pwn 0.4.406 → 0.4.407
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +2 -2
- data/lib/pwn/sast/amqp_connect_as_guest.rb +1 -1
- data/lib/pwn/sast/apache_file_system_util_api.rb +1 -1
- data/lib/pwn/sast/aws.rb +1 -1
- data/lib/pwn/sast/banned_function_calls_c.rb +1 -1
- data/lib/pwn/sast/base64.rb +1 -1
- data/lib/pwn/sast/beef_hook.rb +1 -1
- data/lib/pwn/sast/cmd_execution_java.rb +1 -1
- data/lib/pwn/sast/cmd_execution_python.rb +1 -1
- data/lib/pwn/sast/cmd_execution_ruby.rb +1 -1
- data/lib/pwn/sast/cmd_execution_scala.rb +1 -1
- data/lib/pwn/sast/csrf.rb +1 -1
- data/lib/pwn/sast/deserial_java.rb +1 -1
- data/lib/pwn/sast/emoticon.rb +1 -1
- data/lib/pwn/sast/eval.rb +1 -1
- data/lib/pwn/sast/factory.rb +1 -1
- data/lib/pwn/sast/file_permission.rb +1 -1
- data/lib/pwn/sast/http_authorization_header.rb +1 -1
- data/lib/pwn/sast/inner_html.rb +1 -1
- data/lib/pwn/sast/keystore.rb +1 -1
- data/lib/pwn/sast/location_hash.rb +1 -1
- data/lib/pwn/sast/log4j.rb +1 -1
- data/lib/pwn/sast/logger.rb +1 -1
- data/lib/pwn/sast/outer_html.rb +1 -1
- data/lib/pwn/sast/password.rb +1 -1
- data/lib/pwn/sast/pom_version.rb +1 -1
- data/lib/pwn/sast/port.rb +1 -1
- data/lib/pwn/sast/private_key.rb +1 -1
- data/lib/pwn/sast/redirect.rb +1 -1
- data/lib/pwn/sast/redos.rb +1 -1
- data/lib/pwn/sast/shell.rb +1 -1
- data/lib/pwn/sast/sql.rb +1 -1
- data/lib/pwn/sast/ssl.rb +1 -1
- data/lib/pwn/sast/sudo.rb +1 -1
- data/lib/pwn/sast/task_tag.rb +1 -1
- data/lib/pwn/sast/throw_errors.rb +1 -1
- data/lib/pwn/sast/token.rb +1 -1
- data/lib/pwn/sast/version.rb +1 -1
- data/lib/pwn/sast/window_location_hash.rb +1 -1
- data/lib/pwn/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 9042d04424833fdac16b887039d8f7810923d9917649f620209452b606a9131b
|
|
4
|
+
data.tar.gz: 62d4e5929aaed74dcc5d6518d1d87cce93da269ab018e69bdf7f5d007e8dfec7
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 26a0e9ce0985ecba133464d4c3b8e7bf144fd5c760714117defc77186569d84981af5158ded4e5ff21da4664635c90195d2b50c43c8d767728bcfabf72aa1527
|
|
7
|
+
data.tar.gz: 2cc048cd0f862c0a01fdfbddda62421404e31dbb0c6f7591d682148648879a88c947797a31ea7fd83438bdd9f41828e8720d12d67339c1c9547496a5a35321ca
|
data/README.md
CHANGED
|
@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.1@pwn
|
|
|
37
37
|
$ rvm list gemsets
|
|
38
38
|
$ gem install --verbose pwn
|
|
39
39
|
$ pwn
|
|
40
|
-
pwn[v0.4.
|
|
40
|
+
pwn[v0.4.407]:001 >>> PWN.help
|
|
41
41
|
```
|
|
42
42
|
|
|
43
43
|
[](https://youtu.be/G7iLUY4FzsI)
|
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.1@pwn
|
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
|
53
53
|
$ gem install --verbose pwn
|
|
54
54
|
$ pwn
|
|
55
|
-
pwn[v0.4.
