exploit

package
v0.7.6 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 25, 2025 License: BSD-3-Clause, GPL-3.0 Imports: 13 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var Decoder = &decoder.AbstractDecoder{
	Type:        types.Type_NC_Exploit,
	Name:        "Exploit",
	Description: "An exploit proof of concept code snippet for a vulnerable application",
	PostInit: func(e *decoder.AbstractDecoder) error {
		// Load vulnerabilities DB index
		var (
			err       error
			indexName = filepath.Join(resolvers.DataBaseFolderPath, "exploit-db.bleve")
		)

		exploitLog, _, err = logging.InitZapLogger(
			decoderconfig.Instance.Out,
			"exploit",
			decoderconfig.Instance.Debug,
		)
		if err != nil {
			return err
		}

		db.ExploitsIndex, err = db.OpenBleve(indexName)
		if err != nil {

			db.ExploitsIndex = nil
			return err
		}

		return nil
	},
	DeInit: func(decoder *decoder.AbstractDecoder) error {
		db.CloseBleve(db.ExploitsIndex)

		return exploitLog.Sync()
	},
}

Decoder for protocol analysis and writing audit records to disk.

Functions

func ExploitsLookup

func ExploitsLookup(software *types.Software)

ExploitsLookup searches for known exploits in the indexed bleve database TODO: - Make the threshold configurable on the commandline - add caching layer to avoid repeating matching operations.

func ResetExploitStore added in v0.7.6

func ResetExploitStore()

ResetExploitStore clears the exploit deduplication store This should be called when resetting state between processing different files

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL