def __init__(self):
# set up the layout
self.__component = JPanel(GridBagLayout())
self.__image = JLabel()
self.__album = JLabel()
self.__artist = JLabel()
self.__application = None
self.__image.setVerticalAlignment(SwingConstants.TOP)
self.__album.setVerticalAlignment(SwingConstants.TOP)
self.__artist.setVerticalAlignment(SwingConstants.TOP)
gbc = GridBagConstraints()
gbc.fill = GridBagConstraints.VERTICAL
gbc.anchor = GridBagConstraints.NORTHWEST
gbc.gridx = 0
gbc.gridy = 0
gbc.weighty = 2
gbc.gridheight = 2
self.__component.add(self.__image, gbc)
gbc.fill = GridBagConstraints.HORIZONTAL
gbc.anchor = GridBagConstraints.NORTHWEST
gbc.gridx = 1
gbc.gridy = 0
gbc.gridheight = 1
gbc.weighty = 0
gbc.insets = Insets(0, 10, 0, 10)
self.__component.add(self.__album, gbc)
gbc.fill = GridBagConstraints.BOTH
gbc.anchor = GridBagConstraints.NORTHWEST
gbc.gridx = 1
gbc.gridy = 1
gbc.weightx = 2
gbc.weighty = 2
gbc.gridheight = 1
self.__component.add(self.__artist, gbc)
def initComponents(self):
self.setLayout(GridBagLayout())
gc = GridBagConstraints()
gc.weightx = 1
gc.weighty = 1
# First Row
gc.gridy = 0
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.fill = GridBagConstraints.NONE
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.usernameLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.usernameField, gc)
# Second Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.superPassLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.superPassField, gc)
#Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 2.0
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
self.add(self.deleteAdminBtn, gc)
innerBorder = BorderFactory.createTitledBorder('Delete Admin')
outerBorder = BorderFactory.createEmptyBorder(5, 5, 5, 5)
self.setBorder(
BorderFactory.createCompoundBorder(outerBorder, innerBorder))
def createEditorComponent(self, properties):
p = JPanel(GridBagLayout())
p.setBorder(BorderFactory.createEmptyBorder(3, 3, 3, 3))
gbc = GridBagConstraints()
gbc.gridx = 0
gbc.gridy = 0
gbc.weightx = 0.0
gbc.weighty = 0.0
gbc.fill = GridBagConstraints.HORIZONTAL
gbc.insets = Insets(3, 3, 3, 3)
p.add(JLabel("Prompt:"), gbc)
gbc.gridx = 1
editor = NodePropertiesDialog.createTextArea(properties, self.PROMPT)
p.add(editor, gbc)
gbc.gridx, gbc.gridy = 1, 0
p.add(
NodePropertiesDialog.createCheckBox(properties, self.WAIT,
"Wait until done"), gbc)
jtp = JTabbedPane()
jtp.addTab("Output", p)
return jtp
def add(parent,
child,
gridx=0,
gridy=0,
anchor=GC.NORTHWEST,
fill=GC.NONE,
weightx=0.0,
weighty=0.0,
gridwidth=1):
c = GC()
c.gridx = gridx
c.gridy = gridy
c.anchor = anchor
c.fill = fill
c.weightx = weightx
c.weighty = weighty
c.gridwidth = gridwidth
"""
# Same, more flexible, less verbose: BUT FAILS at parent, child args
kv = locals() # dict of local variables including the function arguments
c = GC()
for key, value in kv.iteritems():
setattr(c, key, value)
"""
#
parent.getLayout().setConstraints(child, c)
parent.add(child)
def __createDropDownConstraints(self):
constr = GridBagConstraints()
constr.fill = GridBagConstraints.HORIZONTAL
constr.weighty = 1
constr.gridwidth = 4
constr.gridx = 0
constr.gridy = 0
return constr
def __createTableConstraints(self):
constr = GridBagConstraints()
constr.fill = GridBagConstraints.BOTH
constr.weighty = 1000
constr.weightx = 2
constr.gridwidth = 4
constr.gridx = 0
constr.gridy = 2
return constr
def __setupLayout(self):
self.setLayout(GridBagLayout())
constr = GridBagConstraints()
constr.weighty = 1
constr.weightx = 1
constr.gridx = 0
constr.gridy = 1
constr.fill = GridBagConstraints.BOTH
return constr
def __createRadioConstraints(self, mode):
constr = GridBagConstraints()
constr.fill = GridBagConstraints.HORIZONTAL
constr.weighty = 1
constr.weightx = 1
if mode == 'cases': constr.gridx = 2
elif mode == 'commands': constr.gridx = 3
constr.gridy = 1
return constr
def __init__(self, callbacks):
self._callbacks = callbacks
self.tab = JPanel(GridBagLayout())
about_constraints = GridBagConstraints()
about_author = (("<html><center><h2>SpyDir</h2><b>Version:</b> "
"%s<br/>Created by: <em>Ryan Reid</em>"
" (@_aur3lius)<br/>https://github.com/aur3lius-dev/"
"SpyDir</center><br/>")
% VERSION)
about_spydir = """<em><center>
SpyDir is an extension that assists in the enumeration of
application<br/>
endpoints via an input directory containing the application's<br/>
source code. It provides an option to process files as endpoints,<br/>
think: ASP, PHP, HTML, or parse files to attempt to enumerate<br/>
endpoints via plugins, think: MVC. Users may opt to send the<br/>
discovered endpoints directly to the Burp Spider.
</center></em><br/>
This tool is in <b>Alpha</b>! <b>Please</b> provide feedback on the
GitHub page!<br/><br/>"""
getting_started = """<b>Getting started:</b><br/>
<ul>
<li>Add a local source repository</li>
<li>Add the target URL</li>
<li>Use the String delimiter to construct the appropriate
directory path (if necessary)</li>
<li>Alternatively, parse each file by selecting plugins
and checking the checkbox</li>
<li>Explicitly define the file extensions to process</li>
<li>Parse the directory</li>
<li>Verify output is correct <b>before</b> sending to spider</li>
<li>Send requests to the Burp Spider</li>
</ul>
"""
advanced_info = r"""<html><b>String Delimiter</b><br/>
String Delimiter allows us to append the necessary section
of the folder structure.<br/>
Suppose the target application is hosted at the following URL:
https://localhost:8080. <br/>The target code base is stored in:
'C:\Source\TestApp'. <br/>Within the TestApp folder there is a
subfolder, 'views', with static .html files.<br/>
In this case the String Delimiter will need to equal 'TestApp'.
<br/>With the expectation that the tool will produce an example URL
will such as:<br/>https://localhost:8080/views/view1.html.<br/>
<b>Note:</b> String Delimiter is ignored if parsing files using
plugins!
</html>"""
about_constraints.anchor = GridBagConstraints.FIRST_LINE_START
about_constraints.weightx = 1.0
about_constraints.weighty = 1.0
self.tab.add(JLabel("%s\n%s\n%s\n%s" % (about_author, about_spydir,
getting_started,
advanced_info)),
about_constraints)
def __init__(self):
self.frame = JFrame('Hello, Jython!',
defaultCloseOperation=JFrame.EXIT_ON_CLOSE,
size=(400, 600))
bag_layout = GridBagLayout()
self.frame.layout = bag_layout
grid_constraints = GridBagConstraints()
format_1_string_label = JLabel("Format 1 string:")
grid_constraints.weightx = 0.1
grid_constraints.weighty = 0.1
grid_constraints.gridy = 0
grid_constraints.fill = GridBagConstraints.NONE
self._add_component(format_1_string_label, bag_layout, grid_constraints)
self.input_textbox = JTextArea()
grid_constraints.weightx = 1
grid_constraints.weighty = 1
grid_constraints.gridy = 1
grid_constraints.fill = GridBagConstraints.BOTH
input_scroll_pane = JScrollPane(self.input_textbox)
input_scroll_pane.verticalScrollBarPolicy = ScrollPaneConstants.VERTICAL_SCROLLBAR_ALWAYS
self._add_component(input_scroll_pane, bag_layout, grid_constraints)
output_string_label = JLabel("Output:")
grid_constraints.weightx = 0.1
grid_constraints.weighty = 0.1
grid_constraints.gridy = 2
grid_constraints.fill = GridBagConstraints.NONE
self._add_component(output_string_label, bag_layout, grid_constraints)
self.output_textbox = JTextArea()
grid_constraints.weightx = 1
grid_constraints.weighty = 1
grid_constraints.gridy = 3
grid_constraints.fill = GridBagConstraints.BOTH
self.output_textbox.editable = False
output_scroll_pane = JScrollPane(self.output_textbox)
output_scroll_pane.verticalScrollBarPolicy = ScrollPaneConstants.VERTICAL_SCROLLBAR_ALWAYS
self._add_component(output_scroll_pane, bag_layout, grid_constraints)
def initComponents(self):
self.setLayout(GridBagLayout())
gc = GridBagConstraints()
gc.weightx = 1
gc.weighty = 1
# First Row
gc.gridy = 0
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.fill = GridBagConstraints.NONE
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.vehicleLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.vehicleField, gc)
#Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 2.0
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
self.add(self.bypassBtn, gc)
innerBorder = BorderFactory.createTitledBorder('Emergency Bypass')
outerBorder = BorderFactory.createEmptyBorder(5, 5, 5, 5)
self.setBorder(
BorderFactory.createCompoundBorder(outerBorder, innerBorder))
def _constructAboutPanel(self, insets):
aboutPanel = JPanel(GridBagLayout())
with open("about.html") as file:
aboutBody = file.read()
aboutLabel = JLabel(aboutBody.format(extension_name=EXTENSION_NAME))
aboutLabelConstraints = GridBagConstraints()
aboutLabelConstraints.weightx = 1
aboutLabelConstraints.weighty = 1
aboutLabelConstraints.insets = insets
aboutLabelConstraints.fill = GridBagConstraints.HORIZONTAL
aboutLabelConstraints.anchor = GridBagConstraints.PAGE_START
aboutPanel.add(aboutLabel, aboutLabelConstraints)
return aboutPanel
def createAndShowGUI():
# Create the GUI and show it. As with all GUI code, this must run
# on the event-dispatching thread.
frame = JFrame("MAE ")
frame.setSize(1024, 768)
panel= JPanel()
panel.setLayout(GridBagLayout())
#Create and set up the content pane.
psimures= SimoutPanel()
psimures.setOpaque(True)
c = GridBagConstraints()
c.fill = GridBagConstraints.HORIZONTAL
c.weightx = 1
c.gridx = 0
c.gridy = 0
panel.add(psimures, c);
pmeasure= MeasPanel()
pmeasure.setOpaque(True)
c = GridBagConstraints()
c.fill = GridBagConstraints.HORIZONTAL
c.weightx = 1
c.gridx = 0
c.gridy = 1
panel.add(pmeasure, c);
preport = ReportPanel()
preport.setOpaque(True)
c = GridBagConstraints()
c.fill = GridBagConstraints.VERTICAL
c.weighty = 1
c.gridx = 1
c.gridy = 0
c.gridheight= 2
panel.add(preport,c)
# show the GUI
frame.add(panel)
# frame.add(pmeasure)
# frame.add(preport)
frame.setDefaultCloseOperation(WindowConstants.EXIT_ON_CLOSE)
frame.setVisible(True)
def _constructResultsPanel(self, insets):
resultsPanel = JPanel(GridBagLayout())
self._progressBar = JProgressBar()
self._progressBar.setStringPainted(True)
self._progressBar.setMinimum(0)
progressBarContraints = GridBagConstraints()
progressBarContraints.gridx = 0
progressBarContraints.gridy = 0
progressBarContraints.fill = GridBagConstraints.HORIZONTAL
resultsPanel.add(self._progressBar, progressBarContraints)
self._resultsTableModel = ResultsTableModel(COLUMNS, 0)
resultsTable = JTable(self._resultsTableModel)
resultsTable.setAutoCreateRowSorter(True)
cellRenderer = ColoredTableCellRenderer()
for index in [5, 6, 7, 8, 9]:
column = resultsTable.columnModel.getColumn(index)
column.cellRenderer = cellRenderer
resultsTable.getColumnModel().getColumn(0).setPreferredWidth(99999999)
resultsTable.getColumnModel().getColumn(1).setMinWidth(160)
resultsTable.getColumnModel().getColumn(2).setMinWidth(100)
resultsTable.getColumnModel().getColumn(3).setMinWidth(80)
resultsTable.getColumnModel().getColumn(4).setMinWidth(80)
resultsTable.getColumnModel().getColumn(5).setMinWidth(110)
resultsTable.getColumnModel().getColumn(6).setMinWidth(110)
resultsTable.getColumnModel().getColumn(7).setMinWidth(90)
resultsTable.getColumnModel().getColumn(8).setMinWidth(110)
resultsTable.getColumnModel().getColumn(9).setMinWidth(110)
resultsTable.setAutoResizeMode(JTable.AUTO_RESIZE_ALL_COLUMNS)
resultsScrollPane = JScrollPane(resultsTable)
resultsScrollPaneConstraints = GridBagConstraints()
resultsScrollPaneConstraints.gridx = 0
resultsScrollPaneConstraints.gridy = 1
resultsScrollPaneConstraints.weightx = 1
resultsScrollPaneConstraints.weighty = 1
resultsScrollPaneConstraints.fill = GridBagConstraints.BOTH
resultsPanel.add(resultsScrollPane, resultsScrollPaneConstraints)
return resultsPanel
def getGridBagConstraints(game,node):
c = GridBagConstraints()
for str in node.getAttribute("constraints").split(","):
a = str.split(":")
if a[0]=="fill":
c.fill = int(a[1])
elif a[0]=="gridwidth":
c.gridwidth = int(a[1])
elif a[0]=="gridheight":
c.gridheight = int(a[1])
elif a[0]=="gridx":
c.gridx = int(a[1])
elif a[0]=="gridy":
c.gridy = int(a[1])
elif a[0]=="weightx":
c.weightx = int(a[1])
elif a[0]=="weighty":
c.weighty = int(a[1])
else:
print a[0]+"was not found"
return c
def __init__(self, callbacks, parent):
# Initialze self stuff
self._callbacks = callbacks
self.config = {}
self.ext_stats = {}
self.url_reqs = []
self.parse_files = False
self.tab = JPanel(GridBagLayout())
self.view_port_text = JTextArea("===SpyDir===")
self.delim = JTextField(30)
self.ext_white_list = JTextField(30)
# I'm not sure if these fields are necessary still
# why not just use Burp func to handle this?
# leaving them in case I need it for the HTTP handler later
# self.cookies = JTextField(30)
# self.headers = JTextField(30)
self.url = JTextField(30)
self.parent_window = parent
self.plugins = {}
self.loaded_p_list = set()
self.loaded_plugins = False
self.config['Plugin Folder'] = None
self.double_click = False
self.source_input = ""
self.print_stats = True
self.curr_conf = JLabel()
self.window = JFrame("Select plugins",
preferredSize=(200, 250),
windowClosing=self.p_close)
self.window.setDefaultCloseOperation(JFrame.DO_NOTHING_ON_CLOSE)
self.window.setVisible(False)
self.path_vars = JTextField(30)
# Initialize local stuff
tab_constraints = GridBagConstraints()
status_field = JScrollPane(self.view_port_text)
# Configure view port
self.view_port_text.setEditable(False)
labels = self.build_ui()
# Add things to rows
tab_constraints.anchor = GridBagConstraints.FIRST_LINE_END
tab_constraints.gridx = 1
tab_constraints.gridy = 0
tab_constraints.fill = GridBagConstraints.HORIZONTAL
self.tab.add(JButton(
"Resize screen", actionPerformed=self.resize),
tab_constraints)
tab_constraints.gridx = 0
tab_constraints.gridy = 1
tab_constraints.anchor = GridBagConstraints.FIRST_LINE_START
self.tab.add(labels, tab_constraints)
tab_constraints.gridx = 1
tab_constraints.gridy = 1
tab_constraints.fill = GridBagConstraints.BOTH
tab_constraints.weightx = 1.0
tab_constraints.weighty = 1.0
tab_constraints.anchor = GridBagConstraints.FIRST_LINE_END
self.tab.add(status_field, tab_constraints)
try:
self._callbacks.customizeUiComponent(self.tab)
except Exception:
pass
def registerExtenderCallbacks(self, callbacks):
self.callbacks = callbacks
self.helpers = callbacks.getHelpers()
callbacks.setExtensionName("Session Authentication Tool")
self.out = callbacks.getStdout()
# definition of suite tab
self.tab = JPanel(GridBagLayout())
self.tabledata = MappingTableModel(callbacks)
self.table = JTable(self.tabledata)
#self.table.getColumnModel().getColumn(0).setPreferredWidth(50);
#self.table.getColumnModel().getColumn(1).setPreferredWidth(100);
self.tablecont = JScrollPane(self.table)
c = GridBagConstraints()
c.fill = GridBagConstraints.HORIZONTAL
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 0
c.gridy = 0
c.gridheight = 6
c.weightx = 0.3
c.weighty = 0.5
self.tab.add(self.tablecont, c)
c = GridBagConstraints()
c.weightx = 0.1
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 1
c.gridy = 0
label_id = JLabel("Identifier:")
self.tab.add(label_id, c)
self.input_id = JTextField(20)
self.input_id.setToolTipText("Enter the identifier which is used by the application to identifiy a particular test user account, e.g. a numerical user id or a user name.")
c.gridy = 1
self.tab.add(self.input_id, c)
c.gridy = 2
label_content = JLabel("Content:")
self.tab.add(label_content, c)
self.input_content = JTextField(20, actionPerformed=self.btn_add_id)
self.input_content.setToolTipText("Enter some content which is displayed in responses of the application and shows that the current session belongs to a particular user, e.g. the full name of the user.")