|
|
55
|
+
pwn[v0.4.407]:001 >>> PWN.help
|
|
56
56
|
```
|
|
57
57
|
|
|
58
58
|
|
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'ACCOUNT MANAGEMENT',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-2'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
|
@@ -108,7 +108,7 @@ module PWN
|
|
|
108
108
|
{
|
|
109
109
|
sast_module: self,
|
|
110
110
|
section: 'INFORMATION INPUT VALIDATION',
|
|
111
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
111
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
112
112
|
}
|
|
113
113
|
end
|
|
114
114
|
|
data/lib/pwn/sast/aws.rb
CHANGED
|
@@ -111,7 +111,7 @@ module PWN
|
|
|
111
111
|
{
|
|
112
112
|
sast_module: self,
|
|
113
113
|
section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
|
|
114
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
114
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8'
|
|
115
115
|
}
|
|
116
116
|
rescue StandardError => e
|
|
117
117
|
raise e
|
|
@@ -236,7 +236,7 @@ module PWN
|
|
|
236
236
|
{
|
|
237
237
|
sast_module: self,
|
|
238
238
|
section: 'INFORMATION INPUT VALIDATION',
|
|
239
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
239
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
240
240
|
}
|
|
241
241
|
end
|
|
242
242
|
|
data/lib/pwn/sast/base64.rb
CHANGED
|
@@ -112,7 +112,7 @@ module PWN
|
|
|
112
112
|
{
|
|
113
113
|
sast_module: self,
|
|
114
114
|
section: 'PROTECTION OF INFORMATION AT REST',
|
|
115
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
115
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
|
|
116
116
|
}
|
|
117
117
|
rescue StandardError => e
|
|
118
118
|
raise e
|
data/lib/pwn/sast/beef_hook.rb
CHANGED
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'MALICIOUS CODE PROTECTION',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
110
110
|
}
|
|
111
111
|
rescue StandardError => e
|
|
112
112
|
raise e
|
|
@@ -111,7 +111,7 @@ module PWN
|
|
|
111
111
|
{
|
|
112
112
|
sast_module: self,
|
|
113
113
|
section: 'INFORMATION INPUT VALIDATION',
|
|
114
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
114
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
115
115
|
}
|
|
116
116
|
rescue StandardError => e
|
|
117
117
|
raise e
|
|
@@ -113,7 +113,7 @@ module PWN
|
|
|
113
113
|
{
|
|
114
114
|
sast_module: self,
|
|
115
115
|
section: 'INFORMATION INPUT VALIDATION',
|
|
116
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
116
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
117
117
|
}
|
|
118
118
|
rescue StandardError => e
|
|
119
119
|
raise e
|
|
@@ -121,7 +121,7 @@ module PWN
|
|
|
121
121
|
{
|
|
122
122
|
sast_module: self,
|
|
123
123
|
section: 'INFORMATION INPUT VALIDATION',
|
|
124
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
124
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
125
125
|
}
|
|
126
126
|
rescue StandardError => e
|
|
127
127
|
raise e
|
|
@@ -111,7 +111,7 @@ module PWN
|
|
|
111
111
|
{
|
|
112
112
|
sast_module: self,
|
|
113
113
|
section: 'INFORMATION INPUT VALIDATION',
|
|
114
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
114
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
115
115
|
}
|
|
116
116
|
rescue StandardError => e
|
|
117
117
|
raise e
|
data/lib/pwn/sast/csrf.rb
CHANGED
|
@@ -107,7 +107,7 @@ module PWN
|
|
|
107
107
|
{
|
|
108
108
|
sast_module: self,
|
|
109
109
|
section: 'MALICIOUS CODE PROTECTION',
|
|
110
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
110
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
111
111
|
}
|
|
112
112
|
end
|
|
113
113
|
|
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'INFORMATION INPUT VALIDATION',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
110
110
|
}
|
|
111
111
|
end
|
|
112
112
|
|
data/lib/pwn/sast/emoticon.rb
CHANGED
|
