@sectester/scan 0.35.2 → 0.36.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sectester/scan",
-  "version": "0.35.2",
+  "version": "0.36.0",
   "description": "The package defines a simple public API to manage scans and their expectations.",
   "repository": {
     "type": "git",

package/src/models/TestType.d.ts

@@ -1,13 +1,13 @@
 export declare enum TestType {
     AMAZON_S3_TAKEOVER = "amazon_s3_takeover",
-    BOPLA = "bopla",
+    BROKEN_OBJECT_PROPERTY_LEVEL_AUTHORIZATION = "bopla",
     BROKEN_ACCESS_CONTROL = "broken_access_control",
-    BROKEN_SAML_AUTH = "broken_saml_auth",
-    JWT = "jwt",
+    BROKEN_SAML_AUTHENTICATION = "broken_saml_auth",
+    BROKEN_JWT_AUTHENTICATION = "jwt",
     BRUTE_FORCE_LOGIN = "brute_force_login",
     BUSINESS_CONSTRAINT_BYPASS = "business_constraint_bypass",
     COOKIE_SECURITY = "cookie_security",
-    CSRF = "csrf",
+    CROSS_SITE_REQUEST_FORGERY = "csrf",
     CSS_INJECTION = "css_injection",
     DATE_MANIPULATION = "date_manipulation",
     EMAIL_INJECTION = "email_injection",
@@ -21,26 +21,25 @@ export declare enum TestType {
     IFRAME_INJECTION = "iframe_injection",
     IMPROPER_ASSET_MANAGEMENT = "improper_asset_management",
     INSECURE_OUTPUT_HANDLING = "insecure_output_handling",
-    LDAPI = "ldapi",
-    LFI = "lfi",
-    LRRL = "lrrl",
+    LDAP_INJECTION = "ldapi",
+    LOCAL_FILE_INCLUSION = "lfi",
     MASS_ASSIGNMENT = "mass_assignment",
-    NOSQL = "nosql",
+    MONGODB_INJECTION = "nosql",
     OPEN_CLOUD_STORAGE = "open_cloud_storage",
-    OPEN_DATABASE = "open_database",
-    OSI = "osi",
+    EXPOSED_DATABASE_DETAILS = "open_database",
+    OS_COMMAND_INJECTION = "osi",
     PASSWORD_RESET_POISONING = "password_reset_poisoning",
     PROMPT_INJECTION = "prompt_injection",
-    PROTO_POLLUTION = "proto_pollution",
-    RFI = "rfi",
-    SQLI = "sqli",
-    SECRET_TOKENS = "secret_tokens",
+    JS_PROTOTYPE_POLLUTION = "proto_pollution",
+    REMOTE_FILE_INCLUSION = "rfi",
+    SQL_INJECTION = "sqli",
+    SECRET_TOKENS_LEAK = "secret_tokens",
     SERVER_SIDE_JS_INJECTION = "server_side_js_injection",
-    SSRF = "ssrf",
-    SSTI = "ssti",
-    STORED_XSS = "stored_xss",
+    SERVER_SIDE_REQUEST_FORGERY = "ssrf",
+    SERVER_SIDE_TEMPLATE_INJECTION = "ssti",
+    STORED_CROSS_SITE_SCRIPTING = "stored_xss",
     UNVALIDATED_REDIRECT = "unvalidated_redirect",
-    XPATHI = "xpathi",
-    XXE = "xxe",
-    XSS = "xss"
+    XPATH_INJECTION = "xpathi",
+    XML_EXTERNAL_ENTITY_INJECTION = "xxe",
+    CROSS_SITE_SCRIPTING = "xss"
 }

