yawast 0.6.0 → 0.7.0.beta1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 83f5d74a8796ef331534669c079965a7f0b558a6
-  data.tar.gz: b98c0de6ec0b415fcbfe8ad5e6121834d6428c38
+  metadata.gz: 1a0010955fcbfb843d4eaf927682a22df138b4a6
+  data.tar.gz: df672ffa6576e142c62fe0904f07ef90cc54c612
 SHA512:
-  metadata.gz: 69a364e0ea8fe6f53dc9cea28efca7520aa0ea5faf92d554ba04906a67c76362820f9772dc5fa477ebcc7b151e07e16033a2027031ec1d8bb3fb59a50075dc06
-  data.tar.gz: 32705ac1392cdfc4bc5ae3b9f6ac6671f0355b60555fd279fa4374d11215c8a1e2a631098da57aea9f49cdb219f96627a1be30157352d91095a28f43090356b0
+  metadata.gz: d1152a1e138492093e18834d8d542b4438a3904703a9449e6092857212db4d04048afeb9329e49bb591e217c1be82d06c1451a986a5e3cd517b66933dbacf018
+  data.tar.gz: 6ab13462bab4524b4e8c0347d0065b7947799ad6ab4ef6bed5bf38dadf090ad2d85e9bc1384a73247d302820ce034ea949824565960b93fedeaabc52797cbea1

data/.travis.yml

@@ -1,8 +1,11 @@
 language: ruby
 rvm:
-  - 2.2.8
   - 2.3.5
   - 2.4.2
+  - 2.6.0
+before_install:
+  - gem update --system
+  - gem install bundler
 script:
   - bundle exec rake
   - bundle exec rake submitcodeclimate

data/CHANGELOG.md

@@ -1,4 +1,19 @@
-## 0.6.0 - In Development
+## 0.7.0 - In Development
+
+* [#38](https://github.com/adamcaudill/yawast/issues/38) - Report Generation Mode (work in progress)
+* [#133](https://github.com/adamcaudill/yawast/issues/133) - Include a Timestamp In Output
+* [#134](https://github.com/adamcaudill/yawast/issues/134) - Add options to DNS command
+* [#135](https://github.com/adamcaudill/yawast/issues/135) - Incomplete Certificate Chain Warning
+* [#137](https://github.com/adamcaudill/yawast/issues/137) - Warn on TLS 1.0
+* [#138](https://github.com/adamcaudill/yawast/issues/138) - Warn on Symantec Roots
+* [#139](https://github.com/adamcaudill/yawast/issues/139) - Add Spider Option
+* [#140](https://github.com/adamcaudill/yawast/issues/140) - Save output on cancel
+* [#141](https://github.com/adamcaudill/yawast/issues/141) - Flag --internalssl as Deprecated
+* [#130](https://github.com/adamcaudill/yawast/issues/130) - Bug: HSTS Error leads to printing HTML
+* [#132](https://github.com/adamcaudill/yawast/issues/132) - Bug: Typo in SSL Output
+* [#142](https://github.com/adamcaudill/yawast/issues/142) - Bug: Error In Collecting DNS Information
+
+## 0.6.0 - 2018-01-16
 
 * [#54](https://github.com/adamcaudill/yawast/issues/54) - Check for Python version in Server header
 * [#59](https://github.com/adamcaudill/yawast/issues/59) - SSL Labs: Display Certificate Chain

data/LICENSE

@@ -1,6 +1,6 @@
 BSD 3-Clause License
 
-Copyright (c) 2013-2017, Adam Caudill <adam@adamcaudill.com>
+Copyright (c) 2013-2019, Adam Caudill <adam@adamcaudill.com>
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

data/bin/yawast

@@ -1,4 +1,5 @@
 #!/usr/bin/env ruby
+# encoding: UTF-8
 
 require 'commander/import'
 require File.dirname(__FILE__) + '/../lib/yawast'
@@ -26,6 +27,8 @@ command :scan do |c|
   c.option '--proxy STRING', String, 'HTTP Proxy Server (such as Burp Suite)'
   c.option '--cookie STRING', String, 'Session cookie'
   c.option '--nodns', 'Disable DNS checks'
+  c.option '--spider', 'Spider the site'
+  c.option '--output STRING', String, 'Output JSON file'
 
