Kota Kanbe
a33cff8f13
fix(reprot): use SQLite3 in current dir if not specified ( #1103 )
2020-12-26 08:24:17 +09:00
Kota Kanbe
5a14a58fe4
refactor(nvdxml): Remove codes related to NVD xml(deprecated) ( #1099 )
2020-12-25 06:16:14 +09:00
Kota Kanbe
fb1fbf8f95
feat(report): Add NVD as a source for mitigations, primarySrc URL and Patch URL ( #1097 )
...
* feat(report): Add NVD as a src for mitigations.
* feat(report): display "Vendor Advisory" URL in NVD
* feat(report): display patch urls in report, tui
2020-12-24 08:37:10 +09:00
Kota Kanbe
cfbf779f9b
feat(exploit): add exploit link in NVD as a source ( #1096 )
...
Added Refs information with NVD's Expoit tag as an information source
for Exploit.
2020-12-16 07:10:18 +09:00
Kota Kanbe
d576b6c6c1
refactor(report): around FillCveInfo ( #1095 )
...
* refactor(report): around FillCveInfo
* refacotr(report): around FillCveInfo
2020-12-15 15:48:23 +09:00
Kota Kanbe
0a440ca629
fix(saas): add saas subcmd ( #1093 )
2020-12-11 16:19:36 +09:00
Kota Kanbe
9a32a94806
refactor: fix build warnings ( #1090 )
2020-12-11 06:45:39 +09:00
Shigechika AIKAWA
2534098509
fix(report): wpvulndb poor versioning( #1088 ) ( #1089 )
2020-12-11 05:53:41 +09:00
Kota Kanbe
5fea4eaef8
feat(nocgo): enable to build with CGO_ENABLED=0 ( #1080 )
2020-11-27 09:55:09 +09:00
Kota Kanbe
3f8de02683
fix(portscan): to keep backward compatibility before v0.13.0 ( #1076 )
2020-11-19 16:54:36 +09:00
Kota Kanbe
75fceff5f7
refactor(report): format-csv ( #1072 )
2020-11-05 21:10:35 +09:00
gy741
ebd3834a35
add(report) -format-csv option ( #1034 )
2020-11-05 20:56:19 +09:00
Kota Kanbe
93059b74c3
feat(report): IgnoredJSONKyes to clear values in result json ( #1071 )
...
* feat(report): IgnoredJSONKyes to clear values in result json
* fix(report): marshal indent in JSON everytime
2020-11-05 20:13:09 +09:00
Kota Kanbe
2fc3462d35
fix(libscan): update trivy deps ( #1070 )
2020-11-05 15:38:12 +09:00
Norihiro NAKAOKA
83bcca6e66
experimental: add smart(fast, minimum ports, silently) TCP port scanner ( #1060 )
...
* add struct ListenPorts
* change parse to models.ListenPorts from string
* change support models.ListenPorts in TUI
* add scanPort template , detectScanDest
* add Test_detectScanDest
* change impl scanPorts template
* fix build error
* change collect scan success address
* add Test_matchListenPorts
* add Test_updatePortStatus
* change display port scan result on tui
* change display scan emoji on report
* Revert "change display scan emoji on report"
This reverts commit e281882cc6
2020-10-19 17:47:20 +09:00
Kota Kanbe
4b680b9960
fix(scan-freebsd): also get installed with pkg info #1042 ( #1051 )
...
* fix(scan-freebsd): also get installed with `pkg info` #1042
* fix test
2020-09-12 05:08:41 +09:00
shopper
425c585e47
Support for smtp LOGIN authentication ( #1048 )
...
* finished to implement new mail client
* delete email_test.go
2020-09-04 15:45:29 +09:00
Norihiro NAKAOKA
7969b343b0
Raspberry Pi OS(Raspbian) scanning using OVAL DB ( #1019 )
...
* change: never refer to ChangeLog
* change raspberry pi os use debian oval at report
* change do not use r.Family
* change gost do not use r.Family
* change use r.Family because family has a large impact
* change replace MaineK00n/goval-dictionary@raspberrypi-oval
* note Raspbian Scan Policy
* add Raspbian Changelog support policy
* change grep Package for Raspbian at fast-scan mode
* add changelog preprocessing for Raspbian
* add take note of TODO
* change Changelog fetch part to function
* change error handling
* change solve one TODO
* change make ChangelogDir once
* add comment
* fix oval support Amazon Linux :refs #824
* change to useScannedCves from ovalSupproted
* change confidence for Raspbian
* change skip package for raspbian in OVAL DB
* change separate raspbian implementation from util
* change error, log format
* change print format
* change log format(delete newline)
* change support changelog.(Debian.)gz
* Revert "change support changelog.(Debian.)gz"
This reverts commit 2265a72c67
2020-08-25 14:11:34 +09:00
Kota Kanbe
58cf1f4c8e
refactor(typo): fix typos ( #1041 )
2020-08-24 16:34:32 +09:00
takuzoo
11a7a0c934
Display metasploit module information for each detected CVE-IDs ( #1011 )
...
