API Client
- Added CRUD functions for globally excluded targets.
Master
- Bumped
fqdn
library from 1.2.0 to 1.4.0 to fix a bug with numeric TLDs. - Added GloballyExcludedTarget to track different globally excluded targets.
- Streamlined views in
master/django_scantron/api/views.py
with thepermission_classes = (IsAuthenticated, IsAdminUser)
line to prevent agents from even seeing the other API endpoints. Ensures the agents can only view the/api/scheduled_scans
endpoint. - Removed agent visibility of
/results
API endpoint. - Explicitly identified which ScheduledScan fields are read only to prevent an agent from making updates to fields that it shouldn't, such as
site_name
,scan_agent
, ortargets
against the/api/scheduled_scans
endpoint. - masscan
--excludefile
and-iL
switches can only contain IP addresses. Added logic inmaster/scan_scheduler.py
to remove non-IP addresses if the scan binary is masscan.