First commit

vulnerabilities/calls.py

@@ -0,0 +1,33 @@
+#!/usr/bin/env python3
+
+def calls() -> list:
+    calls = list()
+    # https://cwe.mitre.org/data/definitions/78.html
+    # For commoand injections
+    calls.append({
+        "call": "exec",
+        "description": "",
+        "level": "high"
+    })
+    calls.append({
+        "call": "chown",
+        "description": "",
+        "level": "high"
+    })
+    calls.append({
+        "call": "chmod",
+        "description": "",
+        "level": "high"
+    })
+    calls.append({
+        "call": "rsync",
+        "description": "",
+        "level": "high"
+    })
+    calls.append({
+        "call": "wrap_socket",
+        "description": "This functions is deprecated. You must use SSLContext.wrap_context",
+        "level": "high"
+    })
+    return calls
+

vulnerabilities/sysctl.py

@@ -0,0 +1,29 @@
+#!/usr/bin/env python3
+
+def sysctl() -> list:
+    sysctl = list()
+
+    # https://access.redhat.com/security/sysctl/sysctl-2023-0179
+    sysctl.append({
+        "cve": "cve-2023-0179",
+        "description": "",
+        "flag": "kernel.unprivileged_userns_clone",
+        "value": 0,
+        "level": "medium",
+        "affectedSystem": ({
+            'linux': "Debian",
+            'release': 'buster',
+            'kernel': '4.19.249-2'
+        })
+    })
+
+    # Best practice from CIS
+    sysctl.append({
+        "cve": "",
+        "description": "Disable IPv4 forwarding",
+        "flag": "net.ipv4.conf.all.forwarding",
+        "value": 0,
+        "level": "medium"
+    })
+
+    return sysctl

vulnerabilities/system.py

@@ -0,0 +1,6 @@
+#!/usr/bin/env python3
+
+def system() -> list:
+    system = list()
+
+    return system