DiscoveryException without detail message.
26 | */
27 | public DiscoveryException(String msg, Throwable e) {
28 | super(msg, e);
29 | }
30 |
31 | /**
32 | * Constructs an instance of
33 | * DiscoveryException with the specified detail message.
34 | *
35 | * @param msg the detail message.
36 | */
37 | public DiscoveryException(String msg) {
38 | super(msg);
39 | }
40 | }
41 |
--------------------------------------------------------------------------------
/src/main/java/wsattacker/sso/openid/attacker/gui/utilities/XmlFileFilter.java:
--------------------------------------------------------------------------------
1 | /*
2 | * OpenID Attacker
3 | * (C) 2015 Christian Mainka & Christian Koßmann
4 | *
5 | * This program is free software; you can redistribute it and/or modify it under
6 | * the terms of the GNU General Public License as published by the Free Software
7 | * Foundation; either version 2 of the License, or (at your option) any later
8 | * version.
9 | *
10 | * This program is distributed in the hope that it will be useful, but WITHOUT
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
13 | * details.
14 | *
15 | * You should have received a copy of the GNU General Public License along with
16 | * this program; if not, write to the Free Software Foundation, Inc., 51
17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 | */
19 | package wsattacker.sso.openid.attacker.gui.utilities;
20 |
21 | import java.io.File;
22 | import javax.swing.filechooser.FileFilter;
23 |
24 | public class XmlFileFilter extends FileFilter {
25 |
26 | private static final String DESCRIPTION = "XML-File";
27 |
28 | @Override
29 | public boolean accept(File file) {
30 | boolean result = false;
31 | if (file.isDirectory()) {
32 | result = true;
33 | } else if (file.getName().toLowerCase().endsWith(".xml")) {
34 | result = true;
35 | }
36 | return result;
37 | }
38 |
39 | @Override
40 | public String getDescription() {
41 | return DESCRIPTION;
42 | }
43 | }
44 |
--------------------------------------------------------------------------------
/src/main/java/wsattacker/sso/openid/attacker/evaluation/training/TrainingResult.java:
--------------------------------------------------------------------------------
1 | /*
2 | * OpenID Attacker
3 | * (C) 2015 Christian Mainka & Christian Koßmann
4 | *
5 | * This program is free software; you can redistribute it and/or modify it under
6 | * the terms of the GNU General Public License as published by the Free Software
7 | * Foundation; either version 2 of the License, or (at your option) any later
8 | * version.
9 | *
10 | * This program is distributed in the hope that it will be useful, but WITHOUT
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
13 | * details.
14 | *
15 | * You should have received a copy of the GNU General Public License along with
16 | * this program; if not, write to the Free Software Foundation, Inc., 51
17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 | */
19 | package wsattacker.sso.openid.attacker.evaluation.training;
20 |
21 | import java.io.Serializable;
22 | import wsattacker.sso.openid.attacker.evaluation.LoginResult;
23 | import wsattacker.sso.openid.attacker.evaluation.ServiceProvider.User;
24 |
25 | public class TrainingResult implements Serializable {
26 | private final User type;
27 | private final LoginResult loginResult;
28 |
29 | public TrainingResult(User type, LoginResult loginResult) {
30 | this.type = type;
31 | this.loginResult = loginResult;
32 | }
33 |
34 | public User getType() {
35 | return type;
36 | }
37 |
38 | public LoginResult getLoginResult() {
39 | return loginResult;
40 | }
41 | }
--------------------------------------------------------------------------------
/src/main/java/wsattacker/sso/openid/attacker/gui/attack/AttackParameterGuiFactory.java:
--------------------------------------------------------------------------------
1 | /*
2 | * OpenID Attacker
3 | * (C) 2015 Christian Mainka & Christian Koßmann
4 | *
5 | * This program is free software; you can redistribute it and/or modify it under
6 | * the terms of the GNU General Public License as published by the Free Software
7 | * Foundation; either version 2 of the License, or (at your option) any later
8 | * version.