c.gridy = 3
self.tab.add(self.input_content, c)
self.btn_add = JButton("Add/Edit Identity", actionPerformed=self.btn_add_id)
c.gridy = 4
self.tab.add(self.btn_add, c)
self.btn_del = JButton("Delete Identity", actionPerformed=self.btn_del_id)
c.gridy = 5
self.tab.add(self.btn_del, c)
callbacks.customizeUiComponent(self.tab)
callbacks.customizeUiComponent(self.table)
callbacks.customizeUiComponent(self.tablecont)
callbacks.customizeUiComponent(self.btn_add)
callbacks.customizeUiComponent(self.btn_del)
callbacks.customizeUiComponent(label_id)
callbacks.customizeUiComponent(self.input_id)
callbacks.addSuiteTab(self)
callbacks.registerScannerCheck(self)
callbacks.registerIntruderPayloadGeneratorFactory(self)
callbacks.registerContextMenuFactory(self)
def initComponents(self):
self.setLayout(GridBagLayout())
gc = GridBagConstraints()
gc.weightx = 1
gc.weighty = 1
# First Row
gc.gridy = 0
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.fill = GridBagConstraints.NONE
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.nameLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.nameField, gc)
# Second Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.mobLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.mobField, gc)
#Third Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.emailLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.emailField, gc)
#Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.vehicleLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.vehicleField, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 2
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.automateRecogBtn, gc)
#Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 2.0
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
self.add(self.regBtn, gc)
innerBorder = BorderFactory.createTitledBorder('Register Vehicle')
outerBorder = BorderFactory.createEmptyBorder(5, 5, 5, 5)
self.setBorder(
BorderFactory.createCompoundBorder(outerBorder, innerBorder))
def _constructAttackPanel(self, insets, messageEditorComponent):
attackPanel = JPanel(GridBagLayout())
targetHeadingLabel = JLabel("<html><b>Target</b></html>")
targetHeadingLabelConstraints = GridBagConstraints()
targetHeadingLabelConstraints.gridx = 0
targetHeadingLabelConstraints.gridy = 0
targetHeadingLabelConstraints.gridwidth = 4
targetHeadingLabelConstraints.anchor = GridBagConstraints.LINE_START
targetHeadingLabelConstraints.insets = insets
attackPanel.add(targetHeadingLabel, targetHeadingLabelConstraints)
startAttackButton = JButton("<html><b>Start Attack</b></html>",
actionPerformed=self._startAttack)
startAttackButtonConstraints = GridBagConstraints()
startAttackButtonConstraints.gridx = 4
startAttackButtonConstraints.gridy = 0
startAttackButtonConstraints.insets = insets
attackPanel.add(startAttackButton, startAttackButtonConstraints)
hostLabel = JLabel("Host:")
hostLabelConstraints = GridBagConstraints()
hostLabelConstraints.gridx = 0
hostLabelConstraints.gridy = 1
hostLabelConstraints.anchor = GridBagConstraints.LINE_START
hostLabelConstraints.insets = insets
attackPanel.add(hostLabel, hostLabelConstraints)
self._hostTextField = JTextField(25)
self._hostTextField.setMinimumSize(
self._hostTextField.getPreferredSize())
hostTextFieldConstraints = GridBagConstraints()
hostTextFieldConstraints.gridx = 1
hostTextFieldConstraints.gridy = 1
hostTextFieldConstraints.weightx = 1
hostTextFieldConstraints.gridwidth = 2
hostTextFieldConstraints.anchor = GridBagConstraints.LINE_START
hostTextFieldConstraints.insets = insets
attackPanel.add(self._hostTextField, hostTextFieldConstraints)
portLabel = JLabel("Port:")
portLabelConstraints = GridBagConstraints()
portLabelConstraints.gridx = 0
portLabelConstraints.gridy = 2
portLabelConstraints.anchor = GridBagConstraints.LINE_START
portLabelConstraints.insets = insets
attackPanel.add(portLabel, portLabelConstraints)
self._portTextField = JTextField(5)
self._portTextField.setMinimumSize(
self._portTextField.getPreferredSize())
portTextFieldConstraints = GridBagConstraints()
portTextFieldConstraints.gridx = 1
portTextFieldConstraints.gridy = 2
portTextFieldConstraints.gridwidth = 2
portTextFieldConstraints.anchor = GridBagConstraints.LINE_START
portTextFieldConstraints.insets = insets
attackPanel.add(self._portTextField, portTextFieldConstraints)
self._protocolCheckBox = JCheckBox("Use HTTPS")
protocolCheckBoxConstraints = GridBagConstraints()
protocolCheckBoxConstraints.gridx = 0
protocolCheckBoxConstraints.gridy = 3
protocolCheckBoxConstraints.gridwidth = 3
protocolCheckBoxConstraints.anchor = GridBagConstraints.LINE_START
protocolCheckBoxConstraints.insets = insets
attackPanel.add(self._protocolCheckBox, protocolCheckBoxConstraints)
requestHeadingLabel = JLabel("<html><b>Request</b></html>")
requestHeadingLabelConstraints = GridBagConstraints()
requestHeadingLabelConstraints.gridx = 0
requestHeadingLabelConstraints.gridy = 4
requestHeadingLabelConstraints.gridwidth = 4
requestHeadingLabelConstraints.anchor = GridBagConstraints.LINE_START
requestHeadingLabelConstraints.insets = insets
attackPanel.add(requestHeadingLabel, requestHeadingLabelConstraints)
messageEditorComponentConstraints = GridBagConstraints()
messageEditorComponentConstraints.gridx = 0
messageEditorComponentConstraints.gridy = 5
messageEditorComponentConstraints.weightx = 1
messageEditorComponentConstraints.weighty = .75
messageEditorComponentConstraints.gridwidth = 4
messageEditorComponentConstraints.gridheight = 2
messageEditorComponentConstraints.fill = GridBagConstraints.BOTH
messageEditorComponentConstraints.insets = insets
attackPanel.add(
messageEditorComponent, messageEditorComponentConstraints)
addPayloadButton = JButton(
"Add \xa7", actionPerformed=self._addPayload)
addPayloadButtonConstraints = GridBagConstraints()
addPayloadButtonConstraints.gridx = 4
addPayloadButtonConstraints.gridy = 5
addPayloadButtonConstraints.fill = GridBagConstraints.HORIZONTAL
addPayloadButtonConstraints.insets = insets
attackPanel.add(addPayloadButton, addPayloadButtonConstraints)
clearPayloadButton = JButton(
"Clear \xa7", actionPerformed=self._clearPayloads)
clearPayloadButtonConstraints = GridBagConstraints()
clearPayloadButtonConstraints.gridx = 4
clearPayloadButtonConstraints.gridy = 6
clearPayloadButtonConstraints.anchor = GridBagConstraints.PAGE_START
clearPayloadButtonConstraints.fill = GridBagConstraints.HORIZONTAL
clearPayloadButtonConstraints.insets = insets
attackPanel.add(clearPayloadButton, clearPayloadButtonConstraints)
payloadHeadingLabel = JLabel("<html><b>Payloads<b></html>")
payloadHeadingLabelConstraints = GridBagConstraints()
payloadHeadingLabelConstraints.gridx = 0
payloadHeadingLabelConstraints.gridy = 7
payloadHeadingLabelConstraints.gridwidth = 4
payloadHeadingLabelConstraints.anchor = GridBagConstraints.LINE_START
payloadHeadingLabelConstraints.insets = insets
attackPanel.add(payloadHeadingLabel, payloadHeadingLabelConstraints)
self._payloadTextArea = JTextArea()
payloadScrollPane = JScrollPane(self._payloadTextArea)
payloadScrollPaneConstraints = GridBagConstraints()
payloadScrollPaneConstraints.gridx = 0
payloadScrollPaneConstraints.gridy = 8
payloadScrollPaneConstraints.weighty = .25
payloadScrollPaneConstraints.gridwidth = 3
payloadScrollPaneConstraints.fill = GridBagConstraints.BOTH
payloadScrollPaneConstraints.insets = insets
attackPanel.add(payloadScrollPane, payloadScrollPaneConstraints)
requestsNumLabel = JLabel("Number of requests for each payload:")
requestsNumLabelConstraints = GridBagConstraints()
requestsNumLabelConstraints.gridx = 0
requestsNumLabelConstraints.gridy = 9
requestsNumLabelConstraints.gridwidth = 2
requestsNumLabelConstraints.anchor = GridBagConstraints.LINE_START
requestsNumLabelConstraints.insets = insets
attackPanel.add(requestsNumLabel, requestsNumLabelConstraints)
self._requestsNumTextField = JTextField("100", 4)
self._requestsNumTextField.setMinimumSize(
self._requestsNumTextField.getPreferredSize())
requestsNumTextFieldConstraints = GridBagConstraints()
requestsNumTextFieldConstraints.gridx = 2
requestsNumTextFieldConstraints.gridy = 9
requestsNumTextFieldConstraints.anchor = GridBagConstraints.LINE_START
requestsNumTextFieldConstraints.insets = insets
attackPanel.add(
self._requestsNumTextField, requestsNumTextFieldConstraints)
return attackPanel
def __init__(self, callbacks):
self._callbacks = callbacks
self.tab = JPanel(GridBagLayout())
about_constraints = GridBagConstraints()
about_author = (("<html><center><h2>SpyDir</h2><b>Version:</b> "
"%s<br/>Created by: <em>Ryan Reid</em>"
" (@_aur3lius)<br/>https://github.com/aur3lius-dev/"
"SpyDir</center><br/>")
% VERSION)
about_spydir = """<em><center>
SpyDir is an extension that assists in the enumeration of
application<br/>
endpoints via an input directory containing the application's<br/>
source code. It provides an option to process files as endpoints,<br/>
think: ASP, PHP, HTML, or parse files to attempt to enumerate<br/>
endpoints via plugins, think: MVC. Users may opt to send the<br/>
discovered endpoints directly to the Burp Spider.
</center></em><br/>
This tool is in <b>Alpha</b>! <b>Please</b> provide feedback on the
GitHub page!<br/><br/>"""
getting_started = """<b>Getting started:</b><br/>
<ul>
<li>Add a local source repository</li>
<li>Add the target URL</li>
<li>Use the String delimiter to construct the appropriate
directory path (if necessary)</li>
<li>Alternatively, parse each file by selecting plugins
and checking the checkbox</li>
<li>Explicitly define the file extensions to process</li>
<li>Parse the directory</li>
<li>Verify output is correct <b>before</b> sending to spider</li>
<li>Send requests to the Burp Spider</li>
</ul>
"""
advanced_info = r"""<html><b>String Delimiter</b><br/>
String Delimiter allows us to append the necessary section
of the folder structure.<br/>
Suppose the target application is hosted at the following URL:
https://localhost:8080. <br/>The target code base is stored in:
'C:\Source\TestApp'. <br/>Within the TestApp folder there is a
subfolder, 'views', with static .html files.<br/>
In this case the String Delimiter will need to equal 'TestApp'.
<br/>With the expectation that the tool will produce an example URL
will such as:<br/>https://localhost:8080/views/view1.html.<br/><br/>
<b>Path Vars</b><br/>Use this option to swap values for dynamically
enumerated query string parameters. This needs to be a JSON object.
<br/><b>Example:</b>{"{userID}": "aur3lius", "admin_status=":
"admin_status=True"}<br/><br/>
<b>Note:</b> String Delimiter is ignored if parsing files using
plugins!
