added webapp_with_db type to select on for WNS assignment (excludes gitlist)

This commit is contained in:
ts
2019-02-18 13:52:54 +00:00
parent 754013ca6b
commit 8156c8bfb2
7 changed files with 9 additions and 2 deletions

View File

@@ -14,6 +14,7 @@
<type>webapp</type>
<type>in_the_wild</type>
<type>webapp_with_db</type>
<privilege>user_rwx</privilege>
<access>remote</access>
<platform>linux</platform>

View File

@@ -10,6 +10,7 @@
<type>webapp</type>
<type>in_the_wild</type>
<type>webapp_with_db</type>
<privilege>various</privilege>
<access>remote</access>
<platform>linux</platform>

View File

@@ -69,4 +69,6 @@ class wordpress_2x {
command => '/bin/bash /wordpress_conf.sh',
minute => [0, 5,10,15,20,25,30,35,40,45,50,55]
}
# ensure_resource('tidy','wp2 remove default site', {'path'=>'/etc/apache2/sites-enabled/000-default.conf'})
}

View File

@@ -9,6 +9,7 @@
<description>wordpress</description>
<type>webapp</type>
<type>webapp_with_db</type>
<type>in_the_wild</type>
<privilege>various</privilege>
<access>remote</access>

View File

@@ -9,6 +9,7 @@
<description>wordpress</description>
<type>webapp</type>
<type>webapp_with_db</type>
<type>in_the_wild</type>
<privilege>various</privilege>
<access>remote</access>

View File

@@ -10,6 +10,7 @@
<type>webapp</type>
<type>in_the_wild</type>
<type>webapp_with_db</type>
<privilege>various</privilege>
<access>remote</access>
<platform>linux</platform>

View File

@@ -4,7 +4,7 @@
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">
<!-- Security audit of an in the wild web application -->
<!-- Security audit of an in the wild web application that uses a database -->
<system>
<system_name>web_server</system_name>
<base platform="linux" type="server" module_path=".*stretch.*"/>
@@ -13,7 +13,7 @@
<value>172.16.0.2</value>
</input>
<vulnerability type="in_the_wild" module_path=".*webapp.*">
<vulnerability type="webapp_with_db" module_path=".*webapp.*">
<input into="IP_address">
<datastore access="0">IP_addresses</datastore>
</input>