infobyte / faraday

Open Source Vulnerability Management Platform
https://www.faradaysec.com
GNU General Public License v3.0
4.99k stars 911 forks source link

Organize hierarchy by regex #25

Open jpalanco opened 9 years ago

jpalanco commented 9 years ago

I would like to manage hierarchy of vulnerabilities (on the same IP) with regex on PATH.

For example, if you are performing a pentest (using burp) for 5 web applications and all the apps are hosted on the same IP, all the vulnerabilities will be mixed.

I think the best solution is apply rules on the vulnerabilities. For example regex on the PATH field.

For example:

http://virtualhost1/index.aspx http://virtualhost2/index.php http://virtualhost3/app1/index.jsp http://virtualhost3/app2/index.jsp

Here I have 4 apps in 3 virtualhosts in 1 IP. To classify I would like to create a rule per app:

App1: ^http://virtualhost1/. App2: ^http://virtualhost2/. App3: ^http://virtualhost3/app1/. App4: ^http://virtualhost3/app2/.

So instead of mix all the vulnerabilities on the same ip, it is possible to create childs to access easily to vulnerabilities.

Menu:

menu

fedek commented 9 years ago

Thanks, It's a nice feature, we will work on it.

Meanwhile in the WebUI, if you need to identify by a target by it's DNS name you could do the following: screen shot 2015-03-30 at 1 51 01 am

1) Go to the Vulnerabilities Page 2) Add the "website" column 3) Sort the website column by name

I hope it helps, let us know.

Thanks,

jpalanco commented 9 years ago

Thank you fedek!

Regards