Class: Watobo::Gui::FindingsTree

Inherits:

FXTreeList

• Object
• FXTreeList
• Watobo::Gui::FindingsTree

Includes:

Icons

Defined in:

lib/watobo/gui/findings_tree.rb

Constant Summary

Constants included from Icons

Icons::ICON_ADD_PROJECT, Icons::ICON_BROWSER_MEDIUM, Icons::ICON_BROWSER_SMALL, Icons::ICON_BTN_DOWN, Icons::ICON_BTN_UP, Icons::ICON_CB_CHECKED, Icons::ICON_CB_CHECKED_ORANGE, Icons::ICON_CB_UNCHECKED, Icons::ICON_CONVERSATION, Icons::ICON_DASHBOARD, Icons::ICON_DIFFER, Icons::ICON_FOLDER, Icons::ICON_FOLDER_SMALL, Icons::ICON_FUZZER, Icons::ICON_FUZZER_MEDIUM, Icons::ICON_FUZZER_SMALL, Icons::ICON_FUZZ_FILTER, Icons::ICON_FUZZ_GENERATOR, Icons::ICON_FUZZ_TAG, Icons::ICON_HINTS, Icons::ICON_HINTS_INFO, Icons::ICON_HINTS_INFO_SMALL, Icons::ICON_HINTS_SMALL, Icons::ICON_INFO, Icons::ICON_INFO_INFO, Icons::ICON_INFO_INFO_SMALL, Icons::ICON_INFO_SMALL, Icons::ICON_INFO_USER, Icons::ICON_INFO_USER_SMALL, Icons::ICON_INTERCEPTOR, Icons::ICON_LOGIN_WIZZARD, Icons::ICON_MANUAL_REQUEST, Icons::ICON_MANUAL_REQUEST_MEDIUM, Icons::ICON_MANUAL_REQUEST_SMALL, Icons::ICON_PAUSE, Icons::ICON_PLUGIN, Icons::ICON_PROJECT, Icons::ICON_PROJECT_SMALL, Icons::ICON_REPORT, Icons::ICON_REQUEST, Icons::ICON_REQUEST_SMALL, Icons::ICON_SEND_REQUEST, Icons::ICON_SITE, Icons::ICON_SITE_SMALL, Icons::ICON_START, Icons::ICON_STOP, Icons::ICON_TOKEN, Icons::ICON_TRANSCODER, Icons::ICON_VULN, Icons::ICON_VULN_BP, Icons::ICON_VULN_BP_SMALL, Icons::ICON_VULN_CRITICAL, Icons::ICON_VULN_CRITICAL_SMALL, Icons::ICON_VULN_HIGH, Icons::ICON_VULN_HIGH_SMALL, Icons::ICON_VULN_LOW, Icons::ICON_VULN_LOW_SMALL, Icons::ICON_VULN_MEDIUM, Icons::ICON_VULN_MEDIUM_SMALL, Icons::ICON_VULN_SMALL, Icons::ICON_WATOBO, Icons::SIBERAS_ICON, Icons::TBL_ICON_LOCK, Icons::WATOBO_LOGO

