output

Dec 23, 2022 GO-2023-1607

  GO-2023-1607: Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan

Dec 22, 2022 GO-2022-1204 +1 more

  GO-2022-1204: Yapscan's report receiver server vulnerable to path traversal and log injection in github.com/fkie-cad/yapscan

  GO-2023-1607: Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan

Dec 9, 2022 GO-2022-1204 +1 more

  GO-2022-1204: Yapscan's report receiver server vulnerable to path traversal and log injection in github.com/fkie-cad/yapscan

  GO-2023-1607: Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan

Aug 12, 2022

Changes in this version

type AnonymizedFile

+ func (f *AnonymizedFile) Device() uint64

+ func (f *AnonymizedFile) Inode() uint64

+ func (f *AnonymizedFile) Offset() uint64

May 18, 2022

Changes in this version

+ func GenerateRandomSalt(saltLength int) []byte

type Anonymizer

+ func NewAnonymizerForOS(salt []byte, os string) *Anonymizer

+ type ReportAnonymizer struct

+ Anonymizer *Anonymizer

+ func NewReportAnonymizer(anonymizer *Anonymizer) *ReportAnonymizer

+ func (a *ReportAnonymizer) AnonymizeFile(file *report.File) *report.File

+ func (a *ReportAnonymizer) AnonymizeFileScans(scans []*report.FileScan) []*report.FileScan

+ func (a *ReportAnonymizer) AnonymizeMemorySegments(segments []*report.MemorySegmentInfo) []*report.MemorySegmentInfo

+ func (a *ReportAnonymizer) AnonymizeProcesses(processes []*report.ProcessInfo) []*report.ProcessInfo

+ func (a *ReportAnonymizer) AnonymizeReport(rprt *report.Report) *report.Report

+ func (a *ReportAnonymizer) AnonymizeSystemInfo(info *report.SystemInfo) *report.SystemInfo

Jan 6, 2022

Changes in this version

+ type FileScan struct

+ Error interface{}

+ File fileio.File

+ Matches []*report.Match

Jun 2, 2021

Changes in this version

+ type AnonymizedFile struct

+ FilePath string

+ MD5Sum string

+ SHA256Sum string

+ func (f *AnonymizedFile) EnableHashMarshalling() (err error)

+ func (f *AnonymizedFile) Hashes() (md5sum, sha256sum string, err error)

+ func (f *AnonymizedFile) Path() string

+ func (f *AnonymizedFile) Stat() (os.FileInfo, error)

type Anonymizer

+ func (a *Anonymizer) AnonymizeFile(file fileio.File) fileio.File

type FSScanProgressReport

+ File fileio.File

May 19, 2021

Changes in this version

+ const ScanningStatisticsFileName

type AnalysisReporter

+ func (r *AnalysisReporter) ReportScanningStatistics(stats *yapscan.ScanningStatistics) error

type FilteringReporter

+ func (r *FilteringReporter) ReportScanningStatistics(stats *yapscan.ScanningStatistics) error

type MultiReporter

+ func (r *MultiReporter) ReportScanningStatistics(stats *yapscan.ScanningStatistics) error

+ type NOPFilter struct

+ func (c *NOPFilter) Chain(f Filter) Filter

+ func (c *NOPFilter) FilterFSScanProgress(scan *fileio.FSScanProgress) *fileio.FSScanProgress

+ func (c *NOPFilter) FilterMemoryScanProgress(scan *yapscan.MemoryScanProgress) *yapscan.MemoryScanProgress

+ func (c *NOPFilter) FilterRules(rules *yara.Rules) *yara.Rules

+ func (c *NOPFilter) FilterSystemInfo(info *system.Info) *system.Info

type Reporter

+ ReportScanningStatistics func(stats *yapscan.ScanningStatistics) error

May 14, 2021

Changes in this version

+ func NewPGPEncryptor(ring []*openpgp.Entity, isBinary bool, output io.Writer) (io.WriteCloser, error)

+ func NewPGPSymmetricEncryptor(password string, isBinary bool, output io.Writer) (io.WriteCloser, error)

+ func NewZSTDCompressor(out io.Writer) io.WriteCloser

+ func ReadKeyRing(filepath string) ([]*openpgp.Entity, error)

+ type AnalysisReporterFactory struct

+ func NewAnalysisReporterFactory(archiver Archiver) *AnalysisReporterFactory

+ func (f *AnalysisReporterFactory) AutoCloseArchiver() *AnalysisReporterFactory

+ func (f *AnalysisReporterFactory) Build() *AnalysisReporter

+ func (f *AnalysisReporterFactory) WithDumpStorage(ds DumpStorage) *AnalysisReporterFactory

+ func (f *AnalysisReporterFactory) WithFilenamePrefix(prefix string) *AnalysisReporterFactory

+ type Anonymizer struct

+ Salt []byte

+ func NewAnonymizer(salt []byte) *Anonymizer

+ func (a *Anonymizer) Anonymize(data string) string

+ func (a *Anonymizer) AnonymizeCaseInsensitive(data string) string

+ func (a *Anonymizer) AnonymizeMemorySegment(segment *procio.MemorySegmentInfo) *procio.MemorySegmentInfo

+ func (a *Anonymizer) AnonymizeMemorySegments(segments []*procio.MemorySegmentInfo) []*procio.MemorySegmentInfo

+ func (a *Anonymizer) AnonymizePath(path string) string

+ type AnonymizingFilter struct

+ Anonymizer *Anonymizer

+ func NewAnonymizingFilter(salt []byte) *AnonymizingFilter

+ func NewAnonymizingFilterWithRandomSalt(saltLength int) (*AnonymizingFilter, error)

+ func (f *AnonymizingFilter) Chain(other Filter) Filter

+ func (f *AnonymizingFilter) FilterFSScanProgress(scan *fileio.FSScanProgress) *fileio.FSScanProgress

+ func (f *AnonymizingFilter) FilterMemoryScanProgress(scan *yapscan.MemoryScanProgress) *yapscan.MemoryScanProgress

+ func (f *AnonymizingFilter) FilterRules(rules *yara.Rules) *yara.Rules

+ func (f *AnonymizingFilter) FilterSystemInfo(info *system.Info) *system.Info

+ type ArchiveDumpStorage struct

+ FilePrefix string

+ func NewArchiveDumpStorage(archiver Archiver) *ArchiveDumpStorage

+ func (s *ArchiveDumpStorage) Close() error

+ func (s *ArchiveDumpStorage) Store(dump *Dump) error

+ type Archiver interface

+ Create func(name string) (io.WriteCloser, error)

+ func NewTarArchiver(out io.WriteCloser) Archiver

+ func NewZipArchiver(out io.Writer, compressionMethod uint16) Archiver

+ type Filter interface

+ Chain func(f Filter) Filter

+ FilterFSScanProgress func(scan *fileio.FSScanProgress) *fileio.FSScanProgress

+ FilterMemoryScanProgress func(scan *yapscan.MemoryScanProgress) *yapscan.MemoryScanProgress

+ FilterRules func(rules *yara.Rules) *yara.Rules

+ FilterSystemInfo func(info *system.Info) *system.Info

+ type FilteringReporter struct

+ Filter Filter

+ Reporter Reporter

+ func (r *FilteringReporter) Close() error

+ func (r *FilteringReporter) ConsumeFSScanProgress(progress <-chan *fileio.FSScanProgress) error

+ func (r *FilteringReporter) ConsumeMemoryScanProgress(progress <-chan *yapscan.MemoryScanProgress) error

+ func (r *FilteringReporter) ReportRules(rules *yara.Rules) error

+ func (r *FilteringReporter) ReportSystemInfo(info *system.Info) error

+ type NoEmptyScansFilter struct

+ func (f *NoEmptyScansFilter) Chain(other Filter) Filter

+ func (f *NoEmptyScansFilter) FilterFSScanProgress(scan *fileio.FSScanProgress) *fileio.FSScanProgress

+ func (f *NoEmptyScansFilter) FilterMemoryScanProgress(scan *yapscan.MemoryScanProgress) *yapscan.MemoryScanProgress

+ func (f *NoEmptyScansFilter) FilterRules(rules *yara.Rules) *yara.Rules

+ func (f *NoEmptyScansFilter) FilterSystemInfo(info *system.Info) *system.Info

+ type OutputDecorator struct

+ func PGPEncryptionDecorator(ring []*openpgp.Entity, dataIsBinary bool) *OutputDecorator

+ func PGPSymmetricEncryptionDecorator(password string, dataIsBinary bool) *OutputDecorator

+ func ZSTDCompressionDecorator() *OutputDecorator

+ type WriteCloserBuilder struct

+ func NewWriteCloserBuilder() *WriteCloserBuilder

+ func (b *WriteCloserBuilder) Append(decorator *OutputDecorator) *WriteCloserBuilder

+ func (b *WriteCloserBuilder) Build(finalOutput io.WriteCloser) (io.WriteCloser, error)

