yawast 0.3.0.beta1 → 0.3.0.beta2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 79985d80e1ef75ebc9280fe083940f9709c6b9c3
-  data.tar.gz: 628bcc0da114c9c153554b5687b0c85b96390ccf
+  metadata.gz: acaf00690ddc7c68663b94e73a5eb2b0eb51c080
+  data.tar.gz: 4a85fddd2486d54ac441f0b487fef339006ff7e9
 SHA512:
-  metadata.gz: 6ff471e7849b98ce68f6c2d83e23e6358a7f863bb98f7430ad715b2d5dcd9fc77c8c4d17d49bb5611f2f3488e475cb51c40013d320e56b98f0970c9f6df01925
-  data.tar.gz: 0fff13c7d0e3b06e9fbb0c0a02b13430200d1312762fef5a1fc268093d1d9322e5d056d23db1c37c974b44c98919e0c8c7dd66d7fe157f1faab4b4e38c29afc2
+  metadata.gz: a38229adaec840c4837bd53d063453a4ca755bcd666a7d9aeab00857119b61a70a5fbc9a57ddb8ca457f7c4253ccb5dd6d93afc61a6b6b35ec6fe89c2205e3cf
+  data.tar.gz: 70f4418e59b3ce272d46b53bc3b5b0bbba7300a916f5ac027c39158848fdd9a5939244b3cb52f250d490251dd657af24ce2d4f389d429d6128e4915dfba8af5d

data/CHANGELOG.md

@@ -2,6 +2,7 @@
 
 * [#61](https://github.com/adamcaudill/yawast/issues/61) - SSL Session Count: force 3DES suites
 * [#23](https://github.com/adamcaudill/yawast/issues/23) - Add check for HTTP to HTTPS redirect
+* [#63](https://github.com/adamcaudill/yawast/issues/63) - Rename `--sslsessioncount` to `--tdessessioncount`
 
 ## 0.2.2 - 2016-08-07
 

data/README.md

@@ -80,6 +80,7 @@ Checks for the following SSL issues are performed:
 * SHA1 Signature
 * RC4 Cipher Suites
 * Weak (< 128 bit) Cipher Suites
+* SWEET32
 
 In addition to these tests, certain basic information is also displayed, such as IPs (and the PTR record for each IP), HTTP HEAD request, and others.
 
@@ -180,9 +181,9 @@ This mode is the most comprehensive, and contains far more data than the Interna
 
 ### Usage
 
-* Standard scan: `./yawast scan <url> [--internalssl] [--nossl] [--nociphers] [--dir] [--proxy localhost:8080] [--cookie SESSIONID=12345]`
-* HEAD-only scan: `./yawast head <url> [--internalssl] [--nossl] [--nociphers] [--proxy localhost:8080] [--cookie SESSIONID=12345]`
-* SSL information: `./yawast ssl <url> [--internalssl] [--nociphers]`
+* Standard scan: `./yawast scan <url> [--internalssl] [--tdessessioncount] [--nossl] [--nociphers] [--dir] [--proxy localhost:8080] [--cookie SESSIONID=12345]`
+* HEAD-only scan: `./yawast head <url> [--internalssl] [--tdessessioncount] [--nossl] [--nociphers] [--proxy localhost:8080] [--cookie SESSIONID=12345]`
+* SSL information: `./yawast ssl <url> [--internalssl] [--tdessessioncount] [--nociphers]`
 * CMS detection: `./yawast cms <url> [--proxy localhost:8080] [--cookie SESSIONID=12345]`
 
