dawnscanner 1.6.9 → 2.0.0.rc1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.ruby-version +1 -1
- data/Changelog.md +8 -0
- data/LICENSE.txt +1 -1
- data/Rakefile +6 -239
- data/VERSION +1 -1
- data/bin/dawn +6 -46
- data/dawnscanner.gemspec +6 -1
- data/doc/change.sh +13 -0
- data/doc/knowledge_base.rb +650 -0
- data/lib/dawn/cli/dawn_cli.rb +103 -0
- data/lib/dawn/engine.rb +9 -11
- data/lib/dawn/gemfile_lock.rb +2 -2
- data/lib/dawn/kb/basic_check.rb +1 -0
- data/lib/dawn/kb/combo_check.rb +1 -1
- data/lib/dawn/kb/dependency_check.rb +1 -1
- data/lib/dawn/kb/pattern_match_check.rb +1 -1
- data/lib/dawn/kb/ruby_version_check.rb +11 -10
- data/lib/dawn/kb/{gem_check.rb → rubygem_check.rb} +1 -1
- data/lib/dawn/kb/version_check.rb +25 -25
- data/lib/dawn/knowledge_base.rb +211 -588
- data/lib/dawn/utils.rb +5 -2
- data/lib/dawn/version.rb +5 -5
- data/lib/dawnscanner.rb +4 -3
- metadata +23 -450
- data/lib/dawn/kb/cve_2004_0755.rb +0 -33
- data/lib/dawn/kb/cve_2004_0983.rb +0 -31
- data/lib/dawn/kb/cve_2005_1992.rb +0 -31
- data/lib/dawn/kb/cve_2005_2337.rb +0 -33
- data/lib/dawn/kb/cve_2006_1931.rb +0 -30
- data/lib/dawn/kb/cve_2006_2582.rb +0 -28
- data/lib/dawn/kb/cve_2006_3694.rb +0 -31
- data/lib/dawn/kb/cve_2006_4112.rb +0 -27
- data/lib/dawn/kb/cve_2006_5467.rb +0 -28
- data/lib/dawn/kb/cve_2006_6303.rb +0 -28
- data/lib/dawn/kb/cve_2006_6852.rb +0 -27
- data/lib/dawn/kb/cve_2006_6979.rb +0 -29
- data/lib/dawn/kb/cve_2007_0469.rb +0 -29
- data/lib/dawn/kb/cve_2007_5162.rb +0 -28
- data/lib/dawn/kb/cve_2007_5379.rb +0 -27
- data/lib/dawn/kb/cve_2007_5380.rb +0 -29
- data/lib/dawn/kb/cve_2007_5770.rb +0 -30
- data/lib/dawn/kb/cve_2007_6077.rb +0 -31
- data/lib/dawn/kb/cve_2007_6612.rb +0 -30
- data/lib/dawn/kb/cve_2008_1145.rb +0 -38
- data/lib/dawn/kb/cve_2008_1891.rb +0 -38
- data/lib/dawn/kb/cve_2008_2376.rb +0 -30
- data/lib/dawn/kb/cve_2008_2662.rb +0 -33
- data/lib/dawn/kb/cve_2008_2663.rb +0 -32
- data/lib/dawn/kb/cve_2008_2664.rb +0 -33
- data/lib/dawn/kb/cve_2008_2725.rb +0 -31
- data/lib/dawn/kb/cve_2008_3655.rb +0 -37
- data/lib/dawn/kb/cve_2008_3657.rb +0 -37
- data/lib/dawn/kb/cve_2008_3790.rb +0 -30
- data/lib/dawn/kb/cve_2008_3905.rb +0 -36
- data/lib/dawn/kb/cve_2008_4094.rb +0 -27
- data/lib/dawn/kb/cve_2008_4310.rb +0 -100
- data/lib/dawn/kb/cve_2008_5189.rb +0 -27
- data/lib/dawn/kb/cve_2008_7248.rb +0 -27
- data/lib/dawn/kb/cve_2009_4078.rb +0 -29
- data/lib/dawn/kb/cve_2009_4124.rb +0 -30
- data/lib/dawn/kb/cve_2009_4214.rb +0 -27
- data/lib/dawn/kb/cve_2010_1330.rb +0 -28
- data/lib/dawn/kb/cve_2010_2489.rb +0 -60
- data/lib/dawn/kb/cve_2010_3933.rb +0 -27
- data/lib/dawn/kb/cve_2011_0188.rb +0 -67
- data/lib/dawn/kb/cve_2011_0446.rb +0 -28
- data/lib/dawn/kb/cve_2011_0447.rb +0 -28
- data/lib/dawn/kb/cve_2011_0739.rb +0 -28
- data/lib/dawn/kb/cve_2011_0995.rb +0 -61
- data/lib/dawn/kb/cve_2011_1004.rb +0 -34
- data/lib/dawn/kb/cve_2011_1005.rb +0 -31
- data/lib/dawn/kb/cve_2011_2197.rb +0 -27
- data/lib/dawn/kb/cve_2011_2686.rb +0 -29
- data/lib/dawn/kb/cve_2011_2705.rb +0 -32
- data/lib/dawn/kb/cve_2011_2929.rb +0 -27
- data/lib/dawn/kb/cve_2011_2930.rb +0 -28
- data/lib/dawn/kb/cve_2011_2931.rb +0 -30
- data/lib/dawn/kb/cve_2011_2932.rb +0 -27
- data/lib/dawn/kb/cve_2011_3009.rb +0 -28
- data/lib/dawn/kb/cve_2011_3186.rb +0 -29
- data/lib/dawn/kb/cve_2011_3187.rb +0 -29
- data/lib/dawn/kb/cve_2011_4319.rb +0 -30
- data/lib/dawn/kb/cve_2011_4815.rb +0 -28
- data/lib/dawn/kb/cve_2011_5036.rb +0 -26
- data/lib/dawn/kb/cve_2012_1098.rb +0 -30
- data/lib/dawn/kb/cve_2012_1099.rb +0 -27
- data/lib/dawn/kb/cve_2012_1241.rb +0 -27
- data/lib/dawn/kb/cve_2012_2139.rb +0 -26
- data/lib/dawn/kb/cve_2012_2140.rb +0 -27
- data/lib/dawn/kb/cve_2012_2660.rb +0 -28
- data/lib/dawn/kb/cve_2012_2661.rb +0 -27
- data/lib/dawn/kb/cve_2012_2671.rb +0 -28
- data/lib/dawn/kb/cve_2012_2694.rb +0 -30
- data/lib/dawn/kb/cve_2012_2695.rb +0 -27
- data/lib/dawn/kb/cve_2012_3424.rb +0 -29
- data/lib/dawn/kb/cve_2012_3463.rb +0 -27
- data/lib/dawn/kb/cve_2012_3464.rb +0 -27
- data/lib/dawn/kb/cve_2012_3465.rb +0 -26
- data/lib/dawn/kb/cve_2012_4464.rb +0 -27
- data/lib/dawn/kb/cve_2012_4466.rb +0 -27
- data/lib/dawn/kb/cve_2012_4481.rb +0 -26
- data/lib/dawn/kb/cve_2012_4522.rb +0 -27
- data/lib/dawn/kb/cve_2012_5370.rb +0 -27
- data/lib/dawn/kb/cve_2012_5371.rb +0 -27
- data/lib/dawn/kb/cve_2012_5380.rb +0 -28
- data/lib/dawn/kb/cve_2012_6109.rb +0 -25
- data/lib/dawn/kb/cve_2012_6134.rb +0 -27
- data/lib/dawn/kb/cve_2012_6496.rb +0 -28
- data/lib/dawn/kb/cve_2012_6497.rb +0 -28
- data/lib/dawn/kb/cve_2012_6684.rb +0 -28
- data/lib/dawn/kb/cve_2013_0155.rb +0 -29
- data/lib/dawn/kb/cve_2013_0156.rb +0 -27
- data/lib/dawn/kb/cve_2013_0162.rb +0 -28
- data/lib/dawn/kb/cve_2013_0175.rb +0 -27
- data/lib/dawn/kb/cve_2013_0183.rb +0 -25
- data/lib/dawn/kb/cve_2013_0184.rb +0 -25
- data/lib/dawn/kb/cve_2013_0233.rb +0 -26
- data/lib/dawn/kb/cve_2013_0256.rb +0 -59
- data/lib/dawn/kb/cve_2013_0262.rb +0 -26
- data/lib/dawn/kb/cve_2013_0263.rb +0 -26
- data/lib/dawn/kb/cve_2013_0269.rb +0 -27
- data/lib/dawn/kb/cve_2013_0276.rb +0 -28
- data/lib/dawn/kb/cve_2013_0277.rb +0 -25
- data/lib/dawn/kb/cve_2013_0284.rb +0 -27
- data/lib/dawn/kb/cve_2013_0285.rb +0 -27
- data/lib/dawn/kb/cve_2013_0333.rb +0 -28
- data/lib/dawn/kb/cve_2013_0334.rb +0 -25
- data/lib/dawn/kb/cve_2013_1607.rb +0 -25
- data/lib/dawn/kb/cve_2013_1655.rb +0 -65
- data/lib/dawn/kb/cve_2013_1656.rb +0 -28
- data/lib/dawn/kb/cve_2013_1756.rb +0 -26
- data/lib/dawn/kb/cve_2013_1800.rb +0 -26
- data/lib/dawn/kb/cve_2013_1801.rb +0 -27
- data/lib/dawn/kb/cve_2013_1802.rb +0 -27
- data/lib/dawn/kb/cve_2013_1812.rb +0 -27
- data/lib/dawn/kb/cve_2013_1821.rb +0 -28
- data/lib/dawn/kb/cve_2013_1854.rb +0 -26
- data/lib/dawn/kb/cve_2013_1855.rb +0 -25
- data/lib/dawn/kb/cve_2013_1856.rb +0 -26
- data/lib/dawn/kb/cve_2013_1857.rb +0 -27
- data/lib/dawn/kb/cve_2013_1875.rb +0 -27
- data/lib/dawn/kb/cve_2013_1898.rb +0 -27
- data/lib/dawn/kb/cve_2013_1911.rb +0 -28
- data/lib/dawn/kb/cve_2013_1933.rb +0 -27
- data/lib/dawn/kb/cve_2013_1947.rb +0 -27
- data/lib/dawn/kb/cve_2013_1948.rb +0 -27
- data/lib/dawn/kb/cve_2013_2065.rb +0 -29
- data/lib/dawn/kb/cve_2013_2090.rb +0 -28
- data/lib/dawn/kb/cve_2013_2105.rb +0 -26
- data/lib/dawn/kb/cve_2013_2119.rb +0 -27
- data/lib/dawn/kb/cve_2013_2512.rb +0 -26
- data/lib/dawn/kb/cve_2013_2513.rb +0 -25
- data/lib/dawn/kb/cve_2013_2516.rb +0 -26
- data/lib/dawn/kb/cve_2013_2615.rb +0 -27
- data/lib/dawn/kb/cve_2013_2616.rb +0 -27
- data/lib/dawn/kb/cve_2013_2617.rb +0 -28
- data/lib/dawn/kb/cve_2013_3221.rb +0 -27
- data/lib/dawn/kb/cve_2013_4164.rb +0 -30
- data/lib/dawn/kb/cve_2013_4203.rb +0 -25
- data/lib/dawn/kb/cve_2013_4389.rb +0 -26
- data/lib/dawn/kb/cve_2013_4413.rb +0 -27
- data/lib/dawn/kb/cve_2013_4457.rb +0 -29
- data/lib/dawn/kb/cve_2013_4478.rb +0 -26
- data/lib/dawn/kb/cve_2013_4479.rb +0 -26
- data/lib/dawn/kb/cve_2013_4489.rb +0 -28
- data/lib/dawn/kb/cve_2013_4491.rb +0 -29
- data/lib/dawn/kb/cve_2013_4492.rb +0 -29
- data/lib/dawn/kb/cve_2013_4562.rb +0 -27
- data/lib/dawn/kb/cve_2013_4593.rb +0 -27
- data/lib/dawn/kb/cve_2013_5647.rb +0 -29
- data/lib/dawn/kb/cve_2013_5671.rb +0 -26
- data/lib/dawn/kb/cve_2013_6414.rb +0 -30
- data/lib/dawn/kb/cve_2013_6415.rb +0 -29
- data/lib/dawn/kb/cve_2013_6416.rb +0 -29
- data/lib/dawn/kb/cve_2013_6417.rb +0 -30
- data/lib/dawn/kb/cve_2013_6421.rb +0 -28
- data/lib/dawn/kb/cve_2013_6459.rb +0 -28
- data/lib/dawn/kb/cve_2013_6460.rb +0 -53
- data/lib/dawn/kb/cve_2013_6461.rb +0 -57
- data/lib/dawn/kb/cve_2013_7086.rb +0 -27
- data/lib/dawn/kb/cve_2014_0036.rb +0 -27
- data/lib/dawn/kb/cve_2014_0080.rb +0 -29
- data/lib/dawn/kb/cve_2014_0081.rb +0 -27
- data/lib/dawn/kb/cve_2014_0082.rb +0 -27
- data/lib/dawn/kb/cve_2014_0130.rb +0 -27
- data/lib/dawn/kb/cve_2014_1233.rb +0 -27
- data/lib/dawn/kb/cve_2014_1234.rb +0 -26
- data/lib/dawn/kb/cve_2014_2322.rb +0 -28
- data/lib/dawn/kb/cve_2014_2525.rb +0 -59
- data/lib/dawn/kb/cve_2014_2538.rb +0 -26
- data/lib/dawn/kb/cve_2014_3482.rb +0 -28
- data/lib/dawn/kb/cve_2014_3483.rb +0 -28
- data/lib/dawn/kb/cve_2014_3916.rb +0 -29
- data/lib/dawn/kb/cve_2014_4975.rb +0 -28
- data/lib/dawn/kb/cve_2014_7818.rb +0 -27
- data/lib/dawn/kb/cve_2014_7819.rb +0 -31
- data/lib/dawn/kb/cve_2014_7829.rb +0 -30
- data/lib/dawn/kb/cve_2014_8090.rb +0 -30
- data/lib/dawn/kb/cve_2014_9490.rb +0 -29
- data/lib/dawn/kb/cve_2015_1819.rb +0 -34
- data/lib/dawn/kb/cve_2015_1840/cve_2015_1840_a.rb +0 -28
- data/lib/dawn/kb/cve_2015_1840/cve_2015_1840_b.rb +0 -28
- data/lib/dawn/kb/cve_2015_2963.rb +0 -27
- data/lib/dawn/kb/cve_2015_3224.rb +0 -26
- data/lib/dawn/kb/cve_2015_3225.rb +0 -28
- data/lib/dawn/kb/cve_2015_3226.rb +0 -27
- data/lib/dawn/kb/cve_2015_3227.rb +0 -28
- data/lib/dawn/kb/cve_2015_3448.rb +0 -29
- data/lib/dawn/kb/cve_2015_4020.rb +0 -34
- data/lib/dawn/kb/cve_2015_5312.rb +0 -30
- data/lib/dawn/kb/cve_2015_7497.rb +0 -32
- data/lib/dawn/kb/cve_2015_7498.rb +0 -32
- data/lib/dawn/kb/cve_2015_7499.rb +0 -32
- data/lib/dawn/kb/cve_2015_7500.rb +0 -32
- data/lib/dawn/kb/cve_2015_7519.rb +0 -31
- data/lib/dawn/kb/cve_2015_7541.rb +0 -31
- data/lib/dawn/kb/cve_2015_7576.rb +0 -35
- data/lib/dawn/kb/cve_2015_7577.rb +0 -34
- data/lib/dawn/kb/cve_2015_7578.rb +0 -30
- data/lib/dawn/kb/cve_2015_7579.rb +0 -30
- data/lib/dawn/kb/cve_2015_7581.rb +0 -33
- data/lib/dawn/kb/cve_2015_8241.rb +0 -32
- data/lib/dawn/kb/cve_2015_8242.rb +0 -32
- data/lib/dawn/kb/cve_2015_8317.rb +0 -32
- data/lib/dawn/kb/cve_2016_0751.rb +0 -32
- data/lib/dawn/kb/cve_2016_0752.rb +0 -35
- data/lib/dawn/kb/cve_2016_0753.rb +0 -31
- data/lib/dawn/kb/cve_2016_2097.rb +0 -35
- data/lib/dawn/kb/cve_2016_2098.rb +0 -35
- data/lib/dawn/kb/cve_2016_5697.rb +0 -30
- data/lib/dawn/kb/cve_2016_6316.rb +0 -33
- data/lib/dawn/kb/cve_2016_6317.rb +0 -32
- data/lib/dawn/kb/cve_2016_6582.rb +0 -43
- data/lib/dawn/kb/not_revised_code.rb +0 -22
- data/lib/dawn/kb/osvdb_105971.rb +0 -29
- data/lib/dawn/kb/osvdb_108530.rb +0 -27
- data/lib/dawn/kb/osvdb_108563.rb +0 -28
- data/lib/dawn/kb/osvdb_108569.rb +0 -28
- data/lib/dawn/kb/osvdb_108570.rb +0 -27
- data/lib/dawn/kb/osvdb_115654.rb +0 -33
- data/lib/dawn/kb/osvdb_116010.rb +0 -30
- data/lib/dawn/kb/osvdb_117903.rb +0 -30
- data/lib/dawn/kb/osvdb_118579.rb +0 -31
- data/lib/dawn/kb/osvdb_118830.rb +0 -32
- data/lib/dawn/kb/osvdb_118954.rb +0 -33
- data/lib/dawn/kb/osvdb_119878.rb +0 -32
- data/lib/dawn/kb/osvdb_119927.rb +0 -33
- data/lib/dawn/kb/osvdb_120415.rb +0 -31
- data/lib/dawn/kb/osvdb_120857.rb +0 -34
- data/lib/dawn/kb/osvdb_121701.rb +0 -30
- data/lib/dawn/kb/osvdb_132234.rb +0 -34
- data/lib/dawn/kb/owasp_ror_cheatsheet.rb +0 -33
- data/lib/dawn/kb/owasp_ror_cheatsheet/check_for_backup_files.rb +0 -18
- data/lib/dawn/kb/owasp_ror_cheatsheet/check_for_safe_redirect_and_forward.rb +0 -57
- data/lib/dawn/kb/owasp_ror_cheatsheet/command_injection.rb +0 -28
- data/lib/dawn/kb/owasp_ror_cheatsheet/csrf.rb +0 -29
- data/lib/dawn/kb/owasp_ror_cheatsheet/mass_assignment_in_model.rb +0 -33
- data/lib/dawn/kb/owasp_ror_cheatsheet/security_related_headers.rb +0 -35
- data/lib/dawn/kb/owasp_ror_cheatsheet/sensitive_files.rb +0 -29
- data/lib/dawn/kb/owasp_ror_cheatsheet/session_stored_in_database.rb +0 -31
- data/lib/dawn/kb/simpleform_xss_20131129.rb +0 -28
- data/lib/dawn/knowledge_base_experimental.rb +0 -245
- data/spec/lib/kb/cve_2011_2705_spec.rb +0 -35
- data/spec/lib/kb/cve_2011_2930_spec.rb +0 -31
- data/spec/lib/kb/cve_2011_3009_spec.rb +0 -25
- data/spec/lib/kb/cve_2011_3187_spec.rb +0 -24
- data/spec/lib/kb/cve_2011_4319_spec.rb +0 -44
- data/spec/lib/kb/cve_2011_5036_spec.rb +0 -95
- data/spec/lib/kb/cve_2012_1098_spec.rb +0 -36
- data/spec/lib/kb/cve_2012_2139_spec.rb +0 -20
- data/spec/lib/kb/cve_2012_2671_spec.rb +0 -23
- data/spec/lib/kb/cve_2012_6109_spec.rb +0 -112
- data/spec/lib/kb/cve_2012_6684_spec.rb +0 -16
- data/spec/lib/kb/cve_2013_0162_spec.rb +0 -23
- data/spec/lib/kb/cve_2013_0183_spec.rb +0 -54
- data/spec/lib/kb/cve_2013_0184_spec.rb +0 -115
- data/spec/lib/kb/cve_2013_0256_spec.rb +0 -34
- data/spec/lib/kb/cve_2013_0262_spec.rb +0 -44
- data/spec/lib/kb/cve_2013_0263_spec.rb +0 -11
- data/spec/lib/kb/cve_2013_0334_spec.rb +0 -35
- data/spec/lib/kb/cve_2013_1607_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_1655_spec.rb +0 -31
- data/spec/lib/kb/cve_2013_1756_spec.rb +0 -23
- data/spec/lib/kb/cve_2013_2090_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_2105_spec.rb +0 -11
- data/spec/lib/kb/cve_2013_2119_spec.rb +0 -27
- data/spec/lib/kb/cve_2013_2512_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_2513_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_2516_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_4203_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_4413_spec.rb +0 -16
- data/spec/lib/kb/cve_2013_4489_spec.rb +0 -63
- data/spec/lib/kb/cve_2013_4491_spec.rb +0 -16
- data/spec/lib/kb/cve_2013_4593_spec.rb +0 -16
- data/spec/lib/kb/cve_2013_5647_spec.rb +0 -19
- data/spec/lib/kb/cve_2013_5671_spec.rb +0 -27
- data/spec/lib/kb/cve_2013_6414_spec.rb +0 -26
- data/spec/lib/kb/cve_2013_6416_spec.rb +0 -31
- data/spec/lib/kb/cve_2013_6459_spec.rb +0 -15
- data/spec/lib/kb/cve_2013_7086_spec.rb +0 -22
- data/spec/lib/kb/cve_2014_0036_spec.rb +0 -15
- data/spec/lib/kb/cve_2014_0080_spec.rb +0 -33
- data/spec/lib/kb/cve_2014_0081_spec.rb +0 -50
- data/spec/lib/kb/cve_2014_0082_spec.rb +0 -52
- data/spec/lib/kb/cve_2014_0130_spec.rb +0 -19
- data/spec/lib/kb/cve_2014_1233_spec.rb +0 -15
- data/spec/lib/kb/cve_2014_1234_spec.rb +0 -16
- data/spec/lib/kb/cve_2014_2322_spec.rb +0 -15
- data/spec/lib/kb/cve_2014_2538_spec.rb +0 -15
- data/spec/lib/kb/cve_2014_3482_spec.rb +0 -15
- data/spec/lib/kb/cve_2014_3483_spec.rb +0 -27
- data/spec/lib/kb/cve_2014_7818_spec.rb +0 -42
- data/spec/lib/kb/cve_2014_7819_spec.rb +0 -139
- data/spec/lib/kb/cve_2014_7829_spec.rb +0 -50
- data/spec/lib/kb/cve_2014_9490_spec.rb +0 -17
- data/spec/lib/kb/cve_2015_1819_spec.rb +0 -16
- data/spec/lib/kb/cve_2015_1840_spec.rb +0 -39
- data/spec/lib/kb/cve_2015_2963_spec.rb +0 -17
- data/spec/lib/kb/cve_2015_3224_spec.rb +0 -16
- data/spec/lib/kb/cve_2015_3225_spec.rb +0 -27
- data/spec/lib/kb/cve_2015_3226_spec.rb +0 -35
- data/spec/lib/kb/cve_2015_3227_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_3448_spec.rb +0 -16
- data/spec/lib/kb/cve_2015_4020_spec.rb +0 -24
- data/spec/lib/kb/cve_2015_5312_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_7497_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_7498_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_7499_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_7500_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_7519_spec.rb +0 -23
- data/spec/lib/kb/cve_2015_7541_spec.rb +0 -15
- data/spec/lib/kb/cve_2015_7576_spec.rb +0 -51
- data/spec/lib/kb/cve_2015_7577_spec.rb +0 -63
- data/spec/lib/kb/cve_2015_7578_spec.rb +0 -15
- data/spec/lib/kb/cve_2015_7579_spec.rb +0 -23
- data/spec/lib/kb/cve_2015_7581_spec.rb +0 -51
- data/spec/lib/kb/cve_2015_8241_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_8242_spec.rb +0 -31
- data/spec/lib/kb/cve_2015_8317_spec.rb +0 -31
- data/spec/lib/kb/cve_2016_0751_spec.rb +0 -55
- data/spec/lib/kb/cve_2016_0752_spec.rb +0 -51
