Dominic Whewell

Replace Jinja2 variables in Document Core Properties

1

This PR adds the ability to add jinja2 variables in the Document/PowerPoint properties (File > Info >> Properties). https://github.com/GhostManager/Ghostwriter/issues/389 You can add jinja2 variables into the [Core](https://python-docx.readthedocs.io/en/latest/dev/analysis/features/coreprops.html) properties in office...

Add CVSSv4 Calculator

5

Working PR to add CVSSv4 calculator onto the findings views as requested in #356. The CVSSv4 calculator should appear as a optional tab once you click the "CVSS Calculator" accordion....

Jinja2 variables not accessible in word document properties

1

The Jinja2 variables don't seem to be accessible in the document properties section. (In MS word select "File" > "Info") For example:  These variables don't get replaced. Filling out...

Backup not backing up archives, evidence, templates

4

**Describe the bug** The `ghostwriter-cli backup` command currently only backs up the postgres database. **To Reproduce** To transfer to another server, run these commands: **On Server 1** 1. Run `ghostwriter-cli...

Issues with the Scan Servers task

2

**Describe the bug** The Scan Servers task seems to run however the function crashes when trying to initiate the `nmap.PortScanner()` object. Also it is not clear on the wiki how...

Module Enhancement: `github_orgs` raise github actions logs as `HTTP_RESPONSE`

3

Github actions logs could be a great source of plaintext secrets, use the API_KEY to make a request to the github api and grab the action logs

AWS Session Key not being matched

3

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ### TruffleHog Version 3.74.0 ### Trace Output https://gist.github.com/domwhewell-sage/66c6ce77f372d958dbbae7fdde4e6a0f ### Expected Behavior Session Key is detected ### Actual Behavior No secrets are detected ###...

**Description** It would be nice for BBOT 2.0 if a notifications cache feature was available. The current notifications modules `Discord` / `Slack` / `Teams` will ping as soon as the...

`self.timeout` unused in gowitness module

3

**Describe the bug** In the gowitness module a timeout config is allowed but never used in the command. https://github.com/blacklanternsecurity/bbot/blob/stable/bbot/modules/gowitness.py#L83 ```python def construct_command(self): # base executable command = ["gowitness"] # chrome...

This PR adds some code to create bookmarks on headings as described in https://github.com/GhostManager/Ghostwriter/issues/460