config

type AWSConf struct {
	// AWS profile to use
	Profile string `json:"profile"`

	// AWS region to use
	Region string `json:"region"`

	// S3 bucket name
	S3Bucket string `json:"s3Bucket"`

	// /bucket/path/to/results
	S3ResultsDir string `json:"s3ResultsDir"`

	// The Server-side encryption algorithm used when storing the reports in S3 (e.g., AES256, aws:kms).
	S3ServerSideEncryption string `json:"s3ServerSideEncryption"`

	Enabled bool `toml:"-" json:"-"`
}

type AzureConf struct {
	// Azure account name to use. AZURE_STORAGE_ACCOUNT environment variable is used if not specified
	AccountName string `json:"accountName"`

	// Azure account key to use. AZURE_STORAGE_ACCESS_KEY environment variable is used if not specified
	AccountKey string `json:"-"`

	// Azure storage container name
	ContainerName string `json:"containerName"`

	Enabled bool `toml:"-" json:"-"`
}

type ChatWorkConf struct {
	APIToken string `json:"-"`
	Room     string `json:"-"`
	Enabled  bool   `toml:"-" json:"-"`
}

type Config struct {
	logging.LogOpts

	// scan, report
	HTTPProxy  string `valid:"url" json:"httpProxy,omitempty"`
	ResultsDir string `json:"resultsDir,omitempty"`
	Pipe       bool   `json:"pipe,omitempty"`

	Default ServerInfo            `json:"default,omitempty"`
	Servers map[string]ServerInfo `json:"servers,omitempty"`

	ScanOpts

	// report
	CveDict    GoCveDictConf  `json:"cveDict,omitempty"`
	OvalDict   GovalDictConf  `json:"ovalDict,omitempty"`
	Gost       GostConf       `json:"gost,omitempty"`
	Exploit    ExploitConf    `json:"exploit,omitempty"`
	Metasploit MetasploitConf `json:"metasploit,omitempty"`
	KEVuln     KEVulnConf     `json:"kevuln,omitempty"`
	Cti        CtiConf        `json:"cti,omitempty"`

	Slack      SlackConf      `json:"-"`
	EMail      SMTPConf       `json:"-"`
	HTTP       HTTPConf       `json:"-"`
	Syslog     syslog.Conf    `json:"-"`
	AWS        AWSConf        `json:"-"`
	Azure      AzureConf      `json:"-"`
	ChatWork   ChatWorkConf   `json:"-"`
	GoogleChat GoogleChatConf `json:"-"`
	Telegram   TelegramConf   `json:"-"`
	WpScan     WpScanConf     `json:"-"`
	Saas       SaasConf       `json:"-"`

	ReportOpts
}

type Container struct {
	ContainerID string
	Name        string
	Image       string
}

type ContainerSetting struct {
	Cpes             []string `json:"cpes,omitempty"`
	OwaspDCXMLPath   string   `json:"owaspDCXMLPath,omitempty"`
	IgnorePkgsRegexp []string `json:"ignorePkgsRegexp,omitempty"`
	IgnoreCves       []string `json:"ignoreCves,omitempty"`
}

type CtiConf struct {
	VulnDict
}

type Distro struct {
	Family  string
	Release string
}

type EOL struct {
	StandardSupportUntil time.Time
	ExtendedSupportUntil time.Time
	Ended                bool
}

type ExploitConf struct {
	VulnDict
}

type GitHubConf struct {
	Token                 string `json:"-"`
	IgnoreGitHubDismissed bool   `json:"ignoreGitHubDismissed,omitempty"`
}

type GoCveDictConf struct {
	VulnDict
}

type GoogleChatConf struct {
	WebHookURL       string `valid:"url" json:"-" toml:"webHookURL,omitempty"`
	SkipIfNoCve      bool   `valid:"type(bool)" json:"-" toml:"skipIfNoCve"`
	ServerNameRegexp string `valid:"type(string)" json:"-" toml:"serverNameRegexp,omitempty"`
	Enabled          bool   `valid:"type(bool)" json:"-" toml:"-"`
}

type GostConf struct {
	VulnDict
}

type GovalDictConf struct {
	VulnDict
}

type HTTPConf struct {
	URL     string `valid:"url" json:"-"`
	Enabled bool   `toml:"-" json:"-"`
}

type JSONLoader struct {
}

type KEVulnConf struct {
	VulnDict
}

type Loader interface {
	Load(string, string) error
}

type MetasploitConf struct {
	VulnDict
}

type PortScanConf struct {
	IsUseExternalScanner bool `toml:"-" json:"-"`

	// Path to external scanner
	ScannerBinPath string `toml:"scannerBinPath,omitempty" json:"scannerBinPath,omitempty"`

	// set user has privileged
	HasPrivileged bool `toml:"hasPrivileged,omitempty" json:"hasPrivileged,omitempty"`