   c.action do |args, options|
     Yawast::Commands::Scan.process(args, options)
@@ -43,6 +46,7 @@ command :head do |c|
   c.option '--proxy STRING', String, 'HTTP Proxy Server (such as Burp Suite)'
   c.option '--cookie STRING', String, 'Session cookie'
   c.option '--nodns', 'Disable DNS checks'
+  c.option '--output STRING', String, 'Output JSON file'
 
   c.action do |args, options|
     Yawast::Commands::Head.process(args, options)
@@ -79,6 +83,10 @@ command :dns do |c|
   c.syntax = './yawast dns URL'
   c.description = 'Gets information about the server DNS configuration'
 
+  c.option '--srv', 'Scan for known SRV DNS Records'
+  c.option '--subdomains', 'Search for Common Subdomains'
+  c.option '--output STRING', String, 'Output JSON file'
+
   c.action do |args, options|
     Yawast::Commands::DNS.process(args, options)
   end

data/lib/commands/dns.rb

@@ -6,10 +6,15 @@ module Yawast
 
         Yawast.header
 
+        if options.output != nil
+          Yawast::Shared::Output.setup uri, options
+        end
+
         puts "Scanning: #{uri}"
         puts
 
         Yawast::Scanner::Plugins::DNS::Generic.dns_info uri, options
+        Yawast::Shared::Output.write_file
       end
     end
   end

data/lib/scanner/core.rb

@@ -14,10 +14,15 @@ module Yawast
 
           print_header
 
+          if options.output != nil
+            Yawast::Shared::Output.setup @uri, options
+          end
+
           ssl_redirect = Yawast::Scanner::Plugins::SSL::SSL.check_for_ssl_redirect @uri
           if ssl_redirect
             @uri = ssl_redirect
             puts "Server redirects to TLS: Scanning: #{@uri}"
+            Yawast::Shared::Output.log_value 'server_tls_redirect', @uri
           end
 
           Yawast::Scanner::Plugins::SSL::SSL.set_openssl_options
@@ -42,6 +47,7 @@ module Yawast
 
           #cache the HEAD result, so that we can minimize hits
           head = get_head
+          Yawast::Shared::Output.log_hash 'http', 'head', 'raw', head.to_hash
           Yawast::Scanner::Generic.head_info(head, @uri)
 
           #perfom SSL checks
@@ -63,6 +69,10 @@ module Yawast
             Yawast::Scanner::Generic.check_options(@uri)
             Yawast::Scanner::Generic.check_trace(@uri)
 
+            if options.spider
+              Yawast::Scanner::Plugins::Spider::Spider.spider(@uri)
+            end
+
             #check for common directories
             if options.dir
               Yawast::Scanner::Plugins::Http::DirectorySearch.search @uri, options.dirrecursive, options.dirlistredir
@@ -75,6 +85,7 @@ module Yawast
           # less than 24 hours. if a scan is that long, we have bigger problems
           elapsed_time = Time.at(Time.now - start_time).utc.strftime('%H:%M:%S')
 
+          Yawast::Shared::Output.write_file
           puts "Scan complete (#{elapsed_time})."
         rescue => e
           Yawast::Utilities.puts_error "Fatal Error: Can not continue. (#{e.class}: #{e.message})"

data/lib/scanner/generic.rb

@@ -24,6 +24,7 @@ module Yawast
           Yawast::Utilities.puts_info 'HEAD:'
           head.each do |k, v|
             Yawast::Utilities.puts_info "\t\t#{k}: #{v}"
+            Yawast::Shared::Output.log_value 'http', 'head', k, v
 
             server = v if k.downcase == 'server'
             powered_by = v if k.downcase == 'x-powered-by'
@@ -40,7 +41,11 @@ module Yawast
 
             if k.downcase == 'set-cookie'
               #this chunk of magic manages to properly split cookies, when multiple are sent together
-              v.gsub(/(,([^;,]*=)|,$)/) { "\r\n#{$2}" }.split(/\r\n/).each { |c| cookies.push(c) }
+              v.gsub(/(,([^;,]*=)|,$)/) { "\r\n#{$2}" }.split(/\r\n/).each do |c|
+                cookies.push(c)
+
+                Yawast::Shared::Output.log_append_value 'http', 'head', 'cookies', c
+              end
             end
           end
           puts ''
@@ -163,11 +168,13 @@ module Yawast
 