package/src/models/TestType.js

@@ -4,14 +4,14 @@ exports.TestType = void 0;
 var TestType;
 (function (TestType) {
     TestType["AMAZON_S3_TAKEOVER"] = "amazon_s3_takeover";
-    TestType["BOPLA"] = "bopla";
+    TestType["BROKEN_OBJECT_PROPERTY_LEVEL_AUTHORIZATION"] = "bopla";
     TestType["BROKEN_ACCESS_CONTROL"] = "broken_access_control";
-    TestType["BROKEN_SAML_AUTH"] = "broken_saml_auth";
-    TestType["JWT"] = "jwt";
+    TestType["BROKEN_SAML_AUTHENTICATION"] = "broken_saml_auth";
+    TestType["BROKEN_JWT_AUTHENTICATION"] = "jwt";
     TestType["BRUTE_FORCE_LOGIN"] = "brute_force_login";
     TestType["BUSINESS_CONSTRAINT_BYPASS"] = "business_constraint_bypass";
     TestType["COOKIE_SECURITY"] = "cookie_security";
-    TestType["CSRF"] = "csrf";
+    TestType["CROSS_SITE_REQUEST_FORGERY"] = "csrf";
     TestType["CSS_INJECTION"] = "css_injection";
     TestType["DATE_MANIPULATION"] = "date_manipulation";
     TestType["EMAIL_INJECTION"] = "email_injection";
@@ -25,27 +25,26 @@ var TestType;
     TestType["IFRAME_INJECTION"] = "iframe_injection";
     TestType["IMPROPER_ASSET_MANAGEMENT"] = "improper_asset_management";
     TestType["INSECURE_OUTPUT_HANDLING"] = "insecure_output_handling";
-    TestType["LDAPI"] = "ldapi";
-    TestType["LFI"] = "lfi";
-    TestType["LRRL"] = "lrrl";
+    TestType["LDAP_INJECTION"] = "ldapi";
+    TestType["LOCAL_FILE_INCLUSION"] = "lfi";
     TestType["MASS_ASSIGNMENT"] = "mass_assignment";
-    TestType["NOSQL"] = "nosql";
+    TestType["MONGODB_INJECTION"] = "nosql";
     TestType["OPEN_CLOUD_STORAGE"] = "open_cloud_storage";
-    TestType["OPEN_DATABASE"] = "open_database";
-    TestType["OSI"] = "osi";
+    TestType["EXPOSED_DATABASE_DETAILS"] = "open_database";
+    TestType["OS_COMMAND_INJECTION"] = "osi";
     TestType["PASSWORD_RESET_POISONING"] = "password_reset_poisoning";
     TestType["PROMPT_INJECTION"] = "prompt_injection";
-    TestType["PROTO_POLLUTION"] = "proto_pollution";
-    TestType["RFI"] = "rfi";
-    TestType["SQLI"] = "sqli";
-    TestType["SECRET_TOKENS"] = "secret_tokens";
+    TestType["JS_PROTOTYPE_POLLUTION"] = "proto_pollution";
+    TestType["REMOTE_FILE_INCLUSION"] = "rfi";
+    TestType["SQL_INJECTION"] = "sqli";
+    TestType["SECRET_TOKENS_LEAK"] = "secret_tokens";
     TestType["SERVER_SIDE_JS_INJECTION"] = "server_side_js_injection";
-    TestType["SSRF"] = "ssrf";
-    TestType["SSTI"] = "ssti";
-    TestType["STORED_XSS"] = "stored_xss";
+    TestType["SERVER_SIDE_REQUEST_FORGERY"] = "ssrf";
+    TestType["SERVER_SIDE_TEMPLATE_INJECTION"] = "ssti";
+    TestType["STORED_CROSS_SITE_SCRIPTING"] = "stored_xss";
     TestType["UNVALIDATED_REDIRECT"] = "unvalidated_redirect";
-    TestType["XPATHI"] = "xpathi";
-    TestType["XXE"] = "xxe";
-    TestType["XSS"] = "xss";
+    TestType["XPATH_INJECTION"] = "xpathi";
+    TestType["XML_EXTERNAL_ENTITY_INJECTION"] = "xxe";
+    TestType["CROSS_SITE_SCRIPTING"] = "xss";
 })(TestType || (exports.TestType = TestType = {}));
 //# sourceMappingURL=TestType.js.map

