module Incremental

Overview

Incremental is a CLI tool that allows you to smartly make incremental scans using the BrightSec API.

Defined in:

incremental.cr

Constant Summary

API_TESTS = ["amazon_s3_takeover", "business_constraint_bypass", "date_manipulation", "file_upload", "full_path_disclosure", "graphql_introspection", "id_enumeration", "improper_asset_management", "jwt", "mass_assignment", "nosql", "osi", "lfi", "rfi", "sqli", "ssrf", "xxe", "open_buckets", "open_database"]
HTML_TESTS = ["xss", "full_path_disclosure", "excessive_data_exposure", "html_injection", "unvalidated_redirect", "stored_xss", "proto_pollution", "server_side_js_injection", "header_security", "cookie_security", "css_injection", "directory_listing", "secret_tokens"]
OTHER_TESTS = ["amazon_s3_takeover", "angular_csti", "backup_locations", "broken_saml_auth", "brute_force_login", "business_constraint_bypass", "common_files", "cookie_security", "csrf", "css_injection", "cve_test", "date_manipulation", "default_login_location", "directory_listing", "excessive_data_exposure", "exposed_couch_db_apis", "file_upload", "full_path_disclosure", "graphql_introspection", "header_security", "html_injection", "http_method_fuzzing", "id_enumeration", "improper_asset_management", "insecure_tls_configuration", "jwt", "ldapi", "lfi", "mass_assignment", "nosql", "open_buckets", "open_database", "osi", "prompt_injection", "proto_pollution", "retire_js", "rfi", "secret_tokens", "server_side_js_injection", "sqli", "ssrf", "ssti", "stored_xss", "unvalidated_redirect", "version_control_systems", "webdav", "wordpress", "xpathi", "xss", "xxe"]
POST_TESTS = ["csrf", "file_upload", "css_injection", "xss", "full_path_disclosure", "excessive_data_exposure", "html_injection", "unvalidated_redirect", "lfi", "rfi", "sqli", "ssrf", "ssti", "stored_xss", "osi", "proto_pollution", "server_side_js_injection", "nosql"]
STATIC_TESTS = ["cve_test", "open_buckets", "open_database", "amazon_s3_takeover", "retire_js", "secret_tokens"]
VERSION = "0.2.1"
XML_TESTS = ["xxe", "xss", "secret_tokens"]