dradis-qualys 4.11.0 → 4.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +8 -0
  3. data/README.md +1 -2
  4. data/dradis-qualys.gemspec +1 -1
  5. data/lib/dradis/plugins/qualys/asset/importer.rb +3 -3
  6. data/lib/dradis/plugins/qualys/gem_version.rb +1 -1
  7. data/lib/dradis/plugins/qualys/mapping.rb +137 -0
  8. data/lib/dradis/plugins/qualys/vuln/importer.rb +3 -3
  9. data/lib/dradis/plugins/qualys/was/importer.rb +3 -3
  10. data/lib/dradis/plugins/qualys.rb +1 -0
  11. metadata +12 -23
  12. data/templates/asset-evidence.fields +0 -9
  13. data/templates/asset-evidence.template +0 -11
  14. data/templates/asset-issue.fields +0 -14
  15. data/templates/asset-issue.template +0 -22
  16. data/templates/element.fields +0 -17
  17. data/templates/element.template +0 -39
  18. data/templates/evidence.fields +0 -6
  19. data/templates/evidence.template +0 -11
  20. data/templates/was-evidence.fields +0 -11
  21. data/templates/was-evidence.template +0 -16
  22. data/templates/was-issue.fields +0 -16
  23. data/templates/was-issue.template +0 -28
  24. /data/templates/{asset-evidence.sample → asset_evidence.sample} +0 -0
  25. /data/templates/{asset-issue.sample → asset_issue.sample} +0 -0
  26. /data/templates/{element.sample → vuln_element.sample} +0 -0
  27. /data/templates/{evidence.sample → vuln_evidence.sample} +0 -0
  28. /data/templates/{was-evidence.sample → was_evidence.sample} +0 -0
  29. /data/templates/{was-issue.sample → was_issue.sample} +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 07eda0c6a5954e3c931b298b39398d410a58f3799b9ef93da484d92152507cac
4
- data.tar.gz: bf52cbbff50c82a8c8c0841a80236923c0fbdf0f02114c0a815c1e176802c17f
3
+ metadata.gz: 4f3373b9590de106125901799d0b3efd5fa6f38609d3cb5c7c29b80601e506f3
4
+ data.tar.gz: aa14cfc1ffa7cfd4de8250cfb5c5a563ccf081dd976c62f8932bf95883f2bcd0
5
5
  SHA512:
6
- metadata.gz: 4992bfc707a72857b9d94443bf5661139fe61f5abc168dff49ccdee04ff98e40abebfef3bdd2daebe5ff8006139639807fa27bee722ac869bc0a5ef5f213799d
7
- data.tar.gz: 473ca19f10c043537b693d3c9b44afccb141ee6e66acfdd68f885ac66fd61022cc1abbeab4f8b4dc24731a3825f0f3266e3b58b2ac734604b454d410bf075737
6
+ metadata.gz: 2aac0d99d560f5a2e2b4a772efcde344044d785b7e40c60133d49d528f9b5938eb67402191fe3267937f92303ae56f7e326ce1c9c46d3e4aa5d83de4b24b58bd
7
+ data.tar.gz: 50a07ff081b22723cde3e841d89436a8f03b63842bcbbe6d47df5eb9f94f9dac584d74bf06d42a13e3347f711560e38e10ba888f73123d5b94d1a39c72234853
data/CHANGELOG.md CHANGED
@@ -1,3 +1,11 @@
1
+ v4.13.0 (July 2024)
2
+ - No changes
3
+
4
+ v4.12.0 (May 2024)
5
+ - Update Dradis links in README
6
+ - Migrate integration to use Mappings Manager
7
+ - Update template names to include uploader
8
+
1
9
  v4.11.0 (January 2023)
2
10
  - Add support for the output for Qualys WAS API 3.13 and later
3
11
 
data/README.md CHANGED
@@ -4,8 +4,7 @@
4
4
 
5
5
  Upload Qualys files into Dradis.
6
6
 
7
- The add-on requires [Dradis CE](https://dradisframework.org/) > 3.0, or [Dradis Pro](https://dradisframework.com/pro/).
8
-
7
+ The add-on requires [Dradis CE](https://dradis.com/ce/) > 3.0, or [Dradis Pro](https://dradis.com/).
9
8
 
