pentest-tool-lite 3.7.0 → 3.8.0

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "pentest-tool-lite",
     "description": "Check your website ( or any other website ) for common vulnerabilities.",
-    "version": "3.7.0",
+    "version": "3.8.0",
     "homepage": "https://pentest-tool-lite.com",
     "license": "MIT",
     "author": {
@@ -13,6 +13,7 @@
         "pentest-tool-lite": "./src/index"
     },
     "dependencies": {
+        "@google-cloud/web-risk": "^4.0.1",
         "commander": "^6.0.0",
         "csso": "^5.0.5",
         "domhandler": "^4.2.2",
@@ -37,7 +38,7 @@
     },
     "devDependencies": {
         "@types/jest": "^27.0.2",
-        "@types/node": "^13.13.0",
+        "@types/node": "^18.18.4",
         "@types/node-fetch": "^2.5.7",
         "@types/uglify-js": "^3.0.4",
         "@types/xml2js": "^0.4.5",

package/src/security/GoogleWebRisk.d.ts

@@ -0,0 +1,12 @@
+import Test, { TestParameters, Result } from '../Test';
+/**
+ *
+ * @see https://cloud.google.com/web-risk
+ * @see https://safebrowsing.google.com
+ * @see https://transparencyreport.google.com/safe-browsing/search
+ */
+declare class GoogleWebRisk extends Test {
+    name: string;
+    test({ url }: TestParameters): Promise<Result>;
+}
+export default GoogleWebRisk;

package/src/security/GoogleWebRisk.js

@@ -0,0 +1,58 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const web_risk_1 = require("@google-cloud/web-risk");
+const Test_1 = __importDefault(require("../Test"));
+const logger_1 = __importDefault(require("../logger"));
+/**
+ *
+ * @see https://cloud.google.com/web-risk
+ * @see https://safebrowsing.google.com
+ * @see https://transparencyreport.google.com/safe-browsing/search
+ */
+class GoogleWebRisk extends Test_1.default {
+    constructor() {
+        super(...arguments);
+        this.name = 'GoogleWebRisk';
+    }
+    test({ url }) {
+        return __awaiter(this, void 0, void 0, function* () {
+            logger_1.default.info('Starting Google Web Risk test...');
+            const client = new web_risk_1.WebRiskServiceClient();
+            const request = {
+                uri: url,
+                threatTypes: [
+                    web_risk_1.protos.google.cloud.webrisk.v1.ThreatType.MALWARE,
+                    web_risk_1.protos.google.cloud.webrisk.v1.ThreatType.SOCIAL_ENGINEERING,
+                    web_risk_1.protos.google.cloud.webrisk.v1.ThreatType.UNWANTED_SOFTWARE,
+                ],
+            };
+            const response = yield client.searchUris(request);
+            const { threat } = response[0];
+            if (threat !== null) {
+                return {
+                    status: 'ERROR',
+                    title: this.name,
+                    description: `This url contains ${threat.threatTypes.join(', ').toLowerCase()}!`,
+                };
+            }
+            return {
+                status: 'SUCCESS',
+                title: this.name,
+                description: 'This URL is safe.',
+            };
+        });
+    }
+}
+exports.default = GoogleWebRisk;

package/src/security/index.js

@@ -26,6 +26,7 @@ const ReferrerPolicy_1 = __importDefault(require("./ReferrerPolicy"));
 const RobotsTXT_1 = __importDefault(require("./RobotsTXT"));
 const PermissionsPolicy_1 = __importDefault(require("./PermissionsPolicy"));
 const SSL_1 = __importDefault(require("./SSL"));
+const GoogleWebRisk_1 = __importDefault(require("./GoogleWebRisk"));
 class Security extends Test_1.default {
     constructor() {
         super();
@@ -44,6 +45,7 @@ class Security extends Test_1.default {
             new ContentEncoding_1.default(),
             new RobotsTXT_1.default(),
             new SSL_1.default(),
+            new GoogleWebRisk_1.default(),
         ];
     }
     test(params) {