dradis-nexpose 4.7.0 → 4.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0ba7b76b33a14444e0eb63a927b47e12fd86775f5af6ca2d60533c72458cc836
-  data.tar.gz: df888573425b9d42677b5edeb2347395e5f958efcbf95de196ca38c0ee9b0929
+  metadata.gz: c51cb9c78fc398a2d25cf84f5e24c1b005f6e0da7f23c042ffdea3c2b4c994fb
+  data.tar.gz: dba981353382bcfb6a31951d7726dcfd046257b9e6beeb7432b851f733c3609a
 SHA512:
-  metadata.gz: f79674ea7312eb8a42d757552d442df9abed77410754282015d7f06d538b92ab8f22fc18a63ab14a453a2baca4699855d1c4e22aaa0765a341e38718748dfb8e
-  data.tar.gz: e43f6ba1ba7f91bd234da1bd764bf3a673113cc110fe1622f06b30916f1086c5da05f6a8037a6ac7e326b09d15e982bf5948197938dde9b198814842c9c24423
+  metadata.gz: 5ed17ede86157d31fe5f1d080ede9e396c8e17669232a1e6e8b40c87a5490d8870f3652f6941bf7ce435eb1615ca6cc81ebe5d6400bde60afd0b6457a90bddd1
+  data.tar.gz: 87049dca0c73c307389d7664cd639ff84ffbbf1305cbe86691924d9e8493289a046f8237601c6e54ea806c32231ea28854343330d66c28d2f1f601657615c1ec

data/CHANGELOG.md

@@ -1,3 +1,10 @@
+v4.9.0 (June 2023)
+  - Parse inline code, not just code blocks
+  - Wrap ciphers in the `ssl-weak-message-authentication-code-algorithms` finding
+
+v4.8.0 (April 2023)
+  - No changes
+
 v4.7.0 (February 2023)
   - No changes
 

data/lib/dradis/plugins/nexpose/gem_version.rb

@@ -8,7 +8,7 @@ module Dradis
 
       module VERSION
         MAJOR = 4
-        MINOR = 7
+        MINOR = 9
         TINY = 0
         PRE = nil
 

data/lib/nexpose/vulnerability.rb

@@ -8,7 +8,7 @@ module Nexpose
   # Instead of providing separate methods for each supported property we rely
   # on Ruby's #method_missing to do most of the work.
   class Vulnerability
-    SSL_CIPHER_VULN_IDS = %w[ssl-anon-ciphers ssl-des-ciphers ssl-3des-ciphers ssl-export-ciphers ssl-null-ciphers ssl-only-weak-ciphers ssl-static-key-ciphers rc4-cve-2013-2566 ssl-cve-2016-2183-sweet32 tls-dhe-export-ciphers-cve-2015-4000].freeze
+    SSL_CIPHER_VULN_IDS = %w[ssl-anon-ciphers ssl-des-ciphers ssl-3des-ciphers ssl-export-ciphers ssl-null-ciphers ssl-only-weak-ciphers ssl-static-key-ciphers ssl-weak-message-authentication-code-algorithms rc4-cve-2013-2566 ssl-cve-2016-2183-sweet32 tls-dhe-export-ciphers-cve-2015-4000].freeze
 
     # Accepts an XML node from Nokogiri::XML.
     def initialize(xml_node)
@@ -112,8 +112,14 @@ module Nexpose
     def cleanup_html(source)
       result = source.to_s
       result.gsub!(/<ContainerBlockElement>(.*?)<\/ContainerBlockElement>/m){|m| "#{ $1 }"}
-      result.gsub!(/<Paragraph preformat=\"true\">(\s*)<Paragraph preformat=\"true\">(.*?)<\/Paragraph>(\s*)<\/Paragraph>/mi){|m| "\nbc. #{ $2 }\n\n"}
-      result.gsub!(/<Paragraph preformat=\"true\">(.*?)<\/Paragraph>/mi){|m| "\nbc. #{ $1 }\n\n"}
+      result.gsub!(/<Paragraph preformat=\"true\">(\s*)<Paragraph preformat=\"true\">(.*?)<\/Paragraph>(\s*)<\/Paragraph>/mi) do
+        text = $2
+        text[/\n/] ? "\nbc.. #{ text }\n\np. " : "@#{text}@"
+      end
+      result.gsub!(/<Paragraph preformat=\"true\">(.*?)<\/Paragraph>/mi) do
+        text = $1
+        text[/\n/] ? "\nbc.. #{ text }\n\np. " : "@#{text}@"
+      end
       result.gsub!(/<Paragraph>(.*?)<\/Paragraph>/m){|m| "#{ $1 }\n"}
       result.gsub!(/<Paragraph>|<\/Paragraph>/, '')
       result.gsub!(/<UnorderedList(.*?)>(.*?)<\/UnorderedList>/m){|m| "#{ $2 }"}

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dradis-nexpose
 version: !ruby/object:Gem::Version
-  version: 4.7.0
+  version: 4.9.0
 platform: ruby
 authors:
 - Daniel Martin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-02-20 00:00:00.000000000 Z
+date: 2023-05-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dradis-plugins