* add metasploit
* fix go deps
* fix msf report
* fix msfdb server port number
* delete non-unique msfdb url from fulltext report
* fix(report): validate msfdb config on report (#1 )
* fix(msfdb): update deps (go-msfdb)
* version up go-msfdb v0.1.0
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com >
2020-07-03 14:05:07 +09:00
Kota Kanbe
c11ba27509
fix(libscan): include a lockfile path of libs ( #1012 )
2020-06-24 10:46:00 +09:00
segatomo
8a611f9ba6
add diff-mode info ( #1008 )
2020-06-19 16:07:14 +09:00
kazuminn
36456cb151
feat(wordpress): Cache WpVulnDB ( #989 )
...
* add wpVulnCache
* fix bug
* add test
* fmt
* fix bug
* refactor
* fix bug
2020-06-05 16:08:28 +09:00
shopper
b37df89fb1
Support SMTPS when using report -to-email ( #991 )
...
* Add smtps func
* Add SMTPS implementation
* fix error message
2020-06-05 14:42:01 +09:00
sadayuki-matsuno
d18e7a751d
add trivy parser ( #981 )
...
* add trivy parser
* fix test
* format
* add title and summary
* add trivy parse command
* add uploader
* set args by env
* add README
* add err check
* fix
* fix
* fix
* fix test
* update trivy
* refactor
* delete require uuid
* delete uuid from trivy parser
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com >
2020-05-29 18:06:45 +09:00
Kota Kanbe
62c9409fe9
add a github actions config ( #985 )
...
* add a github actions config
* fix(log): Don't create a log dir when testing
* remove a meaningless test case
* Thanks for everything, Mr, Travys.
* add golangci
* add goreleaser.yml
* add tidy.yml
* add golang-ci
* fix many lint warnings
2020-05-27 20:11:24 +09:00
Kota Kanbe
ebe5f858c8
update trivy, and unsupport image scanning feature ( #971 )
...
* update trivy, fanal. unsupport image scanning
* Update models/library.go
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
* add -no-progress flag to report/tui cmd
* Display trivy vuln info to tui/report
* add detection method to vulninfo detected by trivy
* fix(uuid): change uuid lib to go-uuid #929 (#969 )
* update trivy, fanal. unsupport image scanning
* Update models/library.go
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
* add -no-progress flag to report/tui cmd
* Display trivy vuln info to tui/report
* add detection method to vulninfo detected by trivy
* unique ref links in TUI
* download trivy DB only when lock file is specified in config.toml
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
2020-05-08 15:24:39 +09:00
Kota Kanbe
9dd025437b
fix(uuid): change uuid lib to go-uuid #929 ( #969 )
2020-05-06 14:14:07 +09:00
Kota Kanbe
749ead5d4a
update go mod ( #960 )
2020-04-20 21:33:11 +09:00
Kota Kanbe
464d523c42
Display fixed-in version for each package in report ( #801 )
...
* refactor(model): PackageFixStatus.Name to BinName
* refacotr(oval): change var name
* feat(report): Add FixedIn in JSON
* refactor(tui): chage args
* display fixedin in report
* refactor(model): change fileld name
* remove unused field of PackageFixStatus
2020-04-08 21:26:34 +09:00
segatomo
5729ad6026
Add CWE Top25 and SANS Top25 ( #925 )
...
* add top25 rank
* add CweTop25 and SansTop25
* fix report
* add cwetop25 and sanstop25 url
* fix condition branch
* fix condition branch
2020-03-03 17:33:06 +09:00
Tomoya Amachi
9aa0d87a21
feat : scan with image digest ( #939 )
2020-03-03 16:51:06 +09:00
Kota Kanbe
7936b3533b
Fill Red Hat CVE data for all distros ( #920 )
...
