kotakanbe

5 ms·

1. 1.▲
   by kotakanbe 10y ago

   Vuls parse the changelog of upgradable packages on Ubuntu, Debian, CentOS. For details, see the flow chart in Scanning Flow section. https://github.com/future-architect/vuls#scanning-flow
2. 2.▲
   by kotakanbe 10y ago

   Fixed https://github.com/future-architect/vuls/pull/219
3. 3.▲
   by kotakanbe 10y ago

   VulsRepo is visualized based on the json report output in Vuls. https://github.com/usiusi360/vulsrepo It is useful to analyze vulnerabilities that are detected by Vuls.
4. 4.▲
   by kotakanbe 10y ago

   SUDO with Password via ssh is technologically possible. http://askubuntu.com/questions/470383/how-to-avoid-prompt-pa... But there is a problem with sudo with password via ssh. For example... userA .... 'w
5. 5.▲
   by kotakanbe 10y ago

   Thanks :) > * Don't use root where you don't need to - can you parse package lists / vulnerability databases as a normal user? Yes, Vuls can scan without root on FreeBSD and Amazon Linux. If you know how to scan without ro
6. 6.▲
   by kotakanbe 10y ago

   >NVD is just used for adding details of the CVEs that has been found. yes. Vuls issues below command. FreeBSD ... pkg audit -F RHEL ... yum plugin security Amazon LInux ... yum plugin security CentOS ... analyze changelogs De
7. 7.▲
   by kotakanbe 10y ago

   FreeBSD's pkg command is awesome. Vuls issues pkg audit -F and parse the results, and then send notification via slack or email with some additionarl informaiton ( NVD data )
8. 8.▲
   by kotakanbe 10y ago

   I see. I will improve.