andypitcher/check_strutsAnalizzatore di versioni Apache Struts (Ansible) basato su CVE-2017-5638
Questo progetto è stato creato in seguito all'exploit di Equifax del 2017 Equifax exploit
Lo script check_struts.sh ha lo scopo di recuperare la versione e la posizione di tutte le librerie Apache Struts trovate e/o caricate sul sistema. Può essere eseguito direttamente su un server, oppure con il playbook Ansible fornito, per gestire più server.
"Libs path and versions loaded on the system:"
Le librerie trovate sono attualmente in esecuzione sul sistema e potrebbero essere accessibili.
"Libs path and versions installed on the system:"
Le librerie sono presenti sul filesystem, ma non in esecuzione.
➜ ansible-playbook git:(master) ✗ ansible-playbook play.yml -i inventory
PLAY [Check Struts] ***********************************************************************************************************************************************************************************************
TASK [ensure a list of packages installed] ************************************************************************************************************************************************************************
ok: [servername]
TASK [Upload script check-struts.sh] ******************************************************************************************************************************************************************************
ok: [servername]
TASK [Check if struts presence/version] ***************************************************************************************************************************************************************************
ok: [servername]
TASK [debug] ******************************************************************************************************************************************************************************************************
skipping: [servername]
TASK [Remove check-struts.sh] *************************************************************************************************************************************************************************************
ok: [servername]
PLAY RECAP ********************************************************************************************************************************************************************************************************
servername : ok=4 changed=0 unreachable=0 failed=0