Constants included from Constants

Constants::AC_GROUP_APACHE, Constants::AC_GROUP_DOMINO, Constants::AC_GROUP_ENUMERATION, Constants::AC_GROUP_FILE_INCLUSION, Constants::AC_GROUP_FLASH, Constants::AC_GROUP_GENERIC, Constants::AC_GROUP_JBOSS, Constants::AC_GROUP_JOOMLA, Constants::AC_GROUP_SAP, Constants::AC_GROUP_SQL, Constants::AC_GROUP_TYPO3, Constants::AC_GROUP_XSS, Constants::AUTH_TYPE_BASIC, Constants::AUTH_TYPE_DIGEST, Constants::AUTH_TYPE_NONE, Constants::AUTH_TYPE_NTLM, Constants::CHAT_SOURCE_AUTO_SCAN, Constants::CHAT_SOURCE_FUZZER, Constants::CHAT_SOURCE_INTERCEPT, Constants::CHAT_SOURCE_MANUAL, Constants::CHAT_SOURCE_MANUAL_SCAN, Constants::CHAT_SOURCE_PROXY, Constants::CHAT_SOURCE_UNDEF, Constants::DEFAULT_PORT_HTTP, Constants::DEFAULT_PORT_HTTPS, Constants::FINDING_TYPE_HINT, Constants::FINDING_TYPE_INFO, Constants::FINDING_TYPE_UNDEFINED, Constants::FINDING_TYPE_VULN, Constants::FIRST_TIME_FILE, Constants::GUI_REGULAR_FONT_SIZE, Constants::GUI_SMALL_FONT_SIZE, Constants::ICON_PATH, Constants::LOG_DEBUG, Constants::LOG_INFO, Constants::SCAN_CANCELED, Constants::SCAN_FINISHED, Constants::SCAN_PAUSED, Constants::SCAN_STARTED, Constants::TE_CHUNKED, Constants::TE_COMPRESS, Constants::TE_DEFLATE, Constants::TE_GZIP, Constants::TE_IDENTITY, Constants::TE_NONE, Constants::VULN_RATING_CRITICAL, Constants::VULN_RATING_HIGH, Constants::VULN_RATING_INFO, Constants::VULN_RATING_LOW, Constants::VULN_RATING_MEDIUM, Constants::VULN_RATING_UNDEFINED

Instance Attribute Summary

• #project ⇒ Object

  Returns the value of attribute project.

Instance Method Summary

• #addFinding(finding) ⇒ Object
• #addFindingItem(finding) ⇒ Object
• #collapseFullTree(item) ⇒ Object
• #expandFullTree(item) ⇒ Object
• #hidden?(finding) ⇒ Boolean
• #hideDomain(domain_filter) ⇒ Object
• #initialize(parent, interface, project) ⇒ FindingsTree constructor

  A new instance of FindingsTree.

• #reload ⇒ Object
• #subscribe(event, &callback) ⇒ Object
• #useRegularIcons ⇒ Object
• #useSmallIcons ⇒ Object

Constructor Details

#initialize(parent, interface, project) ⇒ FindingsTree

Returns a new instance of FindingsTree.

# File 'lib/watobo/gui/findings_tree.rb', line 225

def initialize(parent, interface, project)
  @project = project
  @interface = interface
  @parent = parent
  @findings = Hash.new
  @show_scope_only = false
  @hide_false_positives = false
  @clipboard = ""
  @expandeds = []

  @event_dispatcher_listeners = Hash.new

  super(parent, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|LAYOUT_TOP|LAYOUT_RIGHT|TREELIST_SHOWS_LINES|TREELIST_SHOWS_BOXES|TREELIST_ROOT_BOXES|TREELIST_EXTENDEDSELECT)

  useRegularIcons()

  @filtered_domains = Hash.new # domains which already have been filtered
  
  self.connect(SEL_CLIPBOARD_REQUEST) do
      setDNDData(FROM_CLIPBOARD, FXWindow.stringType, Fox.fxencodeStringData(@clipboard.to_s))
  end
  
  self.connect(SEL_EXPANDED) do |sender, sel, item|
    parent = item
    while parent.parent
      parent = parent.parent
    end
    unless parent.nil? or item.nil?
      node = "#{parent.text}|#{item.text}"
      @expandeds << node
    end
  end
  
  self.connect(SEL_COLLAPSED) do |sender, sel, item|
    parent = item
    while parent.parent
      parent = parent.parent
    end
    node = "#{parent.text}|#{item.text}"
    @expandeds.delete node
  end

  self.connect(SEL_COMMAND) do |sender, sel, item|
    if self.itemLeaf?(item)
      getApp().beginWaitCursor do
        begin
          if item.data
            if item.data.is_a? Watobo::Finding
              #@interface.show_vuln(item.data)
              notify(:vuln_click, item.data)
            end
          end
        rescue => bang
          puts "!!! Error: could not show selected finding"
          puts bang
        end
      end
    elsif item.data == :title then
      #@interface.show_vuln(item.first.data) if item.first.data
      notify(:vuln_click, (item.first.data)) if item.first.data
    end
  end

  self.connect(SEL_DOUBLECLICKED) do |sender, sel, item|
    if self.itemLeaf?(item)
      begin
        puts item.data.class
        if item.data.is_a? Watobo::Finding
          #TODO: show vulnerability details
          # @interface.showFindingInfo(item.data)
          notify(:finding_click, item.data)
        else
          puts item.data.class.to_s
        end
      rescue => bang
        puts "!!! Error: could not show selected finding"
        puts bang
      end
    end
  end

  self.connect(SEL_RIGHTBUTTONRELEASE) do |sender, sel, event|
    unless event.moved?
      FXMenuPane.new(self) do |menu_pane|
        item = sender.getItemAt(event.win_x, event.win_y)
        
        
         unless item.nil?

          data = self.getItemData(item)

          
          unless self.itemLeaf?(item)
            FXMenuCommand.new(menu_pane, "expand tree" ).connect(SEL_COMMAND) {
              expandFullTree(item)
            }

            FXMenuCommand.new(menu_pane, "collapse tree" ).connect(SEL_COMMAND) {
              self.collapseFullTree(item)
            }
             FXMenuSeparator.new(menu_pane)
            end
          end
        target = FXMenuCheck.new(menu_pane, "show scope only" )

        target.check = @show_scope_only

        target.connect(SEL_COMMAND) { |ts, sl, it|
          @show_scope_only = ts.checked?
          reload
        }

        target = FXMenuCheck.new(menu_pane, "hide false-positives" )

        target.check = @hide_false_positives

        target.connect(SEL_COMMAND) { |ts, sl, it|
          @hide_false_positives = ts.checked?
          reload
        }
      
      
      
        unless item.nil?

          data = self.getItemData(item)

          FXMenuSeparator.new(menu_pane) unless data == :finding_type
          

          if data == :item_type_site then
           # FXMenuSeparator.new(menu_pane)
            FXMenuCommand.new(menu_pane, "add site to scope" ).connect(SEL_COMMAND) {
              #notify(:add_site_to_scope, item.to_s)
              Watobo::Scope.add item.to_s
              reload
            }
         # 
          elsif data == :title
             findings = []
                item.each do |ft|                        
                   f = self.getItemData(ft)
                   findings << f if f.is_a? Watobo::Finding
                end
                
             fp_submenu = FXMenuPane.new(self) do |sub|
               
               

              target = FXMenuCommand.new(sub, "Set False Positive" )
              target.connect(SEL_COMMAND) {
               
               
               # puts "* False Positive #{findings.length}"

                # remember parent node to expand it later
                fclass = item.parent.text
                fcat = item.parent.parent.text
                fsite = item.parent.parent.parent.text
                
                puts ">> #{fsite} - #{fcat} - #{fclass} (#{fclass.object_id})"
             
                notify(:set_false_positive, findings)
                
                reload
                
                site_item = cat_item = class_item = nil
                 site_item = self.findItem(fsite, nil,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 
                 unless site_item.nil?
                   self.expandTree(site_item)
                   cat_item = self.findItem(fcat, site_item,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 end
                  
                  unless cat_item.nil?
                    self.expandTree(cat_item)
                    class_item = self.findItem(fclass, cat_item,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 end
                 
                    
                 unless class_item.nil?
                   puts "Expanding #{class_item} (#{class_item.object_id})-> #{cat_item} -> #{site_item}"
                   self.expandTree(class_item)
                else
                  puts "Could not find tree item for #{class_item} (#{class_item.object_id})-> #{cat_item} -> #{site_item}"
                end
                   

              }
              target = FXMenuCommand.new(sub, "Unset False Positive" )
              target.connect(SEL_COMMAND) {
                fclass = item.parent.text
                fcat = item.parent.parent.text
                fsite = item.parent.parent.parent.text
                
                notify(:unset_false_positive, findings)
                reload
                 site_item = cat_item = class_item = nil
                 site_item = self.findItem(fsite, nil,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 
                 unless site_item.nil?
                   self.expandTree(site_item)
                   cat_item = self.findItem(fcat, site_item,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 end
                  
                  unless cat_item.nil?
                    self.expandTree(cat_item)
                    class_item = self.findItem(fclass, cat_item,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 end
                 
