modules/audit/sqli_blind_timing.rb in arachni-0.4.0.4 vs modules/audit/sqli_blind_timing.rb in arachni-0.4.1

@@ -1,105 +1,85 @@
 =begin
-                  Arachni
-  Copyright (c) 2010-2012 Tasos "Zapotek" Laskos <[e-mail]>
+    Copyright 2010-2012 Tasos Laskos <[e-mail]>
 
-  This is free software; you can copy and distribute and modify
-  this program under the term of the GPL v2.0 License
-  (See LICENSE file for details)
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
 
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
 =end
 
-module Arachni
-
-module Modules
-
 #
 # Blind SQL Injection module using timing attacks.
 #
-# @author: Tasos "Zapotek" Laskos
-#                                      <[e-mail]>
-#                                      <[e-mail]>
-# @version: 0.2.2
+# @author Tasos "Zapotek" Laskos <[e-mail]>
 #
+# @version 0.2.3
+#
 # @see http://cwe.mitre.org/data/definitions/89.html
 # @see http://capec.mitre.org/data/definitions/7.html
 # @see http://www.owasp.org/index.php/Blind_SQL_Injection
 #
-class BlindTimingSQLInjection < Arachni::Module::Base
+class Arachni::Modules::BlindTimingSQLInjection < Arachni::Module::Base
 
-    include Arachni::Module::Utilities
+    # We add ourselves to the list too.
+    # We don't want more than one timing-attack variation per issue,
+    # it's too expensive.
+    prefer :sqli, :sqli_blind_rdiff
 
-    def prepare
-        @@__injection_str ||= []
-
-        if @@__injection_str.empty?
-            read_file( 'payloads.txt' ) {
-                |str|
-                @@__injection_str << str
-            }
-        end
-
-        @__opts = {
-            :format  => [ Format::STRAIGHT ],
-            :timeout => 4000,
-            :timeout_divider => 1000
-        }
-
+    def self.sleep_codes
+        @sleep_codes ||= read_file( 'payloads.txt' )
     end
 
     def run
-        audit_timeout( @@__injection_str, @__opts )
+        audit_timeout( self.class.sleep_codes,
+            format:          [Format::STRAIGHT, Format::APPEND],
+            timeout:         4000,
+            timeout_divider: 1000
+        )
     end
 
-    def redundant
-        # We add ourselves to the list too.
-        # We don't want more than one timing-attack variation per issue,
-        # it's too expensive.
-        [ 'sqli', 'sqli_blind_rdiff', 'sqli_blind_timing' ]
-    end
-
     def self.info
         {
-            :name           => 'Blind (timing) SQL injection',
-            :description    => %q{Blind SQL Injection module using timing attacks
+            name:        'Blind (timing) SQL injection',
+            description: %q{Blind SQL Injection module using timing attacks
                 (if the remote server suddenly becomes unresponsive or your network
                 connection suddenly chokes up this module will probably produce false positives).},
-            :elements       => [
-                Issue::Element::FORM,
-                Issue::Element::LINK,
-                Issue::Element::COOKIE,
-                Issue::Element::HEADER
-            ],
-            :author         => 'Tasos "Zapotek" Laskos <[e-mail]> ',
-            :version        => '0.2.2',
-            :references     => {
-                'OWASP'      => 'http://www.owasp.org/index.php/Blind_SQL_Injection',
+            elements:    [ Element::FORM, Element::LINK, Element::COOKIE, Element::HEADER ],
+            author:      'Tasos "Zapotek" Laskos <[e-mail]>',
+            version:     '0.2.3',
+            references:  {
+                'OWASP'         => 'http://www.owasp.org/index.php/Blind_SQL_Injection',
                 'MITRE - CAPEC' => 'http://capec.mitre.org/data/definitions/7.html'
             },
-            :targets        => { 'Generic' => 'all' },
-            :issue   => {
-                :name        => %q{Blind SQL Injection (timing attack)},
-                :description => %q{SQL code can be injected into the web application
-                    even though it may not be obvious due to suppression of error messages.
-                    (This issue was discovered using a timing attack; timing attacks
-                    can result in false positives in cases where the server takes
-                    an abnormally long time to respond.
-                    Either case, these issues will require further investigation
-                    even if they are false positives.)},
-                :tags        => [ 'sql', 'blind', 'timing', 'injection', 'database' ],
-                :cwe         => '89',
-                :severity    => Issue::Severity::HIGH,
-                :cvssv2       => '9.0',
-                :remedy_guidance    => %q{Suppression of error messages leads to
-                    security through obscurity which is not a good practise.
-                    The web application needs to enforce stronger validation
-                    on user inputs.},
-                :remedy_code => '',
-                :metasploitable => 'unix/webapp/arachni_sqlmap'
+            targets:     %w(MySQL PostgreSQL MSSQL),
+            issue:       {
+                name:            %q{Blind SQL Injection (timing attack)},
+                description:     %q{SQL code can be injected into the web application
+    even though it may not be obvious due to suppression of error messages.
+    (This issue was discovered using a timing attack; timing attacks
+    can result in false positives in cases where the server takes
+    an abnormally long time to respond.
+    Either case, these issues will require further investigation
+    even if they are false positives.)},
+                tags:            %w(sql blind timing injection database),
+                cwe:             '89',
+                severity:        Severity::HIGH,
+                cvssv2:          '9.0',
+                remedy_guidance: %q{Suppression of error messages leads to
+    security through obscurity which is not a good practise.
+    The web application needs to enforce stronger validation
+    on user inputs.},
+                remedy_code:     '',
+                metasploitable:  'unix/webapp/arachni_sqlmap'
             }
 
         }
     end
 
-end
-end
 end