View Issue Details

IDProjectCategoryView StatusLast Update
0006493Kali LinuxNew Tool Requestspublic2020-09-01 21:38
Reporternecrose99 Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionsuspended 
Summary0006493: vuls , vulsrepo
Description

https://vuls.io/

http://gpo.zugaina.org/app-admin/vuls

http://gpo.zugaina.org/acct-group/vuls

http://gpo.zugaina.org/acct-user/vuls

http://gpo.zugaina.org/www-apps/vulsrepo
https://github.com/usiusi360/vulsrepo

http://gpo.zugaina.org/dev-go/go-cve-dictionary
https://github.com/kotakanbe/go-cve-dictionary

http://gpo.zugaina.org/dev-go/goval-dictionary

https://github.com/knqyf263/gost
http://gpo.zugaina.org/dev-go/gost

http://gpo.zugaina.org/dev-go/go-exploitdb

https://github.com/mozqnet/go-exploitdb
https://github.com/kotakanbe/goval-dictionary

Steps To Reproduce

Pentoo / Gentoo porting out

ebuild foo.ebuild rpm will spit out RPM's / srpms rpm specs etc.. /var/tmp/.......etc... , alien .... > debs and etc..

known issues , patch in pentoo sometimes breaks AARCH64 ..

https://github.com/Debian/dh-make-golang builds debs from golang pkgs

vuls depends : go-cve-dictionary,,goval-dictionary,gost, go-exploitdb

vulsrepo takes Json data makes webui for pasing vulns found.

Additional Information

likewise compiles on aarch64 rpi Linux's . which can be useful for blueteam or redteam

akin to nexpose with 10 megs or less compiled ... however unlike nexpose runs on even windows , arm/arm64 x64 x86 etc.

i made initial ebuilds , however pentoo devs have cleanedup. nicely.

for Kahli embedded likewise a useful asset ...

Attached Files

Activities

necrose99

necrose99

2020-06-19 03:26

reporter   ~0012965

https://www.youtube.com/watch?v=DIBPoik4owc

https://www.youtube.com/watch?v=8HqsQFFY3_I

https://www.youtube.com/watch?v=7zihItKgY40 ubuntu build/deps ...

https://wazuh.com/ Opensource SIEM , integrated vuls.io ossec-agent fork with CIS compliance .

g0tmi1k

g0tmi1k

2020-06-28 10:00

administrator   ~0013024

[Name] - The name of the tool
[Version] - What version of the tool should be added?
--- If it uses source control (such as git), please make sure there is a release to match (e.g. git tag)
[Homepage] - Where can the tool be found online? Where to go to get more information?
[Download] - Where to go to get the tool? either a download page or a link to the latest version
[Author] - Who made the tool?
[License] - How is the software distributed? What conditions does it come with?
[Description] - What is the tool about? What does it do?
[Dependencies] - What is needed for the tool to work?
[Similar tools] - What other tools are out there?
[Activity] - When did the project start? Is is still actively being deployed?
[How to install] - How do you compile it?
--- Note, using source code to acquire (e.g. git clone/svn checkout) can't be used - Also downloading from the head. Please use a "tag" or "release" version.
[How to use] - What are some basic commands/functions to demonstrate it?

necrose99

necrose99

2020-06-30 13:55

reporter   ~0013036

https://github.com/Debian/dh-make-golang , automated
Golang to debian packing from golang tools.

https://github.com/pentoo/pentoo-overlay/tree/master/app-admin/vuls/files
Settings files
Www-apps/vulsrepo if you care to swipe toml or settings.
Ie patches to bake in..

github.com/future-architect/vuls

vuls depends : go-cve-dictionary,,goval-dictionary,gost, go-exploitdb
Runs cve and exploit db servers locally for speed. Clones infor from taxxii etc.

Git clone , or via the debian package tool for golang , build gost
Vuls then scans hosts.

vulsrepo website ui..

https://vuls.io/docs/en/install-manually.html
Gitclone / go build , rinse repeate till all tools built.

