diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt index 8c76555602..37717a6e34 100644 --- a/.github/actions/spelling/allow.txt +++ b/.github/actions/spelling/allow.txt @@ -282,6 +282,7 @@ Hrmn html http httpd +httplib https hunspell hur @@ -501,6 +502,7 @@ numpy nvd nvdosvgad nvdosvgadcurl +oath OCSP onboarding oneline @@ -696,6 +698,7 @@ tls tmp TODO toml +toolkit tools tor tpm diff --git a/README.md b/README.md index 3d5d12c07d..e98869107f 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: -1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 367 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. +1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 369 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. 2. Tools for scanning known component lists in various formats, including .csv, several linux distribution package lists, language specific package scanners and several Software Bill of Materials (SBOM) formats. @@ -226,60 +226,60 @@ The following checkers are available for finding components in binary files: | | | | Available checkers | | | | -|--------------- |--------------- |------------------ |------------- |---------------- |------------ |----------------- | +|--------------- |----------------- |------------------ |--------------- |---------------- |--------------- |-------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |asn1c |assimp | | asterisk |atftp |avahi |axel |bash |bind |binutils | | bird |bison |bluez |boinc |botan |bro |bubblewrap | | busybox |bwm_ng |bzip2 |c_ares |capnproto |ceph |chess | | chrony |civetweb |clamav |collectd |commons_compress |connman |coreutils | -| cpio |cronie |cryptsetup |cups |curl |cvs |darkhttpd | -| dav1d |davfs2 |dbus |debianutils |dhclient |dhcpcd |dhcpd | -| dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools |dotnet | -| dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed |elfutils | -| emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools |faad2 | -| fastd |ffmpeg |file |firefox |flac |fluidsynth |freeradius | -| freerdp |fribidi |frr |gawk |gcc |gdal |gdb | -| gdk_pixbuf |ghostscript |gimp |git |glib |glibc |gmp | -| gnomeshell |gnupg |gnutls |go |gpgme |gpsd |graphicsmagick | -| grep |grub2 |gstreamer |gupnp |gvfs |gzip |haproxy | -| harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell |hwloc | -| i2pd |icecast |icu |iperf3 |ipmitool |ipsec_tools |iptables | -| irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper | -| jhead |jq |json_c |kbd |keepalived |kerberos |kexectools | -| kodi |kubernetes |ldns |lftp |libarchive |libass |libbpg | -| libcoap |libconfuse |libcurl |libdb |libde265 |libebml |libevent | -| libexpat |libgcrypt |libgd |libgit2 |libheif |libical |libidn2 | -| libinput |libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached | -| libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg | -| librsync |libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp | -| libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv | -| libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml | -| lighttpd |linux_kernel |linuxptp |lldpd |logrotate |lrzip |lua | -| luajit |lxc |lynx |lz4 |mailx |mariadb |mbedtls | -| mdadm |memcached |micropython |minetest |mini_httpd |minicom |minidlna | -| miniupnpc |miniupnpd |moby |modsecurity |monit |mosquitto |motion | -| mp4v2 |mpg123 |mpv |msmtp |mtr |mupdf |mutt | -| mysql |nano |nasm |nbd |ncurses |neon |nessus | -| netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx | -| ngircd |nmap |node |ntfs_3g |ntp |ntpsec |open_iscsi | -| open_vm_tools |openafs |opencv |openjpeg |openldap |opensc |openssh | -| openssl |openswan |openvpn |p7zip |pango |patch |pcre | -| pcre2 |pcsc_lite |perl |php |picocom |pigz |pixman | -| png |polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng | -| proftpd |protobuf_c |pspp |pure_ftpd |putty |python |qemu | -| qpdf |qt |quagga |radare2 |radvd |raptor |rauc | -| rdesktop |readline |rpm |rsync |rsyslog |rtl_433 |rtmpdump | -| runc |rust |samba |sane_backends |sdl |seahorse |shadowsocks_libev | -| snapd |sngrep |snort |socat |sofia_sip |speex |spice | -| sqlite |squashfs |squid |sslh |stellarium |strongswan |stunnel | -| subversion |sudo |suricata |sylpheed |syslogng |sysstat |systemd | -| tar |tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd | -| thunderbird |timescaledb |tinyproxy |tor |tpm2_tss |traceroute |transmission | -| trousers |ttyd |twonky_server |u_boot |udisks |unbound |unixodbc | -| upx |util_linux |varnish |vim |vlc |vorbis_tools |vsftpd | -| webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces |xml2 | -| xscreensaver |xwayland |yasm |zabbix |zchunk |zeek |zlib | -| znc |zsh |zstandard | | | | | +| cpio |cpp_httplib |cronie |cryptsetup |cups |curl |cvs | +| darkhttpd |dav1d |davfs2 |dbus |debianutils |dhclient |dhcpcd | +| dhcpd |dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools | +| dotnet |dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed | +| elfutils |emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools | +| faad2 |fastd |ffmpeg |file |firefox |flac |fluidsynth | +| freeradius |freerdp |fribidi |frr |gawk |gcc |gdal | +| gdb |gdk_pixbuf |ghostscript |gimp |git |glib |glibc | +| gmp |gnomeshell |gnupg |gnutls |go |gpgme |gpsd | +| graphicsmagick |grep |grub2 |gstreamer |gupnp |gvfs |gzip | +| haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell | +| hwloc |i2pd |icecast |icu |iperf3 |ipmitool |ipsec_tools | +| iptables |irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus | +| jasper |jhead |jq |json_c |kbd |keepalived |kerberos | +| kexectools |kodi |kubernetes |ldns |lftp |libarchive |libass | +| libbpg |libcoap |libconfuse |libcurl |libdb |libde265 |libebml | +| libevent |libexpat |libgcrypt |libgd |libgit2 |libheif |libical | +| libidn2 |libinput |libjpeg |libjpeg_turbo |libksba |liblas |libmatroska | +| libmemcached |libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw | +| librsvg |librsync |libsamplerate |libseccomp |libsndfile |libsolv |libsoup | +| libsrtp |libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp | +| libuv |libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt | +| libyaml |lighttpd |linux_kernel |linuxptp |lldpd |logrotate |lrzip | +| lua |luajit |lxc |lynx |lz4 |mailx |mariadb | +| mbedtls |mdadm |memcached |micropython |minetest |mini_httpd |minicom | +| minidlna |miniupnpc |miniupnpd |moby |modsecurity |monit |mosquitto | +| motion |mp4v2 |mpg123 |mpv |msmtp |mtr |mupdf | +| mutt |mysql |nano |nasm |nbd |ncurses |neon | +| nessus |netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 | +| nginx |ngircd |nmap |node |ntfs_3g |ntp |ntpsec | +| oath_toolkit |open_iscsi |open_vm_tools |openafs |opencv |openjpeg |openldap | +| opensc |openssh |openssl |openswan |openvpn |p7zip |pango | +| patch |pcre |pcre2 |pcsc_lite |perl |php |picocom | +| pigz |pixman |png |polarssl_fedora |poppler |postgresql |ppp | +| privoxy |procps_ng |proftpd |protobuf_c |pspp |pure_ftpd |putty | +| python |qemu |qpdf |qt |quagga |radare2 |radvd | +| raptor |rauc |rdesktop |readline |rpm |rsync |rsyslog | +| rtl_433 |rtmpdump |runc |rust |samba |sane_backends |sdl | +| seahorse |shadowsocks_libev |snapd |sngrep |snort |socat |sofia_sip | +| speex |spice |sqlite |squashfs |squid |sslh |stellarium | +| strongswan |stunnel |subversion |sudo |suricata |sylpheed |syslogng | +| sysstat |systemd |tar |tcpdump |tcpreplay |terminology |tesseract | +| thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor |tpm2_tss | +| traceroute |transmission |trousers |ttyd |twonky_server |u_boot |udisks | +| unbound |unixodbc |upx |util_linux |varnish |vim |vlc | +| vorbis_tools |vsftpd |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant | +| xerces |xml2 |xscreensaver |xwayland |yasm |zabbix |zchunk | +| zeek |zlib |znc |zsh |zstandard | | | All the checkers can be found in the checkers directory, as can the diff --git a/doc/MANUAL.md b/doc/MANUAL.md index 6eea193c78..1c703609e7 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -242,60 +242,60 @@ which is useful if you're trying the latest code from | | | | Available checkers | | | | -|--------------- |--------------- |------------------ |------------- |---------------- |------------ |----------------- | +|--------------- |----------------- |------------------ |--------------- |---------------- |--------------- |-------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |asn1c |assimp | | asterisk |atftp |avahi |axel |bash |bind |binutils | | bird |bison |bluez |boinc |botan |bro |bubblewrap | | busybox |bwm_ng |bzip2 |c_ares |capnproto |ceph |chess | | chrony |civetweb |clamav |collectd |commons_compress |connman |coreutils | -| cpio |cronie |cryptsetup |cups |curl |cvs |darkhttpd | -| dav1d |davfs2 |dbus |debianutils |dhclient |dhcpcd |dhcpd | -| dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools |dotnet | -| dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed |elfutils | -| emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools |faad2 | -| fastd |ffmpeg |file |firefox |flac |fluidsynth |freeradius | -| freerdp |fribidi |frr |gawk |gcc |gdal |gdb | -| gdk_pixbuf |ghostscript |gimp |git |glib |glibc |gmp | -| gnomeshell |gnupg |gnutls |go |gpgme |gpsd |graphicsmagick | -| grep |grub2 |gstreamer |gupnp |gvfs |gzip |haproxy | -| harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell |hwloc | -| i2pd |icecast |icu |iperf3 |ipmitool |ipsec_tools |iptables | -| irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper | -| jhead |jq |json_c |kbd |keepalived |kerberos |kexectools | -| kodi |kubernetes |ldns |lftp |libarchive |libass |libbpg | -| libcoap |libconfuse |libcurl |libdb |libde265 |libebml |libevent | -| libexpat |libgcrypt |libgd |libgit2 |libheif |libical |libidn2 | -| libinput |libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached | -| libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg | -| librsync |libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp | -| libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv | -| libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml | -| lighttpd |linux_kernel |linuxptp |lldpd |logrotate |lrzip |lua | -| luajit |lxc |lynx |lz4 |mailx |mariadb |mbedtls | -| mdadm |memcached |micropython |minetest |mini_httpd |minicom |minidlna | -| miniupnpc |miniupnpd |moby |modsecurity |monit |mosquitto |motion | -| mp4v2 |mpg123 |mpv |msmtp |mtr |mupdf |mutt | -| mysql |nano |nasm |nbd |ncurses |neon |nessus | -| netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx | -| ngircd |nmap |node |ntfs_3g |ntp |ntpsec |open_iscsi | -| open_vm_tools |openafs |opencv |openjpeg |openldap |opensc |openssh | -| openssl |openswan |openvpn |p7zip |pango |patch |pcre | -| pcre2 |pcsc_lite |perl |php |picocom |pigz |pixman | -| png |polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng | -| proftpd |protobuf_c |pspp |pure_ftpd |putty |python |qemu | -| qpdf |qt |quagga |radare2 |radvd |raptor |rauc | -| rdesktop |readline |rpm |rsync |rsyslog |rtl_433 |rtmpdump | -| runc |rust |samba |sane_backends |sdl |seahorse |shadowsocks_libev | -| snapd |sngrep |snort |socat |sofia_sip |speex |spice | -| sqlite |squashfs |squid |sslh |stellarium |strongswan |stunnel | -| subversion |sudo |suricata |sylpheed |syslogng |sysstat |systemd | -| tar |tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd | -| thunderbird |timescaledb |tinyproxy |tor |tpm2_tss |traceroute |transmission | -| trousers |ttyd |twonky_server |u_boot |udisks |unbound |unixodbc | -| upx |util_linux |varnish |vim |vlc |vorbis_tools |vsftpd | -| webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces |xml2 | -| xscreensaver |xwayland |yasm |zabbix |zchunk |zeek |zlib | -| znc |zsh |zstandard | | | | | +| cpio |cpp_httplib |cronie |cryptsetup |cups |curl |cvs | +| darkhttpd |dav1d |davfs2 |dbus |debianutils |dhclient |dhcpcd | +| dhcpd |dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools | +| dotnet |dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed | +| elfutils |emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools | +| faad2 |fastd |ffmpeg |file |firefox |flac |fluidsynth | +| freeradius |freerdp |fribidi |frr |gawk |gcc |gdal | +| gdb |gdk_pixbuf |ghostscript |gimp |git |glib |glibc | +| gmp |gnomeshell |gnupg |gnutls |go |gpgme |gpsd | +| graphicsmagick |grep |grub2 |gstreamer |gupnp |gvfs |gzip | +| haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell | +| hwloc |i2pd |icecast |icu |iperf3 |ipmitool |ipsec_tools | +| iptables |irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus | +| jasper |jhead |jq |json_c |kbd |keepalived |kerberos | +| kexectools |kodi |kubernetes |ldns |lftp |libarchive |libass | +| libbpg |libcoap |libconfuse |libcurl |libdb |libde265 |libebml | +| libevent |libexpat |libgcrypt |libgd |libgit2 |libheif |libical | +| libidn2 |libinput |libjpeg |libjpeg_turbo |libksba |liblas |libmatroska | +| libmemcached |libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw | +| librsvg |librsync |libsamplerate |libseccomp |libsndfile |libsolv |libsoup | +| libsrtp |libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp | +| libuv |libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt | +| libyaml |lighttpd |linux_kernel |linuxptp |lldpd |logrotate |lrzip | +| lua |luajit |lxc |lynx |lz4 |mailx |mariadb | +| mbedtls |mdadm |memcached |micropython |minetest |mini_httpd |minicom | +| minidlna |miniupnpc |miniupnpd |moby |modsecurity |monit |mosquitto | +| motion |mp4v2 |mpg123 |mpv |msmtp |mtr |mupdf | +| mutt |mysql |nano |nasm |nbd |ncurses |neon | +| nessus |netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 | +| nginx |ngircd |nmap |node |ntfs_3g |ntp |ntpsec | +| oath_toolkit |open_iscsi |open_vm_tools |openafs |opencv |openjpeg |openldap | +| opensc |openssh |openssl |openswan |openvpn |p7zip |pango | +| patch |pcre |pcre2 |pcsc_lite |perl |php |picocom | +| pigz |pixman |png |polarssl_fedora |poppler |postgresql |ppp | +| privoxy |procps_ng |proftpd |protobuf_c |pspp |pure_ftpd |putty | +| python |qemu |qpdf |qt |quagga |radare2 |radvd | +| raptor |rauc |rdesktop |readline |rpm |rsync |rsyslog | +| rtl_433 |rtmpdump |runc |rust |samba |sane_backends |sdl | +| seahorse |shadowsocks_libev |snapd |sngrep |snort |socat |sofia_sip | +| speex |spice |sqlite |squashfs |squid |sslh |stellarium | +| strongswan |stunnel |subversion |sudo |suricata |sylpheed |syslogng | +| sysstat |systemd |tar |tcpdump |tcpreplay |terminology |tesseract | +| thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor |tpm2_tss | +| traceroute |transmission |trousers |ttyd |twonky_server |u_boot |udisks | +| unbound |unixodbc |upx |util_linux |varnish |vim |vlc | +| vorbis_tools |vsftpd |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant | +| xerces |xml2 |xscreensaver |xwayland |yasm |zabbix |zchunk | +| zeek |zlib |znc |zsh |zstandard | | | For a quick overview of usage and how it works, you can also see [the readme file](README.md).