FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

New Scanner: HTTPLoot · Issue #1247 · secureCodeBox/secureCodeBox · GitHub

New Scanner: HTTPLoot #1247

Description

🚓 New Scanner implementation request

HTTPLoot is a new

automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

This seems like a good fit to the scb.

Steps to implement a new scanner

Hint: A general guide how to implement a new SCB scanner is documented here

  • Create a new folder with the name of the scanner here
  • Add a README.gotmpl and give a brief overview of the scanner and its configuration options.
  • Add a HelmChart and document all configuration options.
  • Implement a new scanner specific scan-type.yaml
  • Implement a new scanner specific parse-definition.yaml
  • Add (optional) some cascading-rules.yaml like documented here
  • Add (optional) a Dockerfile for the scanner if there is no existing one publicly available on dockerHub
  • Use the parser-SDK to implement a new findings parser (currently based on NodeJS)
  • Add unit tests with at minimum 80% test coverage
  • Add some example scan.yaml and finding.yaml files in the example folder
  • Implement a new integration or E2E test for the hook here

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    scannerImplement or update a security scanner

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions


      Back | FazBrowse Home | New Git URL