dradis-burp 3.20.0 → 4.1.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +43 -49
- data/CHANGELOG.template +12 -0
- data/dradis-burp.gemspec +1 -1
- data/lib/dradis/plugins/burp/engine.rb +16 -20
- data/lib/dradis/plugins/burp/gem_version.rb +2 -2
- metadata +9 -8
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: c1cf693d3221cc646616c81d784226bcda63791ca6c5b4d2131c497fff0de95e
|
4
|
+
data.tar.gz: 137e445f66f9fd20ab93d9dfc29fe7246251023ed7cd85e28b8166d719dc36c3
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ac7be94e456ae15f0956dc7ba9d729d16fa624a567a1071a5fa2e8503458011c1508e5678b9faa604588c99e3d4db7ffec8766e2df33b0a2fbb8466c387b05d6
|
7
|
+
data.tar.gz: 070dd98752f4ddbe68aaadee26a774076c4fc09dd7ceec6ea67a0c93251f2554af0a16a6fe5bdfc1cbf8ca6f562f606c8772fc587c839ee617b0196e66cb7cc7
|
data/CHANGELOG.md
CHANGED
@@ -1,67 +1,61 @@
|
|
1
|
-
|
1
|
+
v4.1.0 (November 2021)
|
2
|
+
- No changes
|
2
3
|
|
3
|
-
|
4
|
-
|
5
|
-
* Make `issue.location` available at the HTML Evidence level.
|
4
|
+
v4.0.0 (July 2021)
|
5
|
+
- No changes
|
6
6
|
|
7
|
-
|
7
|
+
v3.22.0 (April 2021)
|
8
|
+
- No changes
|
8
9
|
|
9
|
-
|
10
|
+
v3.21.0 (February 2021)
|
11
|
+
- No changes
|
10
12
|
|
11
|
-
|
13
|
+
v3.20.0 (December 2020)
|
14
|
+
- Convert highlighted HTML code to Dradis highlight format
|
15
|
+
- Make `issue.detail` available at the Evidence level for HTML uploads
|
16
|
+
- Make `issue.location` available at the HTML Evidence level
|
12
17
|
|
13
|
-
|
18
|
+
v3.19.0 (September 2020)
|
19
|
+
- No changes
|
14
20
|
|
15
|
-
|
21
|
+
v3.18.0 (July 2020)
|
22
|
+
- No changes
|
16
23
|
|
17
|
-
|
24
|
+
v3.17.0 (May 2020)
|
25
|
+
- No changes
|
18
26
|
|
19
|
-
|
27
|
+
v3.16.0 (February 2020)
|
28
|
+
- Update severity fixture for specs
|
20
29
|
|
21
|
-
|
30
|
+
v3.15.0 (November 2019)
|
31
|
+
- Make `issue.severity` available at the Issue level
|
22
32
|
|
23
|
-
|
33
|
+
v3.14.0 (August 2019)
|
34
|
+
- No changes
|
24
35
|
|
25
|
-
|
36
|
+
v3.13.0 (June 2019)
|
37
|
+
- Include parsing Burp Html output
|
26
38
|
|
27
|
-
|
39
|
+
v3.12.0 (March 2019)
|
40
|
+
- Make `issue.detail` available at the Evidence level
|
28
41
|
|
29
|
-
|
42
|
+
v3.11.0 (November 2018)
|
43
|
+
- No changes
|
30
44
|
|
31
|
-
|
45
|
+
v3.10.0 (August 2018)
|
46
|
+
- Adds `references` and `vulnerability_classifications` as available fields
|
47
|
+
- Adds `hostname` as a Node property
|
48
|
+
- Findings with <type>134217728</type> are not bundled together into one Issue
|
49
|
+
- Fixes formatting errors including `<p>`, `<a href="">`, and `<table>` tags
|
32
50
|
|
33
|
-
|
51
|
+
v3.9.0 (January 2018)
|
52
|
+
- Encode content with UTF-8 to avoid incompatible db errors (v3.8.1)
|
34
53
|
|
35
|
-
|
54
|
+
v3.8.0 (September 2017)
|
55
|
+
- No changes
|
36
56
|
|
37
|
-
|
57
|
+
v3.7.0 (July 2017)
|
58
|
+
- Detect non-base64 encoded files and binary req/res data
|
38
59
|
|
39
|
-
|
40
|
-
|
41
|
-
* No changes.
|
42
|
-
|
43
|
-
## Dradis Framework 3.10 (August, 2018) ##
|
44
|
-
|
45
|
-
* Adds `references` and `vulnerability_classifications` as available fields.
|
46
|
-
|
47
|
-
* Adds `hostname` as a Node property.
|
48
|
-
|
49
|
-
* Fixes formatting errors including `<p>`, `<a href="">`, and `<table>` tags.
|
50
|
-
|
51
|
-
* Findings with <type>134217728</type> are not bundled together into one Issue.