           if res['Public'] != nil
             Yawast::Utilities.puts_info "Public HTTP Verbs (OPTIONS): #{res['Public']}"
+            Yawast::Shared::Output.log_value 'http', 'options', 'public', res['Public']
 
             puts ''
           end
           if res['Allow'] != nil
             Yawast::Utilities.puts_info "Allow HTTP Verbs (OPTIONS): #{res['Allow']}"
+            Yawast::Shared::Output.log_value 'http', 'options', 'allow', res['Allow']
 
             puts ''
           end
@@ -187,6 +194,9 @@ module Yawast
 
             puts ''
           end
+
+          Yawast::Shared::Output.log_value 'http', 'trace', 'raw', res.body
+          Yawast::Shared::Output.log_value 'http', 'trace', 'code', res.code
         end
       end
 
@@ -203,6 +213,11 @@ module Yawast
 
             puts ''
           end
+
+          Yawast::Shared::Output.log_value 'http', 'propfind', 'raw', res.body
+          Yawast::Shared::Output.log_value 'http', 'propfind', 'code', res.code
+          Yawast::Shared::Output.log_value 'http', 'propfind', 'content-type', res['Content-Type']
+          Yawast::Shared::Output.log_value 'http', 'propfind', 'length', res.body.length
         end
       end
     end

data/lib/scanner/plugins/dns/caa.rb

@@ -35,6 +35,8 @@ module Yawast
                 cname = get_cname_record(domain)
                 if cname != nil
                   Yawast::Utilities.puts_info "\t\tCAA (#{domain}): CNAME Found: -> #{cname}"
+                  Yawast::Shared::Output.log_value 'dns', 'caa', domain, "CNAME: #{cname}"
+
                   chase_domain cname.to_s
                 else
                   print_caa_record domain
@@ -66,6 +68,8 @@ module Yawast
                 # check for RDATA
                 if rec.rdata != nil
                   Yawast::Utilities.puts_info "\t\tCAA (#{domain}): #{rec.rdata}"
+
+                  Yawast::Shared::Output.log_append_value 'dns', 'caa', domain, rec.rdata
                 else
                   Yawast::Utilities.puts_error "\t\tCAA (#{domain}): Invalid Response: #{ans.answer}"
                 end
@@ -73,6 +77,8 @@ module Yawast
             else
               # no answer, so no records
               Yawast::Utilities.puts_info "\t\tCAA (#{domain}): No Records Found"
+
+              Yawast::Shared::Output.log_value 'dns', 'caa', domain, 'nil'
             end
           end
         end

data/lib/scanner/plugins/dns/generic.rb

@@ -21,9 +21,13 @@ module Yawast
 
                     Yawast::Utilities.puts_info "\t\t#{ip.address} (#{host_name})"
 
+                    Yawast::Shared::Output.log_value 'dns', 'a', ip.address, host_name
+
                     # if address is private, force internal SSL mode, don't show links
                     if IPAddr.new(ip.address.to_s, Socket::AF_INET).private?
                       options.internalssl = true
+
+                      Yawast::Shared::Output.log_value 'force_internal_ssl', true
                     else
                       #show network info
                       Yawast::Utilities.puts_info "\t\t\t#{get_network_info(ip.address)}"
@@ -45,6 +49,8 @@ module Yawast
 
                     Yawast::Utilities.puts_info "\t\t#{ip.address} (#{host_name})"
 
+                    Yawast::Shared::Output.log_value 'dns', 'aaaa', ip.address, host_name
+
                     # if address is private, force internal SSL mode, don't show links
                     if IPAddr.new(ip.address.to_s, Socket::AF_INET6).private?
                       options.internalssl = true
@@ -61,16 +67,24 @@ module Yawast
                 unless txt.empty?
                   txt.each do |rec|
                     Yawast::Utilities.puts_info "\t\tTXT: #{rec.data}"
+
+                    Yawast::Shared::Output.log_append_value 'dns', 'txt', uri.host, rec.data
                   end
                 end
 
