yawast 0.5.0.beta2 → 0.5.0.beta3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +6 -0
  3. data/README.md +312 -244
  4. data/bin/yawast +2 -0
  5. data/lib/resources/common_file.txt +29 -0
  6. data/lib/resources/srv_list.txt +775 -0
  7. data/lib/resources/subdomain_list.txt +2354 -0
  8. data/lib/scanner/core.rb +1 -1
  9. data/lib/scanner/generic.rb +6 -107
  10. data/lib/scanner/plugins/dns/generic.rb +195 -0
  11. data/lib/scanner/plugins/ssl/sweet32.rb +85 -0
  12. data/lib/scanner/ssl.rb +18 -50
  13. data/lib/scanner/ssl_labs.rb +1 -1
  14. data/lib/version.rb +1 -1
  15. data/yawast.gemspec +1 -0
  16. metadata +20 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 75ec2f46c0f9998affc625ef2c5513b99bb75ffc
4
- data.tar.gz: d22f11e04d791c348243d994a02f6bef8762d926
3
+ metadata.gz: d4708466ef6ca5c2b60d7bc65c8d0b7e140f13ef
4
+ data.tar.gz: ce469cdfc381a00bae37220c150fbf1424f84bb2
5
5
  SHA512:
6
- metadata.gz: e0d9f54ba2687801aac27fac90c9daab18504f45b64699ef045618a155b96eeb83536074c28c5835bbcef42791d77f54f6e1e8f867e8fdb55220d66fb7275a73
7
- data.tar.gz: 8beddf3db6353a8124ce3648ea4f25a1407ce7be57c78e4f9e4ee8c4e5701e8066c0d333f45b2b75257bf11ada17a1720875866d0cbe619d4711d50e07d7c430
6
+ metadata.gz: 2790493be0d96156111fe4dd65e86fd77492e2887861af9e255b0cf28103502270f3c9cdea85586b2a926fab8aa6ad5c96ce5905f84262ce308ecee45afcdda0
7
+ data.tar.gz: 8cad9004d6af28d5bc0851000e94c53eee474389f67f3eb5f58d251449fadd71e762af2ff593582ff2f5972ca2ba44fcc7635f6410d5b3841a6ade6b55d1a184
data/CHANGELOG.md CHANGED
@@ -1,5 +1,7 @@
1
1
  ## 0.5.0 - In Development
2
2
 
3
+ * [#35](https://github.com/adamcaudill/yawast/issues/35) - Add check for SameSite cookie attribute
4
+ * [#53](https://github.com/adamcaudill/yawast/issues/53) - Added checks for .well-known URLs
3
5
  * [#75](https://github.com/adamcaudill/yawast/issues/75) - Use internal SSL scanner for non-standard ports
4
6
  * [#84](https://github.com/adamcaudill/yawast/issues/84) - Improve the display of ct_precert_scts
5
7
  * [#86](https://github.com/adamcaudill/yawast/issues/86) - Add check for Tomcat Manager & common passwords
@@ -8,7 +10,11 @@
8
10
  * [#89](https://github.com/adamcaudill/yawast/issues/89) - Add IP Location Info
9
11
  * [#90](https://github.com/adamcaudill/yawast/issues/90) - Add HSTS Preload check via [HSTSPreload.com](https://hstspreload.com/)
10
12
  * [#91](https://github.com/adamcaudill/yawast/issues/91) - Enhanced file search
13
+ * [#96](https://github.com/adamcaudill/yawast/issues/96) - Scan for known SRV DNS Records
14
+ * [#97](https://github.com/adamcaudill/yawast/issues/97) - Search for Common Subdomains
11
15
  * [#76](https://github.com/adamcaudill/yawast/issues/76) - Bug: Handle error for OpenSSL version support error
16
+ * [#98](https://github.com/adamcaudill/yawast/issues/98) - Bug: SWEET32 Test Fails if 3DES Not Support By Latest Server Supported TLS Version
17
+ * [#99](https://github.com/adamcaudill/yawast/issues/99) - Bug: Cloudflare SWEET32 False Positive
12
18
  * Various code and other improvements.
13
19
 
14
20
  ## 0.4.0 - 2016-11-03