advance mobsf to also parse exisiting unittestfile

DefectDojo · Feb 16, 2024 · acfbb02 · acfbb02
1 parent 72e20ea
commit acfbb02
Show file tree

Hide file tree

Showing 2 changed files with 17,685 additions and 5 deletions.
diff --git a/dojo/tools/mobsf/parser.py b/dojo/tools/mobsf/parser.py
@@ -320,7 +320,16 @@ def get_findings(self, filename, test):
                 }
 
                 mobsf_findings.append(mobsf_item)
-
+        if type(data) == list:
+            for finding in data:
+                mobsf_item = {
+                    "category": finding["category"],
+                    "title": finding["name"],
+                    "severity": finding["severity"],
+                    "description": finding["description"] + "\n" + "**apk_exploit_dict:** " + str(finding["apk_exploit_dict"]) + "\n" + "**line_number:** " + str(finding["line_number"]),
+                    "file_path": finding["file_object"]
+                }
+                mobsf_findings.append(mobsf_item)
         for mobsf_finding in mobsf_findings:
             title = mobsf_finding["title"]
             sev = self.getCriticalityRating(mobsf_finding["severity"])
@@ -372,12 +381,14 @@ def getSeverityForPermission(self, status):
     # Criticality rating
     def getCriticalityRating(self, rating):
         criticality = "Info"
-        if rating == "Good":
+        if rating.lower() == "good":
             criticality = "Info"
-        if rating == "Warning":
+        elif rating.lower() == "warning":
             criticality = "Low"
+        elif rating.lower() == "vulnerability":
+            criticality = "Medium"
         else:
-            criticality = rating.capitalize()
+            criticality = rating.lower().capitalize()
         return criticality
 
     def suite_data(self, suites):

diff --git a/unittests/scans/mobsf/report2.json b/unittests/scans/mobsf/report2.json