                 #check for higher-level TXT records, if we aren't already at the top
                 if root_domain != uri.host
-                  txt = resv.getresources(root_domain, Resolv::DNS::Resource::IN::TXT)
-                  unless txt.empty?
-                    txt.each do |rec|
-                      Yawast::Utilities.puts_info "\t\tTXT (#{root_domain}): #{rec.data}"
+                  begin
+                    txt = resv.getresources(root_domain, Resolv::DNS::Resource::IN::TXT)
+                    unless txt.empty?
+                      txt.each do |rec|
+                        Yawast::Utilities.puts_info "\t\tTXT (#{root_domain}): #{rec.data}"
+
+                        Yawast::Shared::Output.log_append_value 'dns', 'txt', root_domain, rec.data
+                      end
                     end
+                  rescue => e
+                    Yawast::Utilities.puts_error "\t\tTXT: #{root_domain} (Error: #{e.message})"
                   end
                 end
 
@@ -81,6 +95,8 @@ module Yawast
                       ip = resv.getaddress rec.exchange
 
                       Yawast::Utilities.puts_info "\t\tMX: #{rec.exchange} (#{rec.preference}) - #{ip} (#{get_network_info(ip.to_s)})"
+
+                      Yawast::Shared::Output.log_value 'dns', 'mx', rec.exchange, ip
                     rescue => e
                       Yawast::Utilities.puts_error "\t\tMX: #{rec.exchange} (#{rec.preference}) - Error: #{e.message})"
                     end
@@ -96,6 +112,8 @@ module Yawast
                         ip = resv.getaddress rec.exchange
 
                         Yawast::Utilities.puts_info "\t\tMX (#{root_domain}): #{rec.exchange} (#{rec.preference}) - #{ip} (#{get_network_info(ip.to_s)})"
+
+                        Yawast::Shared::Output.log_value 'dns', 'mx', rec.exchange, ip
                       rescue => e
                         Yawast::Utilities.puts_error "\t\tMX (#{root_domain}): #{rec.exchange} (#{rec.preference}) - Error: #{e.message})"
                       end
@@ -109,6 +127,8 @@ module Yawast
                     ip = resv.getaddress rec.name
 
                     Yawast::Utilities.puts_info "\t\tNS: #{rec.name} - #{ip} (#{get_network_info(ip.to_s)})"
+
+                    Yawast::Shared::Output.log_value 'dns', 'ns', rec.name, ip
                   end
                 end
 
@@ -145,6 +165,8 @@ module Yawast
                       ip = resv.getaddress rec.target
 
                       Yawast::Utilities.puts_info "\t\tSRV: #{host}: #{rec.target}:#{rec.port} - #{ip} (#{get_network_info(ip.to_s)})"
+
+                      Yawast::Shared::Output.log_value 'dns', 'srv', host, "#{rec.target}:#{rec.port}"
                     end
                   end
                 rescue
@@ -169,6 +191,8 @@ module Yawast
                       else
                         Yawast::Utilities.puts_info "\t\tA: #{host}: #{ip.address} (#{get_network_info(ip.address)})"
                       end
+
+                      Yawast::Shared::Output.log_value 'dns', 'subdomain', host, ip.address
                     end
                   end
                 rescue
@@ -194,6 +218,8 @@ module Yawast
               ret = "#{network_info['as_country_code']} - #{network_info['as_description']}"
               @netinfo[ip] = ret
 
+              Yawast::Shared::Output.log_value 'dns', 'asn_info', ip, ret
+
               return ret
             rescue => e
               @netinfo_failed = true

data/lib/scanner/plugins/http/directory_search.rb

@@ -99,10 +99,12 @@ module Yawast
 
               if res.code == '200'
                 @results.push "\tFound: '#{uri}'"
+                Yawast::Shared::Output.log_append_value 'http', 'http_dir', uri
 
                 load_queue uri if @recursive
               elsif res.code == '301' && @list_redirects
                 @results.push "\tFound Redirect: '#{uri} -> '#{res['Location']}'"
+                Yawast::Shared::Output.log_value 'http', 'http_dir_redirect', uri, res['Location']
               end
             rescue => e
               unless e.message.include?('end of file') || e.message.include?('getaddrinfo')

