discover

package

v0.4.0 Latest Latest Go to latest Published: Mar 6, 2024 License: MIT Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cerberauth/vulnapi

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func DiscoverableOpenAPIScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)
func ExtractBaseURL(inputURL *url.URL) *url.URL
func GraphqlIntrospectionScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)
func ServerSignatureScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

Constants ¶

View Source

const (
	DiscoverableOpenAPISeverityLevel            = 1
	DiscoverableOpenAPIVulnerabilityName        = "Discoverable OpenAPI"
	DiscoverableOpenAPIVulnerabilityDescription = "An OpenAPI file is exposed without protection. This can lead to information disclosure and security issues"
)

View Source

const (
	GraphqlIntrospectionEnabledSeverityLevel            = 1
	GraphqlIntrospectionEnabledVulnerabilityName        = "GraphQL Introspection enabled"
	GraphqlIntrospectionEnabledVulnerabilityDescription = "GraphQL Introspection seems enabled and can lead to information disclosure and security issues"
)

View Source

const (
	ServerSignatureSeverityLevel            = 1
	ServerSignatureVulnerabilityName        = "Server Signature Exposed"
	ServerSignatureVulnerabilityDescription = "A Server signature is exposed in an header."
)

Variables ¶

This section is empty.

Functions ¶

func DiscoverableOpenAPIScanHandler ¶

func DiscoverableOpenAPIScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

func ExtractBaseURL ¶

func ExtractBaseURL(inputURL *url.URL) *url.URL

func GraphqlIntrospectionScanHandler ¶

func GraphqlIntrospectionScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

func ServerSignatureScanHandler ¶

func ServerSignatureScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL