root
/
tsunami-security-scanner
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
356 Commits 4 Branches 29 Tags 1.5 MiB
Commit Graph

40 Commits

Author SHA1 Message Date
Pierre Precourt c8751e1597 Bump python dependencies due to vulnerabilities. 
PiperOrigin-RevId: 844806534
Change-Id: I7f10b45ef07015f30f6d2a76356d34b8e2cab134
 2025-12-15 09:35:14 -08:00
Pierre Precourt 74b95a484b Change the definition of Python plugins to require the `GetAdvisories` function to be defined. 
PiperOrigin-RevId: 814132727
Change-Id: Ib0a543613ad22238b14b3daff9c605d3bc3bf184
 2025-10-02 02:02:06 -07:00
Pierre Precourt edd1346ade Each Python plugin now has a `GetAdvisories` function that returns the vulnerability it detects. 
PiperOrigin-RevId: 814121982
Change-Id: I66dcff87a332cdbe81eea11735a878db5f47ba1f
 2025-10-02 01:28:31 -07:00
Pierre Precourt 5f91b6ba14 No public description 
PiperOrigin-RevId: 796957322
Change-Id: Ifd734ded3eda97e9999db4beb483c5ab15453d7e
 2025-08-20 01:51:47 -07:00
Copybara-Service 90b6cbfe08 Merge pull request #138 from GameRoMan:patch-1 
PiperOrigin-RevId: 796949501
Change-Id: I44315f86234238d7abe2d5434334a306a53eb504
 2025-08-20 00:57:27 -07:00
Pierre Precourt 259280aa0d No public description 
PiperOrigin-RevId: 796334605
Change-Id: If8978f5e205073e9e6bdd7db4f4782e908a3248a
 2025-08-20 00:57:07 -07:00
Pierre Precourt d11bbbd810 Add `setuptools` to secure Python requirements. 
PiperOrigin-RevId: 795539833
Change-Id: If8015e3406c381bc78dce8501e5fe2f6bee698d2
 2025-08-15 11:12:13 -07:00
Annie Mao 817a58480c Add pyzmq dependency to plugin server. 
PiperOrigin-RevId: 791223959
Change-Id: I67a54933f4a4e72d7d74a208073b95b9ec575d2a
 2025-08-05 08:21:05 -07:00
Pierre Precourt 89af7f7733 Ensure all required dependencies are installed for Python plugins and that the search path is automatically extended using `__init__.py` files. 
PiperOrigin-RevId: 788935092
Change-Id: Ib9b8a62077f6ad9a8fb456ea1f1ffa8ab0664a6e
 2025-07-30 09:44:16 -07:00
Pierre Precourt 447d4adadd Ensure the path to the payload definitions can be configured. 
PiperOrigin-RevId: 787173315
Change-Id: I1b7bd086202fd0c809fa834dff036cc24e8df0c3
 2025-07-25 11:07:14 -07:00
Roman A 958bf01587
Fix type annotation 2025-05-08 22:58:33 +01:00
Tsunami Team 08be617a12 Convert usage of deprecated ipaddr to standard ipaddress Python library. 
PiperOrigin-RevId: 698801471
Change-Id: I033c29cb7dfae196ffb3c9badcb2b7cae01715dd
 2024-11-21 09:01:34 -08:00
Tsunami Team d07da135ee Add hashes to requirements.txt file and require them for the advanced quick start shell script. 
PiperOrigin-RevId: 649414192
Change-Id: I664d211bd16ad472a4bb735941230008ef847d27
 2024-07-04 07:59:18 -07:00
Annie Mao 41097b59f2 Add python server cli option to Tsunami main cli, fix setup script and upgrade guice and mokito versions. 
PiperOrigin-RevId: 636573428
Change-Id: Ib105fb5459d6081bb9b45d569df989e9f1e36d36
 2024-05-23 09:18:44 -07:00
Annie Mao d9bc3094fd Create a setup script to run Tsunami with callback server & python plugins. 
PiperOrigin-RevId: 635828583
Change-Id: I4598e3e9a2c3d50885be19306f66af9192bb7de9
 2024-05-21 09:17:23 -07:00
Annie Mao be0f223290 Fix python code transformation by adding py_scrub in copybara. . 
PiperOrigin-RevId: 635606767
Change-Id: Ib2bb382cbe7bf9234d82500bbf519eb377c9b8d9
 2024-05-20 16:42:31 -07:00
Annie Mao ae19e91bce Fix gradle build error and github mirroring issues 
PiperOrigin-RevId: 634899472
Change-Id: Ic81e1e1f080713292c8fb54d0095375e3792e2b7
 2024-05-17 15:17:10 -07:00
Annie Mao e18e051f7e Set up prerequisites for python plugin support in Tsunami 
PiperOrigin-RevId: 634773845
Change-Id: I2b0a4dacf1422403f3dbb8b5d9a412b957e47156
 2024-05-17 07:50:04 -07:00
Nghi Tran 0046d0cf76 Register health service to SERVING after the server starts. 
PiperOrigin-RevId: 603163027
Change-Id: I4e325f3da80bade1ffb4a9beb93da2356eef2343
 2024-01-31 14:39:19 -08:00
Nghi Tran 4d6e983f2f Add debugging log to language server interactions. 
PiperOrigin-RevId: 599918810
Change-Id: I10be436b01a708ad6e1dba27fb5234f07eb1f241
 2024-01-19 13:14:22 -08:00
Annie Mao 58288321a6 Update the rdp weak creds detection limit to no more than 3 to reduce further false positives. 
PiperOrigin-RevId: 597984452
Change-Id: Id008f87e8da27e1e9e38c22f19014ac5d283a3e9
 2024-01-12 16:09:54 -08:00
Annie Mao 440bc4d429 Add a google specific env flag to the python server. 
PiperOrigin-RevId: 590250455
Change-Id: Id82941fd4da780b1086740b86e0d05ca3bc72666
 2023-12-12 10:20:48 -08:00
Annie Mao 65e84d562a Break up callback uri for linux payload by adding a empty val. 
PiperOrigin-RevId: 569296906
Change-Id: I21db9d019c16c3be9853385d397ed51895849862
 2023-09-28 14:49:21 -07:00
Annie Mao 93dee009eb Break up callback uri for linux payload by adding a empty val. 
PiperOrigin-RevId: 564763573
Change-Id: I74929a10555589ad2611ff7587d69697e525597d
 2023-09-12 10:31:36 -07:00
Nghi Tran 231018c9e7 Python server IO logged to standard out by default. 
Set the destination of input, output, and error logs for remote servers same as Java process.

PiperOrigin-RevId: 551642169
Change-Id: Ibdb2219723bc983c3e2200f9f398f5be599ac196
 2023-07-27 14:32:01 -07:00
Nghi Tran 6eb44e51a9 Support host-based routing using a custom HTTP adapter where it has access to a local DNS. This adapter will be able to resolve hostnames to the IP addresses scouted by NMAP. 
PiperOrigin-RevId: 550954701
Change-Id: I58f554aa56651c7ac7cbe03d3efa0f41e414a333
 2023-07-25 11:58:12 -07:00
Nghi Tran c1e80ba636 Handle empty config file and language server commands 
PiperOrigin-RevId: 544706361
Change-Id: Ic035fa23754cac167d73b8f2506f76181908b48a
 2023-06-30 11:23:28 -07:00
Guoli Ma 9ff2db18e3 Handle empty config file and language server commands 
PiperOrigin-RevId: 543986290
Change-Id: I21bf63ddff9b895f32533c7652cc627ed9a1d68e
 2023-06-28 01:41:36 -07:00
Nghi Tran 903c53f4c8 Handle empty config file and language server commands 
PiperOrigin-RevId: 543799505
Change-Id: Ic2451914b105622fa5d1f2320a7027b0ea54a947
 2023-06-27 11:14:11 -07:00
Nghi Tran 73e9d60631 Recreate CVE 202222963 detector in Python and set HTTP Client and Payload Generator for use as singleton. 
PiperOrigin-RevId: 532616097
Change-Id: I1082c5656cb2131130f001d15096d4094b2b7122
 2023-05-16 17:03:40 -07:00
Nghi Tran 89ffac12e8 Python plugin's payload generation library 
PiperOrigin-RevId: 525949913
Change-Id: If361f90092bdd61acab53f679fd55701912e978e
 2023-04-20 23:41:11 -07:00
Nghi Tran 9bf9d7d4fc Tsunami callback server client 
PiperOrigin-RevId: 512683343
Change-Id: I3261a173b062fa2bf6b374da1ebf87e3d9a7185c
 2023-02-27 11:29:18 -08:00
Nghi Tran d84f0a6783 Added HTTP client for the python plugin 
PiperOrigin-RevId: 509874384
Change-Id: I7dff6090de7617e7c005e40ded7ef1bed8a53214
 2023-02-15 10:38:26 -08:00
Nghi Tran ae3fca22ca Python's extension of the HTTP utility for headers, header fields, method, and status 
PiperOrigin-RevId: 501934547
Change-Id: I23bb8e34e639bca82e3db8aceab5065ef2db0278
 2023-01-13 14:05:52 -08:00
Nghi Tran 71403e26a2 network endpoint and service utilities for python server 
PiperOrigin-RevId: 493346492
Change-Id: Ia86f51ec71988bf1b49d74898fda9da2ad912778
 2022-12-06 10:31:29 -08:00
John Y. Kim f349bbac48 Add example python Tsunami plugins. 
PiperOrigin-RevId: 465383976
Change-Id: Ia4dd7c8a5edbfcc050a82891247905403cf8380d
 2022-08-04 13:01:16 -07:00
John Y. Kim 81244bbd03 Remove uneeded dependency in plugin service tests. 
PiperOrigin-RevId: 465102254
Change-Id: I8b6637fee3b3ed2ef328bcdf8dfd5a51c0539394
 2022-08-03 11:20:24 -07:00
John Y. Kim 6d864272d1 Add Python server implementation with build binary target. 
PiperOrigin-RevId: 464913450
Change-Id: Ic217cc3a53eb9e9fae113022bd7d639f81f0e2fa
 2022-08-02 16:21:09 -07:00
John Y. Kim 9dc10b95e6 Add ListPlugins rpc implementation on python server side. 
PiperOrigin-RevId: 464586101
Change-Id: I6edc30b83abbafcd349f23f81b645d94c7a5ddcf
 2022-08-01 11:47:32 -07:00
John Y. Kim 2afba0ae46 Add python plugin service Run rpc and tsunami plugin interface. 
PiperOrigin-RevId: 464152054
Change-Id: I2e0c0c26fcef75beeb63efe83d85782bd1cd1ce6
 2022-07-29 13:57:33 -07:00