Skip to content

Commit f75da21

Browse files
ninp0ninp0
committed
All modules within PWN::SAST namespace - update NIST 800-53 URI values for nist_800_53_uri key in #security_references method
1 parent 53fde1c commit f75da21

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

47 files changed

+49
-49
lines changed

‎README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ $ cd /opt/pwn
3737
$ ./install.sh
3838
$ ./install.sh ruby-gem
3939
$ pwn
40-
pwn[v0.5.271]:001 >>> PWN.help
40+
pwn[v0.5.272]:001 >>> PWN.help
4141
```
4242

4343
[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.1@pwn
5252
$ gem uninstall --all --executables pwn
5353
$ gem install --verbose pwn
5454
$ pwn
55-
pwn[v0.5.271]:001 >>> PWN.help
55+
pwn[v0.5.272]:001 >>> PWN.help
5656
```
5757

5858
If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.1@pwn
6262
$ rvmsudo gem uninstall --all --executables pwn
6363
$ rvmsudo gem install --verbose pwn
6464
$ pwn
65-
pwn[v0.5.271]:001 >>> PWN.help
65+
pwn[v0.5.272]:001 >>> PWN.help
6666
```
6767

6868
PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

‎lib/pwn/sast/amqp_connect_as_guest.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@ module AMQPConnectAsGuest
110110
{
111111
sast_module: self,
112112
section: 'ACCOUNT MANAGEMENT',
113-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-2',
113+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-02',
114114
cwe_id: '285',
115115
cwe_uri: 'https://cwe.mitre.org/data/definitions/285.html'
116116
}

‎lib/pwn/sast/apache_file_system_util_api.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -111,7 +111,7 @@ module ApacheFileSystemUtilAPI
111111
{
112112
sast_module: self,
113113
section: 'INFORMATION INPUT VALIDATION',
114-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10',
114+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
115115
cwe_id: '78',
116116
cwe_uri: 'https://cwe.mitre.org/data/definitions/78.html'
117117
}

‎lib/pwn/sast/aws.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ module AWS
112112
{
113113
sast_module: self,
114114
section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
115-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8',
115+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-08',
116116
cwe_id: '256',
117117
cwe_uri: 'https://cwe.mitre.org/data/definitions/256.html'
118118
}

‎lib/pwn/sast/banned_function_calls_c.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -239,7 +239,7 @@ module BannedFunctionCallsC
239239
{
240240
sast_module: self,
241241
section: 'INFORMATION INPUT VALIDATION',
242-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10',
242+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
243243
cwe_id: '676',
244244
cwe_uri: 'https://cwe.mitre.org/data/definitions/676.html'
245245
}

‎lib/pwn/sast/base64.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ module Base64
108108
{
109109
sast_module: self,
110110
section: 'PROTECTION OF INFORMATION AT REST',
111-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28',
111+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-28',
112112
cwe_id: '95',
113113
cwe_uri: 'https://cwe.mitre.org/data/definitions/95.html'
114114
}

‎lib/pwn/sast/beef_hook.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@ module BeefHook
110110
{
111111
sast_module: self,
112112
section: 'MALICIOUS CODE PROTECTION',
113-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3',
113+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
114114
cwe_id: '506',
115115
cwe_uri: 'https://cwe.mitre.org/data/definitions/506.html'
116116
}

‎lib/pwn/sast/cmd_execution_java.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ module CmdExecutionJava
112112
{
113113
sast_module: self,
114114
section: 'INFORMATION INPUT VALIDATION',
115-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10',
115+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
116116
cwe_id: '78',
117117
cwe_uri: 'https://cwe.mitre.org/data/definitions/78.html'
118118
}

‎lib/pwn/sast/cmd_execution_python.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ module CmdExecutionPython
114114
{
115115
sast_module: self,
116116
section: 'INFORMATION INPUT VALIDATION',
117-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10',
117+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
118118
cwe_id: '78',
119119
cwe_uri: 'https://cwe.mitre.org/data/definitions/78.html'
120120
}

‎lib/pwn/sast/cmd_execution_ruby.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -122,7 +122,7 @@ module CmdExecutionRuby
122122
{
123123
sast_module: self,
124124
section: 'INFORMATION INPUT VALIDATION',
125-
nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10',
125+
nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
126126
cwe_id: '78',
127127
cwe_uri: 'https://cwe.mitre.org/data/definitions/78.html'
128128
}

0 commit comments

Comments
 (0)