audit

type Audit struct {
	// contains filtered or unexported fields
}

type AuditInterface interface {
	Load(input interface{}) error
	Scan() ([]*AuditResult, error)
}

type AuditResult struct {
	Type          string // type of audit e.g. "SSL", "SSH"
	Status        Status // status of the audit e.g "PASS", "ERROR", "FAIL"
	StatusMessage string // message of the audit
}

type AuditScanHandler func(results []*AuditResult, err error)

type AuditType int

type Discovery struct {
	Type           string            `mapstructure:"type"`
	Targets        []string          `mapstructure:"targets"`
	ResourceTypes  []string          `mapstructure:"resource_types"`
	Regions        []string          `mapstructure:"regions"`
	Tags           map[string]string `mapstructure:"tags"`
	Properties     map[string]string `mapstructure:"properties"`
	TargetProperty string            `mapstructure:"target_property"`
	DNSZones       []string          `mapstructure:"dns_zones"`
	DNSRecordTypes []string          `mapstructure:"dns_record_types"`
}

type Host struct {
	Host           string               `mapstructure:"host"`
	Public         bool                 `mapstructure:"public"`
	StartNew       bool                 `mapstructure:"start_new"`
	FromCache      bool                 `mapstructure:"from_cache"`
	MaxAge         int                  `mapstructure:"max_age"`
	IgnoreMismatch bool                 `mapstructure:"ignore_mismatch"`
	Threshold      string               `mapstructure:"threshold"`
	ScanInfo       *sslscan.AnalyzeInfo // scan information
	ScanInfoError  error                // contains an error if an error occured while scanning host
}

type PortScan struct {
	PortTargetGroups []*PortTargetGroup
}

type PortTarget struct {
	Host          string
	Group         *PortTargetGroup
	ScanInfo      []nmap.Port
	ScanInfoError error
}

type PortTargetGroup struct {
	Timeout         string     `mapstructure:"timeout"`
	AllowList       []string   `mapstructure:"allowlist"`
	BlockList       []string   `mapstructure:"blocklist"`
	Discovery       *Discovery `mapstructure:"discovery"`
	CommonPortsPath struct {
		TCP string `mapstructure:"tcp"`
		UDP string `mapstructure:"udp"`
	} `mapstructure:"common_ports_path"`
}

type SSHAudit struct {
	TargetGroups []*TargetGroup
}

type SSLAudit struct {
	Hosts []*Host
}

type ScanType func(ctx context.Context, target *PortTarget) ([]nmap.Port, error)

type Status int

type Target struct {
	Host             string
	Group            *TargetGroup
	StandardScanInfo *sshaudit.StandardServerAuditInfo
	PolicyScanInfo   *sshaudit.PolicyServerAuditInfo
	ScanInfoError    error
}

type TargetGroup struct {
	Port       int        `mapstructure:"port"`
	AuditType  string     `mapstructure:"audit_type"`
	PolicyName string     `mapstructure:"policy_name"`
	Threshold  string     `mapstructure:"threshold"`
	Discovery  *Discovery `mapstructure:"discovery"`
}

type Vulnerability struct {
	// contains filtered or unexported fields
}

type VulnerabilityTargetGroup struct {
	Discovery              *Discovery `mapstructure:"discovery"`
	VulnerabilityTemplates []string   `mapstructure:"vulnerability_templates"`
	Threshold              string     `mapstructure:"threshold`
}