                    
                 unless class_item.nil?
                   puts "Expanding #{class_item} (#{class_item.object_id})-> #{cat_item} -> #{site_item}"
                   self.expandTree(class_item)
                else
                  puts "Could not find tree item for #{class_item} (#{class_item.object_id})-> #{cat_item} -> #{site_item}"
                end
              }

              FXMenuSeparator.new(sub)
              
              FXMenuCommand.new(sub, "Purge - NO UNDO!" ).connect(SEL_COMMAND) {
                notify(:purge_findings, findings)
                reload
            }
            end
             FXMenuCascade.new(menu_pane, "All \"#{item}\"", nil, fp_submenu)
             
             FXMenuSeparator.new(menu_pane)
            info = FXMenuCommand.new(menu_pane, "Details..." )
            info.connect(SEL_COMMAND) {
            #@interface.showFindingDetails(item.data)}
              notify(:show_finding_details, findings.first)
            }

          elsif data == :finding_class
            #puts "FINDING_CLASS"
            # COPY SUBMENU
            findings = []
                item.each do |c|
                  c.each do |ft|
                    f = self.getItemData(ft)
                    findings << f if f.is_a? Watobo::Finding
                  end

                end
                
            fp_submenu = FXMenuPane.new(self) do |sub|
              
               target = FXMenuCommand.new(sub, "Copy URLs" )
              target.connect(SEL_COMMAND) {
               
               urls = []
               findings.each do |f|
                 proto = f.request.proto
                 site = f.request.site
                 path = f.request.path
                 urls << "#{proto}://#{site}/#{path}"
               end
               types = [ FXWindow.stringType ]
               if acquireClipboard(types)
                 @clipboard = urls.uniq.join("\n")
               end
              }

              target = FXMenuCommand.new(sub, "Set False Positive" )
              target.connect(SEL_COMMAND) {
                
                fcat = item.parent.text
                fsite = item.parent.parent.text
                
                notify(:set_false_positive, findings)
                reload
                 site_item = cat_item = class_item = nil
                 site_item = self.findItem(fsite, nil,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 
                 unless site_item.nil?
                   self.expandTree(site_item)
                   cat_item = self.findItem(fcat, site_item,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 end
                  
                  unless cat_item.nil?
                    self.expandTree(cat_item)
                 end

              }
              target = FXMenuCommand.new(sub, "Unset False Positive" )
              target.connect(SEL_COMMAND) {
                fcat = item.parent.text
                fsite = item.parent.parent.text
                notify(:unset_false_positive, findings)
                reload
                site_item = cat_item = class_item = nil
                 site_item = self.findItem(fsite, nil,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 
                 unless site_item.nil?
                   self.expandTree(site_item)
                   cat_item = self.findItem(fcat, site_item,SEARCH_FORWARD|SEARCH_IGNORECASE)
                 end
                  
                  unless cat_item.nil?
                    self.expandTree(cat_item)
                 end
              }

              FXMenuSeparator.new(sub)
              FXMenuCommand.new(sub, "Purge - NO UNDO!" ).connect(SEL_COMMAND) {
                
                puts "* purge findings #{findings.length}"

                notify(:purge_findings, findings)
                reload
              }

            end
            FXMenuCascade.new(menu_pane, "All \"#{item}\"", nil, fp_submenu)
            
              FXMenuSeparator.new(menu_pane)
            info = FXMenuCommand.new(menu_pane, "Details..." )
            info.connect(SEL_COMMAND) {
            #@interface.showFindingDetails(item.data)}
              notify(:show_finding_details, findings.first)
            }

          elsif data.is_a? Watobo::Finding then
            FXMenuCommand.new(menu_pane, "Copy URL" ).connect(SEL_COMMAND){
              types = [ FXWindow.stringType ]
               if acquireClipboard(types)
                 @clipboard = item.data.request.url.to_s
               end
              