@@ -114,7 +114,7 @@ module PWN
|
|
|
114
114
|
{
|
|
115
115
|
sast_module: self,
|
|
116
116
|
section: 'LEAST PRIVILEGE',
|
|
117
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
117
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
|
|
118
118
|
}
|
|
119
119
|
rescue StandardError => e
|
|
120
120
|
raise e
|
data/lib/pwn/sast/eval.rb
CHANGED
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'MALICIOUS CODE PROTECTION',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/factory.rb
CHANGED
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'DEVELOPER CONFIGURATION MANAGEMENT',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-10'
|
|
110
110
|
}
|
|
111
111
|
end
|
|
112
112
|
|
|
@@ -111,7 +111,7 @@ module PWN
|
|
|
111
111
|
{
|
|
112
112
|
sast_module: self,
|
|
113
113
|
section: 'LEAST PRIVILEGE',
|
|
114
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
114
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
|
|
115
115
|
}
|
|
116
116
|
rescue StandardError => e
|
|
117
117
|
raise e
|
|
@@ -116,7 +116,7 @@ module PWN
|
|
|
116
116
|
{
|
|
117
117
|
sast_module: self,
|
|
118
118
|
section: 'PROTECTION OF INFORMATION AT REST',
|
|
119
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
119
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
|
|
120
120
|
}
|
|
121
121
|
end
|
|
122
122
|
|
data/lib/pwn/sast/inner_html.rb
CHANGED
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'MALICIOUS CODE PROTECTION',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/keystore.rb
CHANGED
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'CRYPTOGRAPHIC KEY ESTABLISHMENT AND MANAGEMENT',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-12'
|
|
110
110
|
}
|
|
111
111
|
rescue StandardError => e
|
|
112
112
|
raise e.mesasge
|
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'MALICIOUS CODE PROTECTION',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/log4j.rb
CHANGED
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-17'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/logger.rb
CHANGED
|
@@ -124,7 +124,7 @@ module PWN
|
|
|
124
124
|
{
|
|
125
125
|
sast_module: self,
|
|
126
126
|
section: 'PROTECTION OF INFORMATION AT REST',
|
|
127
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
127
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
|
|
128
128
|
}
|
|
129
129
|
rescue StandardError => e
|
|
130
130
|
raise e
|
data/lib/pwn/sast/outer_html.rb
CHANGED
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'MALICIOUS CODE PROTECTION',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/password.rb
CHANGED
|
@@ -111,7 +111,7 @@ module PWN
|
|
|
111
111
|
{
|
|
112
112
|
sast_module: self,
|
|
113
113
|
section: 'PROTECTION OF INFORMATION AT REST',
|
|
114
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
114
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
|
|
115
115
|
}
|
|
116
116
|
end
|
|
117
117
|
|
data/lib/pwn/sast/pom_version.rb
CHANGED
|
@@ -113,7 +113,7 @@ module PWN
|
|
|
113
113
|
{
|
|
114
114
|
sast_module: self,
|
|
115
115
|
section: 'VULNERABILITY SCANNING',
|
|
116
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
116
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=RA-5'
|
|
117
117
|
}
|
|
118
118
|
rescue StandardError => e
|
|
119
119
|
raise e
|
data/lib/pwn/sast/port.rb
CHANGED
|
@@ -116,7 +116,7 @@ module PWN
|
|
|
116
116
|
{
|
|
117
117
|
sast_module: self,
|
|
118
118
|
section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
|
|
119
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
119
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8'
|
|
120
120
|
}
|
|
121
121
|
rescue StandardError => e
|
|
122
122
|
raise e
|
data/lib/pwn/sast/private_key.rb
CHANGED