9 | *
10 | * This program is distributed in the hope that it will be useful, but WITHOUT
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
13 | * details.
14 | *
15 | * You should have received a copy of the GNU General Public License along with
16 | * this program; if not, write to the Free Software Foundation, Inc., 51
17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 | */
19 | package wsattacker.sso.openid.attacker.gui.attack;
20 |
21 | import wsattacker.sso.openid.attacker.attack.parameter.AttackParameter;
22 | import wsattacker.sso.openid.attacker.attack.parameter.SearchReplaceAttackParameter;
23 |
24 | public class AttackParameterGuiFactory {
25 |
26 | public static AbstractAttackParameterGui createGui(AttackParameter parameter) {
27 | AbstractAttackParameterGui gui;
28 | // if (parameter instanceof SearchReplaceAttackParameter) {
29 | gui = new SearchReplaceAttackParameterGui((SearchReplaceAttackParameter) parameter);
30 | // } else {
31 | // gui = new AttackParameterGui(parameter);
32 | // }
33 | return gui;
34 | }
35 | }
36 |
--------------------------------------------------------------------------------
/src/main/java/wsattacker/sso/openid/attacker/config/XmlPersistenceError.java:
--------------------------------------------------------------------------------
1 | /*
2 | * OpenID Attacker
3 | * (C) 2015 Christian Mainka & Christian Koßmann
4 | *
5 | * This program is free software; you can redistribute it and/or modify it under
6 | * the terms of the GNU General Public License as published by the Free Software
7 | * Foundation; either version 2 of the License, or (at your option) any later
8 | * version.
9 | *
10 | * This program is distributed in the hope that it will be useful, but WITHOUT
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
13 | * details.
14 | *
15 | * You should have received a copy of the GNU General Public License along with
16 | * this program; if not, write to the Free Software Foundation, Inc., 51
17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 | */
19 | package wsattacker.sso.openid.attacker.config;
20 |
21 | import org.apache.log4j.Logger;
22 |
23 | /**
24 | * Exception which will be thrown in the error case when loading or saving
25 | * a config XML file.
26 | */
27 | public class XmlPersistenceError extends Exception {
28 |
29 | private static final Logger LOG = Logger.getLogger(XmlPersistenceError.class);
30 |
31 | public XmlPersistenceError(String message) {
32 | super(message);
33 | LOG.warn(message);
34 | }
35 |
36 | public XmlPersistenceError(String message, Throwable cause) {
37 | super(message, cause);
38 | LOG.warn(message);
39 | }
40 |
41 | public XmlPersistenceError(Throwable cause) {
42 | super(cause);
43 | LOG.warn(cause);
44 | }
45 | }
46 |
--------------------------------------------------------------------------------
/src/main/java/wsattacker/sso/openid/attacker/evaluation/ExecutorServices.java:
--------------------------------------------------------------------------------
1 | /*
2 | * OpenID Attacker
3 | * (C) 2015 Christian Mainka & Christian Koßmann
4 | *
5 | * This program is free software; you can redistribute it and/or modify it under
6 | * the terms of the GNU General Public License as published by the Free Software
7 | * Foundation; either version 2 of the License, or (at your option) any later
8 | * version.
9 | *
10 | * This program is distributed in the hope that it will be useful, but WITHOUT
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
13 | * details.