</html>"""
about_constraints.anchor = GridBagConstraints.FIRST_LINE_START
about_constraints.weightx = 1.0
about_constraints.weighty = 1.0
self.tab.add(JLabel("%s\n%s\n%s\n%s" % (about_author, about_spydir,
getting_started,
advanced_info)),
about_constraints)
def initComponents(self):
self.setLayout(GridBagLayout())
gbc = GridBagConstraints()
gbc.anchor = GridBagConstraints.NORTHWEST
gbc.gridx = 0
gbc.gridy = 0
descriptionLabel = JLabel("FEA - Forensics Email Analysis")
self.add(descriptionLabel, gbc)
gbc.gridy = 1
self.cbNSLookup = JCheckBox(
"Perform DNS Lookup on email domains",
actionPerformed=self.cbNSLookupActionPerformed)
self.cbNSLookup.setSelected(True)
self.add(self.cbNSLookup, gbc)
# TODO: include option to browse for text file with list of emails to exclude from analysis
numberThreadsLabel = JLabel(
"Maximum number of threads for DNS Lookup task: ")
gbc.gridy = 2
self.add(numberThreadsLabel, gbc)
self.numberThreadsSlider = JSlider(
JSlider.HORIZONTAL,
1,
16,
8,
stateChanged=self.sliderActionPerformed)
self.numberThreadsSlider.setMajorTickSpacing(1)
self.numberThreadsSlider.setPaintLabels(True)
self.numberThreadsSlider.setPaintTicks(True)
self.numberThreadsSlider.setSnapToTicks(True)
self.numberThreadsSlider.setToolTipText(
"set maximum number of concurrent threads when performing DNS lookup on email domains"
)
gbc.gridy = 5
gbc.gridwidth = 15
gbc.gridheight = 1
gbc.fill = GridBagConstraints.BOTH
gbc.weightx = 0
gbc.weighty = 0
gbc.anchor = GridBagConstraints.NORTHWEST
gbc.gridy = 3
self.add(self.numberThreadsSlider, gbc)
self.cbGenerateExcel = JCheckBox(
"Generate Excel format report (more detailed)",
actionPerformed=self.cbGenerateExcelActionPerformed)
self.cbGenerateExcel.setSelected(True)
gbc.gridy = 4
self.add(self.cbGenerateExcel, gbc)
self.cbGenerateCSV = JCheckBox(
"Generate CSV format report (plaintext)",
actionPerformed=self.cbGenerateCSVActionPerformed)
self.cbGenerateCSV.setSelected(True)
gbc.gridy = 5
self.add(self.cbGenerateCSV, gbc)
gbc.gridy = 6
self.cbWayback = JCheckBox(
"Perform Wayback Machine Lookup on email domains (WARNING: can be a slow process!)",
actionPerformed=self.cbWaybackActionPerformed)
self.cbWayback.setSelected(True)
self.add(self.cbWayback, gbc)
def registerExtenderCallbacks(self, callbacks):
endianVal = 0
def generateTextBox(defaultTxt, editable):
sample = JTextArea(5, 20)
scrollPane1 = JScrollPane(sample)
sample.setBounds(0, 0, 400, 400)
sample.setEditable(editable)
sample.setLineWrap(True)
sample.setWrapStyleWord(True)
sample.setBorder(BorderFactory.createLineBorder(Color.BLACK))
sample.setText(defaultTxt)
return sample
def decodeData(event):
#Get Base64 token
full_str = base64.b64decode(self._left_tb1.getText())
sha_mac = full_str[44:64].encode('hex')
inflate_data = full_str[76:]
data = zlib.decompress(inflate_data)
user_length = data[20]
loc = 21
tokenDetails = "User name :" + data[
loc:loc + int(user_length.encode('hex'), 16)].replace(
"\x00", "") + "\n"
loc = loc + int(user_length.encode('hex'), 16)
lang_length = data[loc]
loc = loc + 1
tokenDetails += "Lang Code :" + data[
loc:loc + int(lang_length.encode('hex'), 16)].replace(
"\x00", "") + "\n"
tmp1.setText(data[loc:loc +
int(lang_length.encode('hex'), 16)].replace(
"\x00", ""))
loc = loc + int(lang_length.encode('hex'), 16)
node_length = data[loc]
loc = loc + 1
tokenDetails += "Node name :" + data[
loc:loc + int(node_length.encode('hex'), 16)].replace(
"\x00", "") + "\n"
tmp2.setText(data[loc:loc +
int(node_length.encode('hex'), 16)].replace(
"\x00", ""))
loc = loc + int(node_length.encode('hex'), 16)
time_length = data[loc]
loc = loc + 1
tokenDetails += "Creation time :" + data[
loc:loc + int(time_length.encode('hex'), 16)].replace(
"\x00", "")
tmp = data[loc:loc + int(time_length.encode('hex'), 16)].replace(
"\x00", "")
datestamp = tmp[:len(tmp) - 7]
tmp3.setText(datestamp)
# Determine if it's little or big endian
if (data[4:8].encode('hex') == '04030201'):
endianVal = 0
else:
endianVal = 1
tmp4.setText(str(endianVal))
hashcatFormat = sha_mac + ":" + data.encode("hex")
left_tb2.setText(tokenDetails)
left_tb3.setText(hashcatFormat)
def make_field(part, size):
part = chr(len(part) + size) + part
return part
def generateToken(event):
newtoken = ""
endianVal = int(tmp4.getText())
if endianVal == 1:
username = right_tb2.getText().encode('utf_16_be')
nodepw = right_tb1.getText().encode('utf_16_le')
lang = tmp1.getText().encode('utf_16_be')
nodename = tmp2.getText().encode('utf_16_be')
datestamp = (tmp3.getText() + '.164266').encode('utf_16_be')
token_ver = "8.10".encode('utf_16_be')
unknown_field = "N".encode('utf_16_be')
uncompressed_data = '\x01\x02\x03\x04\x00\x01\x00\x00\x00\x00\x02\xbc\x00\x00\x00\x00' + make_field(
username, 0) + make_field(lang, 0) + make_field(
nodename, 0) + make_field(datestamp, 0) + '\x00'
uncompressed_field = '\x00\x00\x00' + make_field(
uncompressed_data, 4)
inflate_data = zlib.compress(uncompressed_field)
sha1_mac = hashlib.sha1(uncompressed_field + nodepw).digest()
uncompressed_length = chr(len(uncompressed_field))
static_headers1 = '\x01\x02\x03\x04\x00\x01\x00\x00\x00\x00\x02\xbc\x00\x00\x00\x00\x00\x00\x00\x2c\x00\x04\x53\x68\x64\x72\x02' + unknown_field + uncompressed_length + '\x08' + token_ver + '\x14'
static_headers2 = '\x00\x05\x53\x64\x61\x74\x61'
body = '\x00\x00\x00' + make_field(
static_headers2 + make_field(inflate_data, 0), 4)
token = '\x00\x00\x00' + make_field(
static_headers1 + sha1_mac + body, 4)
newtoken = base64.b64encode(token)
elif endianVal == 0:
username = right_tb2.getText().encode('utf_16_le')
nodepw = right_tb1.getText().encode('utf_16_le')
lang = tmp1.getText().encode('utf_16_le')
nodename = tmp2.getText().encode('utf_16_le')
datestamp = (tmp3.getText() + '.999543').encode('utf_16_le')
token_ver = "8.10".encode('utf_16_le')
unknown_field = "N".encode('utf_16_le')
uncompressed_data = '\x00\x00\x00\x04\x03\x02\x01\x01\x00\x00\x00\xbc\x02\x00\x00\x00\x00\x00\x00' + make_field(
username, 0) + make_field(lang, 0) + make_field(
nodename, 0) + make_field(datestamp, 0) + '\x00'
uncompressed_field = make_field(uncompressed_data, 1)
inflate_data = zlib.compress(uncompressed_field)
sha1_mac = hashlib.sha1(uncompressed_field + nodepw).digest()
uncompressed_length = chr(len(uncompressed_field))
static_headers1 = '\x00\x00\x00\x04\x03\x02\x01\x01\x00\x00\x00\xbc\x02\x00\x00\x00\x00\x00\x00\x2c\x00\x00\x00\x04\x00\x53\x68\x64\x72\x02' + unknown_field + uncompressed_length + '\x08' + token_ver + '\x14'
static_headers2 = '\x00\x00\x00\x05\x00\x53\x64\x61\x74\x61'
body = make_field(
static_headers2 + make_field(inflate_data, 0), 1)
token = make_field(static_headers1 + sha1_mac + body, 1)
newtoken = base64.b64encode(token)
right_tb3.setText("PS_TOKEN=" + newtoken + ";")
# keep a reference to our callbacks object
self._callbacks = callbacks
# obtain an extension helpers object
self._helpers = callbacks.getHelpers()
# set our extension name
callbacks.setExtensionName("PeopleSoft PSToken Processor")
# main split pane
self._splitpane = JSplitPane(JSplitPane.HORIZONTAL_SPLIT)
self._splitpane.setResizeWeight(0.5)
c = GridBagConstraints()
c.weightx = 1
c.weighty = 1
c.anchor = GridBagConstraints.NORTHWEST
#Temp variables
tmp1 = JLabel("tmp")
tmp2 = JLabel("tmp")
tmp3 = JLabel("tmp")
tmp4 = JLabel("tmp")
# add left panel
panel1 = JPanel(GridBagLayout())
header1 = JLabel("EXTRACTION")
header1.setFont(Font("Myriad Pro", Font.BOLD, 24))
left_t1 = JLabel("PS_TOKEN Cookie")
left_t2 = JLabel("Token Details")
left_t3 = JLabel("Token Hash + Salt (Hashcat Format)")
left_t4 = JLabel(
"Save this into a .hash file and run the following Hashcat command: hashcat -m 13500 <hashfile> <dictionary file>"
)
self._left_tb1 = generateTextBox("Your PS_TOKEN value here", True)
left_tb2 = generateTextBox("Token Details here", False)
left_tb3 = generateTextBox("Hashcat format here", False)
btnDecode = JButton("Decode", actionPerformed=decodeData)
btnGenerate = JButton("Generate", actionPerformed=generateToken)
#add right panel
panel2 = JPanel(GridBagLayout())
header2 = JLabel("GENERATION")
header2.setFont(Font("Myriad Pro", Font.BOLD, 24))
right_t1 = JLabel("Node password")
right_t2 = JLabel("New username")
right_t3 = JLabel("New Base64 PS_TOKEN")
right_t4 = JLabel(
"Match & Replace rule to modify PS_TOKEN (Type: Request Header, enable regex)"
)
right_t5 = JLabel("Match rule: PS_TOKEN=[A-Za-z0-9\/\+]*;")
right_t6 = JLabel("Replace: PS_TOKEN=<new generated PS_TOKEN>;")
right_tb1 = generateTextBox("Password here", True)
right_tb2 = generateTextBox("PSADMIN", True)
right_tb3 = generateTextBox("Your new token here", False)
panel1.add(header1, c)
panel2.add(header2, c)
c.gridx = 0
c.gridy = 1
panel1.add(left_t1, c)
panel2.add(right_t1, c)
c.gridy += 1
panel1.add(self._left_tb1, c)
panel2.add(right_tb1, c)
c.gridy += 1
panel1.add(left_t2, c)
panel2.add(right_t2, c)
c.gridy += 1
panel1.add(left_tb2, c)
panel2.add(right_tb2, c)
c.gridy += 1
panel1.add(left_t3, c)
panel2.add(right_t3, c)
c.gridy += 1
panel1.add(left_t4, c)
panel2.add(right_t4, c)
c.gridy += 1
panel1.add(left_tb3, c)
panel2.add(right_t5, c)
c.gridy += 1
panel2.add(right_t6, c)
c.gridy += 1
panel2.add(right_tb3, c)
c.gridy += 1
panel1.add(btnDecode, c)
panel2.add(btnGenerate, c)
self._splitpane.setLeftComponent(panel1)
self._splitpane.setRightComponent(panel2)
# customize our UI components
callbacks.customizeUiComponent(self._splitpane)
#callbacks.customizeUiComponent(panel1)
#callbacks.customizeUiComponent(scrollPane)
# add the custom tab to Burp's UI
callbacks.addSuiteTab(self)
#add option to do right-click
callbacks.registerContextMenuFactory(self)
return
def createAndShowGUI(self):
'''
Create and display the gui.