 For detailed information, just call `./yawast -h` to see the help page. To see information for a specific command, call `./yawast -h <command>` for full details.
@@ -204,7 +205,7 @@ For authenticated testing, YAWAST allows you to specify a cookie to be passed vi
 Using `scan` - the normal go-to option, here's what you get when scanning my website:
 
 ```
-$yawast scan https://adamcaudill.com --dir --sslsessioncount
+$yawast scan https://adamcaudill.com --dir --tdessessioncount
  __   _____  _    _  ___   _____ _____ 
  \ \ / / _ \| |  | |/ _ \ /  ___|_   _|
   \ V / /_\ \ |  | / /_\ \\ `--.  | |  

data/bin/yawast

@@ -16,7 +16,7 @@ command :scan do |c|
   c.option '--nossl', 'Disables SSL checks'
   c.option '--nociphers', 'Disables check for supported ciphers (only with --internalssl)'
   c.option '--internalssl', 'Disable SSL Labs integration'
-  c.option '--sslsessioncount', 'Counts the number of messages that can be sent in a single session'
+  c.option '--tdessessioncount', 'Counts the number of messages that can be sent in a single session'
   c.option '--dir', 'Enables directory search'
   c.option '--dirrecursive', 'Recursive directory search (only with --dir)'
   c.option '--proxy STRING', String, 'HTTP Proxy Server (such as Burp Suite)'
@@ -34,7 +34,7 @@ command :head do |c|
   c.option '--nossl', 'Disables SSL checks'
   c.option '--nociphers', 'Disables check for supported ciphers (only with --internalssl)'
   c.option '--internalssl', 'Disable SSL Labs integration'
-  c.option '--sslsessioncount', 'Counts the number of messages that can be sent in a single session'
+  c.option '--tdessessioncount', 'Counts the number of messages that can be sent in a single session'
   c.option '--proxy STRING', String, 'HTTP Proxy Server (such as Burp Suite)'
   c.option '--cookie STRING', String, 'Session cookie'
 
@@ -49,7 +49,7 @@ command :ssl do |c|
 
   c.option '--nociphers', 'Disables check for supported ciphers (only with --internalssl)'
   c.option '--internalssl', 'Disable SSL Labs integration'
-  c.option '--sslsessioncount', 'Counts the number of messages that can be sent in a single session'
+  c.option '--tdessessioncount', 'Counts the number of messages that can be sent in a single session'
 
   c.action do |args, options|
     Yawast::Commands::Ssl.process(args, options)

data/lib/scanner/apache.rb

@@ -3,7 +3,7 @@ module Yawast
     class Apache
       def self.check_banner(banner)
         #don't bother if this doesn't look like Apache
-        return if !banner.include? 'Apache'
+        return unless banner.include? 'Apache'
         @apache = true
 
         modules = banner.split(' ')

data/lib/scanner/core.rb

@@ -111,9 +111,9 @@ module Yawast
           head = Yawast::Shared::Http.head(@uri) if head == nil
 
           if options.internalssl
-            Yawast::Scanner::Ssl.info(uri, !options.nociphers, options.sslsessioncount)
+            Yawast::Scanner::Ssl.info(uri, !options.nociphers, options.tdessessioncount)
           else
-            Yawast::Scanner::SslLabs.info(@uri, options.sslsessioncount)
+            Yawast::Scanner::SslLabs.info(@uri, options.tdessessioncount)
           end
 
           Yawast::Scanner::Ssl.check_hsts(head)

data/lib/scanner/generic.rb

@@ -273,7 +273,7 @@ module Yawast
           headers = Yawast::Shared::Http.get_headers
           res = req.request(Trace.new('/', headers))
 
-          if res.body.include? 'TRACE / HTTP/1.1' && res.code == '200'
+          if res.body.include?('TRACE / HTTP/1.1') && res.code == '200'
             Yawast::Utilities.puts_warn 'HTTP TRACE Enabled'
             puts "\t\t\"curl -X TRACE #{uri}\""
 

data/lib/scanner/iis.rb

@@ -3,7 +3,7 @@ module Yawast
     class Iis
       def self.check_banner(banner)
         #don't bother if this doesn't include IIS
-        return if !banner.include? 'Microsoft-IIS/'
+        return unless banner.include? 'Microsoft-IIS/'
         @iis = true
 
         Yawast::Utilities.puts_warn "IIS Version: #{banner}"
@@ -11,7 +11,7 @@ module Yawast
       end
 
       def self.check_all(uri, head)
-        return if !@iis
+        return unless @iis
 
         #run all the defined checks
         check_asp_banner(head)

data/lib/scanner/nginx.rb

@@ -3,7 +3,7 @@ module Yawast
     class Nginx
       def self.check_banner(banner)
         #don't bother if this doesn't include nginx
-        return if !banner.include? 'nginx/'
+        return unless banner.include? 'nginx/'
 
         Yawast::Utilities.puts_warn "nginx Version: #{banner}"
         puts ''

data/lib/scanner/php.rb

@@ -3,7 +3,7 @@ module Yawast
     class Php
       def self.check_banner(banner)
         #don't bother if this doesn't include PHP
-        return if !banner.include? 'PHP/'
+        return unless banner.include? 'PHP/'
 
         modules = banner.split(' ')
 

data/lib/scanner/ssl.rb

@@ -5,7 +5,7 @@ require 'digest/sha1'
 module Yawast
   module Scanner
     class Ssl
-      def self.info(uri, check_ciphers, sslsessioncount)
+      def self.info(uri, check_ciphers, tdes_session_count)
         begin
           socket = TCPSocket.new(uri.host, uri.port)
 
@@ -98,7 +98,7 @@ module Yawast
 
           ssl.sysclose
 
-          get_session_msg_count(uri) if sslsessioncount
+          get_tdes_session_msg_count(uri) if tdes_session_count
         rescue => e
           Yawast::Utilities.puts_error "SSL: Error Reading X509 Details: #{e.message}"
         end
@@ -178,7 +178,7 @@ module Yawast
         puts ''
       end
 
-        def self.get_session_msg_count(uri)
+        def self.get_tdes_session_msg_count(uri)
           # this method will send a number of HEAD requests to see
           #  if the connection is eventually killed.
           puts 'TLS Session Request Limit: Checking number of requests accepted using 3DES suites...'

data/lib/scanner/ssl_labs.rb

@@ -6,7 +6,7 @@ require 'digest/sha1'
 module Yawast
   module Scanner
     class SslLabs
-      def self.info(uri, sslsessioncount)
+      def self.info(uri, tdes_session_count)
         puts 'Beginning SSL Labs scan (this could take a minute or two)'
 
         api = Ssllabs::Api.new
@@ -51,7 +51,7 @@ module Yawast
               Yawast::Utilities.puts_error "Error getting information for IP: #{ep.ip_address}: #{e.message}"
             end
 
-            Yawast::Scanner::Ssl.get_session_msg_count(uri) if sslsessioncount
+            Yawast::Scanner::Ssl.get_tdes_session_msg_count(uri) if tdes_session_count
 
             puts
           end

data/lib/version.rb

@@ -1,3 +1,3 @@
 module Yawast
-  VERSION = '0.3.0.beta1'
+  VERSION = '0.3.0.beta2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: yawast
 version: !ruby/object:Gem::Version
-  version: 0.3.0.beta1
+  version: 0.3.0.beta2
 platform: ruby
 authors:
 - Adam Caudill
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-12 00:00:00.000000000 Z
+date: 2016-09-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ssllabs