- data/spec/lib/kb/cve_2016_0753_spec.rb +0 -51
- data/spec/lib/kb/cve_2016_2097_spec.rb +0 -35
- data/spec/lib/kb/cve_2016_2098_spec.rb +0 -59
- data/spec/lib/kb/cve_2016_5697_spec.rb +0 -15
- data/spec/lib/kb/cve_2016_6316_spec.rb +0 -44
- data/spec/lib/kb/cve_2016_6317_spec.rb +0 -35
- data/spec/lib/kb/cve_2016_6582_spec.rb +0 -29
- data/spec/lib/kb/osvdb_105971_spec.rb +0 -15
- data/spec/lib/kb/osvdb_108530_spec.rb +0 -22
- data/spec/lib/kb/osvdb_108563_spec.rb +0 -18
- data/spec/lib/kb/osvdb_108569_spec.rb +0 -17
- data/spec/lib/kb/osvdb_108570_spec.rb +0 -17
- data/spec/lib/kb/osvdb_115654_spec.rb +0 -15
- data/spec/lib/kb/osvdb_116010_spec.rb +0 -15
- data/spec/lib/kb/osvdb_117903_spec.rb +0 -23
- data/spec/lib/kb/osvdb_118579_spec.rb +0 -8
- data/spec/lib/kb/osvdb_118830_spec.rb +0 -16
- data/spec/lib/kb/osvdb_118954_spec.rb +0 -20
- data/spec/lib/kb/osvdb_119878_spec.rb +0 -92
- data/spec/lib/kb/osvdb_119927_spec.rb +0 -16
- data/spec/lib/kb/osvdb_120415_spec.rb +0 -16
- data/spec/lib/kb/osvdb_120857_spec.rb +0 -32
- data/spec/lib/kb/osvdb_121701_spec.rb +0 -15
- data/spec/lib/kb/osvdb_132234_spec.rb +0 -15
data/lib/dawn/utils.rb
CHANGED
@@ -1,7 +1,10 @@
|
|
1
1
|
module Dawn
|
2
2
|
module Utils
|
3
3
|
def debug_me(msg)
|
4
|
-
$logger.debug(msg) if
|
4
|
+
$logger.debug(msg) if $debug
|
5
|
+
end
|
6
|
+
def debug_verbosely(msg)
|
7
|
+
$logger.debug("VERBOSE: #{msg}") if $debug and $verbose
|
5
8
|
end
|
6
9
|
|
7
10
|
def debug_me_and_return_true(msg)
|
@@ -11,7 +14,7 @@ module Dawn
|
|
11
14
|
__debug_me_and_return(msg, false)
|
12
15
|
end
|
13
16
|
def __debug_me_and_return(msg, status)
|
14
|
-
$logger.debug(msg) if
|
17
|
+
$logger.debug(msg) if $debug
|
15
18
|
return status
|
16
19
|
end
|
17
20
|
end
|
data/lib/dawn/version.rb
CHANGED
data/lib/dawnscanner.rb
CHANGED
@@ -1,7 +1,6 @@
|
|
1
1
|
require "dawn/utils"
|
2
2
|
require "dawn/core"
|
3
3
|
require "dawn/version"
|
4
|
-
require "dawn/knowledge_base"
|
5
4
|
require "dawn/rails"
|
6
5
|
require "dawn/sinatra"
|
7
6
|
require "dawn/padrino"
|
@@ -9,8 +8,10 @@ require "dawn/gemfile_lock"
|
|
9
8
|
require "dawn/reporter"
|
10
9
|
require "dawn/logger"
|
11
10
|
|
11
|
+
require "dawn/cli/dawn_cli"
|
12
|
+
|
13
|
+
# KB
|
14
|
+
require "dawn/knowledge_base"
|
12
15
|
# Datamapper classes
|
13
16
|
#require 'data_mapper'
|
14
17
|
#require "dawn/registry"
|
15
|
-
|
16
|
-
require "date"
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dawnscanner
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version:
|
4
|
+
version: 2.0.0.rc1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Paolo Perego
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2019-04-09 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: cvss
|
@@ -123,7 +123,21 @@ dependencies:
|
|
123
123
|
- !ruby/object:Gem::Version
|
124
124
|
version: '0'
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
|
-
name:
|
126
|
+
name: psych
|
127
|
+
requirement: !ruby/object:Gem::Requirement
|
128
|
+
requirements:
|
129
|
+
- - ">="
|
130
|
+
- !ruby/object:Gem::Version
|
131
|
+
version: '0'
|
132
|
+
type: :runtime
|
133
|
+
prerelease: false
|
134
|
+
version_requirements: !ruby/object:Gem::Requirement
|
135
|
+
requirements:
|
136
|
+
- - ">="
|
137
|
+
- !ruby/object:Gem::Version
|
138
|
+
version: '0'
|
139
|
+
- !ruby/object:Gem::Dependency
|
140
|
+
name: thor
|
127
141
|
requirement: !ruby/object:Gem::Requirement
|
128
142
|
requirements:
|
129
143
|
- - ">="
|
@@ -275,268 +289,33 @@ files:
|
|
275
289
|
- checksum/dawnscanner-1.6.8.gem.sha1
|
276
290
|
- code_of_conduct.md
|
277
291
|
- dawnscanner.gemspec
|
292
|
+
- doc/change.sh
|
278
293
|
- doc/dawn_1_0_announcement.md
|
279
294
|
- doc/dawn_1_1_announcement.md
|
280
295
|
- doc/dawn_1_2_announcement.md
|
281
296
|
- doc/dawn_1_5_announcement.md
|
282
297
|
- doc/dawnscanner.yml.sample
|
298
|
+
- doc/knowledge_base.rb
|
283
299
|
- doc/new_knowledge_base_v1.0.md
|
284
300
|
- features/dawn_complains_about_an_incorrect_command_line.feature.disabled
|
285
301
|
- features/dawn_scan_a_secure_sinatra_app.feature.disabled
|
286
302
|
- features/dawn_scan_a_vulnerable_sinatra_app.feature.disabled
|
287
303
|
- features/step_definition/dawn_steps.rb
|
288
304
|
- features/support/env.rb
|
305
|
+
- lib/dawn/cli/dawn_cli.rb
|
289
306
|
- lib/dawn/core.rb
|
290
307
|
- lib/dawn/engine.rb
|
291
308
|
- lib/dawn/gemfile_lock.rb
|
292
309
|
- lib/dawn/kb/basic_check.rb
|
293
310
|
- lib/dawn/kb/combo_check.rb
|
294
|
-
- lib/dawn/kb/cve_2004_0755.rb
|
295
|
-
- lib/dawn/kb/cve_2004_0983.rb
|
296
|
-
- lib/dawn/kb/cve_2005_1992.rb
|
297
|
-
- lib/dawn/kb/cve_2005_2337.rb
|
298
|
-
- lib/dawn/kb/cve_2006_1931.rb
|
299
|
-
- lib/dawn/kb/cve_2006_2582.rb
|
300
|
-
- lib/dawn/kb/cve_2006_3694.rb
|
301
|
-
- lib/dawn/kb/cve_2006_4112.rb
|
302
|
-
- lib/dawn/kb/cve_2006_5467.rb
|
303
|
-
- lib/dawn/kb/cve_2006_6303.rb
|
304
|
-
- lib/dawn/kb/cve_2006_6852.rb
|
305
|
-
- lib/dawn/kb/cve_2006_6979.rb
|
306
|
-
- lib/dawn/kb/cve_2007_0469.rb
|
307
|
-
- lib/dawn/kb/cve_2007_5162.rb
|
308
|
-
- lib/dawn/kb/cve_2007_5379.rb
|
309
|
-
- lib/dawn/kb/cve_2007_5380.rb