'''
layout = GridBagLayout()
c = GridBagConstraints()
self.setLayout(layout)
projectLabel = Label("Project: ")
c.gridx = 0
c.gridy = 0
c.ipady = 5
c.ipadx = 5
c.anchor = GridBagConstraints.EAST
layout.setConstraints(projectLabel, c)
self.projectChoice = Choice()
for name in self.projectNames:
self.projectChoice.add(name)
c.gridx = 1
c.gridy = 0
c.fill = GridBagConstraints.HORIZONTAL
layout.setConstraints(self.projectChoice, c)
storageLabel = Label("Storage: ")
c.gridx = 0
c.gridy = 1
c.fill = GridBagConstraints.NONE
c.anchor = GridBagConstraints.EAST
layout.setConstraints(storageLabel, c)
self.storageChoice = Choice()
for name in self.storageNames:
self.storageChoice.add(name)
c.gridx = 1
c.gridy = 1
c.fill = GridBagConstraints.HORIZONTAL
layout.setConstraints(self.storageChoice, c)
self.convertToOMETIFCheckBox = Checkbox("convert to OME-TIF", True)
c.gridx = 1
c.gridy = 2
layout.setConstraints(self.convertToOMETIFCheckBox, c)
self.uploadAsGroundTruthCheckBox = Checkbox("upload as ground-truth images")
c.gridx = 1
c.gridy = 3
layout.setConstraints(self.uploadAsGroundTruthCheckBox, c)
self.folderTextField = TextField("", 15)
self.folderTextField.setText("<Image-Folder>")
c.gridx = 0
c.gridy = 4
layout.setConstraints(self.folderTextField, c)
self.folderTextField.setEditable(False)
browseButton = Button('Browse...')
browseButton.addActionListener(self)
c.gridx = 1
c.gridy = 4
layout.setConstraints(browseButton, c)
statusLabel = Label("Status:")
c.gridy = 5
c.gridx = 0
c.fill = GridBagConstraints.NONE
c.anchor = GridBagConstraints.EAST
layout.setConstraints(statusLabel, c)
self.statusTextField = TextField("Select a folder!", 20)
c.gridy = 5
c.gridx = 1
c.fill = GridBagConstraints.HORIZONTAL
layout.setConstraints(self.statusTextField, c)
self.statusTextField.setEditable(False)
self.uploadButton = Button("Upload Images")
self.uploadButton.addActionListener(self)
c.gridwidth = 2
c.gridheight = 2
c.gridy = 6
c.gridx = 0
c.weighty = 1.0
layout.setConstraints(self.uploadButton, c)
self.add(projectLabel)
self.add(self.projectChoice)
self.add(storageLabel)
self.add(self.storageChoice)
self.add(self.convertToOMETIFCheckBox)
self.add(self.uploadAsGroundTruthCheckBox)
self.add(self.folderTextField)
self.add(browseButton)
self.add(statusLabel)
self.add(self.statusTextField)
self.add(self.uploadButton)
self.setSize(400,300)
self.setVisible(True)
def registerExtenderCallbacks(self, callbacks):
self._callbacks = callbacks
self._helpers = callbacks.getHelpers()
callbacks.setExtensionName("Module Importer")
self.out = callbacks.getStdout()
self.tab = JPanel(GridBagLayout())
self.tableData = []
colNames = ('Enabled', 'Module')
self.dataModel = MyTableModel(self.tableData, colNames)
self.table = JTable(self.dataModel)
self.tablecont = JScrollPane(self.table)
c = GridBagConstraints()
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 0
c.gridy = 4
c.gridheight = 6
c.gridwidth = 6
c.weightx = 0.6
c.weighty = 0.5
self.tab.add(self.tablecont, c)
self.fc = JFileChooser()
self.fc.setFileSelectionMode(JFileChooser.DIRECTORIES_ONLY)
label_for_openDirectory = JLabel("Module Importer")
c = GridBagConstraints()
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 0
c.gridy = 0
self.tab.add(label_for_openDirectory, c)
label_plugin_desc = JLabel(
"This module makes your development of Burp Suite Plugin easier.")
label_plugin_desc.setPreferredSize(Dimension(400, 50))
c = GridBagConstraints()
c.gridx = 0
c.gridy = 1
self.tab.add(label_plugin_desc, c)
label_for_openDirectory = JLabel("Module Path:")
c = GridBagConstraints()
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 0
c.gridy = 2
self.tab.add(label_for_openDirectory, c)
c = GridBagConstraints()
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 0
c.gridy = 3
self.input_id = JTextField(40)
self.input_id.setEditable(java.lang.Boolean.FALSE)
self.tab.add(self.input_id, c)
c = GridBagConstraints()
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 1
c.gridy = 3
self.openButton = JButton("Open Directory",
actionPerformed=self.openDialog)
self.tab.add(self.openButton, c)
if M_PATH:
self.set_fixed_module_path()
#callbacks.customizeUiComponent(self.tab)
#callbacks.customizeUiComponent(self.table)
#callbacks.customizeUiComponent(self.tablecont)
callbacks.addSuiteTab(self)
callbacks.registerProxyListener(self)
return
# Top-right button to open the folder containing the image in the selected table row
c.gridx = 3
c.gridy = 0
c.gridwidth = 1
c.fill = GridBagConstraints.NONE
c.weightx = 0.0 # let the previous ('path') component stretch as much as possible
parent = JButton("Open folder", actionPerformed=openAtFolder)
gb.setConstraints(parent, c)
all.add(parent)
# Middle-right textarea showing the text of a note associated with the selected table row image
c.gridx = 1
c.gridy = 1
c.weighty = 1.0
c.gridwidth = 3
c.fill = GridBagConstraints.BOTH
textarea = JTextArea()
textarea.setBorder(
BorderFactory.createCompoundBorder(
BorderFactory.createLineBorder(Color.BLACK),
BorderFactory.createEmptyBorder(10, 10, 10, 10)))
textarea.setLineWrap(True)
textarea.setWrapStyleWord(True) # wrap text by cutting lines at whitespace
textarea.setEditable(False)
font = textarea.getFont().deriveFont(18.0)
textarea.setFont(font)
textarea.setPreferredSize(Dimension(500, 500))
gb.setConstraints(textarea, c)
all.add(textarea)
def getArguments(self):
"""
This function brings up a window to retreive any required arguments. It uses a window with fields for each argument, filled with any arguments already given.
While this window is visible the program will wait, once it is no longer visible all the arguments will be filled with the entries in the fields.
"""
class LocationAction(AbstractAction):
"""
Action to set the text of a text field to a folder or directory.
"""
def __init__(self, field):
AbstractAction.__init__(self, "...")
self.field = field
def actionPerformed(self, event):
fileChooser = JFileChooser()
fileChooser.fileSelectionMode = JFileChooser.FILES_AND_DIRECTORIES
if fileChooser.showOpenDialog(None) == JFileChooser.APPROVE_OPTION:
self.field.text = fileChooser.selectedFile.absolutePath
class HelpAction(AbstractAction):
"""
Displays a help page in a web browser.
"""
def __init__(self):
AbstractAction.__init__(self, "Help")
def actionPerformed(self, event):
browsers = ["google-chrome", "firefox", "opera", "epiphany", "konqueror", "conkeror", "midori", "kazehakase", "mozilla"]
osName = System.getProperty("os.name")
helpHTML = ClassLoader.getSystemResource("help.html").toString()
if osName.find("Mac OS") == 0:
Class.forName("com.apple.eio.FileManager").getDeclaredMethod( "openURL", [String().getClass()]).invoke(None, [helpHTML])
elif osName.find("Windows") == 0:
Runtime.getRuntime().exec( "rundll32 url.dll,FileProtocolHandler " + helpHTML)
else:
browser = None
for b in browsers:
if browser == None and Runtime.getRuntime().exec(["which", b]).getInputStream().read() != -1:
browser = b
Runtime.getRuntime().exec([browser, helpHTML])
class OKAction(AbstractAction):
"""
Action for starting the pipeline. This action will simply make the window invisible.
"""
def __init__(self):
AbstractAction.__init__(self, "Ok")
def actionPerformed(self, event):
frame.setVisible(False)
class CancelAction(AbstractAction):
"""
Action for canceling the pipeline. Exits the program.
