arachni.gemspec

# coding: utf-8
=begin
    Copyright 2010-2014 Tasos Laskos <tasos.laskos@arachni-scanner.com>

    This file is part of the Arachni Framework project and is subject to
    redistribution and commercial restrictions. Please see the Arachni Framework
    web site for more information on licensing and terms of use.
=end

Gem::Specification.new do |s|
    require File.expand_path( File.dirname( __FILE__ ) ) + '/lib/arachni/version'

    s.required_ruby_version = '>= 1.9.3'

    s.name              = 'arachni'
    s.version           = Arachni::VERSION
    s.date              = Time.now.strftime( '%Y-%m-%d' )
    s.summary           = 'Arachni is a feature-full, modular, high-performance' +
        ' Ruby framework aimed towards helping penetration testers and' +
        ' administrators evaluate the security of web applications.'

    s.homepage          = 'https://www.arachni-scanner.com'
    s.email             = 'tasos.laskos@arachni-scanner.com'
    s.authors           = [ 'Tasos Laskos' ]
    s.licenses          = ['Apache-2.0', 'Proprietary']

    s.files            += Dir.glob( 'gfx/**/**' )
    s.files            += Dir.glob( 'lib/**/**' )
    s.files            += Dir.glob( 'ui/**/**' )
    s.files            += Dir.glob( 'logs/**/**' )
    s.files            += Dir.glob( 'components/**/**' )
    s.files            += Dir.glob( 'profiles/**/**' )
    s.files            += Dir.glob( 'spec/**/**' )
    s.files            += %w(Gemfile Rakefile arachni.gemspec)
    s.test_files        = Dir.glob( 'spec/**/**' )

    s.executables       = [ 'arachni', 'arachni_rpcd_monitor', 'arachni_rpcd',
                            'arachni_rpc', 'arachni_console', 'arachni_script',
                            'arachni_multi', 'arachni_reporter', 'arachni_restore' ]

    s.extra_rdoc_files  = %w(README.md ACKNOWLEDGMENTS.md LICENSE.md
                            AUTHORS.md CHANGELOG.md CONTRIBUTORS.md)

    s.rdoc_options      = [ '--charset=UTF-8' ]

    s.add_dependency 'bundler'

    # For compressing/decompressing system state archives.
    s.add_dependency 'rubyzip',           '1.1.6'

    # HTML report
    s.add_dependency 'coderay',           '1.1.0'

    s.add_dependency 'childprocess',      '0.5.3'

    # RPC serialization.
    if RUBY_PLATFORM == 'java'
        s.add_dependency 'msgpack-jruby', '1.4.0'
    else
        s.add_dependency 'msgpack',       '0.5.8'
    end

    # RPC client/server implementation.
    s.add_dependency 'arachni-rpc',       '0.2.1.1'

    # HTTP client.
    s.add_dependency 'typhoeus',          '0.6.9'

    # Fallback URI parsing and encoding utilities.
    s.add_dependency 'addressable',       '2.3.6'

    # E-mail plugin.
    s.add_dependency 'pony',              '1.8'

    # Printing complex objects.
    s.add_dependency 'awesome_print',     '1.2.0'

    # JSON reporter.
    s.add_dependency 'json',              '1.8.1'

    # For the Arachni console (arachni_console).
    s.add_dependency 'rb-readline',       '0.5.1'

    # Markup parsing.
    s.add_dependency 'nokogiri',          '1.6.2.1'

    # Outputting data in table format (arachni_rpcd_monitor).
    s.add_dependency 'terminal-table',    '1.4.5'

    # Browser support for DOM/JS/AJAX analysis stuff.
    s.add_dependency 'watir-webdriver',   '0.6.9'

    # Markdown to HTML conversion, used by the HTML report for component
    # descriptions.
    s.add_dependency 'kramdown',          '1.4.1'

    # Used to scrub Markdown for XSS etc.
    s.add_dependency 'loofah',            '2.0.0'

    s.post_install_message = <<MSG

Thank you for installing Arachni, here are some resources which should
help you make the best of it:

Homepage           - http://arachni-scanner.com
Blog               - http://arachni-scanner.com/blog
Documentation      - http://arachni-scanner.com/wiki
Support            - http://support.arachni-scanner.com
GitHub page        - http://github.com/Arachni/arachni
Code Documentation - http://rubydoc.info/github/Arachni/arachni
License            - Apache License v2.0/Proprietary
                        (https://github.com/Arachni/arachni/blob/master/LICENSE.md)
Author             - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
Twitter            - http://twitter.com/ArachniScanner
Copyright          - 2010-2014 Tasos Laskos

Please do not hesitate to ask for assistance (via the support portal)
or report a bug (via GitHub Issues) if you come across any problem.

MSG

    s.description = <<DESCRIPTION
Arachni is an Open Source, feature-full, modular, high-performance Ruby framework
aimed towards helping penetration testers and administrators evaluate the security
of web applications.

It is smart, it trains itself by monitoring and learning from the web application's
behavior during the scan process and is able to perform meta-analysis using a number of
factors in order to correctly assess the trustworthiness of results and intelligently
identify (or avoid) false-positives.

Unlike other scanners, it takes into account the dynamic nature of web applications,
can detect changes caused while travelling through the paths of a web application’s
cyclomatic complexity and is able to adjust itself accordingly. This way, attack/input
vectors that would otherwise be undetectable by non-humans can be handled seamlessly.

Moreover, due to its integrated browser environment, it can also audit and inspect
client-side code, as well as support highly complicated web applications which make
heavy use of technologies such as JavaScript, HTML5, DOM manipulation and AJAX.

Finally, it is versatile enough to cover a great deal of use cases, ranging from
a simple command line scanner utility, to a global high performance grid of
scanners, to a Ruby library allowing for scripted audits, to a multi-user
multi-scan web collaboration platform.
DESCRIPTION

end