devsecops-engine-tools 1.67.0__tar.gz → 1.69.0__tar.gz

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.67.0
+Version: 1.69.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/devsecops_engine_tools/engine_dast/src/domain/model/api_config.py

@@ -1,13 +1,17 @@
-from typing import List
+from typing import List, Optional
 from devsecops_engine_tools.engine_dast.src.domain.model.api_operation import ApiOperation
 
-
 class ApiConfig():
     def __init__(self, api_data: dict):
         try:
             self.target_type: str = "API"
             self.endpoint: str = api_data["endpoint"]
-            self.rate_limit: str = api_data.get("rate_limit")
             self.operations: "List[ApiOperation]" = api_data["operations"]
+            self.concurrency: Optional[int] = None
+            self.rate_limit: Optional[int] = api_data.get("rate_limit", 150)
+            self.response_size: Optional[int] = None
+            self.bulk_size: Optional[int] = None
+            self.timeout: Optional[int] = None
+
         except KeyError:
             raise KeyError("Missing configuration, validate the endpoint and every single operation")

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/devsecops_engine_tools/engine_dast/src/domain/model/wa_config.py

@@ -1,8 +1,15 @@
+from typing import Optional
+
 class WaConfig:
     def __init__(self, data: dict, authentication_gateway):
         self.target_type: str = "WA"
         self.url: str = data["endpoint"]
-        self.data: dict = data.wa_data
+        self.data: dict = data["data"]
+        self.concurrency: Optional[int] = None
+        self.rate_limit: Optional[int] = data.get("rate_limit", 150)
+        self.response_size: Optional[int] = None
+        self.bulk_size: Optional[int] = None
+        self.timeout: Optional[int] = None
 
     def authenticate(self):
         self.credentials = self.authentication_gateway.get_credentials()

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/devsecops_engine_tools/engine_dast/src/domain/usecases/dast_scan.py

@@ -52,6 +52,11 @@ class DastScan:
                 config_tool["SCOPE_PIPELINE"]
             ).get(tool)
 
+        self.data_target.concurrency = config_tool.get(tool, {}).get("CONCURRENCY", 25)
+        self.data_target.response_size = config_tool.get(tool, {}).get("RESPONSE_SIZE", 1048576)
+        self.data_target.bulk_size = config_tool.get(tool, {}).get("BULK_SIZE", 25)
+        self.data_target.timeout = config_tool.get(tool, {}).get("TIMEOUT", 10)
+
         data_target_config = self.data_target
         return config_tool, data_target_config
 

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/devsecops_engine_tools/engine_dast/src/infrastructure/driven_adapters/nuclei/nuclei_config.py

@@ -9,6 +9,11 @@ class NucleiConfig:
         self.target_type: str = target_config.target_type.lower()
         self.custom_templates_dir: str = ""
         self.output_file: str = "result_dast_scan.json"
+        self.concurrency: int = target_config.concurrency
+        self.rate_limit: int = target_config.rate_limit
+        self.response_size: int = target_config.response_size
+        self.bulk_size: int = target_config.bulk_size
+        self.timeout: int = target_config.timeout
         self.yaml = YAML()
         if self.target_type == "api":
             self.data: List = target_config.operations

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/devsecops_engine_tools/engine_dast/src/infrastructure/driven_adapters/nuclei/nuclei_tool.py

@@ -31,7 +31,7 @@ class NucleiTool(ToolGateway):
         self.data_config_cli = data_config_cli
         self.TOOL: str = "NUCLEI"
 
-    def download_tool(self, version):
+    def download_tool(self, version, binary_path):
         try:
             base_url = f"https://github.com/projectdiscovery/nuclei/releases/download/v{version}/"
             os_type = platform.system().lower()
@@ -49,35 +49,33 @@ class NucleiTool(ToolGateway):
             if response.status_code != 200:
                 raise Exception(f"Error [102]: Failed to download Nuclei version {version}. HTTP status code: {response.status_code}")
 
-            home_directory = os.path.expanduser("~")
-            zip_name = os.path.join(home_directory, file_name)
+            zip_name = os.path.join(binary_path, file_name)
             with open(zip_name, "wb") as f:
                 f.write(response.content)
 
-            Utils().unzip_file(zip_name, home_directory)
+            Utils().unzip_file(zip_name, binary_path)
             return 0
         except Exception as e:
             logger.error(f"Error [103]: An exception occurred during download: {e}")
             return e
 
-    def install_tool(self, version):
+    def install_tool(self, version, binary_path):
         try:
             nuclei_path = shutil.which("nuclei")
 
             if not nuclei_path:
-                download_result = self.download_tool(version)
+                download_result = self.download_tool(version, binary_path)
                 if download_result != 0:
                     raise Exception(f"Error [104]: Download failed with error: {download_result}")
 
             os_type = platform.system().lower()
-            home_directory = os.path.expanduser("~")
 
             if nuclei_path:
                 executable_path = nuclei_path
             elif os_type == "windows":
-                executable_path = os.path.join(home_directory, "nuclei.exe")
+                executable_path = os.path.join(binary_path, "nuclei.exe")
             else:
-                executable_path = os.path.join(home_directory, "nuclei")
+                executable_path = os.path.join(binary_path, "nuclei")
 
             if os_type == "darwin" or os_type == "linux":
                 subprocess.run(["chmod", "+x", executable_path], check=True)
@@ -104,11 +102,17 @@ class NucleiTool(ToolGateway):
             + (f" -ud {target_config.custom_templates_dir}" if target_config.custom_templates_dir else "")
             + " -ni "  # disable interactsh server
             + "-dc "  # disable clustering of requests
+            + "-sr " # use system DNS resolving as error fallback
+            + "-or " #  omit request/response pairs in the output
             + "-tags " # Excute only templates with the especified tag
             + target_config.target_type
+            + (f" -c {target_config.concurrency}" if target_config.concurrency else "") # concurrency
+            + (f" -rl {target_config.rate_limit}" if target_config.rate_limit else "") # rate limit
+            + (f" -rss {target_config.response_size}" if target_config.response_size else "") # max response size to save in bytes
+            + (f" -bs {target_config.bulk_size}" if target_config.bulk_size else "") #  max number of hosts to analyze
+            + (f" -timeout {target_config.timeout}" if target_config.timeout else "") # timeout for each request
             + " -je "  # file to export results in JSON format
             + str(target_config.output_file)
-            + " -sr"
         )
 
         if command is not None:
@@ -131,7 +135,11 @@ class NucleiTool(ToolGateway):
         secret_external_checks,
         agent_work_folder
     ):
-        result_install = self.install_tool(config_tool[self.TOOL]["VERSION"])
+        binary_path = agent_work_folder
+        if config_tool[self.TOOL].get("BINARY_PATH"):
+            binary_path = config_tool[self.TOOL]["BINARY_PATH"]
+
+        result_install = self.install_tool(config_tool[self.TOOL]["VERSION"], binary_path)
         if result_install["status"] < 200:
             return [], None
         

devsecops_engine_tools-1.69.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.69.0'

{devsecops_engine_tools-1.67.0 → devsecops_engine_tools-1.69.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.67.0
+Version: 1.69.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.67.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.67.0'