* fix(scan): ignore wp-cli stderr messages (#825 ) (#915 )
* refactor
* feat(report): fill Red Hat CVE data for all distros
* fix lint err
* fix cve judgment (#921 )
2019-11-25 17:01:18 +09:00
Kota Kanbe
76363c227b
fix(report): enable to report when the sshkey not exist ( #909 )
2019-09-18 22:40:36 +09:00
Kota Kanbe
d5a3e5c2c5
fix(report): fix cert key in result json ja to jp ( #908 )
2019-09-18 19:30:32 +09:00
Kota Kanbe
2b02807ef0
fix(report): ignore exploits of no-cve-id vulns ( #906 )
2019-09-13 12:49:57 +09:00
Kota Kanbe
c61f462948
fix(report): show POC, CERT in tui and format-list. use vendor summary over NVD ( #902 )
...
* fix(report): show POC, CERT in tui and format-list. show vendor summary
* fix test case
2019-09-10 10:00:17 +09:00
Kota Kanbe
3ffed18e02
Change GPL v3 to AGPL v3 because of aquasecurity/trivy dependency ( #897 )
2019-09-09 21:12:17 +09:00
Kota Kanbe
f54e7257d1
fix(report): fill cert alerts from NVD and JVN feeds ( #899 )
...
* fix(report): fill cert alerts from NVD and JVN feeds
* fix import alias cve to cvemodels
* fix import alias cve to cvemodels
* remove unnecessary func
2019-09-09 21:11:59 +09:00
Kota Kanbe
cc13b6a27c
fix(report): enable to report without NVD, exit if no OVAL data ( #900 )
...
* feat(report): enable to report without NVD
* fix(report): enable to report without NVD and exit if no OVAL data
* update deps
* go mod tidy
* fix err msg
2019-09-09 21:00:34 +09:00
Kota Kanbe
b7ca5e5590
feat(scan): add -wordpress-only and -libs-only flag ( #898 )
2019-09-06 10:33:03 +09:00
Kota Kanbe
1fbd516b83
fix(report): fix too many variables while reporting ( #888 )
2019-08-25 17:56:47 +09:00
DjinnS
dec5d3b165
No warning(s) in the output file with -quiet option. Report command ( #885 )
2019-08-25 10:56:42 +09:00
Kota Kanbe
3d4a5d9917
fix(report): Unsupport family: centos ( #876 )
...
* fix(report): Unsupport family: centos
* go mod tidy
2019-07-25 12:47:41 +09:00
Kota Kanbe
f832de81b7
feat(saas): log.info done after uploading
2019-07-05 17:30:31 +09:00
Kota Kanbe
836e4704f8
feat(scan): Display listen port of affected procs for each vulnerable pkgs ( #859 )
...
* refactor(redhat): move rpmQa and rpmQf to redhatbase.go
* feat(scan): Display listen port of affected procs
2019-07-03 23:01:59 +09:00
Kota Kanbe
3e5390309c
feat(redhat): ignore will not fix vulns ( #858 )
2019-07-03 20:59:23 +09:00
Kota Kanbe
eb9f9680ec
refactor(scan): remove yum-security related code ( #836 )
...
* refactor(scan): remove yum-security related code
* fix(reporting): error if no OVAL entry
2019-06-14 11:42:38 +09:00
Kota Kanbe
17bb575002
fix(scan): enable to report if some warnings occured on scanning ( #805 )
...
* fix(scan): enable to report if some warnings occured on scanning
* alpine, debian, freebsd, suse
* -format-full-text, -format-list, -format-one-line-text
* implement slack.go
* implement tui.go
* go fmt
2019-06-12 21:35:21 +09:00
Tomoya Amachi
abcea1a14d
add Library Scan (with image scan) ( #829 )
...
* add static container image scan
* server has many staticContainers
* use go module
* for staticContainer
* fix typo
* fix setErrs error
* change name : StaticContainer -> Image
* add scan -images-only flag
* fix makefile
* fix makefile for go module
* use rpmcmd instead of rpm
* add scrutinizer.yml
* change scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* delete scrutinizer
* add report test
* add sourcePackages and Arch
* fix for sider
* fix staticContainer -> image
* init scan library
* add library scan for servers
* fix tui bug
* fix lint error
* divide WpPackageFixStats and LibraryPackageFixedIns
* fix error
* Delete libManager_test.go
* stop use alpine os if err occurred in container
* merge upstream/master
* Delete libManager.go
* update goval-dictionary
* fix go.mod
* update Readme
* add feature : auto detect lockfiles
2019-06-12 18:50:07 +09:00