10
9
 
11
10
  ## More information
data/dradis-qualys.gemspec CHANGED
@@ -26,7 +26,7 @@ Gem::Specification.new do |spec|
26
26
  spec.add_dependency 'dradis-plugins', '~> 4.0'
27
27
  spec.add_dependency 'nokogiri', '~> 1.3'
28
28
 
29
- spec.add_development_dependency 'bundler', '~> 1.6'
29
+ spec.add_development_dependency 'bundler', '~> 2.0'
30
30
  spec.add_development_dependency 'rake', '~> 10.0'
31
31
  spec.add_development_dependency 'rspec-rails'
32
32
  spec.add_development_dependency 'combustion', '~> 0.5.2'
data/lib/dradis/plugins/qualys/asset/importer.rb CHANGED
@@ -13,7 +13,7 @@ module Dradis::Plugins::Qualys
13
13
 
14
14
  class Importer < Dradis::Plugins::Upload::Importer
15
15
  def self.templates
16
- { evidence: 'asset-evidence', issue: 'asset-issue' }
16
+ { evidence: 'asset_evidence', issue: 'asset_issue' }
17
17
  end
18
18
 
19
19
  def initialize(args={})
@@ -86,7 +86,7 @@ module Dradis::Plugins::Qualys
86
86
  def process_issue(xml_vuln)
87
87
  qid = xml_vuln.at_xpath('QID').text
88
88
  logger.info { "\t => Creating new issue (plugin_id: #{ qid })" }
89
- issue_text = template_service.process_template(template: 'asset-issue', data: xml_vuln)
89
+ issue_text = mapping_service.apply_mapping(source: 'asset_issue', data: xml_vuln)
90
90
  issue = content_service.create_issue(text: issue_text, id: qid)
91
91
 
92
92
  issue_lookup[qid.to_i] = issue
@@ -107,7 +107,7 @@ module Dradis::Plugins::Qualys
107
107
  return
108
108
  end
109
109
 
110
- evidence_content = template_service.process_template(template: 'asset-evidence', data: xml_evidence)
110
+ evidence_content = mapping_service.apply_mapping(source: 'asset_evidence', data: xml_evidence)
111
111
  content_service.create_evidence(issue: issue, node: node, content: evidence_content)
112
112
  end
113
113
  end
data/lib/dradis/plugins/qualys/gem_version.rb CHANGED
@@ -8,7 +8,7 @@ module Dradis
8
8
 
9
9
  module VERSION
10
10
  MAJOR = 4
11
- MINOR = 11
11
+ MINOR = 13
12
12
  TINY = 0
13
13
  PRE = nil
14
14
 