14 | *
15 | * You should have received a copy of the GNU General Public License along with
16 | * this program; if not, write to the Free Software Foundation, Inc., 51
17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 | */
19 | package wsattacker.sso.openid.attacker.evaluation;
20 |
21 | import java.util.concurrent.ExecutorService;
22 | import java.util.concurrent.Executors;
23 |
24 | public class ExecutorServices {
25 | private static ExecutorService multiThreadExecutor;
26 | private static ExecutorService singleThreadExecutor;
27 |
28 | private ExecutorServices() {
29 |
30 | }
31 |
32 | public static ExecutorService getMultiThreadExecutor() {
33 | if (multiThreadExecutor == null) {
34 | multiThreadExecutor = Executors.newCachedThreadPool();
35 | }
36 |
37 | return multiThreadExecutor;
38 | }
39 |
40 | public static ExecutorService getSingleThreadExecutor() {
41 | if (singleThreadExecutor == null) {
42 | singleThreadExecutor = Executors.newSingleThreadExecutor();
43 | }
44 |
45 | return singleThreadExecutor;
46 | }
47 | }
48 |
--------------------------------------------------------------------------------
/src/main/java/wsattacker/sso/openid/attacker/gui/server/StartButtonColorConverter.java:
--------------------------------------------------------------------------------
1 | /*
2 | * OpenID Attacker
3 | * (C) 2015 Christian Mainka & Christian Koßmann
4 | *
5 | * This program is free software; you can redistribute it and/or modify it under
6 | * the terms of the GNU General Public License as published by the Free Software
7 | * Foundation; either version 2 of the License, or (at your option) any later
8 | * version.
9 | *
10 | * This program is distributed in the hope that it will be useful, but WITHOUT
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
13 | * details.
14 | *
15 | * You should have received a copy of the GNU General Public License along with
16 | * this program; if not, write to the Free Software Foundation, Inc., 51
17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 | */
19 | package wsattacker.sso.openid.attacker.gui.server;
20 |
21 | import java.awt.Color;
22 | import org.jdesktop.beansbinding.Converter;
23 | import wsattacker.sso.openid.attacker.server.status.Status;
24 |
25 | public class StartButtonColorConverter extends ConverterHTML Discovery for:
\n" 39 | + "http://openidp/identity
\n" 40 | + " \n" 41 | + ""); 42 | assertThat(new DOMSource(result), isEquivalentTo(new DOMSource(expected))); 43 | } 44 | 45 | private HtmlDiscoveryConfiguration createConfig(final boolean openidserver, final boolean openid2provider, final boolean includeIdentity) { 46 | HtmlDiscoveryConfiguration config = new HtmlDiscoveryConfiguration(); 47 | config.setBaseUrl(BASE_URL); 48 | config.setIdentity(IDENTITY); 49 | config.setIncludeIdentity(includeIdentity); 50 | config.setOpenidServer(openidserver); 51 | config.setOpenId2Provider(openid2provider); 52 | return config; 53 | } 54 | 55 | private static Document string2Document(String xml) throws SAXException, IOException { 56 | DocumentBuilderFactory fac = DocumentBuilderFactory.newInstance(); 57 | fac.setNamespaceAware(false); 58 | // fac.setIgnoringElementContentWhitespace(true); 59 | DocumentBuilder builder = null; 60 | try { 61 | builder = fac.newDocumentBuilder(); 62 | } catch (ParserConfigurationException e) { 63 | throw new IllegalStateException("This should never happen", e); 64 | } 65 | InputStream is = new ByteArrayInputStream(xml.getBytes("UTF-8")); 66 | return builder.parse(is); 67 | } 68 | } 69 | -------------------------------------------------------------------------------- /src/main/java/wsattacker/sso/openid/attacker/evaluation/EvaluationResult.java: -------------------------------------------------------------------------------- 1 | /* 2 | * OpenID Attacker 3 | * (C) 2015 Christian Mainka & Christian Koßmann 4 | * 5 | * This program is free software; you can redistribute it and/or modify it under 6 | * the terms of the GNU General Public License as published by the Free Software 7 | * Foundation; either version 2 of the License, or (at your option) any later 8 | * version. 