package/src/models/TestType.js.map

@@ -1 +1 @@
-{"version":3,"file":"TestType.js","sourceRoot":"","sources":["../../../../../packages/scan/src/models/TestType.ts"],"names":[],"mappings":";;;AAAA,IAAY,QA6CX;AA7CD,WAAY,QAAQ;IAClB,qDAAyC,CAAA;IACzC,2BAAe,CAAA;IACf,2DAA+C,CAAA;IAC/C,iDAAqC,CAAA;IACrC,uBAAW,CAAA;IACX,mDAAuC,CAAA;IACvC,qEAAyD,CAAA;IACzD,+CAAmC,CAAA;IACnC,yBAAa,CAAA;IACb,2CAA+B,CAAA;IAC/B,mDAAuC,CAAA;IACvC,+CAAmC,CAAA;IACnC,+DAAmD,CAAA;IACnD,uCAA2B,CAAA;IAC3B,yDAA6C,CAAA;IAC7C,2DAA+C,CAAA;IAC/C,6CAAiC,CAAA;IACjC,uDAA2C,CAAA;IAC3C,6CAAiC,CAAA;IACjC,iDAAqC,CAAA;IACrC,mEAAuD,CAAA;IACvD,iEAAqD,CAAA;IACrD,2BAAe,CAAA;IACf,uBAAW,CAAA;IACX,yBAAa,CAAA;IACb,+CAAmC,CAAA;IACnC,2BAAe,CAAA;IACf,qDAAyC,CAAA;IACzC,2CAA+B,CAAA;IAC/B,uBAAW,CAAA;IACX,iEAAqD,CAAA;IACrD,iDAAqC,CAAA;IACrC,+CAAmC,CAAA;IACnC,uBAAW,CAAA;IACX,yBAAa,CAAA;IACb,2CAA+B,CAAA;IAC/B,iEAAqD,CAAA;IACrD,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,qCAAyB,CAAA;IACzB,yDAA6C,CAAA;IAC7C,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,uBAAW,CAAA;AACb,CAAC,EA7CW,QAAQ,wBAAR,QAAQ,QA6CnB"}
+{"version":3,"file":"TestType.js","sourceRoot":"","sources":["../../../../../packages/scan/src/models/TestType.ts"],"names":[],"mappings":";;;AAAA,IAAY,QA4CX;AA5CD,WAAY,QAAQ;IAClB,qDAAyC,CAAA;IACzC,gEAAoD,CAAA;IACpD,2DAA+C,CAAA;IAC/C,2DAA+C,CAAA;IAC/C,6CAAiC,CAAA;IACjC,mDAAuC,CAAA;IACvC,qEAAyD,CAAA;IACzD,+CAAmC,CAAA;IACnC,+CAAmC,CAAA;IACnC,2CAA+B,CAAA;IAC/B,mDAAuC,CAAA;IACvC,+CAAmC,CAAA;IACnC,+DAAmD,CAAA;IACnD,uCAA2B,CAAA;IAC3B,yDAA6C,CAAA;IAC7C,2DAA+C,CAAA;IAC/C,6CAAiC,CAAA;IACjC,uDAA2C,CAAA;IAC3C,6CAAiC,CAAA;IACjC,iDAAqC,CAAA;IACrC,mEAAuD,CAAA;IACvD,iEAAqD,CAAA;IACrD,oCAAwB,CAAA;IACxB,wCAA4B,CAAA;IAC5B,+CAAmC,CAAA;IACnC,uCAA2B,CAAA;IAC3B,qDAAyC,CAAA;IACzC,sDAA0C,CAAA;IAC1C,wCAA4B,CAAA;IAC5B,iEAAqD,CAAA;IACrD,iDAAqC,CAAA;IACrC,sDAA0C,CAAA;IAC1C,yCAA6B,CAAA;IAC7B,kCAAsB,CAAA;IACtB,gDAAoC,CAAA;IACpC,iEAAqD,CAAA;IACrD,gDAAoC,CAAA;IACpC,mDAAuC,CAAA;IACvC,sDAA0C,CAAA;IAC1C,yDAA6C,CAAA;IAC7C,sCAA0B,CAAA;IAC1B,iDAAqC,CAAA;IACrC,wCAA4B,CAAA;AAC9B,CAAC,EA5CW,QAAQ,wBAAR,QAAQ,QA4CnB"}