|
310
|
-
- lib/dawn/kb/cve_2007_5770.rb
|
311
|
-
- lib/dawn/kb/cve_2007_6077.rb
|
312
|
-
- lib/dawn/kb/cve_2007_6612.rb
|
313
|
-
- lib/dawn/kb/cve_2008_1145.rb
|
314
|
-
- lib/dawn/kb/cve_2008_1891.rb
|
315
|
-
- lib/dawn/kb/cve_2008_2376.rb
|
316
|
-
- lib/dawn/kb/cve_2008_2662.rb
|
317
|
-
- lib/dawn/kb/cve_2008_2663.rb
|
318
|
-
- lib/dawn/kb/cve_2008_2664.rb
|
319
|
-
- lib/dawn/kb/cve_2008_2725.rb
|
320
|
-
- lib/dawn/kb/cve_2008_3655.rb
|
321
|
-
- lib/dawn/kb/cve_2008_3657.rb
|
322
|
-
- lib/dawn/kb/cve_2008_3790.rb
|
323
|
-
- lib/dawn/kb/cve_2008_3905.rb
|
324
|
-
- lib/dawn/kb/cve_2008_4094.rb
|
325
|
-
- lib/dawn/kb/cve_2008_4310.rb
|
326
|
-
- lib/dawn/kb/cve_2008_5189.rb
|
327
|
-
- lib/dawn/kb/cve_2008_7248.rb
|
328
|
-
- lib/dawn/kb/cve_2009_4078.rb
|
329
|
-
- lib/dawn/kb/cve_2009_4124.rb
|
330
|
-
- lib/dawn/kb/cve_2009_4214.rb
|
331
|
-
- lib/dawn/kb/cve_2010_1330.rb
|
332
|
-
- lib/dawn/kb/cve_2010_2489.rb
|
333
|
-
- lib/dawn/kb/cve_2010_3933.rb
|
334
|
-
- lib/dawn/kb/cve_2011_0188.rb
|
335
|
-
- lib/dawn/kb/cve_2011_0446.rb
|
336
|
-
- lib/dawn/kb/cve_2011_0447.rb
|
337
|
-
- lib/dawn/kb/cve_2011_0739.rb
|
338
|
-
- lib/dawn/kb/cve_2011_0995.rb
|
339
|
-
- lib/dawn/kb/cve_2011_1004.rb
|
340
|
-
- lib/dawn/kb/cve_2011_1005.rb
|
341
|
-
- lib/dawn/kb/cve_2011_2197.rb
|
342
|
-
- lib/dawn/kb/cve_2011_2686.rb
|
343
|
-
- lib/dawn/kb/cve_2011_2705.rb
|
344
|
-
- lib/dawn/kb/cve_2011_2929.rb
|
345
|
-
- lib/dawn/kb/cve_2011_2930.rb
|
346
|
-
- lib/dawn/kb/cve_2011_2931.rb
|
347
|
-
- lib/dawn/kb/cve_2011_2932.rb
|
348
|
-
- lib/dawn/kb/cve_2011_3009.rb
|
349
|
-
- lib/dawn/kb/cve_2011_3186.rb
|
350
|
-
- lib/dawn/kb/cve_2011_3187.rb
|
351
|
-
- lib/dawn/kb/cve_2011_4319.rb
|
352
|
-
- lib/dawn/kb/cve_2011_4815.rb
|
353
|
-
- lib/dawn/kb/cve_2011_5036.rb
|
354
|
-
- lib/dawn/kb/cve_2012_1098.rb
|
355
|
-
- lib/dawn/kb/cve_2012_1099.rb
|
356
|
-
- lib/dawn/kb/cve_2012_1241.rb
|
357
|
-
- lib/dawn/kb/cve_2012_2139.rb
|
358
|
-
- lib/dawn/kb/cve_2012_2140.rb
|
359
|
-
- lib/dawn/kb/cve_2012_2660.rb
|
360
|
-
- lib/dawn/kb/cve_2012_2661.rb
|
361
|
-
- lib/dawn/kb/cve_2012_2671.rb
|
362
|
-
- lib/dawn/kb/cve_2012_2694.rb
|
363
|
-
- lib/dawn/kb/cve_2012_2695.rb
|
364
|
-
- lib/dawn/kb/cve_2012_3424.rb
|
365
|
-
- lib/dawn/kb/cve_2012_3463.rb
|
366
|
-
- lib/dawn/kb/cve_2012_3464.rb
|
367
|
-
- lib/dawn/kb/cve_2012_3465.rb
|
368
|
-
- lib/dawn/kb/cve_2012_4464.rb
|
369
|
-
- lib/dawn/kb/cve_2012_4466.rb
|
370
|
-
- lib/dawn/kb/cve_2012_4481.rb
|
371
|
-
- lib/dawn/kb/cve_2012_4522.rb
|
372
|
-
- lib/dawn/kb/cve_2012_5370.rb
|
373
|
-
- lib/dawn/kb/cve_2012_5371.rb
|
374
|
-
- lib/dawn/kb/cve_2012_5380.rb
|
375
|
-
- lib/dawn/kb/cve_2012_6109.rb
|
376
|
-
- lib/dawn/kb/cve_2012_6134.rb
|
377
|
-
- lib/dawn/kb/cve_2012_6496.rb
|
378
|
-
- lib/dawn/kb/cve_2012_6497.rb
|
379
|
-
- lib/dawn/kb/cve_2012_6684.rb
|
380
|
-
- lib/dawn/kb/cve_2013_0155.rb
|
381
|
-
- lib/dawn/kb/cve_2013_0156.rb
|
382
|
-
- lib/dawn/kb/cve_2013_0162.rb
|
383
|
-
- lib/dawn/kb/cve_2013_0175.rb
|
384
|
-
- lib/dawn/kb/cve_2013_0183.rb
|
385
|
-
- lib/dawn/kb/cve_2013_0184.rb
|
386
|
-
- lib/dawn/kb/cve_2013_0233.rb
|
387
|
-
- lib/dawn/kb/cve_2013_0256.rb
|
388
|
-
- lib/dawn/kb/cve_2013_0262.rb
|
389
|
-
- lib/dawn/kb/cve_2013_0263.rb
|
390
|
-
- lib/dawn/kb/cve_2013_0269.rb
|
391
|
-
- lib/dawn/kb/cve_2013_0276.rb
|
392
|
-
- lib/dawn/kb/cve_2013_0277.rb
|
393
|
-
- lib/dawn/kb/cve_2013_0284.rb
|
394
|
-
- lib/dawn/kb/cve_2013_0285.rb
|
395
|
-
- lib/dawn/kb/cve_2013_0333.rb
|
396
|
-
- lib/dawn/kb/cve_2013_0334.rb
|
397
|
-
- lib/dawn/kb/cve_2013_1607.rb
|
398
|
-
- lib/dawn/kb/cve_2013_1655.rb
|
399
|
-
- lib/dawn/kb/cve_2013_1656.rb
|
400
|
-
- lib/dawn/kb/cve_2013_1756.rb
|
401
|
-
- lib/dawn/kb/cve_2013_1800.rb
|
402
|
-
- lib/dawn/kb/cve_2013_1801.rb
|
403
|
-
- lib/dawn/kb/cve_2013_1802.rb
|
404
|
-
- lib/dawn/kb/cve_2013_1812.rb
|
405
|
-
- lib/dawn/kb/cve_2013_1821.rb
|
406
|
-
- lib/dawn/kb/cve_2013_1854.rb
|
407
|
-
- lib/dawn/kb/cve_2013_1855.rb
|
408
|
-
- lib/dawn/kb/cve_2013_1856.rb
|
409
|
-
- lib/dawn/kb/cve_2013_1857.rb
|
410
|
-
- lib/dawn/kb/cve_2013_1875.rb
|
411
|
-
- lib/dawn/kb/cve_2013_1898.rb
|
412
|
-
- lib/dawn/kb/cve_2013_1911.rb
|
413
|
-
- lib/dawn/kb/cve_2013_1933.rb
|
414
|
-
- lib/dawn/kb/cve_2013_1947.rb
|
415
|
-
- lib/dawn/kb/cve_2013_1948.rb
|
416
|
-
- lib/dawn/kb/cve_2013_2065.rb
|
417
|
-
- lib/dawn/kb/cve_2013_2090.rb
|
418
|
-
- lib/dawn/kb/cve_2013_2105.rb
|
419
|
-
- lib/dawn/kb/cve_2013_2119.rb
|
420
|
-
- lib/dawn/kb/cve_2013_2512.rb
|
421
|
-
- lib/dawn/kb/cve_2013_2513.rb
|
422
|
-
- lib/dawn/kb/cve_2013_2516.rb
|
423
|
-
- lib/dawn/kb/cve_2013_2615.rb
|
424
|
-
- lib/dawn/kb/cve_2013_2616.rb
|
425
|
-
- lib/dawn/kb/cve_2013_2617.rb
|
426
|
-
- lib/dawn/kb/cve_2013_3221.rb
|
427
|
-
- lib/dawn/kb/cve_2013_4164.rb
|
428
|
-
- lib/dawn/kb/cve_2013_4203.rb
|
429
|
-
- lib/dawn/kb/cve_2013_4389.rb
|
430
|
-
- lib/dawn/kb/cve_2013_4413.rb
|
431
|
-
- lib/dawn/kb/cve_2013_4457.rb
|
432
|
-
- lib/dawn/kb/cve_2013_4478.rb
|
433
|
-
- lib/dawn/kb/cve_2013_4479.rb
|
434
|
-
- lib/dawn/kb/cve_2013_4489.rb
