google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
Apache License 2.0
860 stars 178 forks source link

Add the fingerprint updater and .binproto for Apache Solr #436

Open W0ngL1 opened 3 months ago

W0ngL1 commented 3 months ago

Hi @tooryx,

This PR is about https://github.com/google/tsunami-security-scanner-plugins/issues/395.

The solr team started to build docker images from 8 years ago, the first version which has a official docker is 5.3.1, but versions from 5.3.1 to 5.5.0 cannot be launched using official examples due to missing files. So the actual fingerprint only covers versions 5.5.1(8 years ago) to 9.5.0(2024.01).

And the version 8.1.0 has only one alias for 8.1 in hub.docker.com, so there is an IF check for it in update.sh.

408 was deleted by mistake, so I reopen one.