            }
           # FXMenuSeparator.new(menu_pane)
            doManual = FXMenuCommand.new(menu_pane, "Manual Request.." )
            doManual.connect(SEL_COMMAND) {
            # @interface.open_manual_request_editor(item.data)
              notify(:open_manual_request, item.data)

            }
            info = FXMenuCommand.new(menu_pane, "Details..." )
            info.connect(SEL_COMMAND) {
            #@interface.showFindingDetails(item.data)}
              notify(:show_finding_details, item.data)
            }
          end

        end
        menu_pane.create
        menu_pane.popup(nil, event.root_x, event.root_y)
        app.runModalWhileShown(menu_pane)
      end
    end
  end
end

Instance Attribute Details

#project ⇒ Object

Returns the value of attribute project.

# File 'lib/watobo/gui/findings_tree.rb', line 29

def project
  @project
end

Instance Method Details

#addFinding(finding) ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 120

def addFinding(finding)
  #  p "* add finding to tree"
  #  puts finding.details[:title]
  @findings[finding.details[:fid]] = finding
  if @show_scope_only == true
    addFindingItem(finding) if Watobo::Scope.match_site?(finding.request.site)
  else
    addFindingItem(finding)
  end

end

#addFindingItem(finding) ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 132

def addFindingItem(finding)
  begin

    site = nil
    # puts "add finding"
    if not hidden?(finding) then
      site = self.findItem(finding.request.site, nil,SEARCH_FORWARD|SEARCH_IGNORECASE)

      if not site then
        # found new site
        site = self.appendItem(nil, finding.request.site, @icon_project, @icon_project)
        item = self.appendItem(site, "Vulnerabilities", @icon_vuln, @icon_vuln)
        self.setItemData(item, :finding_type )
        item = self.appendItem(site, "Hints", @icon_hints, @icon_hints)
        self.setItemData(item, :finding_type )
        item = self.appendItem(site, "Info", @icon_info, @icon_info)
        self.setItemData(item, :finding_type )
        #site = @findings_tree.moveItem(project.first,project,site)
        self.setItemData(site, :item_type_site)

      end

      finding_type=""

      case finding.details[:type]
      when FINDING_TYPE_INFO
        finding_type = "Info"
        icon = @icon_info_info

      when FINDING_TYPE_HINT
        finding_type = "Hints"
        icon = @icon_hints_info

      when FINDING_TYPE_VULN
        finding_type = "Vulnerabilities"
        icon = @icon_vuln_bp
        
        if finding.details[:rating] == VULN_RATING_LOW
        icon = @icon_vuln_low
        #  puts "low-rating-vuln"
        end
        if finding.details[:rating] == VULN_RATING_MEDIUM
        icon = @icon_vuln_medium
        end
        if finding.details[:rating] == VULN_RATING_HIGH
        icon = @icon_vuln_high
        end
        if finding.details[:rating] == VULN_RATING_CRITICAL
        icon = @icon_vuln_critical
        end
      end

      sub_tree = self.findItem(finding_type, site, SEARCH_FORWARD|SEARCH_IGNORECASE|SEARCH_NOWRAP)
      if sub_tree and sub_tree.parent == site and finding.details[:class]

        class_item = self.findItem(finding.details[:class], sub_tree, SEARCH_FORWARD|SEARCH_IGNORECASE|SEARCH_NOWRAP|SEARCH_PREFIX)
        if not class_item or class_item.parent != sub_tree
          class_item = self.appendItem(sub_tree, finding.details[:class], icon, icon)
          self.setItemData(class_item, :finding_class )
        end
        title_item = self.findItem(finding.details[:title], class_item, SEARCH_FORWARD|SEARCH_IGNORECASE|SEARCH_NOWRAP)
        if not title_item or title_item.parent != class_item
          title_item = self.appendItem(class_item, finding.details[:title], nil, nil)
          self.setItemData(title_item, :title )
        # puts finding.details[:title]
        end
        #   puts title_item
        resource = finding.request.path_ext

        request_item = self.findItem(resource, title_item, SEARCH_FORWARD|SEARCH_IGNORECASE|SEARCH_NOWRAP)
        if not request_item or request_item.parent != title_item
          text = "/" + resource
        request_item = self.appendItem(title_item, text)
        self.setItemData(request_item, finding)
        end
        