data/lib/scanner/plugins/http/file_presence.rb

@@ -163,6 +163,7 @@ module Yawast
 
               if res.code == '200'
                 @results.push "'#{uri.path}' found: #{uri}"
+                Yawast::Shared::Output.log_append_value 'http', 'http_file', uri
               end
             rescue => e
               unless e.message.include?('end of file') || e.message.include?('getaddrinfo')

data/lib/scanner/plugins/servers/apache.rb

@@ -71,6 +71,8 @@ module Yawast
 
                 if version != nil && version[0] != nil
                   Yawast::Utilities.puts_warn "Apache Tomcat Version Found: #{version[0]}"
+                  Yawast::Shared::Output.log_value 'apache', 'tomcat_version', version[0]
+                  
                   puts "\t\t\"curl -X XYZ #{uri}\""
 
                   puts ''
@@ -80,8 +82,8 @@ module Yawast
           end
 
           def self.check_tomcat_manager(uri)
-            check_tomcat_manager_paths uri, 'manager', 'Manager'
-            check_tomcat_manager_paths uri, 'host-manager', 'Host Manager'
+            check_tomcat_manager_paths uri.copy, 'manager', 'Manager'
+            check_tomcat_manager_paths uri.copy, 'host-manager', 'Host Manager'
           end
 
           def self.check_tomcat_manager_paths(uri, base_path, manager)
@@ -93,16 +95,19 @@ module Yawast
             if ret.include? '<tt>conf/tomcat-users.xml</tt>'
               #this will get Tomcat 7+
               Yawast::Utilities.puts_warn "Apache Tomcat #{manager} page found: #{uri}"
+              Yawast::Shared::Output.log_value 'apache', 'tomcat_mgr', manager, uri
               check_tomcat_manager_passwords uri, manager
 
               puts ''
             else
               #check for Tomcat 6 and below
+              uri = uri.copy
               uri.path = "/#{base_path}"
               ret = Yawast::Shared::Http.get(uri)
 
               if ret.include? '<tt>conf/tomcat-users.xml</tt>'
                 Yawast::Utilities.puts_warn "Apache Tomcat #{manager} page found: #{uri}"
+                Yawast::Shared::Output.log_value 'apache', 'tomcat_mgr', manager, uri
                 check_tomcat_manager_passwords uri, manager
 
                 puts ''
@@ -125,6 +130,8 @@ module Yawast
             if ret.include?('<font size="+2">Tomcat Web Application Manager</font>') ||
                 ret.include?('<font size="+2">Tomcat Virtual Host Manager</font>')
               Yawast::Utilities.puts_vuln "Apache Tomcat #{manager} weak password: #{credentials}"
+
+              Yawast::Shared::Output.log_value 'apache', 'tomcat_mgr_pwd', uri, credentials
             end
           end
 
@@ -133,9 +140,13 @@ module Yawast
             uri.path = "/#{SecureRandom.hex}.jsp/"
             uri.query = '' if uri.query != nil
 
+            Yawast::Shared::Output.log_value 'apache', 'cve_2017_12615', 'path', uri
+
             # we'll use this to verify that it actually worked
             check_value = SecureRandom.hex
 
+            Yawast::Shared::Output.log_value 'apache', 'cve_2017_12615', 'check_value', check_value
+
             # upload the JSP file
             req_data = "<% out.println(\"#{check_value}\");%>"
             Yawast::Shared::Http.put(uri, req_data)
@@ -143,8 +154,14 @@ module Yawast
             # check to see of we get check_value back
             uri.path = uri.path.chomp('/')
             res = Yawast::Shared::Http.get(uri)
+
+            Yawast::Shared::Output.log_value 'apache', 'cve_2017_12615', 'body', res
+
             if res.include? check_value
               Yawast::Utilities.puts_vuln "Apache Tomcat PUT RCE (CVE-2017-12615): #{uri}"
+              Yawast::Shared::Output.log_value 'apache', 'cve_2017_12615', 'vulnerable', true
+            else
+              Yawast::Shared::Output.log_value 'apache', 'cve_2017_12615', 'vulnerable', false
             end
           end
 
