#{modules}/#{check}"
+      group_class = group.slice(0..0).upcase + group.slice(1..-1).downcase
+      #
+      module_class = modules.slice(0..0).upcase + modules.slice(1..-1).downcase
+      module_class.sub!(".rb","")
+      # How to get a class constant out of a string ??? Here we go ...
+
+      class_constant = Watobo.class_eval("Watobo::Modules::Active::#{module_class}")
+
+      @active_modules.push class_constant.new(self)
+      #@interface.log("#{modules} loaded.")
+
+    rescue => bang
+    puts bang
+    #@interface.log("problems loading module: #{module_path}/#{group}/#{modules}")
+    puts "problems loading module: #{filename}"
+    end
+  end
+end

data/lib/watobo/framework/license_text.rb

@@ -0,0 +1,50 @@
+# .
+# license_text.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+  
+LICENSE =<<'EOF'
+Copyright 2011 by siberas, http://www.siberas.de
+
+Disclaimer: You should only use WATOBO to perform 
+vulnerability audits of your own web applications or
+those you are authorized to do so. siberas takes no
+responsibility if you use it for unlawful purposes.
+ 
+WATOBO is free software; you can redistribute it and/or
+modify it under the terms of the GNU General Public 
+License as published by the Free Software Foundation 
+version 2 of the License.
+
+WATOBO is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied 
+warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR 
+PURPOSE.  See the GNU General Public License for more 
+details.
+
+You should have received a copy of the GNU 
+General Public License along with WATOBO; if not, 
+write to the Free Software Foundation, Inc., 51 
+Franklin St, Fifth Floor, Boston, MA  02110-1301
+USA
+EOF
+
+end

data/lib/watobo/framework.rb

@@ -0,0 +1,26 @@
+# .
+# framework.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+%w( init init_modules create_project license_text ).each do |lib|
+  require File.join( "watobo", "framework", lib)
+end
+
+

data/lib/watobo/gui/about_watobo.rb

@@ -0,0 +1,68 @@
+# .
+# about_watobo.rb
+# 
+# Copyright 2012 by siberas, http://www.siberas.de
+# 
+# This file is part of WATOBO (Web Application Tool Box)
+#        http://watobo.sourceforge.com
+# 
+# WATOBO is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation version 2 of the License.
+# 
+# WATOBO is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with WATOBO; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+# .
+module Watobo
+  
+  
+  module Gui
+        
+    class AboutWatobo < FXDialogBox
+      def initialize(owner)
+        super(owner, "About WATOBO", :opts => DECOR_TITLE|DECOR_BORDER|DECOR_CLOSE|DECOR_RESIZE,:width=>600, :height=>600)
+        self.icon = Watobo::Gui::Icons::ICON_WATOBO
+        @font = FXFont.new(getApp(), "courier", 12, FONTWEIGHT_BOLD)
+        
+        main = FXVerticalFrame.new(self, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_GROOVE, :padding => 0)
+        main.backColor = FXColor::White
+        #main.verticalScrollBar.setLine(@font.fontHeight)
+        header = FXHorizontalFrame.new(main, :opts => LAYOUT_FIX_WIDTH|LAYOUT_FIX_HEIGHT, :width => 590, :height => 100, :padding => 0)
+        version = FXHorizontalFrame.new(main, :opts => LAYOUT_FILL_X, :padding => 0)
+        version.backColor = FXColor::White
+        
+        version_label  = FXLabel.new(version, "Version: #{$version}", nil, :opts => JUSTIFY_CENTER_X|LAYOUT_FILL_X)
+        version_label.setFont(FXFont.new(getApp(), "helvetica", 14, FONTWEIGHT_BOLD, FONTSLANT_ITALIC, FONTENCODING_DEFAULT))
+        version_label.backColor = FXColor::White
+        version_label.justify = JUSTIFY_CENTER_X
+        
+        #lic_frame = FXVerticalFrame.new(main, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
+        lic_frame = FXScrollWindow.new(main, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
+        
+        bottom = FXHorizontalFrame.new(main, :opts => LAYOUT_FILL_X)
+        
+        @imageview = FXImageView.new(header,
+                                     :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|HSCROLLER_NEVER|VSCROLLER_NEVER)
+        
+        @imageview.image = Watobo::Gui::Icons::WATOBO_LOGO
+        
+        btn = FXButton.new(lic_frame, Watobo::LICENSE,
+                           :opts => LAYOUT_FIX_WIDTH|LAYOUT_FIX_HEIGHT, :width => 575, :height => 400)
+        btn.font = @font
+        btn.backColor = FXColor::White
+        btn.justify = JUSTIFY_LEFT
+        
+        FXButton.new(bottom, "OK" ,
+        :target => self, :selector => FXDialogBox::ID_ACCEPT,
+        :opts => BUTTON_NORMAL|LAYOUT_RIGHT)
+        
+      end 
+    end
+  end
+end