	// set the ScanTechniques for ScannerBinPath
	ScanTechniques []string `toml:"scanTechniques,omitempty" json:"scanTechniques,omitempty"`

	// set the FIREWALL/IDS EVASION AND SPOOFING(Use given port number)
	SourcePort string `toml:"sourcePort,omitempty" json:"sourcePort,omitempty"`
}

type ProxyConfig struct {
	ProxyURL   string
	BypassList string
}

type ReportConf interface {
	Validate() []error
}

type ReportOpts struct {
	CvssScoreOver       float64 `json:"cvssScoreOver,omitempty"`
	ConfidenceScoreOver int     `json:"confidenceScoreOver,omitempty"`
	NoProgress          bool    `json:"noProgress,omitempty"`
	RefreshCve          bool    `json:"refreshCve,omitempty"`
	IgnoreUnfixed       bool    `json:"ignoreUnfixed,omitempty"`
	IgnoreUnscoredCves  bool    `json:"ignoreUnscoredCves,omitempty"`
	DiffPlus            bool    `json:"diffPlus,omitempty"`
	DiffMinus           bool    `json:"diffMinus,omitempty"`
	Diff                bool    `json:"diff,omitempty"`
	Lang                string  `json:"lang,omitempty"`

	TrivyOpts
}

type SMTPConf struct {
	SMTPAddr              string   `toml:"smtpAddr,omitempty" json:"-"`
	SMTPPort              string   `toml:"smtpPort,omitempty" valid:"port" json:"-"`
	TLSMode               string   `toml:"tlsMode,omitempty" json:"-"`
	TLSInsecureSkipVerify bool     `toml:"tlsInsecureSkipVerify,omitempty" json:"-"`
	User                  string   `toml:"user,omitempty" json:"-"`
	Password              string   `toml:"password,omitempty" json:"-"`
	From                  string   `toml:"from,omitempty" json:"-"`
	To                    []string `toml:"to,omitempty" json:"-"`
	Cc                    []string `toml:"cc,omitempty" json:"-"`
	SubjectPrefix         string   `toml:"subjectPrefix,omitempty" json:"-"`
	Enabled               bool     `toml:"-" json:"-"`
}

type SaasConf struct {
	GroupID int64  `json:"GroupID"`
	Token   string `json:"Token"`
	URL     string `json:"URL"`
}

type ScanMode struct {
	// contains filtered or unexported fields
}

type ScanModule struct {
	// contains filtered or unexported fields
}

type ScanOpts struct {
	Vvv bool `json:"vvv,omitempty"`
}

type ScanTechnique int

type Server struct {
	Host            string
	UUID            string
	WinUpdateSrc    string
	WinUpdateSrcInt int `json:"-" toml:"-"` // for internal used (not specified in config.toml)
	CabPath         string
	IgnoredJSONKeys []string
}

type ServerInfo struct {
	BaseName           string                      `toml:"-" json:"-"`
	ServerName         string                      `toml:"-" json:"serverName,omitempty"`
	User               string                      `toml:"user,omitempty" json:"user,omitempty"`
	Host               string                      `toml:"host,omitempty" json:"host,omitempty"`
	IgnoreIPAddresses  []string                    `toml:"ignoreIPAddresses,omitempty" json:"ignoreIPAddresses,omitempty"`
	JumpServer         []string                    `toml:"jumpServer,omitempty" json:"jumpServer,omitempty"`
	Port               string                      `toml:"port,omitempty" json:"port,omitempty"`
	SSHConfigPath      string                      `toml:"sshConfigPath,omitempty" json:"sshConfigPath,omitempty"`
	KeyPath            string                      `toml:"keyPath,omitempty" json:"keyPath,omitempty"`
	CpeNames           []string                    `toml:"cpeNames,omitempty" json:"cpeNames,omitempty"`
	ScanMode           []string                    `toml:"scanMode,omitempty" json:"scanMode,omitempty"`
	ScanModules        []string                    `toml:"scanModules,omitempty" json:"scanModules,omitempty"`
	OwaspDCXMLPath     string                      `toml:"owaspDCXMLPath,omitempty" json:"owaspDCXMLPath,omitempty"`
	ContainersOnly     bool                        `toml:"containersOnly,omitempty" json:"containersOnly,omitempty"`
	ContainersIncluded []string                    `toml:"containersIncluded,omitempty" json:"containersIncluded,omitempty"`
	ContainersExcluded []string                    `toml:"containersExcluded,omitempty" json:"containersExcluded,omitempty"`
	ContainerType      string                      `toml:"containerType,omitempty" json:"containerType,omitempty"`
	Containers         map[string]ContainerSetting `toml:"containers,omitempty" json:"containers,omitempty"`
	IgnoreCves         []string                    `toml:"ignoreCves,omitempty" json:"ignoreCves,omitempty"`
	IgnorePkgsRegexp   []string                    `toml:"ignorePkgsRegexp,omitempty" json:"ignorePkgsRegexp,omitempty"`
	GitHubRepos        map[string]GitHubConf       `toml:"githubs" json:"githubs,omitempty"` // key: owner/repo
	UUIDs              map[string]string           `toml:"uuids,omitempty" json:"uuids,omitempty"`
	Memo               string                      `toml:"memo,omitempty" json:"memo,omitempty"`
	Enablerepo         []string                    `toml:"enablerepo,omitempty" json:"enablerepo,omitempty"` // For CentOS, Alma, Rocky, RHEL, Amazon
	Optional           map[string]interface{}      `toml:"optional,omitempty" json:"optional,omitempty"`     // Optional key-value set that will be outputted to JSON
	Lockfiles          []string                    `toml:"lockfiles,omitempty" json:"lockfiles,omitempty"`   // ie) path/to/package-lock.json
	FindLock           bool                        `toml:"findLock,omitempty" json:"findLock,omitempty"`
	FindLockDirs       []string                    `toml:"findLockDirs,omitempty" json:"findLockDirs,omitempty"`
	Type               string                      `toml:"type,omitempty" json:"type,omitempty"` // "pseudo" or ""
	IgnoredJSONKeys    []string                    `toml:"ignoredJSONKeys,omitempty" json:"ignoredJSONKeys,omitempty"`
	WordPress          *WordPressConf              `toml:"wordpress,omitempty" json:"wordpress,omitempty"`
	PortScan           *PortScanConf               `toml:"portscan,omitempty" json:"portscan,omitempty"`
	Windows            *WindowsConf                `toml:"windows,omitempty" json:"windows,omitempty"`