@@ -159,9 +176,12 @@ module Yawast
             search.push '/struts2-rest-showcase/'
 
             search.each do |path|
+              uri = uri.copy
               uri.path = path
 
               ret = Yawast::Shared::Http.get_status_code uri
+              Yawast::Shared::Output.log_value 'apache', 'struts2_sample_files', uri, ret
+
               if ret == 200
                 Yawast::Utilities.puts_warn "Apache Struts2 Sample Files: #{uri}"
               end
@@ -176,6 +196,7 @@ module Yawast
 
             if ret.include? search
               Yawast::Utilities.puts_vuln "#{search} page found: #{uri}"
+              Yawast::Shared::Output.log_value 'apache', 'page_search', search, uri
               puts ''
             end
           end

data/lib/scanner/plugins/servers/iis.rb

@@ -48,6 +48,9 @@ module Yawast
               if res.code == 200
                 Yawast::Utilities.puts_vuln 'ASP.NET Debugging Enabled'
               end
+
+              Yawast::Shared::Output.log_value 'http', 'asp_net_debug', 'raw', res.body
+              Yawast::Shared::Output.log_value 'http', 'asp_net_debug', 'code', res.code
             end
           end
         end

data/lib/scanner/plugins/spider/spider.rb

@@ -0,0 +1,65 @@
+require 'nokogiri'
+
+module Yawast
+  module Scanner
+    module Plugins
+      module Spider
+        class Spider
+          def self.spider(uri)
+            @uri = uri.copy
+
+            @workers = []
+            @results = Queue.new
+
+            @links = []
+            @links.push @uri.to_s
+            puts 'Spidering site...'
+            get_links @uri
+
+            results = Thread.new do
+              begin
+                while true
+                  if @results.length > 0
+                    out = @results.pop(true)
+                    Yawast::Utilities.puts_info out
+                    Yawast::Shared::Output.log_append_value 'spider', 'get', out
+                  end
+                end
+              rescue ThreadError
+                #do nothing
+              end
+            end
+
+            @workers.map(&:join)
+            results.terminate
+
+            puts
+          end
+
+          def self.get_links(uri)
+            # get the page, and work out from there
+            res = Yawast::Shared::Http.get_with_code uri
+            doc = Nokogiri::HTML res[:body]
+
+            results = doc.css('a').map { |link| link['href'] }
+
+            results.each do |link|
+              # check to see if this link is in scope
+              if link.to_s.include?(@uri.to_s) && res[:code] == '200'
+                # check to see if we've already seen this one
+                unless @links.include? link.to_s
+                  @links.push link.to_s
+                  @results.push "#{link.to_s}"
+
+                  @workers.push Thread.new {
+                    get_links URI.parse(link)
+                  }
+                end
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/scanner/plugins/ssl/ssl.rb

@@ -45,20 +45,25 @@ module Yawast
 
               Yawast::Utilities.puts_info "HSTS Preload: Chrome - #{chrome}; Firefox - #{firefox}; Tor - #{tor}"
             rescue => e
-              Yawast::Utilities.puts_error "Error getting HSTS preload information: #{e.message}"
+              if e.message.include? 'unexpected token'
+                #this means we have a parsing error - don't need to include the entire message
+                Yawast::Utilities.puts_error "Error getting HSTS preload information: #{e.message.truncate(30)}"
+              else
+                Yawast::Utilities.puts_error "Error getting HSTS preload information: #{e.message}"
+              end
             end
           end
 
           def self.set_openssl_options
-            #change certain defaults, to make things work better
-            #we prefer RSA, to avoid issues with small DH keys
+            # change certain defaults, to make things work better
+            # we prefer RSA, to avoid issues with small DH keys
             OpenSSL::SSL::SSLContext::DEFAULT_PARAMS[:ciphers] = 'RSA:ALL:COMPLEMENTOFALL'
             OpenSSL::SSL::SSLContext::DEFAULT_PARAMS[:verify_mode] = OpenSSL::SSL::VERIFY_NONE
             OpenSSL::SSL::SSLContext::DEFAULT_PARAMS[:options] = OpenSSL::SSL::OP_ALL
           end
 
           def self.check_for_ssl_redirect(uri)
-            #check to see if the site redirects to SSL by default
+            # check to see if the site redirects to SSL by default
             if uri.scheme != 'https'
               head = Yawast::Shared::Http.head(uri)
 
