diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt index 9e05f3909b..88c55c264d 100644 --- a/.github/actions/spelling/allow.txt +++ b/.github/actions/spelling/allow.txt @@ -129,6 +129,7 @@ cyberciti cybersecurity cygwin d +daemon darkhttpd datasource dav @@ -147,6 +148,7 @@ dio Dio distro distros +dlt dmidecode dnsmasq docker @@ -394,6 +396,7 @@ lighttpd linode linting linux +linuxptp lite lldpd logrotate diff --git a/README.md b/README.md index 27ff4bb6f9..3d5d12c07d 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: -1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 365 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. +1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 367 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. 2. Tools for scanning known component lists in various formats, including .csv, several linux distribution package lists, language specific package scanners and several Software Bill of Materials (SBOM) formats. @@ -226,7 +226,7 @@ The following checkers are available for finding components in binary files: | | | | Available checkers | | | | -|--------------- |------------- |------------------ |--------------- |----------------- |-------------- |--------------- | +|--------------- |--------------- |------------------ |------------- |---------------- |------------ |----------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |asn1c |assimp | | asterisk |atftp |avahi |axel |bash |bind |binutils | | bird |bison |bluez |boinc |botan |bro |bubblewrap | @@ -234,52 +234,52 @@ The following checkers are available for finding components in binary files: | chrony |civetweb |clamav |collectd |commons_compress |connman |coreutils | | cpio |cronie |cryptsetup |cups |curl |cvs |darkhttpd | | dav1d |davfs2 |dbus |debianutils |dhclient |dhcpcd |dhcpd | -| dmidecode |dnsmasq |docker |domoticz |dosfstools |dotnet |dovecot | -| doxygen |dpkg |dropbear |e2fsprogs |ed |elfutils |emacs | -| enscript |exfatprogs |exim |exiv2 |f2fs_tools |faad2 |fastd | -| ffmpeg |file |firefox |flac |fluidsynth |freeradius |freerdp | -| fribidi |frr |gawk |gcc |gdal |gdb |gdk_pixbuf | -| ghostscript |gimp |git |glib |glibc |gmp |gnomeshell | -| gnupg |gnutls |go |gpgme |gpsd |graphicsmagick |grep | -| grub2 |gstreamer |gupnp |gvfs |gzip |haproxy |harfbuzz | -| haserl |hdf5 |heimdal |hostapd |hunspell |hwloc |i2pd | -| icecast |icu |iperf3 |ipmitool |ipsec_tools |iptables |irssi | -| iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper |jhead | -| jq |json_c |kbd |keepalived |kerberos |kexectools |kodi | -| kubernetes |ldns |lftp |libarchive |libass |libbpg |libcoap | -| libconfuse |libcurl |libdb |libde265 |libebml |libevent |libexpat | -| libgcrypt |libgd |libgit2 |libheif |libical |libidn2 |libinput | -| libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached |libmicrohttpd | -| libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg |librsync | -| libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp |libssh | -| libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv |libvips | -| libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml |lighttpd | -| linux_kernel |lldpd |logrotate |lrzip |lua |luajit |lxc | -| lynx |lz4 |mailx |mariadb |mbedtls |mdadm |memcached | -| micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd | -| moby |modsecurity |monit |mosquitto |motion |mp4v2 |mpg123 | -| mpv |msmtp |mtr |mupdf |mutt |mysql |nano | -| nasm |nbd |ncurses |neon |nessus |netatalk |netdata | -| netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd |nmap | -| node |ntfs_3g |ntp |ntpsec |open_iscsi |open_vm_tools |openafs | -| opencv |openjpeg |openldap |opensc |openssh |openssl |openswan | -| openvpn |p7zip |pango |patch |pcre |pcre2 |pcsc_lite | -| perl |php |picocom |pigz |pixman |png |polarssl_fedora | -| poppler |postgresql |ppp |privoxy |procps_ng |proftpd |protobuf_c | -| pspp |pure_ftpd |putty |python |qemu |qpdf |qt | -| quagga |radare2 |radvd |raptor |rauc |rdesktop |readline | -| rpm |rsync |rsyslog |rtl_433 |rtmpdump |runc |rust | -| samba |sane_backends |sdl |seahorse |shadowsocks_libev |snapd |sngrep | -| snort |socat |sofia_sip |speex |spice |sqlite |squashfs | -| squid |sslh |stellarium |strongswan |stunnel |subversion |sudo | -| suricata |sylpheed |syslogng |sysstat |systemd |tar |tcpdump | -| tcpreplay |terminology |tesseract |thrift |thttpd |thunderbird |timescaledb | -| tinyproxy |tor |tpm2_tss |traceroute |transmission |trousers |ttyd | -| twonky_server |u_boot |udisks |unbound |unixodbc |upx |util_linux | -| varnish |vim |vlc |vorbis_tools |vsftpd |webkitgtk |wget | -| wireshark |wolfssl |wpa_supplicant |xerces |xml2 |xscreensaver |xwayland | -| yasm |zabbix |zchunk |zeek |zlib |znc |zsh | -| zstandard | | | | | | | +| dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools |dotnet | +| dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed |elfutils | +| emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools |faad2 | +| fastd |ffmpeg |file |firefox |flac |fluidsynth |freeradius | +| freerdp |fribidi |frr |gawk |gcc |gdal |gdb | +| gdk_pixbuf |ghostscript |gimp |git |glib |glibc |gmp | +| gnomeshell |gnupg |gnutls |go |gpgme |gpsd |graphicsmagick | +| grep |grub2 |gstreamer |gupnp |gvfs |gzip |haproxy | +| harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell |hwloc | +| i2pd |icecast |icu |iperf3 |ipmitool |ipsec_tools |iptables | +| irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper | +| jhead |jq |json_c |kbd |keepalived |kerberos |kexectools | +| kodi |kubernetes |ldns |lftp |libarchive |libass |libbpg | +| libcoap |libconfuse |libcurl |libdb |libde265 |libebml |libevent | +| libexpat |libgcrypt |libgd |libgit2 |libheif |libical |libidn2 | +| libinput |libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached | +| libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg | +| librsync |libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp | +| libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv | +| libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml | +| lighttpd |linux_kernel |linuxptp |lldpd |logrotate |lrzip |lua | +| luajit |lxc |lynx |lz4 |mailx |mariadb |mbedtls | +| mdadm |memcached |micropython |minetest |mini_httpd |minicom |minidlna | +| miniupnpc |miniupnpd |moby |modsecurity |monit |mosquitto |motion | +| mp4v2 |mpg123 |mpv |msmtp |mtr |mupdf |mutt | +| mysql |nano |nasm |nbd |ncurses |neon |nessus | +| netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx | +| ngircd |nmap |node |ntfs_3g |ntp |ntpsec |open_iscsi | +| open_vm_tools |openafs |opencv |openjpeg |openldap |opensc |openssh | +| openssl |openswan |openvpn |p7zip |pango |patch |pcre | +| pcre2 |pcsc_lite |perl |php |picocom |pigz |pixman | +| png |polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng | +| proftpd |protobuf_c |pspp |pure_ftpd |putty |python |qemu | +| qpdf |qt |quagga |radare2 |radvd |raptor |rauc | +| rdesktop |readline |rpm |rsync |rsyslog |rtl_433 |rtmpdump | +| runc |rust |samba |sane_backends |sdl |seahorse |shadowsocks_libev | +| snapd |sngrep |snort |socat |sofia_sip |speex |spice | +| sqlite |squashfs |squid |sslh |stellarium |strongswan |stunnel | +| subversion |sudo |suricata |sylpheed |syslogng |sysstat |systemd | +| tar |tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd | +| thunderbird |timescaledb |tinyproxy |tor |tpm2_tss |traceroute |transmission | +| trousers |ttyd |twonky_server |u_boot |udisks |unbound |unixodbc | +| upx |util_linux |varnish |vim |vlc |vorbis_tools |vsftpd | +| webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces |xml2 | +| xscreensaver |xwayland |yasm |zabbix |zchunk |zeek |zlib | +| znc |zsh |zstandard | | | | | All the checkers can be found in the checkers directory, as can the diff --git a/doc/MANUAL.md b/doc/MANUAL.md index 4125d3b20d..4a7644afff 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -241,7 +241,7 @@ which is useful if you're trying the latest code from | | | | Available checkers | | | | -|--------------- |------------- |------------------ |--------------- |----------------- |-------------- |--------------- | +|--------------- |--------------- |------------------ |------------- |---------------- |------------ |----------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |asn1c |assimp | | asterisk |atftp |avahi |axel |bash |bind |binutils | | bird |bison |bluez |boinc |botan |bro |bubblewrap | @@ -249,52 +249,52 @@ which is useful if you're trying the latest code from | chrony |civetweb |clamav |collectd |commons_compress |connman |coreutils | | cpio |cronie |cryptsetup |cups |curl |cvs |darkhttpd | | dav1d |davfs2 |dbus |debianutils |dhclient |dhcpcd |dhcpd | -| dmidecode |dnsmasq |docker |domoticz |dosfstools |dotnet |dovecot | -| doxygen |dpkg |dropbear |e2fsprogs |ed |elfutils |emacs | -| enscript |exfatprogs |exim |exiv2 |f2fs_tools |faad2 |fastd | -| ffmpeg |file |firefox |flac |fluidsynth |freeradius |freerdp | -| fribidi |frr |gawk |gcc |gdal |gdb |gdk_pixbuf | -| ghostscript |gimp |git |glib |glibc |gmp |gnomeshell | -| gnupg |gnutls |go |gpgme |gpsd |graphicsmagick |grep | -| grub2 |gstreamer |gupnp |gvfs |gzip |haproxy |harfbuzz | -| haserl |hdf5 |heimdal |hostapd |hunspell |hwloc |i2pd | -| icecast |icu |iperf3 |ipmitool |ipsec_tools |iptables |irssi | -| iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper |jhead | -| jq |json_c |kbd |keepalived |kerberos |kexectools |kodi | -| kubernetes |ldns |lftp |libarchive |libass |libbpg |libcoap | -| libconfuse |libcurl |libdb |libde265 |libebml |libevent |libexpat | -| libgcrypt |libgd |libgit2 |libheif |libical |libidn2 |libinput | -| libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached |libmicrohttpd | -| libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg |librsync | -| libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp |libssh | -| libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv |libvips | -| libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml |lighttpd | -| linux_kernel |lldpd |logrotate |lrzip |lua |luajit |lxc | -| lynx |lz4 |mailx |mariadb |mbedtls |mdadm |memcached | -| micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd | -| moby |modsecurity |monit |mosquitto |motion |mp4v2 |mpg123 | -| mpv |msmtp |mtr |mupdf |mutt |mysql |nano | -| nasm |nbd |ncurses |neon |nessus |netatalk |netdata | -| netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd |nmap | -| node |ntfs_3g |ntp |ntpsec |open_iscsi |open_vm_tools |openafs | -| opencv |openjpeg |openldap |opensc |openssh |openssl |openswan | -| openvpn |p7zip |pango |patch |pcre |pcre2 |pcsc_lite | -| perl |php |picocom |pigz |pixman |png |polarssl_fedora | -| poppler |postgresql |ppp |privoxy |procps_ng |proftpd |protobuf_c | -| pspp |pure_ftpd |putty |python |qemu |qpdf |qt | -| quagga |radare2 |radvd |raptor |rauc |rdesktop |readline | -| rpm |rsync |rsyslog |rtl_433 |rtmpdump |runc |rust | -| samba |sane_backends |sdl |seahorse |shadowsocks_libev |snapd |sngrep | -| snort |socat |sofia_sip |speex |spice |sqlite |squashfs | -| squid |sslh |stellarium |strongswan |stunnel |subversion |sudo | -| suricata |sylpheed |syslogng |sysstat |systemd |tar |tcpdump | -| tcpreplay |terminology |tesseract |thrift |thttpd |thunderbird |timescaledb | -| tinyproxy |tor |tpm2_tss |traceroute |transmission |trousers |ttyd | -| twonky_server |u_boot |udisks |unbound |unixodbc |upx |util_linux | -| varnish |vim |vlc |vorbis_tools |vsftpd |webkitgtk |wget | -| wireshark |wolfssl |wpa_supplicant |xerces |xml2 |xscreensaver |xwayland | -| yasm |zabbix |zchunk |zeek |zlib |znc |zsh | -| zstandard | | | | | | | +| dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools |dotnet | +| dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed |elfutils | +| emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools |faad2 | +| fastd |ffmpeg |file |firefox |flac |fluidsynth |freeradius | +| freerdp |fribidi |frr |gawk |gcc |gdal |gdb | +| gdk_pixbuf |ghostscript |gimp |git |glib |glibc |gmp | +| gnomeshell |gnupg |gnutls |go |gpgme |gpsd |graphicsmagick | +| grep |grub2 |gstreamer |gupnp |gvfs |gzip |haproxy | +| harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell |hwloc | +| i2pd |icecast |icu |iperf3 |ipmitool |ipsec_tools |iptables | +| irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper | +| jhead |jq |json_c |kbd |keepalived |kerberos |kexectools | +| kodi |kubernetes |ldns |lftp |libarchive |libass |libbpg | +| libcoap |libconfuse |libcurl |libdb |libde265 |libebml |libevent | +| libexpat |libgcrypt |libgd |libgit2 |libheif |libical |libidn2 | +| libinput |libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached | +| libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg | +| librsync |libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp | +| libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv | +| libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml | +| lighttpd |linux_kernel |linuxptp |lldpd |logrotate |lrzip |lua | +| luajit |lxc |lynx |lz4 |mailx |mariadb |mbedtls | +| mdadm |memcached |micropython |minetest |mini_httpd |minicom |minidlna | +| miniupnpc |miniupnpd |moby |modsecurity |monit |mosquitto |motion | +| mp4v2 |mpg123 |mpv |msmtp |mtr |mupdf |mutt | +| mysql |nano |nasm |nbd |ncurses |neon |nessus | +| netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx | +| ngircd |nmap |node |ntfs_3g |ntp |ntpsec |open_iscsi | +| open_vm_tools |openafs |opencv |openjpeg |openldap |opensc |openssh | +| openssl |openswan |openvpn |p7zip |pango |patch |pcre | +| pcre2 |pcsc_lite |perl |php |picocom |pigz |pixman | +| png |polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng | +| proftpd |protobuf_c |pspp |pure_ftpd |putty |python |qemu | +| qpdf |qt |quagga |radare2 |radvd |raptor |rauc | +| rdesktop |readline |rpm |rsync |rsyslog |rtl_433 |rtmpdump | +| runc |rust |samba |sane_backends |sdl |seahorse |shadowsocks_libev | +| snapd |sngrep |snort |socat |sofia_sip |speex |spice | +| sqlite |squashfs |squid |sslh |stellarium |strongswan |stunnel | +| subversion |sudo |suricata |sylpheed |syslogng |sysstat |systemd | +| tar |tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd | +| thunderbird |timescaledb |tinyproxy |tor |tpm2_tss |traceroute |transmission | +| trousers |ttyd |twonky_server |u_boot |udisks |unbound |unixodbc | +| upx |util_linux |varnish |vim |vlc |vorbis_tools |vsftpd | +| webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces |xml2 | +| xscreensaver |xwayland |yasm |zabbix |zchunk |zeek |zlib | +| znc |zsh |zstandard | | | | | For a quick overview of usage and how it works, you can also see [the readme file](README.md).