Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Implement 9 new Nuclei Templates for ASVS 4.0.3 Compliance Checks #4

Merged
merged 131 commits into from
Sep 11, 2024
Merged

Implement 9 new Nuclei Templates for ASVS 4.0.3 Compliance Checks #4

merged 131 commits into from
Sep 11, 2024

Conversation

Snbig
Copy link
Collaborator

@Snbig Snbig commented Sep 8, 2024

This pull request introduces a set of new Nuclei v3 templates designed to assist in the automated evaluation of web services and applications against the Application Security Verification Standard (ASVS) version 4.0.3 requirements. The templates cover various critical security areas, ensuring a thorough and streamlined assessment process. Detailed below is the correspondence of each template to the specific ASVS requirement IDs:

Section Req. ID
Input Validation 5.1.5
Sanitization and Sandboxing 5.2.6
Output Encoding and Injection Prevention 5.3.3-1
5.3.3-2
Deserialization Prevention 5.5.2
Client-side Data Protection 8.2.1
Client Communication Security 9.1.2
File Upload 12.1.1-1
12.1.1-2
File Execution 12.3.3
SSRF Protection 12.6.1

Each template is crafted to not only identify the presence of the required security control but also to provide actionable feedback in case of non-compliance. The addition of these templates is a stride towards our commitment to maintaining high security and compliance standards. Your review and suggestions on this contribution are highly appreciated.

nameddorna and others added 30 commits May 24, 2023 17:37
@nameddorna
Update info.md
b81baa1 
update small details in side bar
@nameddorna
Update index.md
3439610 
add Licensing section
@nameddorna
Update index.md
9c70535
@nameddorna
Update index.md
a92a1a7
@nameddorna
Update info.md
378ce15 
add link to the github repo
@nameddorna
Create README.md
05b6970
@Snbig
Create MIT LICENSE
fc61924
@nameddorna
Update index.md
bdbca99 
Signed-off-by: Dorna Azhirak <[email protected]>
@nameddorna
Update index.md
0588e75 
add project desc

Signed-off-by: Dorna Azhirak <[email protected]>
@nameddorna
Create CONTRIBUTING.md
2ec85db 
add 'how to contribute' file 

Signed-off-by: Dorna Azhirak <[email protected]>
@nameddorna
Update and rename tab_example.md to tab_contributing.md
bbe49f8 
add contribution guideline on main owasp website of project

Signed-off-by: Dorna Azhirak <[email protected]>
@nameddorna
Update README.md
37d3cc1 
add readme file content

Signed-off-by: Dorna Azhirak <[email protected]>
@nameddorna
Update info.md
5a27a84 
edit sidebar add icons

Signed-off-by: Dorna Azhirak <[email protected]>
@Snbig
Update README.md
58f77bb 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Update README.md
86e0d5a 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Create syntax-checking.yml
f1f8710 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Create template-validate.yml
045c48c 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Create templates folder
7d5736f 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Added static vulnerable project as submodule on dev
33deafc
@Snbig
Create 13.2.1.yaml
efe4816 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Update syntax-checking.yml
037be1d 
Add PUSH event to workflow

Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Update 13.2.1.yaml
9c7ae76 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Create .yamllint
83a42b3 
Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Update template-validate.yml
4023e9b 
add PUSH event to workflow

Signed-off-by: Hamed Salimian <[email protected]>
@Snbig
Update 13.2.1.yaml
0e14a4b 
Fix lint issues.

Signed-off-by: Hamed Salimian <[email protected]>
@Reza-saeedi
Create 9-1-3.yaml
68801e0 
Signed-off-by: Reza Saeedi <[email protected]>
@Snbig
Update 13.2.1.yaml
06bf232 
Fix lint issue.

Signed-off-by: Hamed Salimian <[email protected]>
@Reza-saeedi
Update 9-3-1.yaml
d47b6ff 
Signed-off-by: Reza Saeedi <[email protected]>
@Reza-saeedi
Rename 9-3-1.yaml to 9.1.3.yaml
3bc924e 
Signed-off-by: Reza Saeedi <[email protected]>
@Snbig
Update 13.2.1.yaml
91d0fca 
Edit `id` and `reference`

Signed-off-by: Hamed Salimian <[email protected]>
Ahsraeisi and others added 18 commits September 11, 2024 08:13
@Ahsraeisi @Snbig
Add 5.3.3.1.yaml
0d7b739
@Ahsraeisi @Snbig
Create 5.3.3.2.yaml
1287954
@Ahsraeisi @Snbig
Update 5.3.3.1.yaml
07d87a6
@Ahsraeisi @Snbig
Create 5.2.6.yaml & Update 5.5.2.yaml
bddd39c
@Ahsraeisi @Snbig
Fix 5.2.6.yaml
a5e2c4e
@Ahsraeisi @Snbig
Fix 12.6.1.yaml
3d5cb3d
@Ahsraeisi @Snbig
Update 12.6.1.yaml
b9f8dbe
@Ahsraeisi @Snbig
Update 5.1.5.yaml
bb16b2e 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 5.2.6.yaml
c87ba32 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 5.2.6.yaml
3ef5e1b 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 5.3.3.2.yaml
fab12ba 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 5.3.3.2.yaml
8c86190 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 5.5.2.yaml
392f4ac 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Snbig
Add 12.1.1, 12,3,3, 12,6,1, 5.1.5, 5.3.3 Vulnerable pages
19fd643
@Ahsraeisi @Snbig
Update 8.2.1.yaml
d31b5f3 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 9.1.2.yaml
45eea9d 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 12.3.3.yaml
3a3a40b 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Ahsraeisi @Snbig
Update 12.6.1.yaml
d8038b7 
Signed-off-by: AmirHossein Raeisi <[email protected]>
@Snbig Snbig force-pushed the dev branch 2 times, most recently from 53e8ede to d8038b7 Compare September 11, 2024 06:03
@Snbig Snbig merged commit e683faa into main Sep 11, 2024
4 checks passed
Snbig added a commit that referenced this pull request Nov 3, 2024
@Snbig @nameddorna
@Reza-saeedi @Ahsraeisi
Implement 9 new Nuclei Templates for ASVS 4.0.3 Compliance Checks (#4) (
ad5ba86 
#6)