@@ -67,11 +72,11 @@ module Yawast
                   location = URI.parse(head['Location'])
 
                   if location.scheme == 'https'
-                    #we run this through extract_uri as it performs a few checks we need
+                    # we run this through extract_uri as it performs a few checks we need
                     return Yawast::Shared::Uri.extract_uri location.to_s
                   end
                 rescue
-                  #we don't care if this fails
+                  # we don't care if this fails
                 end
               end
             end
@@ -94,8 +99,11 @@ module Yawast
                 ssl.connect
 
                 # this provides a bunch of useful info, that's already formatted
-                #  instead of building this manually, we'll let OpenSSL do the work
-                puts ssl.session.to_text
+                #  instead of building this manually, we'll let OpenSSL do the
+                session_info = ssl.session.to_text
+                puts session_info
+
+                Yawast::Shared::Output.log_value 'ssl', 'session', 'info', session_info
 
                 puts
               end
@@ -103,6 +111,68 @@ module Yawast
               Yawast::Utilities.puts_error "SSL Information: Error Getting Details: #{e.message}"
             end
           end
+
+          def self.check_symantec_root(hash)
+            roots = ['08297a4047dba23680c731db6e317653ca7848e1bebd3a0b0179a707f92cf178',
+                     '2399561127a57125de8cefea610ddf2fa078b5c8067f4e828290bfb860e84b3c',
+                     '2834991cf677466d22baac3b0055e5b911d9a9e55f5b85ba02dc566782c30e8a',
+                     '2930bd09a07126bdc17288d4f2ad84645ec948607907a97b5ed0b0b05879ef69',
+                     '2f274e48aba4ac7b765933101775506dc30ee38ef6acd5c04932cfe041234220',
+                     '309b4a87f6ca56c93169aaa99c6d988854d7892bd5437e2d07b29cbeda55d35d',
+                     '3266967e59cd68008d9dd320811185c704205e8d95fdd84f1c7b311e6704fc32',
+                     '341de98b1392abf7f4ab90a960cf25d4bd6ec65b9a51ce6ed067d00ec7ce9b7f',
+                     '363f3c849eab03b0a2a0f636d7b86d04d3ac7fcfe26a0a9121ab9795f6e176df',
+                     '37d51006c512eaab626421f1ec8c92013fc5f82ae98ee533eb4619b8deb4d06c',
+                     '3a43e220fe7f3ea9653d1e21742eac2b75c20fd8980305bc502caf8c2d9b41a1',
+                     '3f9f27d583204b9e09c8a3d2066c4b57d3a2479c3693650880505698105dbce9',
+                     '44640a0a0e4d000fbd574d2b8a07bdb4d1dfed3b45baaba76f785778c7011961',
+                     '4b03f45807ad70f21bfc2cae71c9fde4604c064cf5ffb686bae5dbaad7fdd34c',
+                     '53dfdfa4e297fcfe07594e8c62d5b8ab06b32c7549f38a163094fd6429d5da43',
+                     '5b38bd129e83d5a0cad23921089490d50d4aae370428f8ddfffffa4c1564e184',
+                     '5edb7ac43b82a06a8761e8d7be4979ebf2611f7dd79bf91c1c6b566a219ed766',
+                     '5f0b62eab5e353ea6521651658fbb65359f443280a4afbd104d77d10f9f04c07',
+                     '614fd18da1490560cdad1196e2492ab7062eab1a67b3a30f1d0585a7d6ba6824',
+                     '69ddd7ea90bb57c93e135dc85ea6fcd5480b603239bdc454fc758b2a26cf7f79',
+                     '76ef4762e573206006cbc338b17ca4bc200574a11928d90c3ef31c5e803e6c6f',
+                     '83ce3c1229688a593d485f81973c0f9195431eda37cc5e36430e79c7a888638b',
