{"id":103,"date":"2008-08-10T16:04:45","date_gmt":"2008-08-10T16:04:45","guid":{"rendered":"http:\/\/pentestmonkey.net\/?p=103"},"modified":"2011-08-31T16:19:28","modified_gmt":"2011-08-31T16:19:28","slug":"yaptestfe-overview","status":"publish","type":"post","link":"https:\/\/pentestmonkey.net\/yaptest\/front-end\/yaptestfe-overview","title":{"rendered":"YaptestFE Overview"},"content":{"rendered":"<h2>Overview<\/h2>\n<p>YaptestFE is a Web Frontend for Yaptest.\u00a0 As of version 0.9 it allows viewing of much of the information in the database used by Yaptest.<\/p>\n<p>The Frontend is designed to complement the command line interface.\u00a0 Sometimes it&#8217;s more convenient to browse the database using this web interface.\u00a0 Other times it&#8217;s more appropriate the use the command line utilities to grep and cut the data required.<\/p>\n<p>The Frontend is optional: it is not required in order to use Yaptest.<\/p>\n<p><img title=\"yaptestfe2\" src=\"http:\/\/pentestmonkey.net\/yaptestfe2.png\" alt=\"yaptestfe2\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<p><img title=\"yaptestfe3\" src=\"http:\/\/pentestmonkey.net\/yaptestfe3.png\" alt=\"yaptestfe3\" \/><\/p>\n<h3><\/h3>\n<h3>Features<\/h3>\n<p>YaptestFE v0.9 allows searching of IP addresses, hostnames, ports, port information, host information, passwords, usernames, password hashes, group memberships, issues and most other entities stored in the backend database.<\/p>\n<p>Data is displayed in tables and can be sorted and filtered.<\/p>\n<h3>Limitations<\/h3>\n<p>YaptestFE only allows viewing of data.\u00a0 You can&#8217;t use it to run a scan.<\/p>\n<h2>Download<\/h2>\n<p><a href=\"http:\/\/pentestmonkey.net\/tools\/yaptestfe\/yaptestfe-1.1.tar.gz\">YaptestFE v1.1 Tarball<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Update: Use the <a href=\"http:\/\/code.google.com\/p\/yaptestfe\/source\/checkout\">google code SVN instead<\/a>. \u00a0It&#8217;s more up to date.<\/p>\n<h2>Prerequisites<\/h2>\n<p>You basically need to install ruby on rails and the appropriate version of Yaptest:<\/p>\n<ul>\n<li>Yaptest v0.2.1 is required.\u00a0 The frontend won&#8217;t work on databases created by earier versions of yaptest.<\/li>\n<li>Ruby on Rails.\u00a0 Install this via your package manager.\u00a0 Package name is &#8220;dev-ruby\/rails&#8221; on Gentoo.<\/li>\n<\/ul>\n<p>If I left anything out, please mail me: penetstmonkey at pentestmonkey dot net.<\/p>\n<p>The Web Interface is best viewed in Firefox 3.\u00a0 Opera seems to work OK, but some of the JavaScript features and rendering don&#8217;t work too well in Konqueror 4.1.<\/p>\n<h2>Installation<\/h2>\n<p>$ tar xfz yaptestfe-X.Y.tar.gz<\/p>\n<p>$ cd yaptestfe-X.Y<\/p>\n<p>$ .\/yaptestfe.rb -d yourdbname<\/p>\n<p>Use the database name that you specified when initialising your Yaptest scan.<\/p>\n<h2>Usage<\/h2>\n<p>When you start YaptestFE, it will tell you the URL to connect to: (http:\/\/127.0.0.1:3000 in this case):<\/p>\n<pre>$ .\/yaptestfe.rb -d abc_co\r\n=&gt; Booting WEBrick...\r\n=&gt; Rails application started on http:\/\/127.0.0.1:3000\r\n=&gt; Ctrl-C to shutdown server; call with --help for options\r\n[2008-08-10 15:56:26] INFO\u00a0 WEBrick 1.3.1\r\n[2008-08-10 15:56:26] INFO\u00a0 ruby 1.8.6 (2008-03-03) [x86_64-linux]\r\n[2008-08-10 15:56:26] INFO\u00a0 WEBrick::HTTPServer#start: pid=16463 port=3000<\/pre>\n<p>There are other options if you need to tweak the databse connection parameters for any reason:<\/p>\n<pre>$ .\/yaptestfe.rb --help\r\nUsage: ruby yaptestfe.rb -d dbname [options]<\/pre>\n<pre>\u00a0\u00a0\u00a0 -d, --dbname=name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Database name used by Yaptest.\u00a0 A database name is MANDATORY.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: none<\/pre>\n<pre>\u00a0\u00a0\u00a0 -i, --ip=ip\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 IP address of backend database.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: 127.0.0.1<\/pre>\n<pre>\u00a0\u00a0\u00a0 -p, --port=port\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TCP port for backend database.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: 5432<\/pre>\n<pre>\u00a0\u00a0\u00a0 -u, --username=user\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Username for backend database.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: yaptest_user<\/pre>\n<pre>\u00a0\u00a0\u00a0 -P, --password=pwd\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Password for backend database (not needed for postgres local trust)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: pass<\/pre>\n<pre>\u00a0\u00a0\u00a0 -t, --type=type\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Type of databse backend ('postgresql', 'mysql', etc.)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: postgresql<\/pre>\n<pre>\u00a0\u00a0\u00a0 -w, --webport=port\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TCP port for web server to bind to.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: 3000<\/pre>\n<pre>\u00a0\u00a0\u00a0 -I, --webip=ip\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 IP Address for web server to bind to.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default: 127.0.0.1<\/pre>\n<pre>\u00a0\u00a0\u00a0 -h, --help\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Show this help message.<\/pre>\n<p>Now simply browse to the web interface and you should see all your test data:<\/p>\n<pre>$ firefox http:\/\/127.0.0.1:3000<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Overview YaptestFE is a Web Frontend for Yaptest.\u00a0 As of version 0.9 it allows viewing of much of the information in the database used by Yaptest. The Frontend is designed to complement the command line interface.\u00a0 Sometimes it&#8217;s more convenient to browse the database using this web interface.\u00a0 Other times it&#8217;s more appropriate the use [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[12],"tags":[69,68],"_links":{"self":[{"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/posts\/103"}],"collection":[{"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/comments?post=103"}],"version-history":[{"count":3,"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/posts\/103\/revisions"}],"predecessor-version":[{"id":575,"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/posts\/103\/revisions\/575"}],"wp:attachment":[{"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/media?parent=103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/categories?post=103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pentestmonkey.net\/wp-json\/wp\/v2\/tags?post=103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}