|
435
|
-
- lib/dawn/kb/cve_2013_4491.rb
|
436
|
-
- lib/dawn/kb/cve_2013_4492.rb
|
437
|
-
- lib/dawn/kb/cve_2013_4562.rb
|
438
|
-
- lib/dawn/kb/cve_2013_4593.rb
|
439
|
-
- lib/dawn/kb/cve_2013_5647.rb
|
440
|
-
- lib/dawn/kb/cve_2013_5671.rb
|
441
|
-
- lib/dawn/kb/cve_2013_6414.rb
|
442
|
-
- lib/dawn/kb/cve_2013_6415.rb
|
443
|
-
- lib/dawn/kb/cve_2013_6416.rb
|
444
|
-
- lib/dawn/kb/cve_2013_6417.rb
|
445
|
-
- lib/dawn/kb/cve_2013_6421.rb
|
446
|
-
- lib/dawn/kb/cve_2013_6459.rb
|
447
|
-
- lib/dawn/kb/cve_2013_6460.rb
|
448
|
-
- lib/dawn/kb/cve_2013_6461.rb
|
449
|
-
- lib/dawn/kb/cve_2013_7086.rb
|
450
|
-
- lib/dawn/kb/cve_2014_0036.rb
|
451
|
-
- lib/dawn/kb/cve_2014_0080.rb
|
452
|
-
- lib/dawn/kb/cve_2014_0081.rb
|
453
|
-
- lib/dawn/kb/cve_2014_0082.rb
|
454
|
-
- lib/dawn/kb/cve_2014_0130.rb
|
455
|
-
- lib/dawn/kb/cve_2014_1233.rb
|
456
|
-
- lib/dawn/kb/cve_2014_1234.rb
|
457
|
-
- lib/dawn/kb/cve_2014_2322.rb
|
458
|
-
- lib/dawn/kb/cve_2014_2525.rb
|
459
|
-
- lib/dawn/kb/cve_2014_2538.rb
|
460
|
-
- lib/dawn/kb/cve_2014_3482.rb
|
461
|
-
- lib/dawn/kb/cve_2014_3483.rb
|
462
|
-
- lib/dawn/kb/cve_2014_3916.rb
|
463
|
-
- lib/dawn/kb/cve_2014_4975.rb
|
464
|
-
- lib/dawn/kb/cve_2014_7818.rb
|
465
|
-
- lib/dawn/kb/cve_2014_7819.rb
|
466
|
-
- lib/dawn/kb/cve_2014_7829.rb
|
467
|
-
- lib/dawn/kb/cve_2014_8090.rb
|
468
|
-
- lib/dawn/kb/cve_2014_9490.rb
|
469
|
-
- lib/dawn/kb/cve_2015_1819.rb
|
470
|
-
- lib/dawn/kb/cve_2015_1840/cve_2015_1840_a.rb
|
471
|
-
- lib/dawn/kb/cve_2015_1840/cve_2015_1840_b.rb
|
472
|
-
- lib/dawn/kb/cve_2015_2963.rb
|
473
|
-
- lib/dawn/kb/cve_2015_3224.rb
|
474
|
-
- lib/dawn/kb/cve_2015_3225.rb
|
475
|
-
- lib/dawn/kb/cve_2015_3226.rb
|
476
|
-
- lib/dawn/kb/cve_2015_3227.rb
|
477
|
-
- lib/dawn/kb/cve_2015_3448.rb
|
478
|
-
- lib/dawn/kb/cve_2015_4020.rb
|
479
|
-
- lib/dawn/kb/cve_2015_5312.rb
|
480
|
-
- lib/dawn/kb/cve_2015_7497.rb
|
481
|
-
- lib/dawn/kb/cve_2015_7498.rb
|
482
|
-
- lib/dawn/kb/cve_2015_7499.rb
|
483
|
-
- lib/dawn/kb/cve_2015_7500.rb
|
484
|
-
- lib/dawn/kb/cve_2015_7519.rb
|
485
|
-
- lib/dawn/kb/cve_2015_7541.rb
|
486
|
-
- lib/dawn/kb/cve_2015_7576.rb
|
487
|
-
- lib/dawn/kb/cve_2015_7577.rb
|
488
|
-
- lib/dawn/kb/cve_2015_7578.rb
|
489
|
-
- lib/dawn/kb/cve_2015_7579.rb
|
490
|
-
- lib/dawn/kb/cve_2015_7581.rb
|
491
|
-
- lib/dawn/kb/cve_2015_8241.rb
|
492
|
-
- lib/dawn/kb/cve_2015_8242.rb
|
493
|
-
- lib/dawn/kb/cve_2015_8317.rb
|
494
|
-
- lib/dawn/kb/cve_2016_0751.rb
|
495
|
-
- lib/dawn/kb/cve_2016_0752.rb
|
496
|
-
- lib/dawn/kb/cve_2016_0753.rb
|
497
|
-
- lib/dawn/kb/cve_2016_2097.rb
|
498
|
-
- lib/dawn/kb/cve_2016_2098.rb
|
499
|
-
- lib/dawn/kb/cve_2016_5697.rb
|
500
|
-
- lib/dawn/kb/cve_2016_6316.rb
|
501
|
-
- lib/dawn/kb/cve_2016_6317.rb
|
502
|
-
- lib/dawn/kb/cve_2016_6582.rb
|
503
311
|
- lib/dawn/kb/dependency_check.rb
|
504
312
|
- lib/dawn/kb/deprecation_check.rb
|
505
|
-
- lib/dawn/kb/gem_check.rb
|
506
|
-
- lib/dawn/kb/not_revised_code.rb
|
507
313
|
- lib/dawn/kb/operating_system_check.rb
|
508
|
-
- lib/dawn/kb/osvdb_105971.rb
|
509
|
-
- lib/dawn/kb/osvdb_108530.rb
|
510
|
-
- lib/dawn/kb/osvdb_108563.rb
|
511
|
-
- lib/dawn/kb/osvdb_108569.rb
|
512
|
-
- lib/dawn/kb/osvdb_108570.rb
|
513
|
-
- lib/dawn/kb/osvdb_115654.rb
|
514
|
-
- lib/dawn/kb/osvdb_116010.rb
|
515
|
-
- lib/dawn/kb/osvdb_117903.rb
|
516
|
-
- lib/dawn/kb/osvdb_118579.rb
|
517
|
-
- lib/dawn/kb/osvdb_118830.rb
|
518
|
-
- lib/dawn/kb/osvdb_118954.rb
|
519
|
-
- lib/dawn/kb/osvdb_119878.rb
|
520
|
-
- lib/dawn/kb/osvdb_119927.rb
|
521
|
-
- lib/dawn/kb/osvdb_120415.rb
|
522
|
-
- lib/dawn/kb/osvdb_120857.rb
|
523
|
-
- lib/dawn/kb/osvdb_121701.rb
|
524
|
-
- lib/dawn/kb/osvdb_132234.rb
|
525
|
-
- lib/dawn/kb/owasp_ror_cheatsheet.rb
|
526
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/check_for_backup_files.rb
|
527
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/check_for_safe_redirect_and_forward.rb
|
528
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/command_injection.rb
|
529
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/csrf.rb
|
530
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/mass_assignment_in_model.rb
|
531
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/security_related_headers.rb
|
532
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/sensitive_files.rb
|
533
|
-
- lib/dawn/kb/owasp_ror_cheatsheet/session_stored_in_database.rb
|
534
314
|
- lib/dawn/kb/pattern_match_check.rb
|
535
315
|
- lib/dawn/kb/ruby_version_check.rb
|
536
|
-
- lib/dawn/kb/
|
316
|
+
- lib/dawn/kb/rubygem_check.rb
|
537
317
|
- lib/dawn/kb/version_check.rb
|
538
318
|
- lib/dawn/knowledge_base.rb
|
539
|
-
- lib/dawn/knowledge_base_experimental.rb
|
540
319
|
- lib/dawn/logger.rb
|
541
320
|
- lib/dawn/padrino.rb
|
542
321
|
- lib/dawn/rails.rb
|
@@ -560,109 +339,6 @@ files:
|
|
560
339
|
- spec/lib/kb/codesake_deprecation_check_spec.rb
|
561
340
|
- spec/lib/kb/codesake_ruby_version_check_spec.rb
|
562
341
|
- spec/lib/kb/codesake_version_check_spec.rb
|
563
|
-
- spec/lib/kb/cve_2011_2705_spec.rb
|
564
|
-
- spec/lib/kb/cve_2011_2930_spec.rb