data/lib/dradis/plugins/qualys/mapping.rb ADDED
@@ -0,0 +1,137 @@
1
+ module Dradis::Plugins::Qualys
2
+ module Mapping
3
+ DEFAULT_MAPPING = {
4
+ asset_evidence: {
5
+ 'Result' => '{{ qualys[asset-evidence.result] }}',
6
+ 'Status' => '{{ qualys[asset-evidence.vuln_status] }}',
7
+ 'SSL' => '{{ qualys[asset-evidence.ssl] }}',
8
+ 'CVSSv3.Final' => '{{ qualys[asset-evidence.cvss_final] }}'
9
+ },
10
+ asset_issue: {
11
+ 'Title' => '{{ qualys[asset-issue.title] }}',
12
+ 'Severity' => '{{ qualys[asset-issue.severity] }}',
13
+ 'Categories' => 'Category: {{ qualys[asset-issue.category] }}',
14
+ 'CVSSv3.BaseScore' => '{{ qualys[asset-issue.cvss3_base] }}',
15
+ 'CVSSv3.TemporalScore' => '{{ qualys[asset-issue.cvss3_temporal] }}',
16
+ 'Threat' => '{{ qualys[asset-issue.threat] }}',
17
+ 'Impact' => '{{ qualys[asset-issue.impact] }}',
18
+ 'Solution' => '{{ qualys[asset-issue.solution] }}'
19
+ },
20
+ vuln_element: {
21
+ 'Title' => '{{ qualys[element.title] }}',
22
+ 'CVSSv3.BaseScore' => '{{ qualys[element.cvss_base] }}',
23
+ 'CVSSv3.Vector' => 'Temporal score: {{ qualys[element.cvss_temporal] }}',
24
+ 'Type' => 'External',
25
+ 'Description' => "{{ qualys[element.diagnosis] }}\n{{ qualys[element.consequence] }}",
26
+ 'Solution' => '{{ qualys[element.solution] }}',
27
+ 'References' => '{{ qualys[element.vendor_reference_list] }}',
28
+ },
29
+ vuln_evidence: {
30
+ 'Location' => "{{ qualys[evidence.cat_protocol] }}/{{ qualys[evidence.cat_port] }}",
31
+ 'Output' => '{{ qualys[evidence.result] }}'
32
+ },
33
+ was_evidence: {
34
+ 'Location' => '{{ qualys[was-evidence.url] }}',
35
+ 'Output' => "*Request*\n\nMethod: {{ qualys[was-evidence.request_method] }}\nURL: {{ qualys[was-evidence.request_url] }}\n\nbc.. {{ qualys[was-evidence.request_headers] }}\n\np. *Response*\n\nEvidence: {{ qualys[was-evidence.response_evidence] }}\n\nbc.. {{ qualys[was-evidence.response_contents] }}"
36
+ },
37
+ was_issue: {
38
+ 'Title' => '{{ qualys[was-issue.title] }}',
39
+ 'Severity' => '{{ qualys[was-issue.severity] }}',
40
+ 'Categories' => "Category: {{ qualys[was-issue.category] }}\nGroup: {{ qualys[was-issue.group] }}\nOWASP: {{ qualys[was-issue.owasp] }}\nCWE: {{ qualys[was-issue.cwe] }}",
41
+ 'CVSSv3.Vector' => '{{ qualys[was-issue.cvss3_vector] }}',
42
+ 'CVSSv3.BaseScore' => '{{ qualys[was-issue.cvss3_base] }}',
43
+ 'CVSSv3.TemporalScore' => '{{ qualys[was-issue.cvss3_temporal] }}',
44
+ 'Description' => "{{ qualys[was-issue.description] }}\n\n{{ qualys[was-issue.impact] }}",
45
+ 'Solution' => '{{ qualys[was-issue.solution] }}'
46
+ }
47
+ }.freeze
48
+
49
+ SOURCE_FIELDS = {
50
+ asset_evidence: [
51
+ 'asset-evidence.cvss3_final',
52
+ 'asset-evidence.cvss_final',
53
+ 'asset-evidence.first_found',
54
+ 'asset-evidence.last_found',
55
+ 'asset-evidence.result',
56
+ 'asset-evidence.ssl',
57
+ 'asset-evidence.times_found',
58
+ 'asset-evidence.type',
59
+ 'asset-evidence.vuln_status'
60
+ ],
61
+ asset_issue: [
62
+ 'asset-issue.category',
63
+ 'asset-issue.cvss3_base',
64
+ 'asset-issue.cvss3_temporal',
65
+ 'asset-issue.cvss_base',
66
+ 'asset-issue.cvss_temporal',
67
+ 'asset-issue.impact',
68
+ 'asset-issue.last_update',
69
+ 'asset-issue.pci_flag',
70
+ 'asset-issue.qid',
71
+ 'asset-issue.result',
72
+ 'asset-issue.severity',
73
+ 'asset-issue.solution',
74
+ 'asset-issue.threat',
75
+ 'asset-issue.title'
76
+ ],
77
+ vuln_element: [
78
+ 'element.number',
79
+ 'element.severity',
80
+ 'element.cveid',
81
+ 'element.title',
82
+ 'element.last_update',
83
+ 'element.cvss_base',
84
+ 'element.cvss_temporal',
85
+ 'element.pci_flag',
86
+ 'element.vendor_reference_list',
87
+ 'element.cve_id_list',
88
+ 'element.bugtraq_id_list',
89
+ 'element.diagnosis',
90
+ 'element.consequence',
91
+ 'element.solution',
92
+ 'element.compliance',
93
+ 'element.result',
94
+ 'element.qualys_collection'
95
+ ],
96
+ vuln_evidence: [
97
+ 'evidence.cat_fqdn',
98
+ 'evidence.cat_misc',
99
+ 'evidence.cat_port',
100
+ 'evidence.cat_protocol',
101
+ 'evidence.cat_value',
102
+ 'evidence.result'
103
+ ],
104
+ was_evidence: [
105
+ 'was-evidence.access_paths',
106
+ 'was-evidence.ajax',
107
+ 'was-evidence.authentication',
108
+ 'was-evidence.ignored',
109
+ 'was-evidence.potential',
110
+ 'was-evidence.request_headers',
111
+ 'was-evidence.request_method',
112
+ 'was-evidence.request_url',
113
+ 'was-evidence.response_contents',
114
+ 'was-evidence.response_evidence',
115
+ 'was-evidence.url'
116
+ ],
117
+ was_issue: [
118
+ 'was-issue.category',
119
+ 'was-issue.cvss_base',
120
+ 'was-issue.cvss_temporal',
121
+ 'was-issue.cvss3_base',
122
+ 'was-issue.cvss3_temporal',
123
+ 'was-issue.cvss3_vector',
124
+ 'was-issue.cwe',
125
+ 'was-issue.description',
126
+ 'was-issue.group',
127
+ 'was-issue.impact',
128
+ 'was-issue.owasp',
129
+ 'was-issue.qid',
130
+ 'was-issue.severity',
131
+ 'was-issue.solution',
132
+ 'was-issue.title',
133
+ 'was-issue.wasc'
134
+ ]
135
+ }.freeze
136
+ end
137
+ end
data/lib/dradis/plugins/qualys/vuln/importer.rb CHANGED
@@ -14,7 +14,7 @@ module Dradis::Plugins::Qualys
14
14
  attr_accessor :host_node
15
15
 