        #
        unless class_item.text =~ / \(\d+\)$/
          class_item.text = class_item.text + " (#{class_item.numChildren})"
        else
        class_item.text = class_item.text.gsub(/ \(\d+\)$/, " (#{class_item.numChildren})")
        end
      end

    end
  rescue => bang
    puts "!ERROR: could not add finding to tree"
    puts bang
    puts bang.backtrace if $DEBUG

  end
end

#collapseFullTree(item) ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 42

def collapseFullTree(item)
  @expandeds = []
  self.collapseTree(item)
  item.each do |c|
    collapseFullTree(c) if !self.itemLeaf?(c)
  end
end

#expandFullTree(item) ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 34

def expandFullTree(item)
  @expandeds = []
  self.expandTree(item)
  item.each do |c|
    expandFullTree(c) if !self.itemLeaf?(c)
  end
end

#hidden?(finding) ⇒ Boolean

Returns:

• (Boolean)

# File 'lib/watobo/gui/findings_tree.rb', line 50

def hidden?(finding)
  return true if @hide_false_positives == true and finding.false_positive?
  false
end

#hideDomain(domain_filter) ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 114

def hideDomain(domain_filter)
  #@interface.default_settings[:domain_filters].push domain_filter
  #@interface.updateTreeLists
  #notify(:new_domain_filter, domain_filter)
end

#reload ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 56

def reload()
   self.clearItems        
    @findings.clear
    Watobo::Findings.each do |fid, finding|
      addFinding(finding)
    end   
   expand_findings
   @expandeds.each do |t|
     site, text = t.split("|")
     if( site = self.findItem(site, nil, SEARCH_FORWARD|SEARCH_NOWRAP) )
       if( node = self.findItem(text, site, SEARCH_FORWARD|SEARCH_NOWRAP) )
         self.expandTree(node)
       else
         @expandeds.delete t
       end
     end
   end     
end

#subscribe(event, &callback) ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 30

def subscribe(event, &callback)
  (@event_dispatcher_listeners[event] ||= []) << callback
end

#useRegularIcons ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 75

def useRegularIcons()

  regular_font = FXFont.new(getApp(), "helvetica", GUI_REGULAR_FONT_SIZE)
  regular_font.create
  # Findings Tree Icons
  @icon_vuln = ICON_VULN
  @icon_vuln_bp = ICON_VULN_BP
  @icon_vuln_low = ICON_VULN_LOW
  @icon_vuln_medium = ICON_VULN_MEDIUM
  @icon_vuln_high = ICON_VULN_HIGH
  @icon_vuln_critical = ICON_VULN_CRITICAL
  @icon_info = ICON_INFO
  @icon_info_info = ICON_INFO_INFO
  @icon_hints_info = ICON_INFO_INFO

  @icon_project = ICON_PROJECT
  @icon_hints = ICON_HINTS
  self.font = regular_font
  reload()
end

#useSmallIcons ⇒ Object

# File 'lib/watobo/gui/findings_tree.rb', line 96

def useSmallIcons
  small_font = FXFont.new(getApp(), "helvetica", GUI_SMALL_FONT_SIZE)
  small_font.create
  @icon_vuln = ICON_VULN_SMALL
  @icon_vuln_bp = ICON_VULN_BP_SMALL
  @icon_vuln_low = ICON_VULN_LOW_SMALL
  @icon_vuln_medium = ICON_VULN_MEDIUM_SMALL
  @icon_vuln_high = ICON_VULN_HIGH_SMALL
  @icon_vuln_critical = ICON_VULN_CRITICAL_SMALL
  @icon_info = ICON_INFO_SMALL
  @icon_info_info = ICON_INFO_INFO_SMALL
  @icon_hints_info = ICON_INFO_INFO_SMALL
  @icon_project = ICON_PROJECT_SMALL
  @icon_hints = ICON_HINTS_SMALL
  self.font = small_font
  reload()
end