8000 Updated nikto scanner to v2.5.0 (closes #604) by Ilyesbdlala · Pull Request #617 · secureCodeBox/secureCodeBox · GitHub
[go: up one dir, main page]

Skip to content

Conversation

@Ilyesbdlala
Copy link
Member
@Ilyesbdlala Ilyesbdlala commented Aug 30, 2021

Description

This PR updates the nikto scanner to 2.5.0. The main reason for it is to solve the issue the scanner has, when parsing findings from an unresolvable host (Issue #604).
Updating also results into more findings.
It should be noted that with this PR, Nikto scanner relies on the github repo having a 2.5.0 branch. The ci.yaml has to be changed if the 2.5.0 becomes in the release branch.

Checklist

  • Test your changes as thoroughly as possible before you commit them. Preferably, automate your test by unit/integration tests.
  • Make sure npm test runs for the whole project.
  • Make codeclimate checks happy

Ilyesbdlala and others added 10 commits August 26, 2021 16:16
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: GitHub Actions <securecodebox@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
@Ilyesbdlala Ilyesbdlala linked an issue Aug 30, 2021 that may be closed by this pull request
@Ilyesbdlala Ilyesbdlala added the scanner Implement or update a security scanner label Aug 30, 2021
@rfelber rfelber changed the title Update nikto scanner to 2.5.0 (closes #604) Updated nikto scanner to v2.5.0 (closes #604) Aug 31, 2021
This is done to make sure that codeclimate/total-coverage is consistent between branches

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Copy link
Contributor
@JohannesZahn JohannesZahn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With everything else we'll have to wait on more feedback on sullo/nikto#742

Co-authored-by: Johannes Zahn <johannes.zahn@iteratec.com>

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…s each

This is file has to be short, since it's presented in the docs website as an example.

Co-authored-by: Johannes Zahn <johannes.zahn@iteratec.com>

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
with:
repository: "sullo/nikto"
path: nikto
ref: nikto-2.5.0
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it would be great to create a variable containing the desired version to minimize the locations we have to update for a new release

expect(findings).toMatchSnapshot();
});
8000
test("parses no web server found finding correctly", async () => {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
test("parses no web server found finding correctly", async () => {
test("parses 'no web server found' finding correctly", async () => {

I think this could improve readability

@Ilyesbdlala
Copy link
Member Author

This pull request is now stale (due to #610). Further development is on PR #668

@Weltraumschaf Weltraumschaf deleted the bugfix/update_nikto branch February 21, 2023 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scanner Implement or update a security scanner

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

0