New Module: Added Ivanti ICS CVE-2023-46805 Vuln

[jimmy-ly00]

Checklist

• I have followed the Contributor Guidelines.
• The code has been thoroughly tested in my local development environment with flake8 and pylint.
• The code is Python 3 compatible.
• The code follows the PEP8 styling guidelines with 4 spaces indentation.
• This Pull Request relates to only one issue or only one feature
• I have referenced the corresponding issue number in my commit message
• I have added the relevant documentation.
• My branch is up-to-date with the Upstream master branch.

Changes proposed in this pull request

I have added a new module for a vuln module CVE-2023-46805. The detection method is from Watchtwr which states that if it 403 with empty content its not fixed. If it has content then the mitigation patch was applied. Currently, it does a reverse regex of it found content as I'm not able to work out how to define empty content.

python3 nettacker.py -i [target] -m ivanti_ics_cve_2023_46805_vuln --skip-service-discovery

Your development environment

• OS: WSL Kali Linux
• OS Version: Linux 5.15.90.1-microsoft-standard-WSL2
• Python Version: Python 3.11.6

[securestep9]

@jimmy-ly00 this module only checks for CVE-2023-46805 (auth bypass) - can you please rename it as we want one module in Nettacker to detect one CVE only.

[jimmy-ly00]

@jimmy-ly00 this module only checks for CVE-2023-46805 (auth bypass) - can you please rename it as we want one module in Nettacker to detect one CVE only.

Great point, I have modified it to be just CVE-2023-46805, please see again.