Class: Watobo::Plugin::Catalog::Catalog

# File 'plugins/catalog/catalog.rb', line 286

def initialize(owner, project)
  
  super(owner, "Catalog Scanner", project, :opts => DECOR_ALL, :width=>800, :height=>600)
  menu_bar = FXMenuBar.new(self, :opts => LAYOUT_SIDE_TOP|LAYOUT_FILL_X|FRAME_GROOVE)
  menu_pane = FXMenuPane.new(self)
  
  text = "Catalog-Scanner will test the web application for known directories and/or files.\nYou need two files (db_tests and db_variables) in the DB folder. "
  text << "These files must have the same format as nikto DB files (http://cirt.net/nikto2).\nSo, if you have your own DB files, you"
  text << " can use them with this plugin."
    
load_icon(__FILE__)
       
FXMenuTitle.new(menu_bar, "Help" , :popupMenu => menu_pane)
menu = FXMenuCommand.new(menu_pane, "About" )
menu.connect(SEL_COMMAND) { 
  dlg = Watobo::Plugin::Catalog::About.new(self, text)
  dlg.execute
  }

  @event_dispatcher_listeners = Hash.new
  @scanner = nil
  @plugin_name = "Catalog-Scan"
 
  @site = nil
  @dir = nil

  begin
    hs_green = FXHiliteStyle.new
    hs_green.normalForeColor = FXRGBA(255,255,255,255) #FXColor::Red
    hs_green.normalBackColor = FXRGBA(0,255,0,1)   # FXColor::White
    hs_green.style = FXText::STYLE_BOLD

    hs_red = FXHiliteStyle.new
    hs_red.normalForeColor = FXRGBA(255,255,255,255) # FXColor::Red
    hs_red.normalBackColor = FXRGBA(255,0,0,1)   # FXColor::White
    hs_red.style = FXText::STYLE_BOLD

    path = Dir.getwd

    mr_splitter = FXSplitter.new(self, LAYOUT_FILL_X|LAYOUT_FILL_Y|SPLITTER_VERTICAL|SPLITTER_REVERSED|SPLITTER_TRACKING)
    # top = FXHorizontalFrame.new(mr_splitter, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|LAYOUT_SIDE_BOTTOM)
    top_frame = FXVerticalFrame.new(mr_splitter, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|LAYOUT_FIX_HEIGHT|LAYOUT_BOTTOM, :height => 500)
  #   info_frame = FXGroupBox.new(top_frame, "Info", LAYOUT_SIDE_TOP|FRAME_GROOVE|LAYOUT_FILL_X|LAYOUT_FILL_Y, 0, 0, 0, 0)
 #   info = FXText.new(info_frame, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|TEXT_WORDWRAP)
 #   info.setText text
 #   info.backColor = info.parent.backColor
 #   info.disable
    top_splitter = FXSplitter.new(top_frame, LAYOUT_FILL_X|SPLITTER_HORIZONTAL|LAYOUT_FILL_Y|SPLITTER_TRACKING)
    log_frame = FXVerticalFrame.new(mr_splitter, :opts => LAYOUT_FILL_X|LAYOUT_SIDE_BOTTOM,:height => 100)

    @settings_frame = FXVerticalFrame.new(top_splitter, :opts => LAYOUT_FILL_Y, :padding => 0)
    #request_frame = FXVerticalFrame.new(top_splitter, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
      request_frame = FXGroupBox.new(top_splitter, "Request Template", LAYOUT_SIDE_TOP|FRAME_GROOVE|LAYOUT_FILL_X, 0, 0, 0, 0)
      FXLabel.new(request_frame, "Select a request template from drop-down list or enter manually.")
    @requestCombo = FXComboBox.new(request_frame, 5, nil, 0,
    COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)

    @requestCombo.numVisible = 0
    @requestCombo.numColumns = 50
    @requestCombo.editable = false
    @requestCombo.connect(SEL_COMMAND, method(:onSelectRequest))

    @request_editor = RequestEditor.new(request_frame, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_SUNKEN|FRAME_THICK, :padding=>0)

    ts_frame = FXGroupBox.new(@settings_frame, "Scan Settings", LAYOUT_SIDE_TOP|FRAME_GROOVE|LAYOUT_FILL_X, 0, 0, 0, 0)

   # @scope_only_cb = FXCheckButton.new(@settings_frame, "target scope only", nil, 0, ICON_BEFORE_TEXT|LAYOUT_SIDE_LEFT)
   # @scope_only_cb.setCheck(false)
   # @scope_only_cb.connect(SEL_COMMAND) { updateView() }

    @sites_combo = FXComboBox.new(ts_frame, 5, nil, 0,
    COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)

    @sites_combo.numVisible = @sites_combo.numItems >= 20 ? 20 : @sites_combo.numItems
    @sites_combo.numColumns = 35
    @sites_combo.editable = false
    @sites_combo.connect(SEL_COMMAND, method(:onSiteSelect))

