Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update installer, dep-check #846

Merged
merged 3 commits into from
Oct 25, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
3 changes: 3 additions & 0 deletions helpers/helpers_emba_dependency_check.sh
Original file line number Diff line number Diff line change
Expand Up @@ -599,6 +599,9 @@ dependency_check()
# yara
check_dep_tool "yara"

# ssdeep
check_dep_tool "ssdeep"

# cyclonedx - converting csv sbom to json sbom
if [[ -d "/home/linuxbrew/.linuxbrew/bin/" ]]; then
export PATH=$PATH:/home/linuxbrew/.linuxbrew/bin/
Expand Down
15 changes: 2 additions & 13 deletions installer/IF20_cve_search.sh
Original file line number Diff line number Diff line change
Expand Up @@ -21,15 +21,13 @@ IF20_cve_search() {

if [[ "$LIST_DEP" -eq 1 ]] || [[ $IN_DOCKER -eq 1 ]] || [[ $DOCKER_SETUP -eq 1 ]] || [[ $CVE_SEARCH -eq 1 ]] || [[ $FULL -eq 1 ]]; then

print_git_info "trickest cve database" "EMBA-support-repos/trickest-cve" "Trickest CVE to github exploit database"
echo -e "$ORANGE""trickest poc database will be downloaded.""$NC"
print_git_info "cve-search" "EMBA-support-repos/cve-search" "CVE-Search is a tool to import CVE and CPE into a database to facilitate search and processing of CVEs."
echo -e "$ORANGE""cve-search will be downloaded.""$NC"

if [[ "$LIST_DEP" -eq 1 ]] || [[ $IN_DOCKER -eq 1 ]] ; then
ANSWER=("n")
else
echo -e "\\n""$MAGENTA""$BOLD""trickest, cve-search and mongodb will be downloaded, installed and populated!""$NC"
echo -e "\\n""$MAGENTA""$BOLD""cve-search and mongodb will be downloaded, installed and populated!""$NC"
ANSWER=("y")
fi

Expand Down Expand Up @@ -70,7 +68,7 @@ IF20_cve_search() {
pip_install "tqdm==4.64.0"
pip_install "pymongo==3.12.1"
pip_install "dicttoxml==1.7.4"
pip_install "redis==4.2.2"
pip_install "redis==4.5.4"
pip_install "ijson==3.1.4"
pip_install "jsonpickle==3.0.1"
pip_install "requirements-parser==0.5.0"
Expand Down Expand Up @@ -203,15 +201,6 @@ IF20_cve_search() {
echo -e "$MAGENTA""$BOLD""For automatic updates it should be checked and copied to /etc/cron.daily/""$NC"
fi
cd "$HOME_PATH" || ( echo "Could not install EMBA component cve-search" && exit 1 )

# get trickest repository
if ! [[ -d external/trickest-cve ]]; then
git clone https://github.com/EMBA-support-repos/trickest-cve.git external/trickest-cve
else
cd external/trickest-cve || ( echo "Could not install EMBA component Trickest" && exit 1 )
git pull
cd "$HOME_PATH" || ( echo "Could not install EMBA component Trickest" && exit 1 )
fi
;;
esac
fi
Expand Down
2 changes: 1 addition & 1 deletion installer/IF50_aggregator_common.sh
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ IF50_aggregator_common() {
if [[ "$LIST_DEP" -eq 1 ]] || [[ $DOCKER_SETUP -eq 1 ]] ; then
ANSWER=("n")
else
echo -e "\\n""$MAGENTA""$BOLD""cyclonedx, net-tools, pip3, cve-search, trickest and cve_searchsploit (if not already on the system) will be downloaded and installed!""$NC"
echo -e "\\n""$MAGENTA""$BOLD""cyclonedx, net-tools, pip3, cve-search and cve_searchsploit (if not already on the system) will be downloaded and installed!""$NC"
ANSWER=("y")
fi

Expand Down
3 changes: 2 additions & 1 deletion scan-profiles/default-scan.emba
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,8 @@ export THREADED=1
export SHORT_PATH=1
export HTML=1
export QEMULATION=1
export MODULE_BLACKLIST=( "S99_grepit" "S110_yara_check" )
# the following modules are long running modules which are disabled in the default profile
export MODULE_BLACKLIST=( "S15_radare_decompile_checks" "S99_grepit" "S110_yara_check" )

# we output the profile only at the beginning - outside the docker environment
if [[ $IN_DOCKER -ne 1 ]] ; then
Expand Down