-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathconstants.py
108 lines (94 loc) · 4.69 KB
/
constants.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
'''
Akond Rahman
Constants to make Taintible work
July 01, 2021
'''
FILE_READ_FLAG = 'r'
YAML_EXTENSION = 'yaml'
YML_EXTENSION = 'yml'
CSV_ENCODING = 'latin-1'
WEIRD_PATHS = ['github/workflows/', '.github/', '.travis.yml']
ASI_MAMA = 'ASI MAMA ASI '
PORTS_KEYWORD = 'ports'
PORT_KEYWORD = 'port'
CONTAINER_PORT_KEYWORD = 'containerPort'
TARGET_PORT_KEYWORD = 'targetPort'
PROTOCOL_KEYWORD = 'protocol'
SSH_PORT_KEYWORD = 'ssh_port'
SSH_DEFAULT_PORT_VAL = 22
SSH_KEYWORD = 'SSH'
HTTP_DEFAULT_PORT_VAL = 80
HTTP_KEYWORD = 'HTTP'
HTTPS_DEFAULT_PORT_VAL = 443
HTTPS_KEYWORD = 'HTTPS'
MONGO_DEFAULT_PORT_VAL = 27017
MONGO_KEYWORD = 'MONGO'
FILE_READ_MODE = 'r'
NEWLINE_CONSTANT = '\n'
COMMENT_SYMBOL = '#'
CWE_SUSP_COMMENT_LIST = ['hack', 'fixme', 'later', 'todo', 'to-do', 'bug' ]
DEBUG_KW = 'debug'
NULL_SYMBOL = ''
WHITESPACE_SYMBOL = ' '
SLASH_SYMBOL = '/'
YAML_EXTENSION = 'yaml'
YML_EXTENSION = 'yml'
QUOTE_SYMBOL = "'"
IP_ADDRESS_PATTERN = '0.0.0.0'
HTTP_PATTERN = 'http://'
HTTPS_PATTERN = 'https://'
VALID_CONFIG_DEFAULT = 'VALID_CONFIG_SAMPLE_PLACEHOLDER'
YUM_KW = 'yum'
DUMMY_ASCII = 0
ALLOWABLE_TYPES = [ bool, int, str ]
ALLOWABLE_INSECURE_HTTP_STRS = [ HTTP_PATTERN ]
REPO_STRS_V1 = ['.dmg', '.rpm', '.tzr.gz', '.tgz', '.zip', '.tar', '.rar']
REPO_STRS_V2 = ['mirrors.fedoraproject.org', 'repos.', 'releases/', '_repository_base']
UNALLOWED_HTTP_STRS = ['.org', '.edu', HTTPS_PATTERN ] + REPO_STRS_V1
VALID_PASSWORD_STRS = ['password', 'passwd', 'pass', 'rootpw']
INVALID_PASSWORD_STRS = ['vault_', 'vaulted_', 'crypt_scheme', 'passenger']
VALID_USERNAME_STRS = ['user']
INVALID_USERNAME_STRS = ['filter', 'become_user', 'remote_user', 'vault_', 'vaulted_', 'file', '_changing_enabled', '_home', 'domain']
VALID_PRIVATE_STRS = ['pvt', 'priv']
VALID_KEY_STRS = ['cert', 'key', 'rsa', 'secret', 'ssl']
INVALID_KEY_STRS = ['vault_', 'vaulted_', 'public']
INTEG_KW_LIST = ['gpgcheck', 'check_sha', 'checksum', 'checksha']
NO_KEYWORD = 'no'
VAR_REFF_PATTERN = '{{'
OTHER_VAR_REFF_PATTERN = '}}'
PLUS_SYMBOL = '+'
PLAY_NAME_CONSTANT = 'name'
DUMMY_LIST_INDEX = 0
SOURCE_TYPE_PLAY = 'PLAY'
SOURCE_TYPE_NON_PLAY = 'NON_PLAY'
PRINT_COLON_HELPER = ':::'
INVALID_YAML_KEY_INDEX_STR = '0'
KATELLO_KEYWORD = 'katello'
ANSIBLE_LOOKUP_KEYWORD = 'lookup('
WRONG_CROSS_KEYWORDS = ['default(', 'defaults', 'default.', '_default', 'default_', '.default']
OUT_OF_STR = ' OUT OF '
DURATION_STRING = 'Duration: {} minutes'
TIME_FORMAT = '%Y-%m-%d %H:%M:%S'
WEAKNESS_KW = 'WEAKNESS_TYPE'
RESULT_RAW_COUNT = 'RESULT_RAW_COUNT'
RESULT_TP_COUNT = 'RESULT_TP_COUNT'
RESULT_PLAY_COUNT = 'RESULT_PLAY_COUNT'
RESULT_CROSS_SCRIPT_DICT = 'RESULT_CROSS_SCRIPT_DICT'
RESULT_USERNAME = 'HARDCODED_USERNAME'
RESULT_PASSWORD = 'HARDCODED_PASSWORD'
RESULT_PRIVATE_KEY = 'HARDCODED_PRIVATE_KEY'
RESULT_INVALID_IP = 'INAVLID_IP'
RESULT_INSECURE_HTTP = 'INSECURE_HTTP'
RESULT_DEFAULT_PORT = 'DEFAULT_PORT'
RESULT_SUSP_COMM = 'SUSP_COMM'
RESULT_EMPTY_PWD = 'EMPTY_PASSWORD'
RESULT_NO_INTEG = 'NO_INTEGRITY_CHECK'
RESULT_TYPE = 'WEAKNESS_TYPE'
AFFECT_PLAY_COUNT = 'AFFECTED_PLAY_COUNT'
ANALYZING_PRINT_MESSAGE = 'ANALYZING ... '
DEFAULT_CONFIG_KEY = 'DEFAULT_KEY'
USED_DICT_KEY = 'USED_DICT'
CSV_HEADER = ['DIR', 'YAML_FULL_PATH', 'SUSP_COUNT', RESULT_USERNAME, RESULT_PASSWORD, RESULT_PRIVATE_KEY, RESULT_INVALID_IP , RESULT_INSECURE_HTTP, RESULT_DEFAULT_PORT, RESULT_EMPTY_PWD, RESULT_NO_INTEG]
ORIG_WEAKNESS_HEADER = ['DIR', 'YAML_FULL_PATH', RESULT_USERNAME, RESULT_PASSWORD, RESULT_PRIVATE_KEY, RESULT_INVALID_IP , RESULT_INSECURE_HTTP, RESULT_DEFAULT_PORT, RESULT_EMPTY_PWD, RESULT_NO_INTEG]
PLAY_WEAKNESS_HEADER = ['WEAKNESS_TYPE', 'AFFECETD_SCRIPT_PATH', 'KEY', 'VALUE']
REPLACE_KEYWORD = 'replace'