    FXLabel.new(ts_frame, "Root Directory:")
    @dir_combo = FXComboBox.new(ts_frame, 5, nil, 0,
    COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
    @dir_combo.numVisible = 20
    @dir_combo.numColumns = 35
    @dir_combo.editable = false
    @dir_combo.connect(SEL_COMMAND, method(:onDirSelect))

    @test_all_dirs = FXCheckButton.new(ts_frame, "test all sub-directories", nil, 0, ICON_BEFORE_TEXT|LAYOUT_SIDE_LEFT)
    @test_all_dirs.setCheck(false)

    # @use_ssl = FXCheckButton.new(@settings_frame, "use SSL", nil, 0, ICON_BEFORE_TEXT|LAYOUT_SIDE_LEFT)

    #   @run_passive_checks = FXCheckButton.new(@settings_frame, "run passive checks", nil, 0, ICON_BEFORE_TEXT|LAYOUT_SIDE_LEFT)
    #   @run_passive_checks.setCheck(false)

    frame = FXGroupBox.new(@settings_frame, "Logging", LAYOUT_SIDE_TOP|FRAME_GROOVE|LAYOUT_FILL_X, 0, 0, 0, 0)
    @logScanChats = FXCheckButton.new(frame, "enable", nil, 0, JUSTIFY_LEFT|JUSTIFY_TOP|ICON_BEFORE_TEXT|LAYOUT_SIDE_TOP)
    @logScanChats.checkState = false

    @logScanChats.connect(SEL_COMMAND) do |sender, sel, item|
      if @logScanChats.checked? then
        @scanlog_dir_text.enabled = true
        @scanlog_dir_text.backColor = FXColor::White
      else
        @scanlog_dir_text.enabled = false
        @scanlog_dir_text.backColor = @scanlog_dir_text.parent.backColor 
      end
    end

    @scanlog_dir_dt = FXDataTarget.new('')
   # @scanlog_dir_dt.value = @project.scanLogDirectory() if File.exist?(@project.scanLogDirectory())
    @scanlog_dir_label = FXLabel.new(frame, "Scan Name:" )
    scanlog_frame = FXHorizontalFrame.new(frame,:opts => LAYOUT_FILL_X|LAYOUT_SIDE_TOP)
    @scanlog_dir_text = FXTextField.new(scanlog_frame, 20,
    :target => @scanlog_dir_dt, :selector => FXDataTarget::ID_VALUE,
    :opts => TEXTFIELD_NORMAL|LAYOUT_FILL_COLUMN|LAYOUT_FILL_X)
    @scanlog_dir_text.handle(self, FXSEL(SEL_UPDATE, 0), nil)
    unless @logScanChats.checked?
      @scanlog_dir_text.enabled = false
      @scanlog_dir_text.backColor = @scanlog_dir_text.parent.backColor
    end 
 
  @db_files = %w( db_tests db_variables )
  
  @path = File.expand_path(File.dirname(__FILE__))
  
  
  @known_db_paths = [                             
                  #   File.expand_path(File.dirname(__FILE__)), 
                    # "/pentest/web/nikto/plugins" # BackTrack
                    @path
                     ]
  config = load_config
  unless config.nil?
    if config.has_key? :path_history
      begin
      config[:path_history].each do |p|
        @known_db_paths << p unless @known_db_paths.include? p
      end
      rescue => bang
        puts "!Broken Path History"                
      end
    end
      @path = config[:db_path] if config.has_key? :db_path              
    
  end                   
 
   frame = FXGroupBox.new(@settings_frame, "DB Path", LAYOUT_SIDE_TOP|FRAME_GROOVE|LAYOUT_FILL_X, 0, 0, 0, 0)
    #FXLabel.new(frame, "Path:" )
    db_frame = FXHorizontalFrame.new(frame,:opts => LAYOUT_FILL_X|LAYOUT_SIDE_TOP)
     @db_path_combo = FXComboBox.new(db_frame, 5, nil, 0,
    COMBOBOX_STATIC|FRAME_SUNKEN|FRAME_THICK|LAYOUT_SIDE_TOP|LAYOUT_FILL_X)
    
    @db_path_combo.numVisible = 3
    @db_path_combo.numColumns = 8
    
    @db_path_combo.editable = false
    @db_path_combo.connect(SEL_COMMAND){
      path = @db_path_combo.getItemData(@db_path_combo.currentItem)
      set_db_path path
    }
   # @db_path_txt = FXTextField.new(db_frame, 20, nil, 0, :opts => TEXTFIELD_NORMAL|LAYOUT_FILL_COLUMN|LAYOUT_FILL_X)
   # @db_path_txt.text = @path
   # @db_path_txt.handle(self, FXSEL(SEL_UPDATE, 0), nil)
    @db_path_btn = FXButton.new(db_frame, "add")
    @db_path_btn.connect(SEL_COMMAND){ 
      select_db_path
      # @db_path_txt.text = @path              
       }
    #@check_buttons = Hash.new
    
     
     path_index = 0
     @known_db_paths.each_with_index do |dbp,i|              
       if File.exist? dbp               
           item = @db_path_combo.appendItem(dbp)
           @db_path_combo.setItemData(item, dbp)
           path_index = i if dbp == @path
       end
     end
     