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=IA-7'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/redirect.rb
CHANGED
|
@@ -111,7 +111,7 @@ module PWN
|
|
|
111
111
|
{
|
|
112
112
|
sast_module: self,
|
|
113
113
|
section: 'LEAST PRIVILEGE',
|
|
114
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
114
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
|
|
115
115
|
}
|
|
116
116
|
rescue StandardError => e
|
|
117
117
|
raise e
|
data/lib/pwn/sast/redos.rb
CHANGED
|
@@ -116,7 +116,7 @@ module PWN
|
|
|
116
116
|
{
|
|
117
117
|
sast_module: self,
|
|
118
118
|
section: 'PROTECTION OF INFORMATION AT REST',
|
|
119
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
119
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
|
|
120
120
|
}
|
|
121
121
|
rescue StandardError => e
|
|
122
122
|
raise e
|
data/lib/pwn/sast/shell.rb
CHANGED
|
@@ -117,7 +117,7 @@ module PWN
|
|
|
117
117
|
{
|
|
118
118
|
sast_module: self,
|
|
119
119
|
section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
|
|
120
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
120
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-17'
|
|
121
121
|
}
|
|
122
122
|
rescue StandardError => e
|
|
123
123
|
raise e
|
data/lib/pwn/sast/sql.rb
CHANGED
|
@@ -113,7 +113,7 @@ module PWN
|
|
|
113
113
|
{
|
|
114
114
|
sast_module: self,
|
|
115
115
|
section: 'INFORMATION INPUT VALIDATION',
|
|
116
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
116
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
|
|
117
117
|
}
|
|
118
118
|
rescue StandardError => e
|
|
119
119
|
raise e
|
data/lib/pwn/sast/ssl.rb
CHANGED
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'PUBLIC KEY INFRASTRUCTURE CERTIFICATES',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-17'
|
|
110
110
|
}
|
|
111
111
|
rescue StandardError => e
|
|
112
112
|
raise e
|
data/lib/pwn/sast/sudo.rb
CHANGED
|
@@ -109,7 +109,7 @@ module PWN
|
|
|
109
109
|
{
|
|
110
110
|
sast_module: self,
|
|
111
111
|
section: 'LEAST PRIVILEGE',
|
|
112
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
112
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
|
|
113
113
|
}
|
|
114
114
|
rescue StandardError => e
|
|
115
115
|
raise e
|
data/lib/pwn/sast/task_tag.rb
CHANGED
|
@@ -123,7 +123,7 @@ module PWN
|
|
|
123
123
|
{
|
|
124
124
|
sast_module: self,
|
|
125
125
|
section: 'LEAST PRIVILEGE',
|
|
126
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
126
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
|
|
127
127
|
}
|
|
128
128
|
rescue StandardError => e
|
|
129
129
|
raise e
|
|
@@ -108,7 +108,7 @@ module PWN
|
|
|
108
108
|
{
|
|
109
109
|
sast_module: self,
|
|
110
110
|
section: 'ERROR HANDLING',
|
|
111
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
111
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-11'
|
|
112
112
|
}
|
|
113
113
|
rescue StandardError => e
|
|
114
114
|
raise e
|
data/lib/pwn/sast/token.rb
CHANGED
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=IA-7'
|
|
110
110
|
}
|
|
111
111
|
rescue StandardError => e
|
|
112
112
|
raise e
|
data/lib/pwn/sast/version.rb
CHANGED
|
@@ -106,7 +106,7 @@ module PWN
|
|
|
106
106
|
{
|
|
107
107
|
sast_module: self,
|
|
108
108
|
section: 'VULNERABILITY SCANNING',
|
|
109
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
109
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=RA-5'
|
|
110
110
|
}
|
|
111
111
|
rescue StandardError => e
|
|
112
112
|
raise e
|
|
@@ -108,7 +108,7 @@ module PWN
|
|
|
108
108
|
{
|
|
109
109
|
sast_module: self,
|
|
110
110
|
section: 'MALICIOUS CODE PROTECTION',
|
|
111
|
-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search
|
|
111
|
+
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
|
|
112
112
|
}
|
|
113
113
|
rescue StandardError => e
|
|
114
114
|
raise e
|
data/lib/pwn/version.rb
CHANGED