Kota Kanbe
2d369d0cfe
Fix false positive for Oracle Linux ( #1227 )
...
* fix(oracle): false-positive(handle arch of pkgs)
* fix(oracle): false positive kernel-related CVEs
* add a test case for ksplice1
* fix(scan): handle uek kernel for Oracle linux
* fix(scan): hanlde uek kernel for reboot required
* fix(oracle): false-positive for redis-backend
2021-04-27 20:38:45 +09:00
Kota Kanbe
c36e645d9b
fix(report): false positive for kernel-related CVE for RedHat, CentOS, Oracle and Amazon #1199 ( #1223 )
2021-04-23 08:59:46 +09:00
Kota Kanbe
40039c07e2
fix(report): panic when closing db connection of gost ( #1222 )
2021-04-23 06:14:12 +09:00
Kota Kanbe
a692cec0ef
fix(gost): close gost DB connection in server mode #1217 ( #1221 )
2021-04-21 11:59:11 +09:00
otuki
e7ca491a94
fix(report): Avoid http reports error ( #1216 )
2021-04-21 10:00:58 +09:00
Shigechika AIKAWA
23f3e2fc11
fix(config): add Ubuntu 20.10 ( #1218 )
2021-04-21 09:05:33 +09:00
Kota Kanbe
27b3e17b79
feat(saas): delete json dir automatically after upload ( #1212 )
...
* feat(saas): delete json dir automatically after upload
* fix lint err
2021-04-15 05:58:41 +09:00
Kota Kanbe
740781af56
feat(logging): add -log-to-file and don't output to file by default ( #1209 )
...
* feat(logging): add -log-to-file and don't output to file by default
* update go-cve-dict
* fix lint err
2021-04-05 17:41:07 +09:00
Kota Kanbe
36c9c229b8
fix(report): avoid nil pointer when report FreeBSD ( #1208 )
2021-04-05 12:54:27 +09:00
Norihiro NAKAOKA
183fdcbdef
fix: support for missing files in the results or results directory ( #1206 )
...
* fix: support for missing files in the results or results directory
* fix: support for missing files in the results or results directory
2021-04-05 07:28:20 +09:00
Kota Kanbe
a2a697900a
refactor: move const to constant pkg ( #1205 )
2021-04-02 15:33:02 +09:00
Kota Kanbe
6fef4db8a0
fix .goreleaser.yml ( #1204 )
...
* fix .goreleaser.yml
* chore: fix lint warnings
2021-04-01 17:43:54 +09:00
sadayuki-matsuno
e879ff1e9e
feat(scanner) export pkg list scan method ( #1203 )
...
* feat(scanner) export pkg list scan method
* fix args
* fix func
* fix init debian
2021-04-01 17:38:20 +09:00
Kota Kanbe
9bfe0627ae
refactor: don't use global Config in private func ( #1197 )
...
* refactor: cve_client.go
* refactor: don't use global Config in private func
* remove import alias for config
* refactor: dbclient
* refactor: resultDir
* refactor: resultsDir
* refactor
* refactor: gost
* refactor: db client
* refactor: cveDB
* refactor: cvedb
* refactor: exploitDB
* refactor: remove detector/dbclient.go
* refactor: writer
* refactor: syslog writer
* refactor: ips
* refactor: ensureResultDir
* refactor: proxy
* fix(db): call CloseDB
* add integration test
* feat(report): sort array in json
* sort func for json diff
* add build-int to makefile
* add int-rds-redis to makefile
* fix: test case, makefile
* fix makefile
* show cve count after diff
* make diff
* diff -c
* sort exploits in json for diff
* sort metasploit, exploit
2021-04-01 13:36:24 +09:00
Tomoya Amachi
0179f4299a
fix(trivy-to-vuls): converts even if null vulnerabilities ( #1201 )
2021-03-22 19:32:08 +09:00
Kota Kanbe
56017e57a0
feat(trivy): update trivy ( #1196 )
2021-03-12 09:31:48 +09:00
Kota Kanbe
cda91e0906
refactor: loading owasp dependency check xml ( #1195 )
2021-03-11 08:51:44 +09:00
Kota Kanbe
5d47adb5c9
fix(report): prioritize env vars over config.toml ( #1194 )
2021-03-10 07:39:58 +09:00
Kota Kanbe
54e73c2f54
fix(wordpress): enable to detect vulns of WordPress Core ( #1193 )
2021-03-09 10:40:52 +09:00
segatomo
2d075079f1
fix(log): remove log output of opening and migrating db ( #1191 )
...
* fix(log): remove log output of opening and migrating db
* fix(log): remove log output of opening and migrating db
2021-03-05 16:16:10 +09:00
Kota Kanbe
2a8ee4b22b
refactor(report): azure and aws writer ( #1190 )
2021-03-04 07:42:38 +09:00
Kota Kanbe
1ec31d7be9
fix(configtest): all servers in the config if no args #1184 ( #1189 )
2021-03-03 12:51:07 +09:00
Kota Kanbe
02286b0c59
fix(scan): scan all servers in the config if no args #1184 ( #1188 )
2021-03-03 12:30:30 +09:00
Kota Kanbe
1d0c5dea9f
fix(ubuntu): Fix deferred packages not showing as affected ( #1187 )
...
* fix(ubuntu): Fix deferred packages not showing as affected
https://github.com/kotakanbe/goval-dictionary/pull/122
* chore: Go version up
2021-03-02 07:50:35 +09:00
Kota Kanbe
1c4a12c4b7
refactor(report): initialize DB connection ( #1186 )
2021-03-02 06:34:46 +09:00
Kota Kanbe
3f2ac45d71
Refactor logger ( #1185 )
...