16
16
  def self.templates
17
- { evidence: 'evidence', issue: 'element' }
17
+ { evidence: 'vuln_evidence', issue: 'vuln_element' }
18
18
  end
19
19
 
20
20
  def initialize(args={})
@@ -95,11 +95,11 @@ module Dradis::Plugins::Qualys
95
95
  # Issue and Evidence template out of it.
96
96
  def process_vuln(vuln_number, xml_cat)
97
97
  logger.info{ "\t\t => Creating new issue (plugin_id: #{ vuln_number })" }
98
- issue_text = template_service.process_template(template: 'element', data: xml_cat)
98
+ issue_text = mapping_service.apply_mapping(source: 'vuln_element', data: xml_cat)
99
99
  issue = content_service.create_issue(text: issue_text, id: vuln_number)
100
100
 
101
101
  logger.info{ "\t\t => Creating new evidence" }
102
- evidence_content = template_service.process_template(template: 'evidence', data: xml_cat)
102
+ evidence_content = mapping_service.apply_mapping(source: 'vuln_evidence', data: xml_cat)
103
103
  content_service.create_evidence(issue: issue, node: self.host_node, content: evidence_content)
104
104
  end
105
105
  end
data/lib/dradis/plugins/qualys/was/importer.rb CHANGED
@@ -13,7 +13,7 @@ module Dradis::Plugins::Qualys
13
13
 