"""
def __init__(self):
AbstractAction.__init__(self, "Cancel")
def actionPerformed(self, event):
sys.exit(0)
frame = JFrame("Neofelis")
frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE)
constraints = GridBagConstraints()
contentPane = JPanel(GridBagLayout())
frame.setContentPane(contentPane)
blastField = JTextField(self.blastLocation)
genemarkField = JTextField(self.genemarkLocation)
transtermField = JTextField(self.transtermLocation)
tRNAscanField = JTextField(self.tRNAscanLocation)
databaseLocationField = JTextField(os.path.split(self.database)[0])
databaseField = JTextField(os.path.split(self.database)[1])
matrixField = JTextField(str(self.matrix))
eValueField = JTextField(str(self.eValue))
minLengthField = JTextField(str(self.minLength))
scaffoldingDistanceField = JTextField(str(self.scaffoldingDistance))
promoterScoreField = JTextField(str(self.promoterScoreCutoff))
queryField = JTextField(self.sources[0])
constraints.gridx = 0
constraints.gridy = 0
constraints.gridwidth = 1
constraints.gridheight = 1
constraints.fill = GridBagConstraints.HORIZONTAL
constraints.weightx = 0
constraints.weighty = 0
contentPane.add(JLabel("Blast Location"), constraints)
constraints.gridy = 1
contentPane.add(JLabel("Genemark Location"), constraints)
constraints.gridy = 2
contentPane.add(JLabel("Transterm Location"), constraints)
constraints.gridy = 3
contentPane.add(JLabel("tRNAscan Location"), constraints)
constraints.gridy = 4
contentPane.add(JLabel("Databases Location"), constraints)
constraints.gridy = 5
contentPane.add(JLabel("Database"), constraints)
constraints.gridy = 6
contentPane.add(JLabel("Matrix(Leave blank to use heuristic matrix)"), constraints)
constraints.gridy = 7
contentPane.add(JLabel("E Value"), constraints)
constraints.gridy = 8
contentPane.add(JLabel("Minimum Intergenic Length"), constraints)
constraints.gridy = 9
contentPane.add(JLabel("Scaffold Distance"), constraints)
constraints.gridy = 10
contentPane.add(JLabel("Promoter Score Cutoff"), constraints)
constraints.gridy = 11
contentPane.add(JLabel("Query"), constraints)
constraints.gridx = 1
constraints.gridy = 0
constraints.weightx = 1
contentPane.add(blastField, constraints)
constraints.gridy = 1
contentPane.add(genemarkField, constraints)
constraints.gridy = 2
contentPane.add(transtermField, constraints)
constraints.gridy = 3
contentPane.add(tRNAscanField, constraints)
constraints.gridy = 4
contentPane.add(databaseLocationField, constraints)
constraints.gridy = 5
contentPane.add(databaseField, constraints)
constraints.gridy = 6
contentPane.add(matrixField, constraints)
constraints.gridy = 7
contentPane.add(eValueField, constraints)
constraints.gridy = 8
contentPane.add(minLengthField, constraints)
constraints.gridy = 9
contentPane.add(scaffoldingDistanceField, constraints)
constraints.gridy = 10
contentPane.add(promoterScoreField, constraints)
constraints.gridy = 11
contentPane.add(queryField, constraints)
constraints.gridx = 2
constraints.gridy = 0
constraints.weightx = 0
constraints.fill = GridBagConstraints.NONE
constraints.anchor = GridBagConstraints.LINE_END
contentPane.add(JButton(LocationAction(blastField)), constraints)
constraints.gridy = 1
contentPane.add(JButton(LocationAction(genemarkField)), constraints)
constraints.gridy = 2
contentPane.add(JButton(LocationAction(transtermField)), constraints)
constraints.gridy = 3
contentPane.add(JButton(LocationAction(tRNAscanField)), constraints)
constraints.gridy = 4
contentPane.add(JButton(LocationAction(databaseLocationField)), constraints)
constraints.gridy = 11
contentPane.add(JButton(LocationAction(queryField)), constraints)
constraints.gridx = 0
constraints.gridy = 12
constraints.anchor = GridBagConstraints.LINE_START
contentPane.add(JButton(HelpAction()), constraints)
constraints.gridx = 1
constraints.anchor = GridBagConstraints.LINE_END
contentPane.add(JButton(OKAction()), constraints)
constraints.gridx = 2
contentPane.add(JButton(CancelAction()), constraints)
frame.pack()
frame.setLocationRelativeTo(None)
frame.setVisible(True)
while frame.isVisible():
pass
self.blastLocation = blastField.getText()
self.genemarkLocation = genemarkField.getText()
self.transtermLocation = transtermField.getText()
self.database = databaseLocationField.getText() + "/" + databaseField.getText()
self.matrix = matrixField.getText()
self.eValue = float(eValueField.getText())
self.minLength = int(minLengthField.getText())
self.scaffoldingDistance = int(scaffoldingDistanceField.getText())
self.promoterScoreCutoff = float(promoterScoreField.getText())
self.sources = [queryField.getText()]
def registerExtenderCallbacks(self, callbacks):
self.callbacks = callbacks
self.helpers = callbacks.getHelpers()
callbacks.setExtensionName("Session Authentication Tool")
self.out = callbacks.getStdout()
# definition of suite tab
self.tab = JPanel(GridBagLayout())
self.tabledata = MappingTableModel(callbacks)
self.table = JTable(self.tabledata)
#self.table.getColumnModel().getColumn(0).setPreferredWidth(50);
#self.table.getColumnModel().getColumn(1).setPreferredWidth(100);
self.tablecont = JScrollPane(self.table)
c = GridBagConstraints()
c.fill = GridBagConstraints.HORIZONTAL
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 0
c.gridy = 0
c.gridheight = 6
c.weightx = 0.3
c.weighty = 0.5
self.tab.add(self.tablecont, c)
c = GridBagConstraints()
c.weightx = 0.1
c.anchor = GridBagConstraints.FIRST_LINE_START
c.gridx = 1
c.gridy = 0
label_id = JLabel("Identifier:")
self.tab.add(label_id, c)
self.input_id = JTextField(20)
self.input_id.setToolTipText(
"Enter the identifier which is used by the application to identifiy a particular test user account, e.g. a numerical user id or a user name."
)
c.gridy = 1
self.tab.add(self.input_id, c)
c.gridy = 2
label_content = JLabel("Content:")
self.tab.add(label_content, c)
self.input_content = JTextField(20, actionPerformed=self.btn_add_id)
self.input_content.setToolTipText(
"Enter some content which is displayed in responses of the application and shows that the current session belongs to a particular user, e.g. the full name of the user."
)
c.gridy = 3
self.tab.add(self.input_content, c)
self.btn_add = JButton("Add/Edit Identity",
actionPerformed=self.btn_add_id)
c.gridy = 4
self.tab.add(self.btn_add, c)
self.btn_del = JButton("Delete Identity",
actionPerformed=self.btn_del_id)
c.gridy = 5
self.tab.add(self.btn_del, c)
callbacks.customizeUiComponent(self.tab)
callbacks.customizeUiComponent(self.table)
callbacks.customizeUiComponent(self.tablecont)
callbacks.customizeUiComponent(self.btn_add)
callbacks.customizeUiComponent(self.btn_del)
callbacks.customizeUiComponent(label_id)
callbacks.customizeUiComponent(self.input_id)
callbacks.addSuiteTab(self)
callbacks.registerScannerCheck(self)
callbacks.registerIntruderPayloadGeneratorFactory(self)
callbacks.registerContextMenuFactory(self)
def show_detectable_objects_dialog(self, e):
parentComponent = SwingUtilities.windowForComponent(self.panel0)
self.detectable_obejcts_dialog = JDialog(
parentComponent, "List of Objects to Detect",
ModalityType.APPLICATION_MODAL)
panel = JPanel()
self.detectable_obejcts_dialog.add(panel)
gbPanel = GridBagLayout()
gbcPanel = GridBagConstraints()
panel.setLayout(gbPanel)
y = 0
x = 0
for line in self.local_settings.getClassesOfInterest():
if y > 15:
y = 0
x = x + 1
class_check_box = JCheckBox(line['name'])
self.classes_of_interest_checkboxes.append(class_check_box)
class_check_box.setEnabled(True)
class_check_box.setSelected(line['enabled'])
class_check_box.addItemListener(self.on_class_checkbox_clicked)
gbcPanel.gridx = x
gbcPanel.gridy = y
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 1
gbcPanel.weighty = 1
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(class_check_box, gbcPanel)
panel.add(class_check_box)
y = y + 1
blank_1_L = JLabel(" ")
blank_1_L.setEnabled(True)
gbcPanel.gridx = 0
gbcPanel.gridy = y + 1
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 1
gbcPanel.weighty = 0
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(blank_1_L, gbcPanel)
panel.add(blank_1_L)
deselect_all_button = JButton("Deselect all")
deselect_all_button.setEnabled(True)
deselect_all_button.addActionListener(self.on_deselect_all_clicked)
gbcPanel.gridx = 1
gbcPanel.gridy = y + 2
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 2
gbcPanel.weighty = 1
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(deselect_all_button, gbcPanel)
panel.add(deselect_all_button)
select_all_button = JButton("Select all")
select_all_button.setEnabled(True)
select_all_button.addActionListener(self.on_select_all_clicked)
gbcPanel.gridx = 3
gbcPanel.gridy = y + 2
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 2
gbcPanel.weighty = 1
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(select_all_button, gbcPanel)
panel.add(select_all_button)
blank_2_L = JLabel(" ")
blank_2_L.setEnabled(True)
gbcPanel.gridx = 0
gbcPanel.gridy = y + 3
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 1
gbcPanel.weighty = 0
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(blank_2_L, gbcPanel)
panel.add(blank_2_L)
cancel_button = JButton("Cancel")
cancel_button.setEnabled(True)
cancel_button.addActionListener(
self.on_cancel_classes_of_interest_click)
gbcPanel.gridx = 1
gbcPanel.gridy = y + 4
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 2
gbcPanel.weighty = 1
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(cancel_button, gbcPanel)
panel.add(cancel_button)
save_button = JButton("Save")
save_button.setEnabled(True)
save_button.addActionListener(self.on_save_classes_of_interest_click)
gbcPanel.gridx = 3
gbcPanel.gridy = y + 4
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 2
gbcPanel.weighty = 1
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(save_button, gbcPanel)
panel.add(save_button)
blank_3_L = JLabel(" ")
blank_3_L.setEnabled(True)
gbcPanel.gridx = 0
gbcPanel.gridy = y + 5
gbcPanel.gridwidth = 1
gbcPanel.gridheight = 1
gbcPanel.fill = GridBagConstraints.BOTH
gbcPanel.weightx = 1
gbcPanel.weighty = 0
gbcPanel.anchor = GridBagConstraints.NORTH
gbPanel.setConstraints(blank_3_L, gbcPanel)
panel.add(blank_3_L)
self.detectable_obejcts_dialog.pack()
screenSize = Toolkit.getDefaultToolkit().getScreenSize()
self.detectable_obejcts_dialog.setLocation(
int((screenSize.getWidth() / 2) -
(self.detectable_obejcts_dialog.getWidth() / 2)),
int((screenSize.getHeight() / 2) -
(self.detectable_obejcts_dialog.getHeight() / 2)))
self.detectable_obejcts_dialog.setVisible(True)
def create(self):
