discover

package
v0.4.6 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 11, 2024 License: MIT Imports: 8 Imported by: 0

Documentation

Index

Constants

View Source
const (
	DiscoverableOpenAPISeverityLevel            = 0
	DiscoverableOpenAPIVulnerabilityName        = "Discoverable OpenAPI"
	DiscoverableOpenAPIVulnerabilityDescription = "An OpenAPI file is exposed without protection. This can lead to information disclosure and security issues"
)
View Source
const (
	DiscoverableGraphQLPathSeverityLevel            = 0
	DiscoverableGraphQLPathVulnerabilityName        = "Discoverable GraphQL Path"
	DiscoverableGraphQLPathVulnerabilityDescription = "GraphQL path seems discoverable and can lead to information disclosure and security issues"

	GraphqlIntrospectionEnabledSeverityLevel            = 0
	GraphqlIntrospectionEnabledVulnerabilityName        = "GraphQL Introspection enabled"
	GraphqlIntrospectionEnabledVulnerabilityDescription = "GraphQL Introspection seems enabled and can lead to information disclosure and security issues"
)
View Source
const (
	ServerSignatureSeverityLevel            = 0
	ServerSignatureVulnerabilityName        = "Server Signature Exposed"
	ServerSignatureVulnerabilityDescription = "A Server signature is exposed in an header."
)

Variables

This section is empty.

Functions

func CreateURLScanHandler added in v0.4.2

func CreateURLScanHandler(name string, seclistUrl string, defaultUrls []string, vulnReport *report.VulnerabilityReport) func(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

func DiscoverableGraphQLPathScanHandler added in v0.4.2

func DiscoverableGraphQLPathScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

func DiscoverableOpenAPIScanHandler

func DiscoverableOpenAPIScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

func ExtractBaseURL

func ExtractBaseURL(inputURL *url.URL) *url.URL

func GraphqlIntrospectionScanHandler

func GraphqlIntrospectionScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

func ServerSignatureScanHandler

func ServerSignatureScanHandler(operation *request.Operation, securityScheme auth.SecurityScheme) (*report.ScanReport, error)

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL