Package com.denimgroup.threadfix.data.entities

Examples of com.denimgroup.threadfix.data.entities.SurfaceLocation

48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
    private ThreadFixInterface(){}

    public static EndpointQuery toEndpointQuery(Finding finding) {
        EndpointQueryBuilder builder = EndpointQueryBuilder.start();

        SurfaceLocation location = finding.getSurfaceLocation();

        if (location != null) {
            if (location.getHttpMethod() != null) {
                builder.setHttpMethod(location.getHttpMethod());
            }

            if (location.getPath() != null) {
                builder.setDynamicPath(location.getPath());
            }

            if (location.getParameter() != null) {
                builder.setParameter(location.getParameter());
            }
        }


        if (finding.getIsStatic()) {
View Full Code Here
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
 
    String action = defaultDirective;
    if (directive != null && directive.getDirective() != null)
      action = directive.getDirective();
   
    SurfaceLocation surfaceLocation = vulnerability.getSurfaceLocation();
 
    String vulnType = vulnerability.getGenericVulnerability().getName();
    // Check if the vuln is supported
    if (!stringInList(vulnType, getSupportedVulnerabilityTypes()))
      return null;
   
    String vulnUrl = surfaceLocation.getPath();
   
    // TODO remove this, it should be unnecessary.
    String param = null;
    if (surfaceLocation.getParameter() != null && !surfaceLocation.getParameter().isEmpty())
      param = surfaceLocation.getParameter().replaceFirst("param=", "");
 
    String rule = generateRuleText(vulnType, vulnUrl, action, currentId.toString(), param, vulnerability);
 
    if (rule != null) {
      WafRule newRule = new WafRule();
View Full Code Here
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
        || vulnerability.getGenericVulnerability() == null
        || vulnerability.getGenericVulnerability().getName() == null) {
      return null;
    }
   
    SurfaceLocation surfaceLocation = vulnerability.getSurfaceLocation();
 
    String vulnType = vulnerability.getGenericVulnerability().getName();
    // Check if the vuln is supported
    if (!stringInList(vulnType, getSupportedVulnerabilityTypes())) {
      return null;
    }
   
    String parameter = surfaceLocation.getParameter();
    String path      = surfaceLocation.getPath();
   
    WafRule rule = new WafRule();
    rule.setIsNormalRule(false);
    rule.setWafRuleDirective(directive);
    rule.setNativeId(currentId.toString());
View Full Code Here
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
                            .append("http://cwe.mitre.org/data/definitions/")
                            .append(vulnerability.getGenericVulnerability().getId())
                            .append(".html")
                            .append('\n');

                    SurfaceLocation surfaceLocation = vulnerability.getSurfaceLocation();
                    stringBuilder
                            .append("Vulnerability attack surface location:\n")
                            .append("URL: ")
                            .append(surfaceLocation.getUrl())
                            .append("\n")
                            .append("Parameter: ")
                            .append(surfaceLocation.getParameter());

                    List<Finding> findings = vulnerability.getFindings();
                    if (findings != null && !findings.isEmpty()) {
                        addUrlReferences(findings, stringBuilder);
                        addNativeIds(findings, stringBuilder);
View Full Code Here
TOP

Related Classes of com.denimgroup.threadfix.data.entities.SurfaceLocation

  • com.denimgroup.threadfix.framework.engine.ThreadFixInterface
  • com.denimgroup.threadfix.service.defects.HPQualityCenterDefectTracker
  • com.denimgroup.threadfix.service.waf.BigIPASMGenerator
  • com.denimgroup.threadfix.service.waf.RealTimeProtectionGenerator
  • java.util.regex.Pattern
  • java.net.URL
  • java.util.regex.Matcher
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.