From a89f8d1f292b7560660fe3947ee7b834290ed792 Mon Sep 17 00:00:00 2001 From: daniel_sagi Date: Sun, 15 Jul 2018 13:14:48 +0300 Subject: [PATCH] added categories for vulnerabilities. From now on, all vulnerabilities should be classified with a category --- src/core/events/types/common.py | 7 ++++++- src/core/types.py | 17 +++++++++++++++++ 2 files changed, 23 insertions(+), 1 deletion(-) diff --git a/src/core/events/types/common.py b/src/core/events/types/common.py index 55dd8fd..5361d4e 100644 --- a/src/core/events/types/common.py +++ b/src/core/events/types/common.py @@ -42,12 +42,17 @@ class Service(object): return self.__doc__ class Vulnerability(object): - def __init__(self, component, name): + def __init__(self, component, name, category=None): self.component = component + self.category = category self.name = name self.evidence = "" self.role = "Node" + def get_category(self): + if self.category: + return self.category.name + def get_name(self): return self.name diff --git a/src/core/types.py b/src/core/types.py index 2a32d28..ac3d385 100644 --- a/src/core/types.py +++ b/src/core/types.py @@ -18,4 +18,21 @@ class Kubelet(KubernetesCluster): name = "Kubelet" +""" Categories """ +class InformationDisclosure(object): + name = "Information Disclosure" + +class RemoteCodeExec(object): + name = "Remote Code Execution" + +class IdentityTheft(object): + name = "Identity Theft" + +class UnauthenticatedAccess(object): + name = "Unauthenticated Access" + +class AccessRisk(object): + name = "Access Risk" + + from events import handler # import is in the bottom to break import loops \ No newline at end of file