Merge pull request #11408 from projectdiscovery/release-prep-10.1.1

Release Prep - v10.1.1
projectdiscovery · Dec 23, 2024 · 4913c06 · 4913c06
2 parents c2872b5 + 7ba61dc
commit 4913c06
Show file tree

Hide file tree

Showing 31 changed files with 51 additions and 39 deletions.
diff --git a/cloud/alibaba/actiontrail/multi-region-logging-disabled.yaml b/cloud/alibaba/actiontrail/multi-region-logging-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,actiontrail
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,actiontrail
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/aliyun-code-env.yaml → cloud/alibaba/alibaba-cloud-code-env.yaml b/cloud/alibaba/aliyun-code-env.yaml → cloud/alibaba/alibaba-cloud-code-env.yaml
@@ -1,23 +1,25 @@
-id: aliyun-code-env
+id: alibaba-cloud-code-env
 
 info:
-  name: Aliyun Cloud Environment Validation
+  name: Alibaba Cloud Environment Validation
   author: DhiyaneshDK
   severity: info
   description: |
     Checks if Aliyun CLI is set up and all necessary tools are installed on the environment.
   reference:
     - https://github.com/aliyun/aliyun-cli
   metadata:
-    max-request: 2
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config
+    max-request: 3
+    verified: true
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config
 
 variables:
   region: "cn-hangzhou"
 
-flow: code(1) && code(2)
+flow: code(1) && code(2) && code (3)
 
 self-contained: true
+
 code:
   - engine:
       - sh
@@ -49,8 +51,18 @@ code:
         words:
           - "jq is installed"
 
+  - engine:
+      - sh
+      - bash
+    source: |
+      ossutil --version >/dev/null 2>&1 && echo "ossutil is installed." || echo "ossutil is not installed."
+
+    matchers:
+      - type: word
+        words:
+          - "ossutil is installed"
+
     extractors:
       - type: dsl
         dsl:
-          - '"Aliyun CLI is properly configured for account \"" + account + "\" and all the necessary tools required are installed"'
-# digest: 4a0a00473045022100cef41c277f557c5c47985c8dbb8c631377535b96487c987174156c8387fa145402207be4372c14784ddedac10ec8bdb623a02ac17dd481fc9e8fdfa21adf0a1032b7:922c64590222798bb761d5b6d8e72950
+          - '"Aliyun CLI is properly configured for account \"" + account + "\" and all the necessary tools required are installed."'
diff --git a/cloud/alibaba/ecs/os-patches-outdated.yaml b/cloud/alibaba/ecs/os-patches-outdated.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,ecs
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,ecs
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ecs/unattached-disk-encryption-disabled.yaml b/cloud/alibaba/ecs/unattached-disk-encryption-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,ecs
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,ecs
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ecs/unattached-vminstance-encryption-disabled.yaml b/cloud/alibaba/ecs/unattached-vminstance-encryption-disabled.yaml
@@ -13,7 +13,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,ecs
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,ecs
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ecs/unrestricted-rdp-access.yaml b/cloud/alibaba/ecs/unrestricted-rdp-access.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,ecs
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,ecs
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ecs/unrestricted-ssh-access.yaml b/cloud/alibaba/ecs/unrestricted-ssh-access.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,ecs
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,ecs
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/custom-ram-policy-admin-priv.yaml b/cloud/alibaba/ram/custom-ram-policy-admin-priv.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/max-password-retry-disabled.yaml b/cloud/alibaba/ram/max-password-retry-disabled.yaml
@@ -11,7 +11,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/mfa-console-password-disabled.yaml b/cloud/alibaba/ram/mfa-console-password-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-expiration-unconfigured.yaml b/cloud/alibaba/ram/password-policy-expiration-unconfigured.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-length-unconfigured.yaml b/cloud/alibaba/ram/password-policy-length-unconfigured.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-lowercase-unconfigured.yaml b/cloud/alibaba/ram/password-policy-lowercase-unconfigured.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-num-unconfigured.yaml b/cloud/alibaba/ram/password-policy-num-unconfigured.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-reuse-enabled.yaml b/cloud/alibaba/ram/password-policy-reuse-enabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-symbol-unconfigured.yaml b/cloud/alibaba/ram/password-policy-symbol-unconfigured.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/ram/password-policy-uppercase-unconfigured.yaml b/cloud/alibaba/ram/password-policy-uppercase-unconfigured.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-ram
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-ram
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/encryption-intransit-disabled.yaml b/cloud/alibaba/rds/encryption-intransit-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/log-connections-disabled.yaml b/cloud/alibaba/rds/log-connections-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/log-disconnections-disabled.yaml b/cloud/alibaba/rds/log-disconnections-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/log-duration-disabled.yaml b/cloud/alibaba/rds/log-duration-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/mssql-audit-disabled.yaml b/cloud/alibaba/rds/mssql-audit-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/mysql-audit-disabled.yaml b/cloud/alibaba/rds/mysql-audit-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/postgresql-audit-disabled.yaml b/cloud/alibaba/rds/postgresql-audit-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/rds-audit-disabled.yaml b/cloud/alibaba/rds/rds-audit-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/rds/transparent-encryption-disabled.yaml b/cloud/alibaba/rds/transparent-encryption-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 2
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-rds
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-rds
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/security-center/scheduled-vulnscan-disabled.yaml b/cloud/alibaba/security-center/scheduled-vulnscan-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,security-center
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,security-center
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/security-center/security-notification-disabled.yaml b/cloud/alibaba/security-center/security-notification-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,security-center
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,security-center
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/security-center/security-plan-disabled.yaml b/cloud/alibaba/security-center/security-plan-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,security-center
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,security-center
 
 variables:
   region: "cn-hangzhou"

diff --git a/cloud/alibaba/vpc/vpc-flow-disabled.yaml b/cloud/alibaba/vpc/vpc-flow-disabled.yaml
@@ -12,7 +12,7 @@ info:
   metadata:
     max-request: 1
     verified: true
-  tags: cloud,devops,aliyun,alibaba,aliyun-cloud-config,alibaba-vpc
+  tags: cloud,devops,aliyun,alibaba,alibaba-cloud-config,alibaba-vpc
 
 variables:
   region: "cn-hangzhou"

diff --git a/profiles/aliyun-cloud-config.yml → profiles/alibaba-cloud-config.yml b/profiles/aliyun-cloud-config.yml → profiles/alibaba-cloud-config.yml
@@ -6,15 +6,15 @@
 # This profile is focused on identifying misconfigurations and vulnerabilities in aliyun ACLs. Proper configuration of ACLs is crucial for securing aliyun resources and ensuring that only authorized entities have access.
 #
 # Included Templates:
-# This configuration references specific templates tagged with 'aliyun-cloud-config' to cover comprehensive scanning of aliyun ACLs.
+# This configuration references specific templates tagged with 'alibaba-cloud-config' to cover comprehensive scanning of aliyun ACLs.
 #
 # Running this profile
 # You can run this profile using the following command:
-# nuclei -profile aliyun-cloud-config
+# nuclei -profile alibaba-cloud-config
 code: true # enable code templates
 
 tags:
-  - aliyun-cloud-config # filter templates with "aliyun-cloud-config" tags
+  - alibaba-cloud-config # filter templates with "alibaba-cloud-config" tags
 
 var:
   - region=cn-hangzhou # template input for "region" variable