14
14
  class Importer < Dradis::Plugins::Upload::Importer
15
15
  def self.templates
16
- { evidence: 'was-evidence', issue: 'was-issue' }
16
+ { evidence: 'was_evidence', issue: 'was_issue' }
17
17
  end
18
18
 
19
19
  def initialize(args = {})
@@ -82,14 +82,14 @@ module Dradis::Plugins::Qualys
82
82
  return
83
83
  end
84
84
 
85
- evidence_content = template_service.process_template(template: 'was-evidence', data: xml_vulnerability)
85
+ evidence_content = mapping_service.apply_mapping(source: 'was_evidence', data: xml_vulnerability)
86
86
  content_service.create_evidence(issue: issue, node: webapp_node, content: evidence_content)
87
87
  end
88
88
 
89
89
  def process_issue(xml_qid)
90
90
  qid = xml_qid.at_xpath('QID').text
91
91
  logger.info { "\t => Creating new issue (plugin_id: #{ qid })" }
92
- issue_text = template_service.process_template(template: 'was-issue', data: xml_qid)
92
+ issue_text = mapping_service.apply_mapping(source: 'was_issue', data: xml_qid)
93
93
  issue = content_service.create_issue(text: issue_text, id: qid)
94
94
 
95
95
  issue_lookup[qid.to_i] = issue
data/lib/dradis/plugins/qualys.rb CHANGED
@@ -7,6 +7,7 @@ end
7
7
 
8
8
  require 'dradis/plugins/qualys/engine'
9
9
  require 'dradis/plugins/qualys/field_processor'
10
+ require 'dradis/plugins/qualys/mapping'
10
11
  require 'dradis/plugins/qualys/version'
11
12
 