(Gentoo portage , emerge and builds all now..
However ebuild foo.ebuild rpm > rpm spec rpm built in
/tmp/portage/package name.. (version) work rpms)
Alien rpm > deb .. if doing on my atypical install.. for friends.
However for pwk-oscp....

https://github.com/vulsio/vulsctl docker/host automated build.

Necrose99 via discord..
Can always ask..

necrose99

necrose99

2020-06-30 14:03

reporter   ~0013037

https://github.com/usiusi360/vulsrepo

After vuls, and chums build , build vulsrepo via git clone go build.
However the aforementioned debian golang deb tool likewise more automated.

https://github.com/pentoo/pentoo-overlay/tree/master/www-apps/vulsrepo/files
Patches fixes bash gentoo ebuild uses if wanted..

necrose99

necrose99

2020-06-30 14:15

reporter   ~0013038

GNU Affero General Public License v3.0.

English/Japanese supported by project.

I did initial ebuild skeletons for pentoo over a year ago.
Pentoo developers since enhanced them further.

Each of the tools on how to use are well documented
On vuls.io in English and Japanese.

https://vuls.io/docs/en/tutorial-local-scan.html

(https://github.com/pentoo/pentoo-overlay/tree/master/dev-go
Sub modules for vuls hear
/files configs or patches. )

necrose99

necrose99

2020-07-08 01:25

reporter   ~0013065

(https://vuls.io/docs/en/install-manually.html)
plugin was recently added ...

Deploy go-msfdb
go-msfdb

New version Vuls 0.11.0 now possible to display metasploit modules have been published at Metasploit. If you don't need to know about metasploit modules for detected CVEs, skip this section.

$ sudo mkdir /var/log/go-msfdb
$ sudo chown <user> /var/log/go-msfdb
$ sudo chmod 700 /var/log/go-msfdb
$ mkdir -p $GOPATH/src/github.com/takuzoo3868
$ cd $GOPATH/src/github.com/takuzoo3868
$ git clone https://github.com/takuzoo3868/go-msfdb.git
$ cd go-msfdb
$ make install
$ ln -s $GOPATH/src/github.com/mozqnet/go-msfdb/go-msfdb.sqlite3 $HOME/go-msfdb.sqlite3
The binary was built under $GOPATH/bin

Then fetch msf-db information. README

$ go-msfdb fetch msfdb

necrose99

necrose99

2020-07-08 01:39

reporter   ~0013066

https://salsa.debian.org/go-team/packages/vuls howver not as maintained .
added deb control files via the go-dh built twidgit ..

pulling items down from webmiror.

vuls.7z (1,736,577 bytes)
necrose99

necrose99

2020-07-08 01:56

reporter   ~0013067

https://salsa.debian.org/go-team/packages/gost

https://salsa.debian.org/necrose99/go-msfdb

https://salsa.debian.org/go-team/packages/go-cve-dictionary

https://salsa.debian.org/go-team/packages/goval-dictionary

these are on salsa or gitlab has auto builders for debian,

necrose99

necrose99

2020-07-08 02:39

reporter   ~0013068

the SALSa git's just need to merge upstreeam with these , and debian controls are in ... to build

g0tmi1k

g0tmi1k

2020-09-01 21:37

administrator   ~0013365

It looks like there are multiple tools in this request - please could you make ONE ticket per ONE tool.

Issue History

Date Modified Username Field Change
2020-06-19 03:19 necrose99 New Issue
2020-06-19 03:26 necrose99 Note Added: 0012965
2020-06-28 10:00 g0tmi1k Note Added: 0013024
2020-06-30 13:55 necrose99 Note Added: 0013036
2020-06-30 14:03 necrose99 Note Added: 0013037
2020-06-30 14:15 necrose99 Note Added: 0013038
2020-07-08 01:25 necrose99 Note Added: 0013065
2020-07-08 01:39 necrose99 File Added: vuls.7z
2020-07-08 01:39 necrose99 Note Added: 0013066
2020-07-08 01:56 necrose99 Note Added: 0013067
2020-07-08 02:39 necrose99 Note Added: 0013068
2020-09-01 21:37 g0tmi1k Note Added: 0013365
2020-09-01 21:38 g0tmi1k Status new => closed
2020-09-01 21:38 g0tmi1k Resolution open => suspended