     @db_path_combo.currentItem = path_index if @db_path_combo.numItems > 0
     
    @pbar = FXProgressBar.new(@settings_frame, nil, 0, LAYOUT_FILL_X|FRAME_SUNKEN|FRAME_THICK|PROGRESSBAR_HORIZONTAL)
    
    reset_pbar
   
    @speed = FXLabel.new(@settings_frame, "Requests per second: 0")

    @start_button = FXButton.new(@settings_frame, "start")
    @start_button.connect(SEL_COMMAND, method(:start))
    @start_button.disable

#    gbox = FXGroupBox.new(@settings_frame, "Info", LAYOUT_SIDE_LEFT|FRAME_GROOVE|LAYOUT_FILL_X|LAYOUT_FILL_Y, 0, 0, 0, 150)
#    gbframe = FXVerticalFrame.new(gbox, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y, :padding => 0)
#    fxtext = FXText.new(gbframe, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y|TEXT_WORDWRAP)
#    fxtext.backColor = fxtext.parent.backColor
#    fxtext.disable
#    text = "Catalog-Scanner will test the web application for known directories and/or files. There must be two files in the appropriate plugin folder:\n"
#    text << "- db_tests\n- db_variables\n\nThe format of these files is very similar to the format nikto (http://cirt.net/nikto2) is using. So if you have your own nikto.db-files, you"
#    text << " can use them with this plugin."
#    text << "\n\nCatalog Directory:\n#{File.dirname(__FILE__)}"
#    fxtext.setText(text)

    @check = nil

    log_frame_header = FXHorizontalFrame.new(log_frame, :opts => LAYOUT_FILL_X)
    FXLabel.new(log_frame_header, "Logs:" )

    #log_text_frame = FXHorizontalFrame.new(bottom_frame, :opts => LAYOUT_FILL_X|FRAME_SUNKEN|LAYOUT_BOTTOM)
    log_text_frame = FXVerticalFrame.new(log_frame, LAYOUT_FILL_X|LAYOUT_FILL_Y|FRAME_SUNKEN|FRAME_THICK, :padding=>0)
    @log_viewer = LogViewer.new(log_text_frame, nil, :opts => LAYOUT_FILL_X|LAYOUT_FILL_Y)
       
    updateView()
    start_update_timer()
    
  rescue => bang
    puts bang
    puts bang.backtrace if $DEBUG
  end
end

Instance Method Details

#create ⇒ `Object`

# File 'plugins/catalog/catalog.rb', line 507

def create
  super                  # Create the windows
  @log_viewer.purge_logs
  @request_editor.setText('')
  @requestCombo.clearItems()

  @start_button.text = "Start"

  show(PLACEMENT_SCREEN) # Make the main window appear
  disableOptions()
  @start_button.disable
  
  updateView()
end

#updateView ⇒ `Object`

# File 'plugins/catalog/catalog.rb', line 245

def updateView()
  @sites_combo.clearItems()
  @dir_combo.clearItems()
  @dir_combo.disable

  
    @sites_combo.appendItem("no site selected", nil)
    scope_only = Watobo::Scope.exist?
    sites = Watobo::Chats.sites(:in_scope => Watobo::Scope.exist? )
    if sites.empty?
      scope_only = false
      @log_viewer.log(LOG_INFO, "Defined scope does not match one site. Using all sites.")
    end
    Watobo::Chats.sites(:in_scope => scope_only ).each do |site|
      site_string = site
      if site.length > 60
        site_string = site.slice(0..55)
        site_string << "...:"
        site_string << site.gsub(/.*:/,'')
      end
      @sites_combo.appendItem(site_string, site)
    end
    @sites_combo.numVisible = @sites_combo.numItems >= 20 ? 20 : @sites_combo.numItems
    @sites_combo.setCurrentItem(0) if @sites_combo.numItems > 0
    ci = @sites_combo.currentItem
    site = ( ci >= 0 ) ? @sites_combo.getItemData(ci) : nil
    puts site
    puts site.class

    unless site.nil?
      @dir_combo.enable
      Watobo::Chats.dirs(site) do |dir|
        puts dir
        @dir_combo.appendItem(dir.slice(0..35), dir)
      end
      @dir_combo.setCurrentItem(0, true) if @dir_combo.numItems > 0

    end
  
end

Class: Watobo::Plugin::Catalog::Catalog

Constant Summary

Constants included from Constants

Constants included from Gui::Icons

Constants included from Gui

Constants included from Diff::LCS

Instance Attribute Summary

Attributes inherited from Template::Plugin

Instance Method Summary collapse

Methods inherited from Template::Plugin

Methods included from Diff::LCS

Constructor Details

#initialize(owner, project) ⇒ Catalog

Instance Method Details

#create ⇒ Object

#updateView ⇒ Object

#initialize(owner, project) ⇒ `Catalog`

#create ⇒ `Object`

#updateView ⇒ `Object`