* refactor: logger
* refactor: logging
* refactor: rename func
* refactor: logging
* refactor: logging format
2021-02-26 10:36:58 +09:00
Kota Kanbe
518f4dc039
refactor: VulnDict ( #1183 )
2021-02-25 10:13:51 +09:00
Kota Kanbe
2cdeef4ffe
refactor(config): validateOnReport ( #1182 )
2021-02-25 07:41:49 +09:00
Kota Kanbe
03579126fd
refactor(config): localize config used like a global variable ( #1179 )
...
* refactor(report): LocalFileWriter
* refactor -format-json
* refacotr: -format-one-email
* refactor: -format-csv
* refactor: -gzip
* refactor: -format-full-text
* refactor: -format-one-line-text
* refactor: -format-list
* refacotr: remove -to-* from config
* refactor: IgnoreGitHubDismissed
* refactor: GitHub
* refactor: IgnoreUnsocred
* refactor: diff
* refacotr: lang
* refacotr: cacheDBPath
* refactor: Remove config references
* refactor: ScanResults
* refacotr: constant pkg
* chore: comment
* refactor: scanner
* refactor: scanner
* refactor: serverapi.go
* refactor: serverapi
* refactor: change pkg structure
* refactor: serverapi.go
* chore: remove emtpy file
* fix(scan): remove -ssh-native-insecure option
* fix(scan): remove the deprecated option `keypassword`
2021-02-25 05:54:17 +09:00
Kota Kanbe
e3c27e1817
fix(saas): Don't overwrite config.toml if UUID already set ( #1180 )
...
* fix(saas): Don't overwrite config.toml if UUID already set
* add a test case
2021-02-19 06:42:22 +09:00
Richard Alloway
aeaf308679
Add test-case to verify proper version comparison in lessThan() ( #1178 )
...
* Add test-case to verify proper version comparison when either/both/neither of newVer and ovalmodels.Package contain "_<minor version>"
* Rename vera to newVer in Test_lessThan()
* Fix oval/util_test.go formatting (make fmt)
Co-authored-by: Richard Alloway (OpenLogic) <ralloway@perforce.com >
2021-02-14 05:30:07 +09:00
Kota Kanbe
f5e47bea40
chore: add a test-case to #1176 ( #1177 )
2021-02-12 13:46:29 +09:00
Richard Alloway
50cf13a7f2
Pass packInOVAL.Version through centOSVersionToRHEL() to remove the "_<point release>" portion so that packInOVAL.Version strings like 1.8.23-10.el7_9.1 become 1.8.23-10.el7.1 (same behavior as newVer, which now allows packInOVAL.Version and newVer to be directly compared). ( #1176 )
...
Co-authored-by: Richard Alloway (OpenLogic) <ralloway@perforce.com >
2021-02-12 13:33:36 +09:00
Kota Kanbe
abd8041772
fix(scan): yum ps warning for Red Hat family ( #1174 )
...
* fix(yumps): no debug message for known patterns
* refactor(scan): yum-ps
* refacotr(scan): pkgPs
2021-02-12 13:03:06 +09:00
Kota Kanbe
847c6438e7
chore: fix debug message ( #1169 )
2021-02-11 06:31:51 +09:00
Kota Kanbe
ef8309df27
chore: remove the heck binary ( #1173 )
2021-02-11 06:31:32 +09:00
sadayuki-matsuno
0dff6cf983
fix(gost/microsoft) add workaround into mitigation ( #1170 )
...
* fix(gost/microsoft) add workaround into mitigation
* fix(gost/microsoft) fix typo and delete workaround field from vulninfo
2021-02-10 19:37:28 +09:00
kazuminn
4c04acbd9e
feat(report) : Differences between vulnerability patched items ( #1157 )
...
* add plusDiff() and minusDiff()
* add plusDiff minusDiff test
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com >
2021-02-10 06:55:48 +09:00
Kota Kanbe
1c4f231572
fix(scan): ignore rpm -qf exit status ( #1168 )
2021-02-09 17:26:12 +09:00
Kota Kanbe
51b8e169d2
fix(scan): warning if lsof command not found ( #1167 )
2021-02-07 07:28:45 +09:00
Kota Kanbe
b4611ae9b7
fix(scan): fix yum-ps warning Failed to exec which -bash ( #1166 )
2021-02-07 07:23:12 +09:00
Kota Kanbe
cd6722017b
fix(scan): yum-ps err Failed to find the package ( #1165 )
2021-02-06 08:42:06 +09:00
Kota Kanbe
290edffccf
fix(log): output version to log for debugging purpose ( #1163 )
2021-02-04 07:47:56 +09:00
Kota Kanbe
64a6222bf9
fix(report): set created_at and updated_at of trivy to json ( #1162 )
2021-02-03 17:52:44 +09:00
Kota Kanbe
adb686b7c9
fix(report): set created_at and updated_at of wpscan.com to json ( #1161 )
2021-02-03 16:41:44 +09:00
Kota Kanbe
d4af341b0f
fix(report): remove duplicated refreshing logic when report with -diff ( #1160 )
2021-02-03 07:37:19 +09:00
Kota Kanbe
fea7e93c8d
chore: fix comment ( #1158 )
2021-02-02 06:06:49 +09:00
sadayuki-matsuno
8b6b8d0f2e
feat(wordpress): define API limit exceed error for wpscan.com ( #1155 )
...
* feat(wordpress) specify wp err
* fix typo, chagne const name
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com >
2021-01-30 09:53:41 +09:00
Kota Kanbe
4dcbd865cc
fix(report): set http timeout 10 sec ( #1154 )
...
* fix(report): set http timeout 10 sec
* fix: add an error handling
2021-01-30 09:40:33 +09:00
Kota Kanbe
39b19444fe
Merge branch 'master' of github.com:future-architect/vuls
2021-01-28 16:24:14 +09:00