|
52
|
-
|
53
|
-
## Dradis Framework 3.9 (January, 2018) ##
|
54
|
-
|
55
|
-
* Encode content with UTF-8 to avoid incompatible db errors (v3.8.1).
|
56
|
-
|
57
|
-
## Dradis Framework 3.8 (September, 2017) ##
|
58
|
-
|
59
|
-
* No changes.
|
60
|
-
|
61
|
-
## Dradis Framework 3.7 (July, 2017) ##
|
62
|
-
|
63
|
-
* Detect non-base64 encoded files and binary req/res data.
|
64
|
-
|
65
|
-
## Dradis Framework 3.6 (March, 2017) ##
|
66
|
-
|
67
|
-
* Detect non-base64 encoded files and binary req/res data.
|
60
|
+
v3.6.0 (March 2017)
|
61
|
+
- Detect non-base64 encoded files and binary req/res data
|
data/CHANGELOG.template
ADDED
@@ -0,0 +1,12 @@
|
|
1
|
+
[v#.#.#] ([month] [YYYY])
|
2
|
+
- [future tense verb] [feature]
|
3
|
+
- Upgraded gems:
|
4
|
+
- [gem]
|
5
|
+
- Bugs fixes:
|
6
|
+
- [future tense verb] [bug fix]
|
7
|
+
- Bug tracker items:
|
8
|
+
- [item]
|
9
|
+
- Security Fixes:
|
10
|
+
- High: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
|
11
|
+
- Medium: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
|
12
|
+
- Low: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
|
data/dradis-burp.gemspec
CHANGED
@@ -24,7 +24,7 @@ Gem::Specification.new do |spec|
|
|
24
24
|
# versions of Rails (a sure recipe for disaster, I'm sure), which is needed
|
25
25
|
# until we bump Dradis Pro to 4.1.
|
26
26
|
# s.add_dependency 'rails', '~> 4.1.1'
|
27
|
-
spec.add_dependency 'dradis-plugins', '~>
|
27
|
+
spec.add_dependency 'dradis-plugins', '~> 4.0'
|
28
28
|
spec.add_dependency 'nokogiri', '~> 1.3'
|
29
29
|
|
30
30
|
spec.add_development_dependency 'bundler'
|
@@ -1,25 +1,21 @@
|
|
1
|
-
module Dradis
|
2
|
-
|
3
|
-
|
4
|
-
class Engine < ::Rails::Engine
|
5
|
-
isolate_namespace Dradis::Plugins::Burp
|
1
|
+
module Dradis::Plugins::Burp
|
2
|
+
class Engine < ::Rails::Engine
|
3
|
+
isolate_namespace Dradis::Plugins::Burp
|
6
4
|
|
7
|
-
|
8
|
-
|
9
|
-
|
5
|
+
include ::Dradis::Plugins::Base
|
6
|
+
description 'Processes Burp Scanner output'
|
7
|
+
provides :upload
|
10
8
|
|
11
|
-
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
end
|
22
|
-
end
|
9
|
+
# Because this plugin provides two export modules, we have to overwrite
|
10
|
+
# the default .uploaders() method.
|
11
|
+
#
|
12
|
+
# See:
|
13
|
+
# Dradis::Plugins::Upload::Base in dradis-plugins
|
14
|
+
def self.uploaders
|
15
|
+
[
|
16
|
+
Dradis::Plugins::Burp::Html,
|
17
|
+
Dradis::Plugins::Burp::Xml
|
18
|
+
]
|
23
19
|
end
|
24
20
|
end
|
25
21
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dradis-burp
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version:
|
4
|
+
version: 4.1.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Daniel Martin
|
8
|
-
autorequire:
|
8
|
+
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-11-18 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dradis-plugins
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - "~>"
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: '
|
19
|
+
version: '4.0'
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - "~>"
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: '
|
26
|
+
version: '4.0'
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: nokogiri
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -107,6 +107,7 @@ files:
|
|
107
107
|
- ".gitignore"
|
108
108
|
- ".rspec"
|
109
109
|
- CHANGELOG.md
|
110
|
+
- CHANGELOG.template
|
110
111
|
- CONTRIBUTING.md
|
111
112
|
- Gemfile
|
112
113
|
- LICENSE
|
@@ -145,7 +146,7 @@ homepage: http://dradisframework.org
|
|
145
146
|
licenses:
|
146
147
|
- GPL-2
|
147
148
|
metadata: {}
|
148
|
-
post_install_message:
|
149
|
+
post_install_message:
|
149
150
|
rdoc_options: []
|
150
151
|
require_paths:
|
151
152
|
- lib
|
@@ -160,8 +161,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
160
161
|
- !ruby/object:Gem::Version
|
161
162
|
version: '0'
|
162
163
|
requirements: []
|
163
|
-
rubygems_version: 3.
|
164
|
-
signing_key:
|
164
|
+
rubygems_version: 3.1.6
|
165
|
+
signing_key:
|
165
166
|
specification_version: 4
|
166
167
|
summary: Burp Scanner upload plugin for the Dradis Framework.
|
167
168
|
test_files:
|