infobyte / faraday_plugins

Security tools report parsers for Faradaysec.com
https://www.faradaysec.com/
GNU General Public License v3.0
47 stars 17 forks source link

Implementation of vulners script output #5

Closed lucatruf closed 3 years ago

lucatruf commented 3 years ago

This PR change how the nmap 'vulners' scritpt output is parsed. The nmap 'vulners' script generate many vulnerabilities as a single output and then nmap plugin put all of them into one single vulnerability in Faraday,

This PR changes this behaviour and so the nmap plugin will generate as many vulnerabilitie as the nmap 'vulners' script find.

The nmap script is: https://nmap.org/nsedoc/scripts/vulners.html

aenima-x commented 3 years ago

@lucatruf Luca can you add one more thing that I forgot? Can you add the cvss score to references?

lucatruf commented 3 years ago

@lucatruf Luca can you add one more thing that I forgot? Can you add the cvss score to references?

@aenima-x Sure, you mean something like this?

                        {
                            "name": "1337DAY-ID-33575",
                            "desc": "vulners-1337DAY-ID-33575 *EXPLOIT*",
                            "severity": "med",
                            "refs": [
                                "https://vulners.com/zdt/1337DAY-ID-33575",
                                "CVSS 4.3"
                            ],
                            "external_id": "1337DAY-ID-33575",
                            "type": "Vulnerability",
                            "resolution": "",
                            "data": "",
                            "custom_fields": {},
                            "status": "opened",
                            "impact": {},
                            "policyviolations": [],
                            "easeofresolution": null,
                            "confirmed": false,
                            "tags": []
                        },
aenima-x commented 3 years ago

@lucatruf CVSS: XXX

lucatruf commented 3 years ago

@lucatruf CVSS: XXX

Done