j f S SK r S SKrS SKJrJr S SKJrJrJr S SK J
r
" S S5 r \ " 5 r g) N)ListOptional)TTP
VulnerabilityVulnerabilityStatus)loggerc 0 \ rS rSrSrS rS\S\4S jrSr g) ValidationService z
Engine for re-validating discovered risks using TTPs (Tactics, Techniques, and Procedures).
Inspired by Penligent's TTP Library.
c J [ SSSS/ SQS9[ SSSS S
S /S9/U l g ) Nz TTP-SQLI-001z Error-based SQLi Verification Injectionz>Verifies SQL injection by triggering database-specific errors.)zSend single quotezCheck for SQL syntax errorzSend balanced quoteidnamecategory descriptionstepsz TTP-XSS-001zReflected XSS Executionz@Verifies XSS by injecting a unique script tag and checking echo.z Inject z"Search for literal tag in response)r ttp_library)selfs H/home/olivitho/Documentos/Proyectos/vulneraAI/app/services/validation.py__init__ValidationService.__init__ sD
!4$ \`
.$ ^9;_`
'
vulnreturnc t ^# [ R " STR S35 [ U4S jU R 5 S5 nU( d] [ R
" STR S35 [
[ [ R " 5 5 STR S3S S
S S /S
9n[ SS5 HG n[ R " SU STR 35 [ R " S5 I Sh vN MI [ R " STR 35 [ R $ N;7f)z?
Performs at least 3 rounds of verification using matched TTP.
zRe-validating risk: z using TTP Enginec 3 ># U H> oR R 5 TR R 5 ; d M: Uv M@ g 7f)N)r lowertype).0tr s r 9ValidationService.verify_vulnerability..& s2 [ /!::3C3C3E IZ3ZAA /s 9A A NzNo matching TTP found for z. Creating dynamic TTP...zDynamic z VerifierMisczAuto-generatedProbeConfirmr zVerification Round z/3 for g ?zVerification completed for )r infor nextr warningr struuiduuid4ranger asynciosleepsuccessr VERIFIED)r r ttp round_nums ` r verify_vulnerability&ValidationService.verify_vulnerability s *499+5FGH [t / /[]ab NN 7 {B[\ ]TZZ\*8DII;i1P[ao IP R[ H\ ]C q!I KK-i[yI J--$ $ $ %
4TWWI>?"+++
%s C7D8:D6; r r rC s- ! F F ,, ,,\ '( r