Class: Yawast::Scanner::Plugins::Http::FilePresence
- Inherits:
-
Object
- Object
- Yawast::Scanner::Plugins::Http::FilePresence
- Defined in:
- lib/scanner/plugins/http/file_presence.rb
Class Method Summary collapse
- .check_all(uri, common_files) ⇒ Object
- .check_change_log_txt(uri) ⇒ Object
- .check_common(uri) ⇒ Object
- .check_cross_domain(uri) ⇒ Object
- .check_elmah_axd(uri) ⇒ Object
- .check_path(uri, path, vuln) ⇒ Object
- .check_readme_html(uri) ⇒ Object
- .check_release_notes_txt(uri) ⇒ Object
- .check_sitemap(uri) ⇒ Object
- .check_source_control(uri) ⇒ Object
- .check_trace_axd(uri) ⇒ Object
- .check_wsftp_log(uri) ⇒ Object
- .load_queue(uri) ⇒ Object
- .process(uri) ⇒ Object
Class Method Details
.check_all(uri, common_files) ⇒ Object
30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 30 def self.check_all(uri, common_files) # first, we need to see if the site responds to 404 in a reasonable way unless Yawast::Shared::Http.check_not_found(uri, true) puts 'Site does not respond properly to non-existent file requests; skipping some checks.' return end check_source_control uri check_cross_domain uri check_sitemap uri check_wsftp_log uri check_trace_axd uri check_elmah_axd uri check_readme_html uri check_release_notes_txt uri check_change_log_txt uri if common_files puts '' puts 'Checking for common files (this will take a few minutes)...' check_common uri end puts '' end |
.check_change_log_txt(uri) ⇒ Object
97 98 99 100 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 97 def self.check_change_log_txt(uri) check_path(uri, '/CHANGELOG.txt', false) check_path(uri, '/core/CHANGELOG.txt', false) end |
.check_common(uri) ⇒ Object
102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 102 def self.check_common(uri) begin @search_list = [] File.open(File.dirname(__FILE__) + '/../../../resources/common_file.txt', 'r') do |f| f.each_line do |line| @search_list.push line.strip end end pool_size = 16 @jobs = Queue.new @results = Queue.new # load the queue, starting at / base = uri.copy base.path = '/' load_queue base workers = (pool_size).times.map do Thread.new do begin while (check = @jobs.pop(true)) process check end rescue ThreadError #do nothing end end end results = Thread.new do begin while true if @results.length.positive? out = @results.pop(true) Yawast::Utilities.puts_info out end end rescue ThreadError # rubocop:disable Lint/HandleExceptions # do nothing end end workers.map(&:join) results.terminate rescue => e # rubocop:disable Style/RescueStandardError Yawast::Utilities.puts_error "Error searching for files (#{e.})" end end |
.check_cross_domain(uri) ⇒ Object
65 66 67 68 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 65 def self.check_cross_domain(uri) check_path(uri, '/crossdomain.xml', false) check_path(uri, '/clientaccesspolicy.xml', false) end |
.check_elmah_axd(uri) ⇒ Object
84 85 86 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 84 def self.check_elmah_axd(uri) check_path(uri, '/elmah.axd', false) end |
.check_path(uri, path, vuln) ⇒ Object
10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 10 def self.check_path(uri, path, vuln) # note: this only checks directly at the root, I'm not sure if this is what we want # should probably be relative to what's passed in, instead of overriding the path. check = uri.copy check.path = path.to_s code = Yawast::Shared::Http.get_status_code(check) if code == '200' msg = "'#{path}' found: #{check}" if vuln Yawast::Utilities.puts_vuln msg else Yawast::Utilities.puts_warn msg end puts '' end end |
.check_readme_html(uri) ⇒ Object
88 89 90 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 88 def self.check_readme_html(uri) check_path(uri, '/readme.html', false) end |
.check_release_notes_txt(uri) ⇒ Object
92 93 94 95 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 92 def self.check_release_notes_txt(uri) check_path(uri, '/RELEASE-NOTES.txt', false) check_path(uri, '/docs/RELEASE-NOTES.txt', false) end |
.check_sitemap(uri) ⇒ Object
70 71 72 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 70 def self.check_sitemap(uri) check_path(uri, '/sitemap.xml', false) end |
.check_source_control(uri) ⇒ Object
57 58 59 60 61 62 63 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 57 def self.check_source_control(uri) check_path(uri, '/.git/', true) check_path(uri, '/.hg/', true) check_path(uri, '/.svn/', true) check_path(uri, '/.bzr/', true) check_path(uri, '/.csv/', true) end |
.check_trace_axd(uri) ⇒ Object
80 81 82 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 80 def self.check_trace_axd(uri) check_path(uri, '/Trace.axd', false) end |
.check_wsftp_log(uri) ⇒ Object
74 75 76 77 78 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 74 def self.check_wsftp_log(uri) # check both upper and lower, as they are both seen in the wild check_path(uri, '/WS_FTP.LOG', false) check_path(uri, '/ws_ftp.log', false) end |
.load_queue(uri) ⇒ Object
153 154 155 156 157 158 159 160 161 162 163 164 165 166 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 153 def self.load_queue(uri) @search_list.each do |line| check = uri.copy begin check.path = "/#{line}" # add the job to the queue @jobs.push check rescue # rubocop:disable Lint/HandleExceptions # who cares end end end |
.process(uri) ⇒ Object
168 169 170 171 172 173 174 175 176 177 178 179 180 181 |
# File 'lib/scanner/plugins/http/file_presence.rb', line 168 def self.process(uri) begin res = Yawast::Shared::Http.head uri if res.code == '200' @results.push "'#{uri.path}' found: #{uri}" Yawast::Shared::Output.log_append_value 'http', 'http_file', uri end rescue => e # rubocop:disable Style/RescueStandardError unless e..include?('end of file') || e..include?('getaddrinfo') Yawast::Utilities.puts_error "Error searching for file '#{uri.path}' (#{e.})" end end end |