scopes_extractor 0.4.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 95cac573681be20212d7983aa2dbc9d6f7764c5454d3289eaa0b1dc8029183ed
-  data.tar.gz: e05c83b53ae0980ab98f2a2d67b2f92b2ca57ae80acd851ce3de04c07e85bd6e
+  metadata.gz: 53708b2ee96a050695c28add808c5b8bf8cdfb7e6497aa5d35f0aff99fe7cca3
+  data.tar.gz: 1c598a6d8de2708c3b8431e84ac8456dde7f9e4f468d69e2c29e9e36ea26b4f0
 SHA512:
-  metadata.gz: a087cc7e23fc0412556587194f25ffbfd1d2c94032a45aa99bf332868cef27e12eda2c9615cd43a8f14c26b0a2e59238ae33d610a2b754fcf5d46681c23b63d5
-  data.tar.gz: 7d3af7abf76821b52340ddd6eb0129c04d370f26aa4f07be8752f7b40868757c3c907191556e6a42c98afd57b70b71d2db952aa262986c86119954d32aa61c22
+  metadata.gz: 74947fc21e47e8373e92598b38f856241f837051f86d9de70cd5a857ee12daf6c1ecc111d69ff3652ca1a459bd66c69deb3989ff7d23f35ff65580075a861c16
+  data.tar.gz: e34117a9518c303601948111c24beafb2c3f4b594891c11eef01240a19bcc76ee94e4ce0670da6323db796553d8c85a0dfdce3bbf6fcd6ae42d17664b88308a6

data/lib/scopes_extractor/platforms/bugcrowd/scopes.rb

@@ -33,8 +33,9 @@ class Bugcrowd
       scopes.each do |scope|
         next unless scope['category'] == 'website' || scope['category'] == 'api'
 
-        endpoint = scope['name']
+        endpoint = scope['name'].split.first
         next if exclusions.any? { |exclusion| endpoint.include?(exclusion) } || !endpoint.include?('.')
+        next if endpoint.include?('*') && !endpoint.start_with?('*.')
 
         scopes_normalized << endpoint
       end

data/lib/scopes_extractor/platforms/hackerone/scopes.rb

@@ -26,6 +26,9 @@ class Hackerone
         normalized = normalized(endpoint)
 
         normalized.each do |asset|
+          next unless asset.include?('.')
+          next if asset.include?('*') && !asset.start_with?('*.')
+
           scopes_normalized << asset
         end
       end

data/lib/scopes_extractor/platforms/intigriti/scopes.rb

@@ -52,10 +52,10 @@ class Intigriti
     def self.extract_description(description)
       return [] unless description
 
-      match = description.match(/In Scope(.*)Out of Scope/)
+      match = description.match(/In Scope(.*)Out of Scope/im)
       return unless match && match[1]
 
-      match[1].scan(/\*\.[\w.-]+/)
+      match[1].scan(/\*\.[\w.-]+\.\w+/)
     end
   end
 end

data/lib/scopes_extractor/platforms/yeswehack/scopes.rb

@@ -26,6 +26,7 @@ class YesWeHack
         normalized = normalize(infos['scope'])
         normalized.each do |asset|
           next unless asset.include?('.')
+          next if asset.include?('*') && !asset.start_with?('*.')
 
           scopes_normalized << asset
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: scopes_extractor
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.6.0
 platform: ruby
 authors:
 - Joshua MARTINELLE