	IPv4Addrs      []string          `toml:"-" json:"ipv4Addrs,omitempty"`
	IPv6Addrs      []string          `toml:"-" json:"ipv6Addrs,omitempty"`
	IPSIdentifiers map[string]string `toml:"-" json:"ipsIdentifiers,omitempty"`

	// internal use
	LogMsgAnsiColor string     `toml:"-" json:"-"` // DebugLog Color
	Container       Container  `toml:"-" json:"-"`
	Distro          Distro     `toml:"-" json:"-"`
	Mode            ScanMode   `toml:"-" json:"-"`
	Module          ScanModule `toml:"-" json:"-"`
}

type SlackConf struct {
	HookURL     string   `valid:"url" json:"-" toml:"hookURL,omitempty"`
	LegacyToken string   `json:"-" toml:"legacyToken,omitempty"`
	Channel     string   `json:"-" toml:"channel,omitempty"`
	IconEmoji   string   `json:"-" toml:"iconEmoji,omitempty"`
	AuthUser    string   `json:"-" toml:"authUser,omitempty"`
	NotifyUsers []string `toml:"notifyUsers,omitempty" json:"-"`
	Text        string   `json:"-"`
	Enabled     bool     `toml:"-" json:"-"`
}

type TOMLLoader struct {
}

type TelegramConf struct {
	Token   string `json:"-"`
	ChatID  string `json:"-"`
	Enabled bool   `toml:"-" json:"-"`
}

type TrivyOpts struct {
	TrivyCacheDBDir       string `json:"trivyCacheDBDir,omitempty"`
	TrivyJavaDBRepository string `json:"trivyJavaDBRepository,omitempty"`
	TrivySkipJavaDBUpdate bool   `json:"trivySkipJavaDBUpdate,omitempty"`
}

type V1 struct {
	Version string
	Servers map[string]Server
	Proxy   ProxyConfig
}

type VulnDict struct {
	Name string

	// DB type of CVE dictionary (sqlite3, mysql, postgres or redis)
	Type string

	// http://cve-dictionary.com:1323 or DB connection string
	URL string `json:"-"`

	// /path/to/cve.sqlite3
	SQLite3Path string

	DebugSQL bool
}

type VulnDictInterface interface {
	Init()
	Validate() error
	IsFetchViaHTTP() bool
	CheckHTTPHealth() error
	GetName() string
	GetType() string
	GetURL() string
	GetSQLite3Path() string
	GetDebugSQL() bool
}

type WindowsConf struct {
	ServerSelection int    `toml:"serverSelection,omitempty" json:"serverSelection,omitempty"`
	CabPath         string `toml:"cabPath,omitempty" json:"cabPath,omitempty"`
}

type WordPressConf struct {
	OSUser  string `toml:"osUser,omitempty" json:"osUser,omitempty"`
	DocRoot string `toml:"docRoot,omitempty" json:"docRoot,omitempty"`
	CmdPath string `toml:"cmdPath,omitempty" json:"cmdPath,omitempty"`
	NoSudo  bool   `toml:"noSudo,omitempty" json:"noSudo,omitempty"`
}

type WpScanConf struct {
	Token          string `toml:"token,omitempty" json:"-"`
	DetectInactive bool   `toml:"detectInactive,omitempty" json:"detectInactive,omitempty"`
}