# Estilo general para todas las sub-tab.
gBC = GridBagConstraints()
gBC.fill = GridBagConstraints.BOTH
gBC.ipadx = 5
gBC.ipady = 5
gBC.insets = Insets(0, 5, 5, 5)
gBC.weightx = 0.5
#gBC.weighty = 0.7
#######################################
### Creamos la primera sub-tab. (MASHUP)
#######################################
tab_1 = JPanel(GridBagLayout())
tab_1_jlabelAyuda = JLabel(
'<html><i>•Tip: This Mashup receive one or more keywords in order to generate a list of possible passwords</i></html>'
)
tab_1_jlabelAyuda.setFont(Font("Serif", 0, 12))
gBC.gridx = 0
gBC.gridy = 0
tab_1.add(
JLabel('<html><font color=green><i>Income:</i></font></html>'),
gBC)
gBC.gridy = 1
tab_1.add(JLabel('<html><b>• Name:</b></html>'), gBC)
gBC.gridy = 2
tab_1.add(self._tab1_nombre, gBC)
gBC.gridy = 3
tab_1.add(JLabel('<html><b>• Surname:</b></html>'), gBC)
gBC.gridy = 4
tab_1.add(self._tab1_apellido, gBC)
gBC.gridy = 5
tab_1.add(JLabel('<html><b>• Birthdate: (DDMMYYYY)</b></html>'),
gBC)
gBC.gridy = 6
tab_1.add(self._tab1_FNacimiento, gBC)
gBC.gridy = 7
tab_1.add(JLabel('<html><b>• Pet:</b></html>'), gBC)
gBC.gridy = 8
tab_1.add(self._tab1_mascota, gBC)
gBC.gridy = 9
tab_1.add(JLabel('<html><b>• Anyother:</b></html>'), gBC)
gBC.gridy = 10
tab_1.add(self._tab1_otro, gBC)
gBC.gridy = 11
tab_1.add(JLabel('<html><b>• Passwd Min Size:</b></html>'), gBC)
gBC.gridy = 12
tab_1.add(self._tab1_minsize, gBC)
gBC.gridy = 13
tab_1.add(JLabel('<html><b>• Passwd Max Size:</b></html>'), gBC)
gBC.gridy = 14
tab_1.add(self._tab1_maxsize, gBC)
gBC.gridy = 15
tab_1.add(
JLabel(
'<html><b>• Especial Chars: (comma separated)</b></html>'
), gBC)
gBC.gridy = 16
tab_1.add(self._tab1_specialchars, gBC)
gBC.gridy = 17
tab_1.add(self._tab1_transformations, gBC)
gBC.gridy = 18
tab_1.add(self._tab1_firstcapital, gBC)
gBC.gridy = 19
tab_1.add(JButton('Mashup!', actionPerformed=self.mashup), gBC)
gBC.gridy = 20
gBC.gridwidth = 3
tab_1.add(JSeparator(), gBC)
gBC.gridwidth = 1
gBC.gridy = 21
gBC.gridwidth = 3
tab_1.add(tab_1_jlabelAyuda, gBC)
gBC.gridwidth = 1
gBC.gridx = 1
gBC.gridy = 0
gBC.gridheight = 20
gBC.weightx = 0
tab_1.add(JSeparator(SwingConstants.VERTICAL), gBC)
gBC.gridheight = 1
gBC.weightx = 0.5
gBC.gridx = 2
gBC.gridy = 0
tab_1.add(
JLabel('<html><font color=green><i>Outcome:</i></font></html>'),
gBC)
gBC.gridy = 1
gBC.gridwidth = 2
gBC.gridheight = 18
tab_1.add(self._tab1_feedback_sp, gBC)
gBC.gridwidth = 1
gBC.gridheight = 1
gBC.gridy = 19
tab_1.add(
JButton('Copy to clipboard!', actionPerformed=self.cpy_clipboard),
gBC)
#######################################
### Creamos la segunda sub-tab. (REDIRECT)
#######################################
tab_2 = JPanel(GridBagLayout())
tab_2_jlabelAyuda = JLabel(
'<html><i>•Tip: This Redirect receive a pair of hosts x,y in order to redirect from x to y.</i></html>'
)
tab_2_jlabelAyuda.setFont(Font("Serif", 0, 12))
gBC.gridx = 0
gBC.gridy = 0
tab_2.add(
JLabel('<html><b>• From: (i.e. www.facebook.com)</b></html>'),
gBC)
gBC.gridx = 1
gBC.gridy = 0
tab_2.add(self._tab2_JTFa, gBC)
gBC.gridx = 2
gBC.gridy = 0
tab_2.add(
JLabel('<html><b>• To: (i.e. www.myhomepage.es)</b></html>'),
gBC)
gBC.gridx = 3
gBC.gridy = 0
tab_2.add(self._tab2_JTFaa, gBC)
gBC.gridx = 0
gBC.gridy = 1
gBC.gridwidth = 4
tab_2.add(JSeparator(), gBC)
gBC.gridwidth = 1
gBC.gridx = 0
gBC.gridy = 2
tab_2.add(JLabel('<html><b>• From:</b></html>'), gBC)
gBC.gridx = 1
gBC.gridy = 2
tab_2.add(self._tab2_JTFb, gBC)
gBC.gridx = 2
gBC.gridy = 2
tab_2.add(JLabel('<html><b>• To:</b></html>'), gBC)
gBC.gridx = 3
gBC.gridy = 2
tab_2.add(self._tab2_JTFbb, gBC)
gBC.gridx = 0
gBC.gridy = 3
gBC.gridwidth = 4
tab_2.add(self._tab2_boton, gBC)
gBC.gridwidth = 1
gBC.gridx = 0
gBC.gridy = 4
gBC.gridwidth = 4
gBC.insets = Insets(100, 10, 5, 10)
tab_2.add(JSeparator(), gBC)
gBC.gridwidth = 1
gBC.insets = Insets(5, 10, 5, 10)
gBC.gridx = 0
gBC.gridy = 5
gBC.gridwidth = 4
tab_2.add(tab_2_jlabelAyuda, gBC)
gBC.gridwidth = 1
#######################################
### Creamos la tercera sub-tab. (LOADER)
#######################################
tab_3 = JPanel(GridBagLayout())
tab_3_jlabelAyuda = JLabel(
'<html><i>•Tip: This Loader receive a list of Hosts or IPs that will be added to the Burp Scope.</i></html>'
)
tab_3_jlabelAyuda.setFont(Font("Serif", 0, 12))
gBC.gridx = 0
gBC.gridy = 0
tab_3.add(
JLabel(
'<html><font color=green><i>List of targets: (i.e. http://www.mytargetweb.com)</i></font></html>'
), gBC)
gBC.gridy = 1
gBC.gridheight = 10
gBC.weighty = 0.5
tab_3.add(self._tab3_urls_sp, gBC)
gBC.gridheight = 1
gBC.weighty = 0
gBC.gridy = 11
tab_3.add(
JButton('Load Into Target => Scope!', actionPerformed=self.loader),
gBC)
gBC.gridy = 12
gBC.gridwidth = 5
gBC.insets = Insets(100, 10, 5, 10)
tab_3.add(JSeparator(), gBC)
gBC.gridwidth = 1
gBC.insets = Insets(5, 10, 5, 10)
gBC.gridy = 13
tab_3.add(tab_3_jlabelAyuda, gBC)
#######################################
### Creamos la cuarta sub-tab. (HEADERS)
#######################################
tab_4_jlabelAyuda = JLabel(
"<html><i>•Tip: This Headers records all unique headers that appear in every host, check out the security headers.</i></html>"
)
tab_4_jlabelAyuda.setFont(Font("Serif", 0, 12))
tab_4_jLabelRecomendacion = JLabel(
"<html>•<b>Server</b>: Don't give away much information.<br> •<b>Content-Security-Policy</b>: Protect your site from XSS attacks by whitelisting sources of approved content.<br> •<b>Strict-Transport-Security</b>: Enforce the browser to use HTTPS.<br> •<b>Public-Key-Pins</b>: Protect your site from MITM attacks.<br> •<b>X-Content-Type-Options</b>: the valid value is -> nosniff .<br> •<b>X-Frame-Options</b>: tells the browser whether you want to allow your site to be framed or not.<br> •<b>X-XSS-Protection</b>: the best value is -> 1; mode=block .</html>"
)
tab_4_jLabelRecomendacion.setFont(Font("Dialog", 0, 13))
tab_4 = JPanel(GridBagLayout())
splitpane = JSplitPane(JSplitPane.VERTICAL_SPLIT)
tab_4_top = JPanel(GridBagLayout())
tab_4_bottom = JPanel(GridBagLayout())
gBC_table = GridBagConstraints()
gBC_table.fill = GridBagConstraints.BOTH
gBC_table.ipadx = 5
gBC_table.ipady = 5
gBC_table.insets = Insets(5, 10, 5, 10)
gBC_table.weightx = 1
gBC_table.weighty = 1
tabla_datos = []
tabla_headers = ('Severity', 'Header', 'Value', 'Host')
self._tab4_tabla_model = DefaultTableModel(tabla_datos, tabla_headers)
tabla_ej = JTable(self._tab4_tabla_model)
tabla_example = JScrollPane(tabla_ej,
JScrollPane.VERTICAL_SCROLLBAR_AS_NEEDED,
JScrollPane.HORIZONTAL_SCROLLBAR_AS_NEEDED)
gBC_table.gridx = 0
gBC_table.gridy = 0
gBC_table.gridheight = 5
tab_4_top.add(tabla_example, gBC_table)
gBC_table.gridheight = 1
gBC_table.weightx = 0.5
gBC_table.weighty = 0
gBC_table.gridwidth = 2
gBC_table.gridx = 0
gBC_table.gridy = 0
tab_4_bottom.add(JSeparator(), gBC_table)
gBC_table.gridy = 1
tab_4_bottom.add(tab_4_jlabelAyuda, gBC_table)
gBC_table.gridy = 2
tab_4_bottom.add(tab_4_jLabelRecomendacion, gBC_table)
splitpane.setTopComponent(tab_4_top)
splitpane.setBottomComponent(tab_4_bottom)
gBC_table.weightx = 1
gBC_table.weighty = 1
gBC_table.gridx = 0
gBC_table.gridy = 0
tab_4.add(splitpane, gBC_table)
#######################################
### Creamos la quinta sub-tab. (ACTIVE SCAN)
#######################################
tab_5 = JPanel(GridBagLayout())
tab_5_jlabelAyuda = JLabel(
'<html><i>•Tip: This Quick Scan receive a list of targets and launch an active scan.</i></html>'
)
tab_5_jlabelAyuda.setFont(Font("Serif", 0, 12))
tab_5_jlabelWarning = JLabel(
'<html><font color=red><i>•Warning: Active scanning generates large numbers of requests which are malicious in form and which may result in compromise of the application. You should use this scanning mode with caution, only with the explicit permission of the application owner. For more information, read the documentation of active scan, Burp Suite.</font></i></html>'
)
tab_5_jlabelWarning.setFont(Font("Dialog", 0, 13))
gBC.gridx = 0
gBC.gridy = 0
tab_5.add(
JLabel(
'<html><font color=green><i>List of targets: (i.e. http://192.168.1.1/index.html)</i></font></html>'
), gBC)
gBC.gridy = 1
gBC.gridheight = 8
gBC.weighty = 0.5
tab_5.add(self._tab5_target_sp, gBC)
gBC.gridheight = 1
gBC.weighty = 0
gBC.gridy = 9
tab_5.add(JButton('Launch Scan!', actionPerformed=self.do_active_scan),
gBC)
gBC.gridy = 10
gBC.gridwidth = 5
gBC.insets = Insets(100, 10, 5, 10)
tab_5.add(JSeparator(), gBC)
gBC.gridwidth = 1
gBC.insets = Insets(5, 10, 5, 10)
gBC.gridy = 11
tab_5.add(tab_5_jlabelAyuda, gBC)
gBC.gridy = 12
tab_5.add(tab_5_jlabelWarning, gBC)
