scan_gem 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 462bf7b74373e4d2942284363b54a3010e01ac38d8fb1fa062f8ae006619ec25
+  data.tar.gz: e69a0b51a37c15dcbec21c0a06b0ba36595ad11730b441ff4ab10f888a169389
+SHA512:
+  metadata.gz: fcaea83ffec252bf3179fe92690db6bbdfa3be31f8fc08a1172603f7c7efebd96900f1e400da080e107cc0974c65e24530bacd10217b9dd2b7392a94e73c8828
+  data.tar.gz: 86d0d8db7a35bb3fb1f2a30d95e80c4bbeaa63b1848ca8525dd182fe3a5ce427b52b58bbd880e3b1d18a3f5568967cafd62c3615c9444093b1154538e9e22911

data/lib/scan/version.rb

@@ -0,0 +1,3 @@
+module Scan
+  VERSION = "0.1.0"
+end

data/lib/scan.rb

@@ -0,0 +1,24 @@
+require "scan/version"
+
+module Scan
+  class Error < StandardError; end
+# frozen_string_literal: true
+require "spec_helper"
+
+feature "improper password hashing" do
+  let(:normal_user) { UserFixture.normal_user }
+
+  before do
+    UserFixture.reset_all_users
+    pending unless verifying_fixed?
+  end
+
+  scenario "with just md5\nTutorial: https://github.com/OWASP/railsgoat/wiki/A6-Sensitive-Data-Exposure-Insecure-Password-Storage" do
+    new_pass = "testPassw0rd!"
+    normal_user.password = new_pass
+    normal_user.password_confirmation = new_pass
+    normal_user.save!
+
+    expect(normal_user.password).not_to eq(Digest::MD5.hexdigest(new_pass))
+  end
+end

metadata

@@ -0,0 +1,45 @@
+--- !ruby/object:Gem::Specification
+name: scan_gem
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- avishek
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2024-07-28 00:00:00.000000000 Z
+dependencies: []
+description: This gem is vulnerable code.
+email:
+- your.email@example.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/scan.rb
+- lib/scan/version.rb
+homepage: http://example.com/hello_world_gem
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.2
+signing_key: 
+specification_version: 4
+summary: A simple vulnerable code gem
+test_files: []