12
13
  require 'dradis/plugins/qualys/asset/importer'
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dradis-qualys
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.11.0
4
+ version: 4.13.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Daniel Martin
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-01-17 00:00:00.000000000 Z
11
+ date: 2024-08-07 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dradis-plugins
@@ -44,14 +44,14 @@ dependencies:
44
44
  requirements:
45
45
  - - "~>"
46
46
  - !ruby/object:Gem::Version
47
- version: '1.6'
47
+ version: '2.0'
48
48
  type: :development
49
49
  prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
52
  - - "~>"
53
53
  - !ruby/object:Gem::Version
54
- version: '1.6'
54
+ version: '2.0'
55
55
  - !ruby/object:Gem::Dependency
56
56
  name: rake
57
57
  requirement: !ruby/object:Gem::Requirement
@@ -119,6 +119,7 @@ files:
119
119
  - lib/dradis/plugins/qualys/engine.rb
120
120
  - lib/dradis/plugins/qualys/field_processor.rb
121
121
  - lib/dradis/plugins/qualys/gem_version.rb
122
+ - lib/dradis/plugins/qualys/mapping.rb
122
123
  - lib/dradis/plugins/qualys/version.rb
123
124
  - lib/dradis/plugins/qualys/vuln/importer.rb
124
125
  - lib/dradis/plugins/qualys/was/importer.rb
@@ -142,24 +143,12 @@ files:
142
143
  - spec/qualys/was/importer_spec.rb
143
144
  - spec/spec_helper.rb
144
145
  - spec/support/spec_macros.rb
145
- - templates/asset-evidence.fields
146
- - templates/asset-evidence.sample
147
- - templates/asset-evidence.template
148
- - templates/asset-issue.fields
149
- - templates/asset-issue.sample
150
- - templates/asset-issue.template
151
- - templates/element.fields
152
- - templates/element.sample
153
- - templates/element.template
154
- - templates/evidence.fields
155
- - templates/evidence.sample
156
- - templates/evidence.template
157
- - templates/was-evidence.fields
158
- - templates/was-evidence.sample
159
- - templates/was-evidence.template
160
- - templates/was-issue.fields
161
- - templates/was-issue.sample
162
- - templates/was-issue.template
146
+ - templates/asset_evidence.sample
147
+ - templates/asset_issue.sample
148
+ - templates/vuln_element.sample
149
+ - templates/vuln_evidence.sample
150
+ - templates/was_evidence.sample
151
+ - templates/was_issue.sample
163
152
  homepage: https://dradis.com/integrations/qualys.html
164
153
  licenses:
165
154
  - GPL-2
@@ -179,7 +168,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
179
168
  - !ruby/object:Gem::Version
180
169
  version: '0'
181
170
  requirements: []
182
- rubygems_version: 3.3.7
171
+ rubygems_version: 3.5.6
183
172
  signing_key:
184
173
  specification_version: 4
185
174
  summary: Qualys add-on for the Dradis Framework.
data/templates/asset-evidence.fields DELETED
@@ -1,9 +0,0 @@
1
- asset-evidence.cvss3_final
2
- asset-evidence.cvss_final
3
- asset-evidence.first_found
4
- asset-evidence.last_found
5
- asset-evidence.result
6
- asset-evidence.ssl
7
- asset-evidence.times_found
8
- asset-evidence.type
9
- asset-evidence.vuln_status
data/templates/asset-evidence.template DELETED
@@ -1,11 +0,0 @@
1
- #[Result]#
2
- %asset-evidence.result%
3
-
4
- #[Status]#
5
- %asset-evidence.vuln_status%
6
-
7
- #[SSL]#
8
- %asset-evidence.ssl%
9
-
10
- #[CVSSv3.Final]#
11
- %asset-evidence.cvss_final%
data/templates/asset-issue.fields DELETED
@@ -1,14 +0,0 @@
1
- asset-issue.category
2
- asset-issue.cvss3_base
3
- asset-issue.cvss3_temporal
4
- asset-issue.cvss_base
5
- asset-issue.cvss_temporal
6
- asset-issue.impact
7
- asset-issue.last_update
8
- asset-issue.pci_flag
9
- asset-issue.qid
10
- asset-issue.result
11
- asset-issue.severity
12
- asset-issue.solution
13
- asset-issue.threat
14
- asset-issue.title
data/templates/asset-issue.template DELETED
@@ -1,22 +0,0 @@
1
- #[Title]#
2
- %asset-issue.title%