#######################################
### Creamos la ultima sub-tab.
#######################################
tab_about = JPanel(GridBagLayout())
gBC_about = GridBagConstraints()
gBC_about.fill = GridBagConstraints.HORIZONTAL
gBC_about.ipadx = 5
gBC_about.ipady = 5
gBC_about.insets = Insets(5, 10, 5, 10)
gBC_about.weightx = 1
gBC_about.weighty = 1
Jlabel1 = JLabel('<html><b>Plug-in L-Tools</b></html>')
Jlabel1.setFont(Font("Dialog", 1, 18))
jlabel2 = JLabel(
'<html>This Plug-in provides utilities for pentesters, researchers and developers, in order to support their work.</html>'
)
jlabel3 = JLabel('<html><b>CC-BY 4.0, 2017. Gino Angles</b></html>')
jlabel3.setFont(Font("Dialog", 1, 14))
jlabel4 = JLabel('<html><b>License</b></html>')
jlabel4.setFont(Font("Dialog", 1, 14))
jlabel5 = JLabel(
'<html><img alt="Licensed under a Creative Commons BY" style="border-width:0" src="https://licensebuttons.net/l/by/4.0/88x31.png"></html>'
)
jlabel6 = JLabel(
'<html>This work is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 International License</a>.</html>'
)
jlabel7 = JLabel('<html><b>Dependencies</b></html>')
jlabel7.setFont(Font("Dialog", 1, 14))
jlabel8 = JLabel('Jython +2.7')
jlabel9 = JLabel('http://www.jython.org')
gBC_about.gridx = 0
gBC_about.gridy = 0
tab_about.add(Jlabel1, gBC_about)
gBC_about.gridy = 1
tab_about.add(jlabel2, gBC_about)
gBC_about.gridy = 2
tab_about.add(jlabel3, gBC_about)
gBC_about.gridy = 3
gBC_about.gridwidth = 5
tab_about.add(JSeparator(), gBC_about)
gBC_about.gridwidth = 1
gBC_about.gridy = 4
tab_about.add(jlabel4, gBC_about)
gBC_about.gridy = 5
tab_about.add(jlabel5, gBC_about)
gBC_about.gridy = 6
tab_about.add(jlabel6, gBC_about)
gBC_about.gridy = 7
gBC_about.gridwidth = 5
tab_about.add(JSeparator(), gBC_about)
gBC_about.gridwidth = 1
gBC_about.gridy = 8
tab_about.add(jlabel7, gBC_about)
gBC_about.gridy = 9
tab_about.add(jlabel8, gBC_about)
gBC_about.gridy = 10
tab_about.add(jlabel9, gBC_about)
# Añadimos los sub-tab al contenedor y lo devolvemos.
self.contenedor.addTab('Mashup', tab_1)
self.contenedor.addTab('Redirect', tab_2)
self.contenedor.addTab('Loader', tab_3)
self.contenedor.addTab('Headers', tab_4)
self.contenedor.addTab('Quick Scan', tab_5)
self.contenedor.addTab('About', tab_about)
return self.contenedor
def __init__(self, callbacks, parent):
# Initialze self stuff
self._callbacks = callbacks
self.config = {}
self.ext_stats = {}
self.url_reqs = []
self.parse_files = False
self.tab = JPanel(GridBagLayout())
self.view_port_text = JTextArea("===SpyDir===")
self.delim = JTextField(30)
self.ext_white_list = JTextField(30)
# I'm not sure if these fields are necessary still
# why not just use Burp func to handle this?
# leaving them in case I need it for the HTTP handler later
# self.cookies = JTextField(30)
# self.headers = JTextField(30)
self.url = JTextField(30)
self.parent_window = parent
self.plugins = {}
self.loaded_p_list = set()
self.loaded_plugins = False
self.config['Plugin Folder'] = None
self.double_click = False
self.source_input = ""
self.print_stats = True
self.curr_conf = JLabel()
self.window = JFrame("Select plugins",
preferredSize=(200, 250),
windowClosing=self.p_close)
self.window.setDefaultCloseOperation(JFrame.DO_NOTHING_ON_CLOSE)
self.window.setVisible(False)
# Initialize local stuff
tab_constraints = GridBagConstraints()
status_field = JScrollPane(self.view_port_text)
# Configure view port
self.view_port_text.setEditable(False)
labels = self.build_ui()
# Add things to rows
tab_constraints.anchor = GridBagConstraints.FIRST_LINE_END
tab_constraints.gridx = 1
tab_constraints.gridy = 0
tab_constraints.fill = GridBagConstraints.HORIZONTAL
self.tab.add(JButton(
"Resize screen", actionPerformed=self.resize),
tab_constraints)
tab_constraints.gridx = 0
tab_constraints.gridy = 1
tab_constraints.anchor = GridBagConstraints.FIRST_LINE_START
self.tab.add(labels, tab_constraints)
tab_constraints.gridx = 1
tab_constraints.gridy = 1
tab_constraints.fill = GridBagConstraints.BOTH
tab_constraints.weightx = 1.0
tab_constraints.weighty = 1.0
tab_constraints.anchor = GridBagConstraints.FIRST_LINE_END
self.tab.add(status_field, tab_constraints)
try:
self._callbacks.customizeUiComponent(self.tab)
except Exception:
pass
all = JPanel()
gb = GridBagLayout()
all.setLayout(gb)
c = GridBagConstraints()
table = JTable(TableModel())
table.setSelectionMode(ListSelectionModel.SINGLE_SELECTION)
table.setAutoCreateRowSorter(True) # to sort the view only, not the data in the underlying TableModel
jsp = JScrollPane(table)
jsp.setPreferredSize(Dimension(200, 500))
c.anchor = GridBagConstraints.NORTHWEST
c.fill = GridBagConstraints.BOTH # resize with the frame
gb.setConstraints(jsp, c)
all.add(jsp)
c.gridx = 1
c.weightx = 1.0 # take any additionally available horizontal space
c.weighty = 1.0
textarea = JTextArea()
textarea.setLineWrap(True)
textarea.setWrapStyleWord(True) # wrap text by cutting at whitespace
textarea.setEditable(False) # avoid changing the text, as any changes wouldn't be persisted to disk
font = textarea.getFont().deriveFont(20.0)
textarea.setFont(font)
textarea.setPreferredSize(Dimension(500, 500))
gb.setConstraints(textarea, c)
all.add(textarea)
frame = JFrame("CSV")
frame.getContentPane().add(all)
frame.pack()
frame.setVisible(True)
# React to a row being selected by showing the corresponding Motivation entry
def initComponents(self):
#set the layout and add form components
self.setLayout(GridBagLayout())
gc = GridBagConstraints()
gc.weightx = 1
gc.weighty = 1
# First Row
gc.gridy = 0
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.fill = GridBagConstraints.NONE
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.nameLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.nameField, gc)
# Second Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.mobLabel, gc)
gc.gridx = 1
gc.anchor = GridBagConstraints.LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.mobField, gc)
#Third Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.emailLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.emailField, gc)
#Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.userNameLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.userNameField, gc)
# Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.passwordLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.passwordField, gc)
# Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.confirmPasswordLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.confirmPasswordField, gc)
# Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 0.1
gc.gridx = 0
gc.anchor = GridBagConstraints.FIRST_LINE_END
gc.insets = Insets(0, 0, 0, 5)
self.add(self.superPassLabel, gc)
gc.weightx = 1
gc.weighty = 0.2
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
gc.insets = Insets(0, 0, 0, 0)
self.add(self.superPassField, gc)
# Next Row
gc.gridy += 1
gc.weightx = 1
gc.weighty = 2.0
gc.gridx = 1
gc.anchor = GridBagConstraints.FIRST_LINE_START
self.add(self.addAdminBtn, gc)
innerBorder = BorderFactory.createTitledBorder('Add Admin')
outerBorder = BorderFactory.createEmptyBorder(5, 5, 5, 5)
self.setBorder(
BorderFactory.createCompoundBorder(outerBorder, innerBorder))
def getUiComponent(self):
#
# Button functions
#
# Apply regex and preview
def regexify(event):
withSect = re.sub(regexBox.getText(), lambda m: unichr(167) + m.group(0) + unichr(167), contentBox.getText(), flags = re.M)
resultsBox.setText(withSect)
resultsBox.requestFocusInWindow()
return
# Actually send to Intruder
def sendToIntruder(event):
# TODO Parse host, port, and SSL
offsets = ArrayList()
p = re.compile(regexBox.getText())
for m in p.finditer(contentBox.getText()):
offsets.add(array((m.start(), m.end()), 'i'))
self._callbacks.sendToIntruder("www.example.com", 80, False, contentBox.getText(), offsets)
return
# HTML body box
body = """POST /example?p1=p1val&p2=p2val HTTP/1.0
Cookie: c=cval
Content-Length: 17
p3=p3val&p4=p4val&asdf=1234&qwer=123
<b>test</b>
<xml body:something tag='asdf'>
</xml>
§"""
# HTTP request box
contentBox = JTextArea(body, 10, 80)
contentBoxScroll = JScrollPane(contentBox)
# Regex box
regexBox = JTextField("[0-9]{3}", 40)
# Buttons
btnRegexify = JButton("Regexify", actionPerformed=regexify)
btnSendToIntruder = JButton("Send to Intruder", actionPerformed=sendToIntruder)
# Results box
resultsBox = JTextArea("Results will be shown here", 10, 80)
resultsBoxScroll = JScrollPane(resultsBox)
# Main panel
mainPanel = JPanel(GridBagLayout())
gbc = GridBagConstraints()
gbc.gridx = 0
gbc.gridy = 0
gbc.weightx = 0.8
contentBoxScroll.setPreferredSize(Dimension(1000, 300))
mainPanel.add(contentBoxScroll, gbc)
gbc.gridx = 1
gbc.gridy = 0
gbc.weightx = 0.1
mainPanel.add(regexBox, gbc)
gbc.gridx = 1
gbc.gridy = 1
gbc.weightx = 0.1
mainPanel.add(btnRegexify, gbc)
gbc.gridx = 1
gbc.gridy = 3
gbc.weightx = 0.1
mainPanel.add(btnSendToIntruder, gbc)
gbc.gridx = 0
gbc.gridy = 2
gbc.weightx = 1
gbc.weighty = 1
resultsBoxScroll.setPreferredSize(Dimension(1000, 300))
mainPanel.add(resultsBoxScroll, gbc)
return mainPanel
