René's URL Explorer Experiment

Title: Reimporting SCB Findings from OWASP DefectDojo after persisting them by J12934 · Pull Request #330 · secureCodeBox/secureCodeBox · GitHub

Open Graph Title: Reimporting SCB Findings from OWASP DefectDojo after persisting them by J12934 · Pull Request #330 · secureCodeBox/secureCodeBox

X Title: Reimporting SCB Findings from OWASP DefectDojo after persisting them by J12934 · Pull Request #330 · secureCodeBox/secureCodeBox

Description: This PR changes the DefectDojo Hook from a ReadOnly Hook to a ReadAndWrite Hook. After uploading the raw result findings of different SCB scanner to OWASP DefectDojo this extension is responsible for importing the uploaded findings back to the secureCodeBox. This lets us import the false positive / duplicate status from DefectDojo attributes to the scans findings in further hooks, e.g. slack notification or later on elasticSearch persistence. ┌─SCB OWASP ZAP──┐ ┌───────────────┐ ┌─────────────────────┐ ┌ ─ ─ ─ ┐ │ │ │ ReadWriteHook:│ │ ReadHook: │ │┌──────────────┐│ │ DefectDojo- ├──────▶│ Teams Notification ├──────▶ │ Teams │ ││ ZAP Scanner ││ │ Persistence │ │ Hook │ │└──────────────┘│ │ │ └─────────────────────┘ └ ─ ─ ─ ┘ │ │───────▶│ │ │┌──────────────┐│ │ │ ┌─────────────────────┐ ┌ ─ ─ ─ ┐ ││ ZAP Parser ││ │ │ │ ReadHook: │ │└──────────────┘│ │ ├──────▶│ Elasticsearch- ├──────▶ │ ECK │ │ │ │ │ │ Persistence Hook │ └────────────────┘ └────┬──────────┘ └─────────────────────┘ └ ─ ─ ─ ┘ │ ▲ │ │ │ │◀═══════════════ Added by PR 330 ▼ │ ┌ ─ ─ ─ ─ ─ ─ ─ ┐ │ DefectDojo │ Instance │ │ ─ ─ ─ ─ ─ ─ ─ ─ The imported findings from DefectDojo are mapped back to the secureCodeBox finding format and overwrite the original secureCodeBox findings from the parser. Here's a example mapped finding: { "id": "fdc841ef-ef22-45e8-8ecd-c6f246312eb0", "name": "Content Security Policy (CSP) Header Not Set", "location": "http://juice-shop:3000", "description": "Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.\n\nReference: https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Introducing_Content_Security_Policyhttps://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.htmlhttp://www.w3.org/TR/CSP/http://w3c.github.io/webappsec/specs/content-security-policy/csp-specification.dev.htmlhttp://www.html5rocks.com/en/tutorials/security/content-security-policy/http://caniuse.com/#feat=contentsecuritypolicyhttp://content-security-policy.com/\n\nURL: http://juice-shop:3000/ftp/\nMethod: GET\n\nURL: http://juice-shop:3000/ftp\nMethod: GET\n\nURL: http://juice-shop:3000/ftp/coupons_2013.md.bak\nMethod: GET\n\nURL: http://juice-shop:3000/ftp/suspicious_errors.yml\nMethod: GET\n\nURL: http://juice-shop:3000/ftp/encrypt.pyc\nMethod: GET\n\nURL: http://juice-shop:3000/ftp/eastere.gg\nMethod: GET\n\nURL: http://juice-shop:3000/\nMethod: GET\n\nURL: http://juice-shop:3000/ftp/package.json.bak\nMethod: GET\n\nURL: http://juice-shop:3000/ftp/quarantine\nMethod: GET\n\nURL: http://juice-shop:3000\nMethod: GET\n\nURL: http://juice-shop:3000/sitemap.xml\nMethod: GET\n", "category": "DefectDojo Imported Finding", "severity": "Medium", "attributes": { "defectdojo.org/finding-id": 10414, "defectdojo.org/finding-url": "https://defectdojo.example.com/finding/10414", "defectdojo.org/test-id": 588, "falsePositive": false, "defectdojo.org/test-url": "https://defectdojo.example.com/test/588", "duplicate": true }, "osi_layer": null } I updated the Kubernetes Client version and regenerated the autogenerated Classes for the CRD's which causes probably 98% of this PR diff, you can skip passed them (everything under io.securecodebox.models in commit a9e519b).

Open Graph Description: This PR changes the DefectDojo Hook from a ReadOnly Hook to a ReadAndWrite Hook. After uploading the raw result findings of different SCB scanner to OWASP DefectDojo this extension is responsible f...

X Description: This PR changes the DefectDojo Hook from a ReadOnly Hook to a ReadAndWrite Hook. After uploading the raw result findings of different SCB scanner to OWASP DefectDojo this extension is responsible f...

Opengraph URL: https://github.com/secureCodeBox/secureCodeBox/pull/330

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width