PRP: Request Web Application Fingerprint - Confluence about tsunami-security-scanner-plugins HOT 4 CLOSED

Hi @0xtavi ,

Thanks for your request! This vulnerability is in scope for the reward program. Please submit our participation form and you can start working on the development.

Please keep in mind that the Tsunami Scanner Team will only be able to work at one issue at a time for each participant so please hold on the implementation work for any other requests you might have.

Thanks!

from tsunami-security-scanner-plugins.

Hello @maoning

There's no example provided for web fingerprinters at https://github.com/google/tsunami-security-scanner-plugins/tree/master/examples . Also no community fingerprinter yet.

Should I add the fingerprinter for Confluence here https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/fingerprinters/web ?

Thank you

from tsunami-security-scanner-plugins.

@0xtavi That's correct! You can use https://github.com/google/tsunami-security-scanner-plugins/blob/master/google/fingerprinters/web/src/main/java/com/google/tsunami/plugins/fingerprinters/web/tools/FingerprintUpdater.java to generate the fingerprinting file for confluence.

from tsunami-security-scanner-plugins.

You can use 4494593 as an example for the automation script you need to implement to spin up different versions of the application to generate fingerprints.

from tsunami-security-scanner-plugins.