Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update vulnerability reporting to include exploitation and post exploitation details #855

Merged
merged 4 commits into from
Jan 10, 2025
+6 −0
Merged

Update vulnerability reporting to include exploitation and post exploitation details #855

Changes from 2 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
cb5d18f
Update vulnerability reporting to include exploitation and post explo…
Zakaria-Latif Jan 10, 2025
1205b60
Update docstring
Zakaria-Latif Jan 10, 2025
e97eac1
types
Zakaria-Latif Jan 10, 2025
d1a653d
types
Zakaria-Latif Jan 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions src/ostorlab/agent/mixins/agent_report_vulnerability_mixin.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,8 @@ def report_vulnerability(
risk_rating: RiskRating,
dna: Optional[str] = None,
vulnerability_location: Optional[VulnerabilityLocation] = None,
exploitation_detail: Optional[str] = None,
Zakaria-Latif marked this conversation as resolved.
Show resolved Hide resolved
Zakaria-Latif marked this conversation as resolved.
Show resolved Hide resolved
post_exploitation_detail: Optional[str] = None,
Zakaria-Latif marked this conversation as resolved.
Show resolved Hide resolved
) -> None:
"""Fetch the details of an entry from the knowledge base, and emit a vulnerability message.
Args:
Expand All @@ -85,6 +87,8 @@ def report_vulnerability(
risk_rating: the risk rating assigned to the result of the scan.
dna: unique identifier for duplicate vulnerabilities.
vulnerability_location: vulnerability location where the vulnerability was detected.
exploitation_detail: steps taken to exploit the vulnerability.
post_exploitation_detail: impact or aftermath of the exploitation.
Returns:
None
"""
Expand Down Expand Up @@ -126,6 +130,8 @@ def report_vulnerability(
"cvss_v4_vector": cvss_v4_vector,
"dna": dna,
"category_groups": category_groups,
"exploitation_detail": exploitation_detail,
Zakaria-Latif marked this conversation as resolved.
Show resolved Hide resolved
"post_exploitation_detail": post_exploitation_detail,
Zakaria-Latif marked this conversation as resolved.
Show resolved Hide resolved
}
if vulnerability_location is not None:
data["vulnerability_location"] = vulnerability_location.to_dict()
Expand Down
Loading