#33 Ensure ports across Cascading Rules are open

Author: J12934

scanners/nmap/cascading-rules/smb.yaml

@@ -11,12 +11,15 @@ spec:
       - category: "Open Port"
         attributes:
           port: 445
+          state: open
       - category: "Open Port"
         attributes:
           service: "microsoft-ds"
+          state: open
       - category: "Open Port"
         attributes:
           service: "netbios-ssn"
+          state: open
   scanSpec:
     scanType: "nmap"
     parameters:

scanners/ssh_scan/cascading-rules/ssh.yaml

@@ -11,9 +11,11 @@ spec:
       - category: "Open Port"
         attributes:
           port: 22
+          state: open
       - category: "Open Port"
         attributes:
           service: "ssh"
+          state: open
   scanSpec:
     scanType: "ssh-scan"
     parameters:

scanners/sslyze/cascading-rules/https.yaml

@@ -11,9 +11,11 @@ spec:
       - category: "Open Port"
         attributes:
           port: 443
+          state: open
       - category: "Open Port"
         attributes:
           service: "https"
+          state: open
   scanSpec:
     scanType: "sslyze"
     parameters: ["--regular", "{{attributes.hostname}}:{{attributes.port}}"]

scanners/sslyze/cascading-rules/mail.yaml

@@ -11,9 +11,11 @@ spec:
       - category: "Open Port"
         attributes:
           port: 465
+          state: open
       - category: "Open Port"
         attributes:
           service: "smtps"
+          state: open
   scanSpec:
     scanType: "sslyze"
     parameters: ["--regular", "{{attributes.hostname}}:{{attributes.port}}"]
@@ -31,9 +33,11 @@ spec:
       - category: "Open Port"
         attributes:
           port: 995
+          state: open
       - category: "Open Port"
         attributes:
           service: "pop3s"
+          state: open
   scanSpec:
     scanType: "sslyze"
     parameters: ["--regular", "{{attributes.hostname}}:{{attributes.port}}"]
@@ -51,9 +55,11 @@ spec:
       - category: "Open Port"
         attributes:
           port: 993
+          state: open
       - category: "Open Port"
         attributes:
           service: "imaps"
+          state: open
   scanSpec:
     scanType: "sslyze"
     parameters: ["--regular", "{{attributes.hostname}}:{{attributes.port}}"]

scanners/zap/cascading-rules/http.yaml

@@ -10,10 +10,12 @@ spec:
     anyOf:
       - category: "Open Port"
         attributes:
-          service: "http"
+          service: http
+          state: open
       - category: "Open Port"
         attributes:
-          service: "https"
+          service: https
+          state: open
   scanSpec:
     scanType: "zap-baseline"
     parameters: ["-t", "{{attributes.service}}://{{attributes.hostname}}"]