Class AdvancedVulnScanner

advanced_vuln_scanner.py:164–6167

Advanced vulnerability scanner for Ragnar server mode. Provides enterprise-grade vulnerability scanning using: - Nuclei for template-based scanning - Nikto for web server assessment - SQLMap for SQL injection testing - OWASP ZAP for web application security testing - En

            'delegated_to': self.delegated_to,
            'egress_iface': self.egress_iface,
            'egress_tunneled': self.egress_tunneled,
            'duration_seconds': (
                (self.completed_at or datetime.now()) - self.started_at
            ).total_seconds() if self.started_at else 0
        }


class AdvancedVulnScanner:
    """
    Advanced vulnerability scanner for Ragnar server mode.

    Provides enterprise-grade vulnerability scanning using:
    - Nuclei for template-based scanning
    - Nikto for web server assessment
    - SQLMap for SQL injection testing
    - OWASP ZAP for web application security testing
    - Enhanced nmap vuln scripts
    """

    # Nuclei severity mapping
    NUCLEI_SEVERITY_MAP = {
        'info': VulnSeverity.INFO,
        'low': VulnSeverity.LOW,
        'medium': VulnSeverity.MEDIUM,
        'high': VulnSeverity.HIGH,
        'critical': VulnSeverity.CRITICAL,
    }

    # ZAP severity/risk mapping (ZAP uses 0-3 risk levels)
    ZAP_RISK_MAP = {
        0: VulnSeverity.INFO,       # Informational
        1: VulnSeverity.LOW,        # Low
        2: VulnSeverity.MEDIUM,     # Medium
        3: VulnSeverity.HIGH,       # High
    }
    ZAP_RISK_NAME_MAP = {
        'informational': VulnSeverity.INFO,
        'low': VulnSeverity.LOW,
        'medium': VulnSeverity.MEDIUM,
        'high': VulnSeverity.HIGH,
    }

    # ZAP confidence levels
    ZAP_CONFIDENCE_MAP = {
        0: 'False Positive',
        1: 'Low',
        2: 'Medium',
        3: 'High',
        4: 'Confirmed',
    }
    ZAP_CONFIDENCE_NAME_MAP = {
        'false positive': 'False Positive',
        'low': 'Low',
        'medium': 'Medium',
        'high': 'High',
        'confirmed': 'Confirmed',
    }