Merge pull request #938 from blacklanternsecurity/tag-inheritance

Inherit mutation tags

bbot/core/event/base.py

@@ -400,9 +400,13 @@ def source(self, source):
                 if not hosts_are_same:
                     new_scope_distance += 1
                 self.scope_distance = new_scope_distance
-            # inherit affiliate tag
-            if hosts_are_same and "affiliate" in source.tags:
-                self.add_tag("affiliate")
+            # inherit certain tags
+            if hosts_are_same:
+                for t in source.tags:
+                    if t == "affiliate":
+                        self.add_tag("affiliate")
+                    elif t.startswith("mutation-"):
+                        self.add_tag(t)
         elif not self._dummy:
             log.warning(f"Tried to set invalid source on {self}: (got: {source})")
 

bbot/test/test_step_1/test_events.py

@@ -171,6 +171,15 @@ async def test_events(events, scan, helpers, bbot_config):
     assert internal_event1._internal == True
     assert "internal" in internal_event1.tags
 
+    # tag inheritance
+    for tag in ("affiliate", "mutation-1"):
+        affiliate_event = scan.make_event("1.2.3.4", source=root_event, tags=tag)
+        assert tag in affiliate_event.tags
+        affiliate_event2 = scan.make_event("1.2.3.4:88", source=affiliate_event)
+        affiliate_event3 = scan.make_event("4.3.2.1:88", source=affiliate_event)
+        assert tag in affiliate_event2.tags
+        assert tag not in affiliate_event3.tags
+
     # event sorting
     parent1 = scan.make_event("127.0.0.1", source=scan.root_event)
     parent2 = scan.make_event("127.0.0.1", source=scan.root_event)