* Update info.md

update small details in side bar

* Update index.md

add Licensing section

* Update index.md

* Update index.md

* Update info.md

add link to the github repo

* Create README.md

* Create MIT LICENSE

* Update index.md



* Update index.md

add project desc



* Create CONTRIBUTING.md

add 'how to contribute' file 



* Update and rename tab_example.md to tab_contributing.md

add contribution guideline on main owasp website of project



* Update README.md

add readme file content



* Update info.md

edit sidebar add icons



* Update README.md



* Update README.md



* Create syntax-checking.yml



* Create template-validate.yml



* Create templates folder



* Added static vulnerable project as submodule on dev

* Create 13.2.1.yaml



* Update syntax-checking.yml

Add PUSH event to workflow



* Update 13.2.1.yaml



* Create .yamllint



* Update template-validate.yml

add PUSH event to workflow



* Update 13.2.1.yaml

Fix lint issues.



* Create 9-1-3.yaml



* Update 13.2.1.yaml

Fix lint issue.



* Update 9-3-1.yaml



* Rename 9-3-1.yaml to 9.1.3.yaml



* Update 13.2.1.yaml

Edit `id` and `reference`



* Create 14.4.1.yaml

Create ASVS-4.0.3-V14.4.1 template.



* Update template-validate.yml



* Update template-validate.yml



* Update template-validate.yml



* Update 13.2.1.yaml



* Update 14.4.1.yaml



* Update template-validate.yml



* Update 14.4.1.yaml



* Update 14.4.1.yaml



* Update 14.4.1.yaml



* Update tab_contributing.md



* Create 14.4.2.yaml



* Update 14.4.2.yaml



* Update README.md



* Update tab_contributing.md



* Create 14.4.3.yaml



* Update 14.4.3.yaml



* Create 14.4.4.yaml



* Create 14.4.5.yaml



* Update 14.4.5.yaml



* Create 14.4.6.yaml



* Create 14.4.7.yaml



* Update 13.2.1.yaml



* Update Submodule

* Create 14.5.2.yaml



* Create 14.5.3.yaml



* Update tab_contributing.md



* Update README.md



* Update 13.2.1.yaml



* Create 14.5.1.yaml



* Update 14.5.1.yaml



* Update 13.2.1 14.5.1

* Add 14.3.2 workflow

* Create 14.2.3.yaml

* Update Submodule

* Update 14.2.3.yaml



* Create 13.3.1.yaml



* Update 13.3.1.yaml



* Update template-validate.yml



* Update template-validate.yml



* Update template-validate.yml



* Create 13.2.2.yaml



* Update template-validate.yml



* Update submodule

* Fix reference of 9.1.3.yaml



* Update template-validate.yml



* Update template-validate.yml



* Update tab_contributing.md



* Update tab_contributing.md



* Update README.md



* Create 12.1.1.(2).yaml

* Create 12.1.1.(2).yaml

* Update template-validate.yml



* fix template validation action

* Add workflow templates

* Fix workflows

* Add status badges



* Add status badges.



* Create 12.6.1.yaml

* fix template validation action

* Vulnerable Page Updated.

* Fix status badge

* Update Submodule

* Create 5.1.5.yaml

* fix 5.1.5.yaml

* fix template validation action

* Create 8.2.1.yaml

* Update 8.2.1.yaml

* Update 8.2.1.yaml

* Add logo README.md



* Update Submodule

* Create 12.3.3.yaml

* Add LOGO README.md



* Fix logo alignment



* Create 9.1.2.yaml

* Create 5.5.2.yaml

* Add 5.3.3.1.yaml

* Create 5.3.3.2.yaml

* Update 5.3.3.1.yaml

* Create 5.2.6.yaml & Update 5.5.2.yaml

* Fix 5.2.6.yaml

* Fix 12.6.1.yaml

* Update 12.6.1.yaml

* Update 5.1.5.yaml



* Update 5.2.6.yaml



* Update 5.2.6.yaml



* Update 5.3.3.2.yaml



* Update 5.3.3.2.yaml



* Update 5.5.2.yaml



* Add 12.1.1, 12,3,3, 12,6,1, 5.1.5, 5.3.3 Vulnerable pages

* Update 8.2.1.yaml



* Update 9.1.2.yaml



* Update 12.3.3.yaml



* Update 12.6.1.yaml



* Ajibe

* Ajibe

* Fixed

* Fixed

* Chore: Fix Late night

---------

Signed-off-by: Dorna Azhirak <[email protected]>
Signed-off-by: Hamed Salimian <[email protected]>
Signed-off-by: Reza Saeedi <[email protected]>
Signed-off-by: AmirHossein Raeisi <[email protected]>
Co-authored-by: Dorna Azhirak <[email protected]>
Co-authored-by: Reza Saeedi <[email protected]>
Co-authored-by: AmirHossein Raeisi <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Ahsraeisi Ahsraeisi Ahsraeisi left review comments

Assignees

@Ahsraeisi Ahsraeisi

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@Snbig @Ahsraeisi @nameddorna @Reza-saeedi