Update parsing and move files

This commit is contained in:
gbucchino
2023-06-06 16:55:22 +02:00
parent 9a4c845f6d
commit 7e2c6b3ee8
8 changed files with 66 additions and 17 deletions
+1
View File
@@ -0,0 +1 @@
#!/usr/bin/env python3
+33
View File
@@ -0,0 +1,33 @@
#!/usr/bin/env python3
def calls() -> list:
calls = list()
# https://cwe.mitre.org/data/definitions/78.html
# For commoand injections
calls.append({
"call": "exec",
"description": "",
"level": "high"
})
calls.append({
"call": "chown",
"description": "",
"level": "high"
})
calls.append({
"call": "chmod",
"description": "",
"level": "high"
})
calls.append({
"call": "rsync",
"description": "",
"level": "high"
})
calls.append({
"call": "wrap_socket",
"description": "This functions is deprecated. You must use SSLContext.wrap_context",
"level": "high"
})
return calls
+33
View File
@@ -0,0 +1,33 @@
#!/usr/bin/env python3
# Define the entry
def sysctl() -> list:
sysctl = list()
# https://access.redhat.com/security/sysctl/sysctl-2023-0179
sysctl.append({
"from": "cve",
"id": "cve-2023-0179",
"description": "A buffer overflow vulnerability was be found in Linux system. An hacker can allow privilege escalation through Netfilter subsystem",
"flag": "kernel.unprivileged_userns_clone",
"value": 0,
"level": "medium",
"affectedSystem": ({
'linux': "Debian",
'release': 'buster',
'kernel': '4.19.249-2'
})
})
# Best practice from CIS
sysctl.append({
"from": "cis",
"id": "",
"description": "Disable IPv4 forwarding",
"flag": "net.ipv4.conf.all.forwarding",
"value": 0,
"level": "medium",
})
return sysctl
+6
View File
@@ -0,0 +1,6 @@
#!/usr/bin/env python3
def system() -> list:
system = list()
return system