+                     '87c678bfb8b25f38f7e97b336956bbcf144bbacaa53647e61a2325bc1055316b',
+                     '8d722f81a9c113c0791df136a2966db26c950a971db46b4199f4ea54b78bfb9f',
+                     '8dbb5a7c06c20ef62dd912a36740992ff6e1e8583d42ede257c3affd7c769399',
+                     '8f9e2751dcd574e9ba90e744ea92581fd0af640ae86ac1ce2198c90f96b44823',
+                     '92a9d9833fe1944db366e8bfae7a95b6480c2d6c6c2a1be65d4236b608fca1bb',
+                     '944554239d91ed9efedcf906d5e8113160b46fc816dc6bdc77b89da29b6562b9',
+                     '9acfab7e43c8d880d06b262a94deeee4b4659989c3d0caf19baf6405e41ab7df',
+                     '9d190b2e314566685be8a889e27aa8c7d7ae1d8aaddba3c1ecf9d24863cd34b9',
+                     '9e503738722e0a104cf659ff9f92f0b5b3662acd112d4664d1e7db93abf46a59',
+                     'a0234f3bc8527ca5628eec81ad5d69895da5680dc91d1cb8477f33f878b95b0b',
+                     'a0459b9f63b22559f5fa5d4c6db3f9f72ff19342033578f073bf1d1b46cbb912',
+                     'a4310d50af18a6447190372a86afaf8b951ffb431d837f1e5688b45971ed1557',
+                     'a4b6b3996fc2f306b3fd8681bd63413d8c5009cc4fa329c2ccf0e2fa1b140305',
+                     'b32396746453442f353e616292bb20bbaa5d23b546450fdb9c54b8386167d529',
+                     'b478b812250df878635c2aa7ec7d155eaa625ee82916e2cd294361886cd1fbd4',
+                     'bb6ce72f0e64bfd93ade14b1becf8c41e7bc927cafb477a3a95878c01aa26c3e',
+                     'bcff2ab03578ebbfb219b65e854cf26a3d8dfe6d1acf3e765b8636827b81eaee',
+                     'c38dcb38959393358691ea4d4f3ce495ce748996e64ed1891d897a0fc4dd55c6',
+                     'c4fa68f8270924c300cbc0d3615a7b88e82231749cf6522452272222c9f0a83e',
+                     'ca2d82a08677072f8ab6764ff035676cfe3e5e325e012172df3f92096db79b85',
+                     'cb627d18b58ad56dde331a30456bc65c601a4e9b18dedcea08e7daaa07815ff0',
+                     'cb6b05d9e8e57cd882b10b4db70de4bb1de42ba48a7bd0318b635bf6e7781a9d',
+                     'cbb02707160f4f77291a27561448691ca5901808e5f36e758449a862aa5272cb',
+                     'cbb5af185e942a2402f9eacbc0ed5bb876eea3c1223623d00447e4f3ba554b65',
+                     'cf56ff46a4a186109dd96584b5eeb58a510c4275b0e5f94f40bbae865e19f673',
+                     'd17cd8ecd586b712238a482ce46fa5293970742f276d8ab6a9e46ee0288f3355',
+                     'ddcef1660de3b06996507f56168865a20b43cda89cf7e8735a82b83bba00c498',
+                     'e389360d0fdbaeb3d250584b4730314e222f39c156a020144e8d960561791506',
+                     'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855',
+                     'e6b8f8766485f807ae7f8dac1670461f07c0a13eef3a1ff717538d7abad391b4',
+                     'eb04cf5eb1f39afa762f2bb120f296cba520c1b97db1589565b81cb9a17b7244',
+                     'ebf3c02a8789b1fb7d511995d663b72906d913ce0d5e10568a8a77e2586167e7',
+                     'f5074a8f5b9a5b8142f34abe152f60364d770eae75ee3eeceb45b6b996509788',
+                     'f59db3f45d57fcec94ccd516e6c8ccb20dd4363feb2c44d8656e95f50fdd8df8',
+                     'fe863d0822fe7a2353fa484d5924e875656d3dc9fb58771f6f616f9d571bc592',
+                     'ff856a2d251dcd88d36656f450126798cfabaade40799c722de4d2b5db36a73a']
+            return roots.include? hash
+          end
         end
       end
     end