Skip to content

[merge] Add new stable features from develop in master for a new release#902

Merged
viyatb merged 133 commits intomasterfrom
develop
Nov 4, 2017
Merged

[merge] Add new stable features from develop in master for a new release#902
viyatb merged 133 commits intomasterfrom
develop

Conversation

@viyatb
Copy link
Copy Markdown
Member

@viyatb viyatb commented Nov 4, 2017

A small list of changes:

  • OWTF is now in a Python package format
  • React based partial webui
  • Integrates hrt into OWTF
  • OWTF can now run natively on macOS
  • Lots of bug fixes and code improvements

saganshul and others added 30 commits May 21, 2016 15:15
* Adds node_modules directory to gitignore

* Adds environment setup files for ReactJS
* Merge commits from develop

* [webui] Target Dropdown with recently completed targets created

* [webui] Bug fixes in Target Dropdown

* New changed to All in Target Dropdown
* [PEP8] Cleanup web/active plugins

* [scripts] Fix syntax in scripts

* [PEP8] Cleanup framework/protocols

* [PEP8] Cleanup framework/dependency_management

* [PEP8] Cleanup framework/config

* [PEP8] Cleanup framework/selenium

* [PEP8] Cleanup framework/wrappers

* [PEP8] Cleanup framework/lib

* [PEP8] Cleanup framework/shell

* [PEP8] Cleanup framework/plugin

* [PEP8] Cleanup framework/http/wafbypasser

* [PEP8] Cleanup framework/http/requester.py

* [PEP8] Cleanup framework/http/transaction.py

* [PEP8] Cleanup framework/http/proxy/plugnhack/

* [PEP8] Cleanup framework/http/proxy

* [PEP8] Cleanup framework/interface

* Made only small changes in urls.py => need inputs!
* For long string of args, like in self.render,
  I have taken a dictionary like approach

* [PEP8] Cleanup framework/db

* Fixed a bug from previous cleanup in interface/ui_handlers.py

* [readme] Changed travis badge to reflect owtf account

* [PEP8] Cleanup agents/

* [PEP8] Cleanup dictionaries/

* [cleanup] Removes old Backtrack releated files
Revert "Merging develop into ui_improvements"
* [webui] Some minor UI tweaks and new Dashboard created

* Open Sans font maintained everywhere

* Split button dropdowns created for Target Tab in Navigation Bar

* Navigation Bar typo corrected
* Vulnerability Panel created

* react bundle added to gitignore

* bundle.js deleted from repository

* e removed in exceptions
* [webui] Small Bug Fixes--Panel-heading was global class. Hence Styles applied to different class

* Improved accuracy in calculating left count in progress bar.

* In resepect of previous commit, corresponding changes made to progressBar at worker page

* [webui] Required packages for worker panel added to package.json

* [webui] Indentation and Beautification of Chart.js

* [webui] Constant file created for global constants

* [webui] Constants created for WorkerPanel

* [webui] New Endpoint created to fetch workers logs

* [webui] Worker Panel created on Dashboard page and mobile responsiveness improved

* Corresponding changes made in Chart.js to maintain mobile responsiveness

* [Mobile responsive] Minor Bug Fixes

* [webui] Bug Fixes
* [webui] Transaction page initialized

* [webui] Transaction page modified to full width

* [webui] Material UI library added to project

* [webui] Adding Roboto font for material UI

* [webui] Adding required packages for Transaction log page to npm configuration file

* [webui] All the required components for transaction log page created

* [webui] Integrating all the trasaction page components and finalizing transaction page

* [webui] Fixing the collision of Material UI and Bootstrap CSS

* [webui] Adding Transaction tab in the Navigation Bar

* Small Bug fixes

* [webui] Components hide when no target is selected

* [webui] Log button removed from target page

* [webui] Transaction log page interface converted to Burp like interface and divs are made resizable

* [webui] Transaction and HeaderBody heading removed

* [webui] Selected row highlighted in TransactionTable

* [webui] Header Tabs changed to bootstrap tabs

* [webui] cursor changed to pointer on table row

* [webui] Filters added to Transaction Table

* [webui] Horizontal resizing enabled

* [webui] Left resizing bug fixed

* [webui] Request response animation removed

* [webui] react-toolbox added and installed

* [webui] Material UI removed from Project. Kept only table(temporary)
[merge] Merging develop into ui_improvements
* [Report Enhancement] Report side bar filter(plugin group + plugin type) created

* [Report enhancement] Scroll to top button created

* [webui] Minor change in report side bar filter

* [Report Enhancement] Breadcrumbs added to target page

* [Report Enhancement] Toolbar created

* [Report Enhancement] Plugin web fingerprint (passive) overflow bug fixed

* [Report Enhancement] filtering bug in passive tab fixed
saganshul and others added 29 commits August 8, 2017 21:41
* Adds the API change on the backend
* React functionality for the frontend.
Ports the filter functionality from server-side to React.
* Fixes the DNSSpider plugin by passing the hostname instead of the domain name
* Adds the required dnspython package
* Removes templates submodule

* Updates react installation

* Updates webpack to v3
* Converts all CSS files to SCSS
* Interface now uses the final build.css file
This PR is the first of many steps to refactoring OWTF and make it installable as a Python package.
While most of the changes are self-explanatory, here are a couple of notes on the work:

- The new web interface was moved to its separate directory (this was done in an earlier commit). We need to deprecate the old method of rendering templates using Tornado.
- Completely removed Zest, PlugnHack, WafBypasser and Proxy miner support. We need addons support in OWTF so that optional features can be easily plugged in.
- Renamed configuration to conf to separate it from the other config folder.
- The OWTF current install runs a post installation step in python setup.py install. The PR removes the virtualenv setup completely, since now it is the user's job to run python setup.py install in a separate virtualenv for maximum compatibility.
- Added Sphinx docstrings to almost every function and module in OWTF
- Convert all function names to snake case.
- All code is now compatible with Python3 and Python2
- Fixed tests
- Refactor installation method to install everything to ~/.owtf.
- Add Debian packaging scripts
- Better Makefile

- Create a new virtualenv, virtualenv <env> and activate the environment.
- Go into OWTF directory and run python setup.py install which install OWTF as a package and starts the postsetup install script.

NOTE: if the user wants to run OWTF in developer mode, they need to set an environment variable, export OWTF_DEV=1
To run OWTF, make a new folder for your target engagement, and run OWTF as python -m owtf.

After this, OWTF should no longer be responsible for
- running Postgresql on startup (user's job!)
- virtualenv management (users should use it by default for separate projects)
* Cleanup DB scripts and use a common script for platform dependent variables.
* Upgrades PTP -  causing issues with some plugins
Breaks down the monolithic api_handlers.py file into separate files for each API function
* Also handles filelock exceptions for the proxy timeouts
@viyatb viyatb merged commit 1b4e19e into master Nov 4, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants