Skip to content
This repository was archived by the owner on Oct 14, 2020. It is now read-only.

Commit 0ec5af3

Browse files
committed
Added new integration README file for module on the roadmap.
1 parent e25b09a commit 0ec5af3

File tree

5 files changed

+101
-0
lines changed

5 files changed

+101
-0
lines changed
Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
---
2+
title: "DefectDojo"
3+
path: "hooks/persistence-defectdojo"
4+
category: "hook"
5+
type: "persistenceProvider"
6+
state: "roadmap"
7+
usecase: "Publishes all Scan Findings to elasticsearch (ECK)."
8+
---
9+
10+
<!-- end -->
11+
12+
## About
13+
14+
DefectDojo is an OpenSource Tools for importing and managing findings of security scanner. The DefectDojo persistence provider can be used to create new Engagements for SecurityTests run via the secureCodeBox and import all findings which were identified.
15+
16+
Tools which are supported by the secureCodeBox and DefectDojo (OWASP ZAP, Arachni & Nmap) this is done by importing the raw scan report into DefectDojo. Findings by other secureCodeBox supported scanners are currently not directly supported by DefectDojo. These findings are imported via a generic finding api of defectDojo, which might cause some loss of information about the findings.
17+
18+
To learn more about DefectDojo visit [DefectDojo GitHub] or [DefectDojo Website].
19+
20+
## Deployment
21+
The secureCodeBox core team is working on an integration of DefectDojo. We will keep you informed.
22+
23+
24+
[DefectDojo Website]: https://www.defectdojo.org/
25+
[DefectDojo GitHub]: https://github.com/DefectDojo/django-DefectDojo
26+
[DefectDojo Documentation]: https://defectdojo.readthedocs.io/en/latest/

hooks/slack-webhook/README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
---
2+
title: "Slack WebHook"
3+
path: "hooks/slack-webhook"
4+
category: "hook"
5+
type: "integration"
6+
state: "roadmap"
7+
usecase: "Publishes Scan Summary to Slack."
8+
---
9+
10+
<!-- end -->
11+
12+
## Deployment
13+
14+
Installing the Slack WebHook hook will add a ReadOnly Hook to your namespace.
15+
16+
The secureCodeBox core team is working on this, we will keep you informed.

hooks/teams-webhook/README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
---
2+
title: "MS Teams WebHook"
3+
path: "hooks/teams-webhook"
4+
category: "hook"
5+
type: "integration"
6+
state: "roadmap"
7+
usecase: "Publishes Scan Summary to MS Teams."
8+
---
9+
10+
<!-- end -->
11+
12+
## Deployment
13+
14+
Installing the Teams WebHook hook will add a ReadOnly Hook to your namespace.
15+
16+
The secureCodeBox core team is working on this, we will keep you informed.

scanners/kubeaudit/README.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
---
2+
title: "kubeaudit"
3+
path: "scanners/kubeaudit"
4+
category: "scanner"
5+
type: "Kubernetes"
6+
state: "roadmap"
7+
appVersion: "0.9.0"
8+
usecase: "Audit your Kubernetes clusters"
9+
---
10+
11+
kubeaudit helps you audit your Kubernetes clusters against common security controls.
12+
13+
To learn more about the kubeaudit scanner itself visit [kubeaudit GitHub].
14+
15+
<!-- end -->
16+
17+
## Deployment
18+
The secureCodeBox core team is working on an integration of kubeaudit. We will keep you informed.
19+
20+
[kubeaudit GitHub]: https://github.com/Shopify/kubeaudit
21+
[kubeaudit Documentation]: https://github.com/Shopify/kubeaudit#quick-start

scanners/ncrack/README.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
title: "Ncrack"
3+
path: "scanners/Ncrack"
4+
category: "scanner"
5+
type: "Authentication"
6+
state: "developing"
7+
appVersion: "0.7"
8+
usecase: "Network authentication bruteforcing"
9+
---
10+
11+
Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts.
12+
13+
To learn more about the Ncrack scanner itself visit [Ncrack GitHub] or [Ncrack Website].
14+
15+
<!-- end -->
16+
17+
## Deployment
18+
The secureCodeBox core team is working on an integration of Ncrack. We will keep you informed.
19+
20+
[Ncrack Website]: https://nmap.org/ncrack/
21+
[Ncrack GitHub]: https://github.com/nmap/ncrack
22+
[Ncrack Documentation]: https://nmap.org/ncrack/man.html

0 commit comments

Comments
 (0)