scopes_extractor 0.3.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9213285da286cb2ad488374dc8e5971d34bb06987b710c2bbd4dcac12f3d1384
-  data.tar.gz: af84cd2c4e8e8a43ccb40f126bc1996e812bf66b828e2a3b4aea6bd5dcba9531
+  metadata.gz: f4d182543a95c5350e15e48ac31e9294144bbfac8b8ab7b46c2fe473e0e29853
+  data.tar.gz: a7b9dd659a243d2c9714a807824d11631040ee4e199756b79d99f5dbf5f5c7e5
 SHA512:
-  metadata.gz: 20bbb233618c27774be21ab80ac56e8e9ac2b6e749922bdb1768c634b30f7b7b04f23e622f0a958ddc257e6ed5ef1239fb94aec973eafbfe0c20c3300c831d60
-  data.tar.gz: 5612a5f74b44fd9904e0f7b3ba22218104ee68e36ca27b15dbcaf8f437e22e74f680f997a832d64ddf0580f4f0d8421baac3532aee8537a8c587f48c45bf7369
+  metadata.gz: 3b7dce096f56b17a31ad146b8f2b6b0c0f11643fa703f77410b4b0f1de2cf2ef9dc0557849144e9abef3628216032a909d5d65bb5d385a2a382d9eb6c718c5b6
+  data.tar.gz: 44c364cd7de7a23903e380dc1d6d367a55ac81143054bae1688b0eaf2de80efb0d59bcf5464fdbdf223c298ab24821f65ceedb11cb26fbfbd8a0f2e69e5b4e84

data/lib/scopes_extractor/platforms/intigriti/scopes.rb

@@ -27,12 +27,18 @@ class Intigriti
       scopes_normalized = []
 
       scopes.each do |scope|
-        next unless scope['type'] == 1 # 1 == Web Application
-
-        endpoint = normalize(scope['endpoint'])
-        next if exclusions.any? { |exclusion| endpoint.include?(exclusion) } || !endpoint.include?('.')
-
-        scopes_normalized << endpoint
+        next unless scope['type'] == 1 || scope['type'] == 6 # 1 == Web Application || 6 == Other
+
+        if scope['type'] == 1 # Web Application
+          endpoint = normalize(scope['endpoint'])
+          scopes_normalized << endpoint unless exclusions.any? { |exclusion| endpoint.include?(exclusion) } || !endpoint.include?('.')
+        end
+
+        endpoints_description = extract_description(scope['description'])
+        endpoints_description&.each do |endpoint_description|
+          endpoint_description = normalize(endpoint_description)
+          scopes_normalized << endpoint_description unless exclusions.any? { |exclusion| endpoint_description.include?(exclusion) } || !endpoint_description.include?('.')
+        end
       end
 
       scopes_normalized
@@ -42,5 +48,14 @@ class Intigriti
       endpoint.gsub('/*', '').gsub(' ', '').sub('.*', '.com').sub('.<tld>', '.com')
               .sub(%r{/$}, '').sub(/\*$/, '')
     end
+
+    def self.extract_description(description)
+      return [] unless description
+
+      match = description.match(/In Scope(.*)Out of Scope/im)
+      return unless match && match[1]
+
+      match[1].scan(/\*\.[\w.-]+\.\w+/)
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: scopes_extractor
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Joshua MARTINELLE
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-22 00:00:00.000000000 Z
+date: 2023-05-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colorize