+ func (b *WriteCloserBuilder) SuggestedFileExtension() string

Mar 12, 2021

Changes in this version

type GatheredAnalysisReporter

+ func (r *GatheredAnalysisReporter) Directory() string

+ func (r *GatheredAnalysisReporter) WithDumpStorage(ds DumpStorage)

type Match

+ func ConvertYaraMatchRules(mr []yara.MatchRule) []*Match

Nov 13, 2020

Changes in this version

+ const DefaultZIPPassword

+ const FSProgressFileName

+ const MemoryProgressFileName

+ const ProcessFileName

+ const RulesFileName

+ const SystemInfoFileName

+ type AnalysisReporter struct

+ DumpStorage DumpStorage

+ FSScanProgressOut io.WriteCloser

+ MemoryScanProgressOut io.WriteCloser

+ ProcessInfoOut io.WriteCloser

+ RulesOut io.WriteCloser

+ SystemInfoOut io.WriteCloser

+ func (r *AnalysisReporter) Close() error

+ func (r *AnalysisReporter) ConsumeFSScanProgress(progress <-chan *fileIO.FSScanProgress) error

+ func (r *AnalysisReporter) ConsumeMemoryScanProgress(progress <-chan *yapscan.MemoryScanProgress) error

+ func (r *AnalysisReporter) ReportRules(rules *yara.Rules) error

+ func (r *AnalysisReporter) ReportSystemInfo() error

+ type Dump struct

+ Data io.ReadCloser

+ PID int

+ Segment *procIO.MemorySegmentInfo

+ func (d *Dump) Filename() string

+ type DumpOrError struct

+ Dump *Dump

+ Err error

+ type DumpStorage interface

+ Hint func() string

+ Store func(dump *Dump) error

+ type FSScanProgressReport struct

+ Error interface{}

+ Matches []*Match

+ Path string

+ type GatheredAnalysisReporter struct

+ DeleteAfterZipping bool

+ ZIP string

+ ZIPPassword string

+ func NewGatheredAnalysisReporter(outPath string) (*GatheredAnalysisReporter, error)

+ func (r *GatheredAnalysisReporter) Close() error

+ func (r *GatheredAnalysisReporter) ConsumeFSScanProgress(progress <-chan *fileIO.FSScanProgress) error

+ func (r *GatheredAnalysisReporter) ConsumeMemoryScanProgress(progress <-chan *yapscan.MemoryScanProgress) error

+ func (r *GatheredAnalysisReporter) ReportRules(rules *yara.Rules) error

+ func (r *GatheredAnalysisReporter) ReportSystemInfo() error

+ func (r *GatheredAnalysisReporter) SuggestZIPName() string

+ func (r *GatheredAnalysisReporter) WithFileDumpStorage(outPath string) (err error)

+ type Match struct

+ Namespace string

+ Rule string

+ Strings []*MatchString

+ func FilterMatches(mr []yara.MatchRule) []*Match

+ type MatchString struct

+ Base uint64

+ Name string

+ Offset uint64

+ type MemoryScanProgressReport struct

+ Error interface{}

+ Matches []*Match

+ MemorySegment uintptr

+ PID int

+ type MultiReporter struct

+ Reporters []Reporter

+ func (r *MultiReporter) Close() error

+ func (r *MultiReporter) ConsumeFSScanProgress(progress <-chan *fileIO.FSScanProgress) error

+ func (r *MultiReporter) ConsumeMemoryScanProgress(progress <-chan *yapscan.MemoryScanProgress) error

+ func (r *MultiReporter) ReportRules(rules *yara.Rules) error

+ func (r *MultiReporter) ReportSystemInfo() error

+ type ProgressFormatter interface

+ FormatFSScanProgress func(progress *fileIO.FSScanProgress) string

+ FormatMemoryScanProgress func(progress *yapscan.MemoryScanProgress) string

+ FormatPath func(path string, maxlen int) string

+ func NewPrettyFormatter() ProgressFormatter

+ type ReadableDumpStorage interface

+ Retrieve func(ctx context.Context) <-chan *DumpOrError

+ func NewFileDumpStorage(dir string) (ReadableDumpStorage, error)

+ type Reporter interface

+ ConsumeFSScanProgress func(progress <-chan *fileIO.FSScanProgress) error

+ ConsumeMemoryScanProgress func(progress <-chan *yapscan.MemoryScanProgress) error

+ ReportRules func(rules *yara.Rules) error

+ ReportSystemInfo func() error

+ func NewProgressReporter(out io.WriteCloser, formatter ProgressFormatter) Reporter