|
565
|
-
- spec/lib/kb/cve_2011_3009_spec.rb
|
566
|
-
- spec/lib/kb/cve_2011_3187_spec.rb
|
567
|
-
- spec/lib/kb/cve_2011_4319_spec.rb
|
568
|
-
- spec/lib/kb/cve_2011_5036_spec.rb
|
569
|
-
- spec/lib/kb/cve_2012_1098_spec.rb
|
570
|
-
- spec/lib/kb/cve_2012_2139_spec.rb
|
571
|
-
- spec/lib/kb/cve_2012_2671_spec.rb
|
572
|
-
- spec/lib/kb/cve_2012_6109_spec.rb
|
573
|
-
- spec/lib/kb/cve_2012_6684_spec.rb
|
574
|
-
- spec/lib/kb/cve_2013_0162_spec.rb
|
575
|
-
- spec/lib/kb/cve_2013_0183_spec.rb
|
576
|
-
- spec/lib/kb/cve_2013_0184_spec.rb
|
577
|
-
- spec/lib/kb/cve_2013_0256_spec.rb
|
578
|
-
- spec/lib/kb/cve_2013_0262_spec.rb
|
579
|
-
- spec/lib/kb/cve_2013_0263_spec.rb
|
580
|
-
- spec/lib/kb/cve_2013_0334_spec.rb
|
581
|
-
- spec/lib/kb/cve_2013_1607_spec.rb
|
582
|
-
- spec/lib/kb/cve_2013_1655_spec.rb
|
583
|
-
- spec/lib/kb/cve_2013_1756_spec.rb
|
584
|
-
- spec/lib/kb/cve_2013_2090_spec.rb
|
585
|
-
- spec/lib/kb/cve_2013_2105_spec.rb
|
586
|
-
- spec/lib/kb/cve_2013_2119_spec.rb
|
587
|
-
- spec/lib/kb/cve_2013_2512_spec.rb
|
588
|
-
- spec/lib/kb/cve_2013_2513_spec.rb
|
589
|
-
- spec/lib/kb/cve_2013_2516_spec.rb
|
590
|
-
- spec/lib/kb/cve_2013_4203_spec.rb
|
591
|
-
- spec/lib/kb/cve_2013_4413_spec.rb
|
592
|
-
- spec/lib/kb/cve_2013_4489_spec.rb
|
593
|
-
- spec/lib/kb/cve_2013_4491_spec.rb
|
594
|
-
- spec/lib/kb/cve_2013_4593_spec.rb
|
595
|
-
- spec/lib/kb/cve_2013_5647_spec.rb
|
596
|
-
- spec/lib/kb/cve_2013_5671_spec.rb
|
597
|
-
- spec/lib/kb/cve_2013_6414_spec.rb
|
598
|
-
- spec/lib/kb/cve_2013_6416_spec.rb
|
599
|
-
- spec/lib/kb/cve_2013_6459_spec.rb
|
600
|
-
- spec/lib/kb/cve_2013_7086_spec.rb
|
601
|
-
- spec/lib/kb/cve_2014_0036_spec.rb
|
602
|
-
- spec/lib/kb/cve_2014_0080_spec.rb
|
603
|
-
- spec/lib/kb/cve_2014_0081_spec.rb
|
604
|
-
- spec/lib/kb/cve_2014_0082_spec.rb
|
605
|
-
- spec/lib/kb/cve_2014_0130_spec.rb
|
606
|
-
- spec/lib/kb/cve_2014_1233_spec.rb
|
607
|
-
- spec/lib/kb/cve_2014_1234_spec.rb
|
608
|
-
- spec/lib/kb/cve_2014_2322_spec.rb
|
609
|
-
- spec/lib/kb/cve_2014_2538_spec.rb
|
610
|
-
- spec/lib/kb/cve_2014_3482_spec.rb
|
611
|
-
- spec/lib/kb/cve_2014_3483_spec.rb
|
612
|
-
- spec/lib/kb/cve_2014_7818_spec.rb
|
613
|
-
- spec/lib/kb/cve_2014_7819_spec.rb
|
614
|
-
- spec/lib/kb/cve_2014_7829_spec.rb
|
615
|
-
- spec/lib/kb/cve_2014_9490_spec.rb
|
616
|
-
- spec/lib/kb/cve_2015_1819_spec.rb
|
617
|
-
- spec/lib/kb/cve_2015_1840_spec.rb
|
618
|
-
- spec/lib/kb/cve_2015_2963_spec.rb
|
619
|
-
- spec/lib/kb/cve_2015_3224_spec.rb
|
620
|
-
- spec/lib/kb/cve_2015_3225_spec.rb
|
621
|
-
- spec/lib/kb/cve_2015_3226_spec.rb
|
622
|
-
- spec/lib/kb/cve_2015_3227_spec.rb
|
623
|
-
- spec/lib/kb/cve_2015_3448_spec.rb
|
624
|
-
- spec/lib/kb/cve_2015_4020_spec.rb
|
625
|
-
- spec/lib/kb/cve_2015_5312_spec.rb
|
626
|
-
- spec/lib/kb/cve_2015_7497_spec.rb
|
627
|
-
- spec/lib/kb/cve_2015_7498_spec.rb
|
628
|
-
- spec/lib/kb/cve_2015_7499_spec.rb
|
629
|
-
- spec/lib/kb/cve_2015_7500_spec.rb
|
630
|
-
- spec/lib/kb/cve_2015_7519_spec.rb
|
631
|
-
- spec/lib/kb/cve_2015_7541_spec.rb
|
632
|
-
- spec/lib/kb/cve_2015_7576_spec.rb
|
633
|
-
- spec/lib/kb/cve_2015_7577_spec.rb
|
634
|
-
- spec/lib/kb/cve_2015_7578_spec.rb
|
635
|
-
- spec/lib/kb/cve_2015_7579_spec.rb
|
636
|
-
- spec/lib/kb/cve_2015_7581_spec.rb
|
637
|
-
- spec/lib/kb/cve_2015_8241_spec.rb
|
638
|
-
- spec/lib/kb/cve_2015_8242_spec.rb
|
639
|
-
- spec/lib/kb/cve_2015_8317_spec.rb
|
640
|
-
- spec/lib/kb/cve_2016_0751_spec.rb
|
641
|
-
- spec/lib/kb/cve_2016_0752_spec.rb
|
642
|
-
- spec/lib/kb/cve_2016_0753_spec.rb
|
643
|
-
- spec/lib/kb/cve_2016_2097_spec.rb
|
644
|
-
- spec/lib/kb/cve_2016_2098_spec.rb
|
645
|
-
- spec/lib/kb/cve_2016_5697_spec.rb
|
646
|
-
- spec/lib/kb/cve_2016_6316_spec.rb
|
647
|
-
- spec/lib/kb/cve_2016_6317_spec.rb
|
648
|
-
- spec/lib/kb/cve_2016_6582_spec.rb
|
649
|
-
- spec/lib/kb/osvdb_105971_spec.rb
|
650
|
-
- spec/lib/kb/osvdb_108530_spec.rb
|
651
|
-
- spec/lib/kb/osvdb_108563_spec.rb
|
652
|
-
- spec/lib/kb/osvdb_108569_spec.rb
|
653
|
-
- spec/lib/kb/osvdb_108570_spec.rb
|
654
|
-
- spec/lib/kb/osvdb_115654_spec.rb
|
655
|
-
- spec/lib/kb/osvdb_116010_spec.rb
|
656
|
-
- spec/lib/kb/osvdb_117903_spec.rb
|
657
|
-
- spec/lib/kb/osvdb_118579_spec.rb
|
658
|
-
- spec/lib/kb/osvdb_118830_spec.rb
|
659
|
-
- spec/lib/kb/osvdb_118954_spec.rb
|
660
|
-
- spec/lib/kb/osvdb_119878_spec.rb
|
661
|
-
- spec/lib/kb/osvdb_119927_spec.rb
|
662
|
-
- spec/lib/kb/osvdb_120415_spec.rb
|
663
|
-
- spec/lib/kb/osvdb_120857_spec.rb
|
664
|
-
- spec/lib/kb/osvdb_121701_spec.rb
|
665
|
-
- spec/lib/kb/osvdb_132234_spec.rb
|
666
342
|
- spec/lib/kb/owasp_ror_cheatsheet_disabled.rb
|
667
343
|
- spec/lib/kb/yamilize_kb_spec.rb
|
668
344
|
- spec/spec_helper.rb
|
@@ -684,9 +360,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
684
360
|
version: 2.3.0
|
685
361
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
686
362
|
requirements:
|
687
|
-
- - "
|
363
|
+
- - ">"
|
688
364
|
- !ruby/object:Gem::Version
|
689
|
-
version:
|
365
|
+
version: 1.3.1
|
690
366
|
requirements: []
|
691
367
|