3
-
4
- #[Severity]#
5
- %asset-issue.severity%
6
-
7
- #[Categories]#
8
- Category: %asset-issue.category%
9
-
10
- #[CVSSv3.BaseScore]#
11
- %asset-issue.cvss3_base%
12
-
13
- #[CVSSv3.TemporalScore]#
14
- %asset-issue.cvss3_temporal%
15
-
16
- #[Threat]#
17
- %asset-issue.threat%
18
-
19
- %asset-issue.impact%
20
-
21
- #[Solution]#
22
- %asset-issue.solution%
data/templates/element.fields DELETED
@@ -1,17 +0,0 @@
1
- element.number
2
- element.severity
3
- element.cveid
4
- element.title
5
- element.last_update
6
- element.cvss_base
7
- element.cvss_temporal
8
- element.pci_flag
9
- element.vendor_reference_list
10
- element.cve_id_list
11
- element.bugtraq_id_list
12
- element.diagnosis
13
- element.consequence
14
- element.solution
15
- element.compliance
16
- element.result
17
- element.qualys_collection
data/templates/element.template DELETED
@@ -1,39 +0,0 @@
1
- #[Title]#
2
- %element.title%
3
-
4
-
5
- #[Severity]#
6
- %element.severity%
7
-
8
-
9
- #[CVE]#
10
- %element.cveid%
11
-
12
-
13
- #[CVSS]#
14
- Base: %element.cvss_base%
15
- Temporal: %element.cvss_temporal%
16
-
17
-
18
- #[Diagnosis]#
19
- %element.diagnosis%
20
-
21
-
22
- #[Consequence]#
23
- %element.consequence%
24
-
25
-
26
- #[Solution]#
27
- %element.solution%
28
-
29
-
30
- #[Result]#
31
- %element.result%
32
-
33
-
34
- #[CVEList]#
35
- %element.cve_id_list%
36
-
37
-
38
- #[QualysCollection]#
39
- %element.qualys_collection%
data/templates/evidence.fields DELETED
@@ -1,6 +0,0 @@
1
- evidence.cat_fqdn
2
- evidence.cat_misc
3
- evidence.cat_port
4
- evidence.cat_protocol
5
- evidence.cat_value
6
- evidence.result
data/templates/evidence.template DELETED
@@ -1,11 +0,0 @@
1
- #[Category]#
2
- %evidence.cat_value%
3
-
4
- #[Protocol]#
5
- %evidence.cat_protocol%
6
-
7
- #[Port]#
8
- %evidence.cat_port%
9
-
10
- #[Output]#
11
- %evidence.result%
data/templates/was-evidence.fields DELETED
@@ -1,11 +0,0 @@
1
- was-evidence.access_paths
2
- was-evidence.ajax
3
- was-evidence.authentication
4
- was-evidence.ignored
5
- was-evidence.potential
6
- was-evidence.request_headers
7
- was-evidence.request_method
8
- was-evidence.request_url
9
- was-evidence.response_contents
10
- was-evidence.response_evidence
11
- was-evidence.url
data/templates/was-evidence.template DELETED
@@ -1,16 +0,0 @@
1
- #[Location]#
2
- %was-evidence.url%
3
-
4
- #[Output]#
5
- *Request*
6
-
7
- Method: %was-evidence.request_method%
8
- URL: %was-evidence.request_url%
9
-
10
- bc.. %was-evidence.request_headers%
11
-
12
- p. *Response*
13
-
14
- Evidence: %was-evidence.response_evidence%
15
-
16
- bc.. %was-evidence.response_contents%
data/templates/was-issue.fields DELETED
@@ -1,16 +0,0 @@
1
- was-issue.category
2
- was-issue.cvss_base
3
- was-issue.cvss_temporal
4
- was-issue.cvss3_base
5
- was-issue.cvss3_temporal
6
- was-issue.cvss3_vector
7
- was-issue.cwe
8
- was-issue.description
9
- was-issue.group
10
- was-issue.impact
11
- was-issue.owasp
12
- was-issue.qid
13
- was-issue.severity
14
- was-issue.solution
15
- was-issue.title
16
- was-issue.wasc
data/templates/was-issue.template DELETED
@@ -1,28 +0,0 @@
1
- #[Title]#
2
- %was-issue.title%
3
-
4
- #[Severity]#
5
- %was-issue.severity%
6
-
7
- #[Categories]#
8
- Category: %was-issue.category%
9
- Group: %was-issue.group%
10
- OWASP: %was-issue.owasp%
11
- CWE: %was-issue.cwe%
12
-
13
- #[CVSSv3.Vector]#
14
- %was-issue.cvss3_vector%
15
-
16
- #[CVSSv3.BaseScore]#
17
- %was-issue.cvss3_base%
18
-
19
- #[CVSSv3.TemporalScore]#
20
- %was-issue.cvss3_temporal%
21
-
22
- #[Description]#
23
- %was-issue.description%
24
-
25
- %was-issue.impact%
26
-
27
- #[Solution]#
28
- %was-issue.solution%
/data/templates/{element.sample → vuln_element.sample} RENAMED
File without changes
/data/templates/{was-issue.sample → was_issue.sample} RENAMED
File without changes