9 | * 10 | * This program is distributed in the hope that it will be useful, but WITHOUT 11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS 12 | * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more 13 | * details. 14 | * 15 | * You should have received a copy of the GNU General Public License along with 16 | * this program; if not, write to the Free Software Foundation, Inc., 51 17 | * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. 18 | */ 19 | package wsattacker.sso.openid.attacker.evaluation; 20 | 21 | import wsattacker.sso.openid.attacker.evaluation.training.TrainingResult; 22 | import java.io.Serializable; 23 | import java.text.SimpleDateFormat; 24 | import java.util.Date; 25 | import java.util.HashMap; 26 | import java.util.List; 27 | import java.util.Map; 28 | import wsattacker.sso.openid.attacker.evaluation.attack.AttackResult; 29 | 30 | public class EvaluationResult implements Serializable { 31 | private final Date date; 32 | private final String url; 33 | private int investigationTime = 0; 34 | 35 | private ListHTML Discovery for:
").append(NEWLINE); 64 | sb.append(""); 65 | sb.append(idenentity); 66 | sb.append("
").append(NEWLINE); 67 | sb.append(" ").append(NEWLINE); 68 | sb.append("").append(NEWLINE); 69 | return sb.toString(); 70 | } 71 | 72 | protected static Document generateHtmlDocument(HtmlDiscoveryConfiguration config) { 73 | Document htmlDoc = DomUtilities.createEmptyDom(); 74 | Element html = appendElement(htmlDoc, htmlDoc, "html"); 75 | generateHtmlHead(html, config); 76 | generateHtmlBody(html, config); 77 | return htmlDoc; 78 | } 79 | 80 | private static Element appendElement(Node parentElement, final String childName) { 81 | final Document ownerDocument = parentElement.getOwnerDocument(); 82 | return appendElement(ownerDocument, parentElement, childName); 83 | } 84 | 85 | private static void generateHtmlBody(Element html, final HtmlDiscoveryConfiguration config) { 86 | final String identity = config.getIdentity(); 87 | Element body = appendElement(html, "body"); 88 | Element p1 = appendElement(body, "p"); 89 | p1.setTextContent("HTML Discovery for:"); 90 | Element p2 = appendElement(body, "p"); 91 | p2.setTextContent(identity); 92 | } 93 | 94 | private static void generateHtmlHead(Element html, final HtmlDiscoveryConfiguration config) { 95 | final String identity = config.getIdentity(); 96 | Element head = appendElement(html, "head"); 97 | Element title = appendElement(head, "title"); 98 | title.setTextContent(identity); 99 | addOpenIdServerIfWanted(config, head); 100 | addOpenId2ProviderIfWanted(config, head); 101 | addOpenIdLocalIdentityIfWanted(config, head); 102 | } 103 | 104 | private static void addOpenIdLink(Element parent, final String name, final String value) { 105 | Element link = appendElement(parent, "link"); 106 | link.setAttribute("rel", name); 107 | link.setAttribute("href", value); 108 | } 109 | 110 | private static void addOpenIdServerIfWanted(final HtmlDiscoveryConfiguration config, Element head) { 111 | if (config.isOpenidServer()) { 112 | final String name = "openid.server"; 113 | final String value = config.getBaseUrl(); 114 | addOpenIdLink(head, name, value); 115 | } 116 | } 117 | 118 | private static void addOpenId2ProviderIfWanted(final HtmlDiscoveryConfiguration config, Element head) { 119 | if (config.isOpenId2Provider()) { 120 | final String name = "openid2.provider"; 121 | final String value = config.getBaseUrl(); 122 | addOpenIdLink(head, name, value); 123 | } 124 | } 125 | 126 | private static void addOpenIdLocalIdentityIfWanted(final HtmlDiscoveryConfiguration config, Element head) { 127 | if (config.isIncludeIdentity()) { 128 | final String name = "openid2.local_id"; 129 | final String value = config.getIdentity(); 130 | addOpenIdLink(head, name, value); 131 | } 132 | } 133 | 134 | private static Element appendElement(final Document ownerDocument, Node parentElement, final String childName) { 135 | final Element childElement = ownerDocument.createElement(childName); 136 | parentElement.appendChild(childElement); 137 | return childElement; 138 | } 139 | 140 | private HtmlDiscoveryGenerator() { 141 | } 142 | } 143 | --------------------------------------------------------------------------------