scopes_extractor 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9213285da286cb2ad488374dc8e5971d34bb06987b710c2bbd4dcac12f3d1384
-  data.tar.gz: af84cd2c4e8e8a43ccb40f126bc1996e812bf66b828e2a3b4aea6bd5dcba9531
+  metadata.gz: 95cac573681be20212d7983aa2dbc9d6f7764c5454d3289eaa0b1dc8029183ed
+  data.tar.gz: e05c83b53ae0980ab98f2a2d67b2f92b2ca57ae80acd851ce3de04c07e85bd6e
 SHA512:
-  metadata.gz: 20bbb233618c27774be21ab80ac56e8e9ac2b6e749922bdb1768c634b30f7b7b04f23e622f0a958ddc257e6ed5ef1239fb94aec973eafbfe0c20c3300c831d60
-  data.tar.gz: 5612a5f74b44fd9904e0f7b3ba22218104ee68e36ca27b15dbcaf8f437e22e74f680f997a832d64ddf0580f4f0d8421baac3532aee8537a8c587f48c45bf7369
+  metadata.gz: a087cc7e23fc0412556587194f25ffbfd1d2c94032a45aa99bf332868cef27e12eda2c9615cd43a8f14c26b0a2e59238ae33d610a2b754fcf5d46681c23b63d5
+  data.tar.gz: 7d3af7abf76821b52340ddd6eb0129c04d370f26aa4f07be8752f7b40868757c3c907191556e6a42c98afd57b70b71d2db952aa262986c86119954d32aa61c22

data/lib/scopes_extractor/platforms/intigriti/scopes.rb

@@ -27,12 +27,18 @@ class Intigriti
       scopes_normalized = []
 
       scopes.each do |scope|
-        next unless scope['type'] == 1 # 1 == Web Application
-
-        endpoint = normalize(scope['endpoint'])
-        next if exclusions.any? { |exclusion| endpoint.include?(exclusion) } || !endpoint.include?('.')
-
-        scopes_normalized << endpoint
+        next unless scope['type'] == 1 || scope['type'] == 6 # 1 == Web Application || 6 == Other
+
+        if scope['type'] == 1 # Web Application
+          endpoint = normalize(scope['endpoint'])
+          scopes_normalized << endpoint unless exclusions.any? { |exclusion| endpoint.include?(exclusion) } || !endpoint.include?('.')
+        end
+
+        endpoints_description = extract_description(scope['description'])
+        endpoints_description&.each do |endpoint_description|
+          endpoint_description = normalize(endpoint_description)
+          scopes_normalized << endpoint_description unless exclusions.any? { |exclusion| endpoint_description.include?(exclusion) } || !endpoint_description.include?('.')
+        end
       end
 
       scopes_normalized
@@ -42,5 +48,14 @@ class Intigriti
       endpoint.gsub('/*', '').gsub(' ', '').sub('.*', '.com').sub('.<tld>', '.com')
               .sub(%r{/$}, '').sub(/\*$/, '')
     end
+
+    def self.extract_description(description)
+      return [] unless description
+
+      match = description.match(/In Scope(.*)Out of Scope/)
+      return unless match && match[1]
+
+      match[1].scan(/\*\.[\w.-]+/)
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: scopes_extractor
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Joshua MARTINELLE
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-22 00:00:00.000000000 Z
+date: 2023-05-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colorize