Skip to content

Releases: ozzi-/vulnrep

1.3

20 May 09:52
Compare
Choose a tag to compare

Improved error reporting
Fixed multiple bugs

WPVuln DB - API v3 support

17 Jul 12:06
d903d0e
Compare
Choose a tag to compare

Bumped API Support of WPVulnDB to v3. This requires a change to your subscription.json (apikey is now called apikeyVulners and there is a new apikeyWPVulnDB).
Place the following json files next to the JAR and edit them to your liking.

email.json

{
	"recipients":[ "email@domain.com" ],
	"sender": {
		"address": "something@gmail.com",
		"host": "smtp.gmail.com",
		"port":25,
		"user":"something@gmail.com",
		"password":"***********************",
		"subject":"Vulnerability Report <d>" 
	}
}

subscriptions.json

{
        "apikeyVulners": "XXXXXX",
        "apikeyWPVulnDB": "YYYYYY",
        "entries":[
                {
                        "name":"custom_wpvulndb_plugin" ,
                        "plugins":[
			        "duplicate-post","torro-forms","autoptimize","buddypress","mce-table-buttons","polylang","post-types-definitely","regenerate-thumbnails"
                        ]
                },{
                        "name":"chrome" ,
                        "cvss": 5.0
                },{
                        "name":"firefox" ,
                        "cvss": 5.0
                },{
                        "name":"atlassian" ,
                        "cvss": 5.0
                },{
                        "name":"oracle java" ,
                        "cvss": 5.0
                },{
                        "name":"centos" ,
                        "cvss": 5.0
                }
        ]
}

history.json

{                        
        "history": [],
        "deleteAfter": {
                "days": 60
        }
}

API Key Support

08 Apr 07:19
a41854b
Compare
Choose a tag to compare

Since vulners seemd to change their bot detection, support for api keys was added.


Don't forget to place the following files next to the JAR:
email.json:

    {
        "recipients":[ "reporting@xxxxxx.com" ],
        "sender": {
            "address": "xxxxxx@gmail.com", 
            "host": "smtp.gmail.com",
            "port":25,
            "user":"xxxxxx@gmail.com",
            "password":"xxxxxx",
            "subject":"Vulnerability Report <d>"
        }
    }

subscriptions.json:

     {
        "apikey": "XYZ....ZYX",
        "entries":[
        {
            "name":"intel" ,
            "cvss": 5.0
        },{
            "name":"custom_wpvulndb_plugin" ,
            "plugins":[
                "duplicate-post","regenerate-thumbnails"
            ]
        },{
            "name":"chrome" ,
            "cvss": 5.0
        },{
            "name":"centos" ,
            "cvss": 5.0
        }
        ]
    }

history.json:

    {
        "history": [],
        "deleteAfter": {
        "days": 60
        }
    }

1.0

03 Jan 07:42
75efbe2
Compare
Choose a tag to compare
1.0

Don't forget to place the following files next to the JAR:
email.json:

    {
        "recipients":[ "reporting@xxxxxx.com" ],
        "sender": {
            "address": "xxxxxx@gmail.com", 
            "host": "smtp.gmail.com",
            "port":25,
            "user":"xxxxxx@gmail.com",
            "password":"xxxxxx",
            "subject":"Vulnerability Report <d>"
        }
    }

subscriptions.json:

     {
        "entries":[
        {
            "name":"intel" ,
            "cvss": 5.0
        },{
            "name":"custom_wpvulndb_plugin" ,
            "plugins":[
                "duplicate-post","regenerate-thumbnails"
            ]
        },{
            "name":"chrome" ,
            "cvss": 5.0
        },{
            "name":"centos" ,
            "cvss": 5.0
        }
        ]
    }

history.json:

    {
        "history": [],
        "deleteAfter": {
        "days": 60
        }
    }