rubyforge_project:
|
692
368
|
rubygems_version: 2.7.7
|
@@ -712,109 +388,6 @@ test_files:
|
|
712
388
|
- spec/lib/kb/codesake_deprecation_check_spec.rb
|
713
389
|
- spec/lib/kb/codesake_ruby_version_check_spec.rb
|
714
390
|
- spec/lib/kb/codesake_version_check_spec.rb
|
715
|
-
- spec/lib/kb/cve_2011_2705_spec.rb
|
716
|
-
- spec/lib/kb/cve_2011_2930_spec.rb
|
717
|
-
- spec/lib/kb/cve_2011_3009_spec.rb
|
718
|
-
- spec/lib/kb/cve_2011_3187_spec.rb
|
719
|
-
- spec/lib/kb/cve_2011_4319_spec.rb
|
720
|
-
- spec/lib/kb/cve_2011_5036_spec.rb
|
721
|
-
- spec/lib/kb/cve_2012_1098_spec.rb
|
722
|
-
- spec/lib/kb/cve_2012_2139_spec.rb
|
723
|
-
- spec/lib/kb/cve_2012_2671_spec.rb
|
724
|
-
- spec/lib/kb/cve_2012_6109_spec.rb
|
725
|
-
- spec/lib/kb/cve_2012_6684_spec.rb
|
726
|
-
- spec/lib/kb/cve_2013_0162_spec.rb
|
727
|
-
- spec/lib/kb/cve_2013_0183_spec.rb
|
728
|
-
- spec/lib/kb/cve_2013_0184_spec.rb
|
729
|
-
- spec/lib/kb/cve_2013_0256_spec.rb
|
730
|
-
- spec/lib/kb/cve_2013_0262_spec.rb
|
731
|
-
- spec/lib/kb/cve_2013_0263_spec.rb
|
732
|
-
- spec/lib/kb/cve_2013_0334_spec.rb
|
733
|
-
- spec/lib/kb/cve_2013_1607_spec.rb
|
734
|
-
- spec/lib/kb/cve_2013_1655_spec.rb
|
735
|
-
- spec/lib/kb/cve_2013_1756_spec.rb
|
736
|
-
- spec/lib/kb/cve_2013_2090_spec.rb
|
737
|
-
- spec/lib/kb/cve_2013_2105_spec.rb
|
738
|
-
- spec/lib/kb/cve_2013_2119_spec.rb
|
739
|
-
- spec/lib/kb/cve_2013_2512_spec.rb
|
740
|
-
- spec/lib/kb/cve_2013_2513_spec.rb
|
741
|
-
- spec/lib/kb/cve_2013_2516_spec.rb
|
742
|
-
- spec/lib/kb/cve_2013_4203_spec.rb
|
743
|
-
- spec/lib/kb/cve_2013_4413_spec.rb
|
744
|
-
- spec/lib/kb/cve_2013_4489_spec.rb
|
745
|
-
- spec/lib/kb/cve_2013_4491_spec.rb
|
746
|
-
- spec/lib/kb/cve_2013_4593_spec.rb
|
747
|
-
- spec/lib/kb/cve_2013_5647_spec.rb
|
748
|
-
- spec/lib/kb/cve_2013_5671_spec.rb
|
749
|
-
- spec/lib/kb/cve_2013_6414_spec.rb
|
750
|
-
- spec/lib/kb/cve_2013_6416_spec.rb
|
751
|
-
- spec/lib/kb/cve_2013_6459_spec.rb
|
752
|
-
- spec/lib/kb/cve_2013_7086_spec.rb
|
753
|
-
- spec/lib/kb/cve_2014_0036_spec.rb
|
754
|
-
- spec/lib/kb/cve_2014_0080_spec.rb
|
755
|
-
- spec/lib/kb/cve_2014_0081_spec.rb
|
756
|
-
- spec/lib/kb/cve_2014_0082_spec.rb
|
757
|
-
- spec/lib/kb/cve_2014_0130_spec.rb
|
758
|
-
- spec/lib/kb/cve_2014_1233_spec.rb
|
759
|
-
- spec/lib/kb/cve_2014_1234_spec.rb
|
760
|
-
- spec/lib/kb/cve_2014_2322_spec.rb
|
761
|
-
- spec/lib/kb/cve_2014_2538_spec.rb
|
762
|
-
- spec/lib/kb/cve_2014_3482_spec.rb
|
763
|
-
- spec/lib/kb/cve_2014_3483_spec.rb
|
764
|
-
- spec/lib/kb/cve_2014_7818_spec.rb
|
765
|
-
- spec/lib/kb/cve_2014_7819_spec.rb
|
766
|
-
- spec/lib/kb/cve_2014_7829_spec.rb
|
767
|
-
- spec/lib/kb/cve_2014_9490_spec.rb
|
768
|
-
- spec/lib/kb/cve_2015_1819_spec.rb
|
769
|
-
- spec/lib/kb/cve_2015_1840_spec.rb
|
770
|
-
- spec/lib/kb/cve_2015_2963_spec.rb
|
771
|
-
- spec/lib/kb/cve_2015_3224_spec.rb
|
772
|
-
- spec/lib/kb/cve_2015_3225_spec.rb
|
773
|
-
- spec/lib/kb/cve_2015_3226_spec.rb
|
774
|
-
- spec/lib/kb/cve_2015_3227_spec.rb
|
775
|
-
- spec/lib/kb/cve_2015_3448_spec.rb
|
776
|
-
- spec/lib/kb/cve_2015_4020_spec.rb
|
777
|
-
- spec/lib/kb/cve_2015_5312_spec.rb
|
778
|
-
- spec/lib/kb/cve_2015_7497_spec.rb
|
779
|
-
- spec/lib/kb/cve_2015_7498_spec.rb
|
780
|
-
- spec/lib/kb/cve_2015_7499_spec.rb
|
781
|
-
- spec/lib/kb/cve_2015_7500_spec.rb
|
782
|
-
- spec/lib/kb/cve_2015_7519_spec.rb
|
783
|
-
- spec/lib/kb/cve_2015_7541_spec.rb
|
784
|
-
- spec/lib/kb/cve_2015_7576_spec.rb
|
785
|
-
- spec/lib/kb/cve_2015_7577_spec.rb
|
786
|
-
- spec/lib/kb/cve_2015_7578_spec.rb
|
787
|
-
- spec/lib/kb/cve_2015_7579_spec.rb
|
788
|
-
- spec/lib/kb/cve_2015_7581_spec.rb
|
789
|
-
- spec/lib/kb/cve_2015_8241_spec.rb
|
790
|
-
- spec/lib/kb/cve_2015_8242_spec.rb
|
791
|
-
- spec/lib/kb/cve_2015_8317_spec.rb
|
792
|
-
- spec/lib/kb/cve_2016_0751_spec.rb
|
793
|
-
- spec/lib/kb/cve_2016_0752_spec.rb
|
794
|
-
- spec/lib/kb/cve_2016_0753_spec.rb
|
795
|
-
- spec/lib/kb/cve_2016_2097_spec.rb
|
796
|
-
- spec/lib/kb/cve_2016_2098_spec.rb
|
797
|
-
- spec/lib/kb/cve_2016_5697_spec.rb
|
798
|
-
- spec/lib/kb/cve_2016_6316_spec.rb
|
799
|
-
- spec/lib/kb/cve_2016_6317_spec.rb
|
800
|
-
- spec/lib/kb/cve_2016_6582_spec.rb
|
801
|
-
- spec/lib/kb/osvdb_105971_spec.rb
|
802
|
-
- spec/lib/kb/osvdb_108530_spec.rb
|
803
|
-
- spec/lib/kb/osvdb_108563_spec.rb
|
804
|
-
- spec/lib/kb/osvdb_108569_spec.rb
|
805
|
-
- spec/lib/kb/osvdb_108570_spec.rb
|
806
|
-
- spec/lib/kb/osvdb_115654_spec.rb
|
807
|
-
- spec/lib/kb/osvdb_116010_spec.rb
|
808
|
-
- spec/lib/kb/osvdb_117903_spec.rb
|
809
|
-
- spec/lib/kb/osvdb_118579_spec.rb
|
810
|
-
- spec/lib/kb/osvdb_118830_spec.rb
|
811
|
-
- spec/lib/kb/osvdb_118954_spec.rb
|
812
|
-
- spec/lib/kb/osvdb_119878_spec.rb
|
813
|
-
- spec/lib/kb/osvdb_119927_spec.rb
|
814
|
-
- spec/lib/kb/osvdb_120415_spec.rb
|
815
|
-
- spec/lib/kb/osvdb_120857_spec.rb
|
816
|
-
- spec/lib/kb/osvdb_121701_spec.rb
|
817
|
-
- spec/lib/kb/osvdb_132234_spec.rb
|
818
391
|
- spec/lib/kb/owasp_ror_cheatsheet_disabled.rb
|
819
392
|
- spec/lib/kb/yamilize_kb_spec.rb
|
820
393
|
- spec/spec_helper.rb
|