✨ Add Passive Scan Feature

[hahwul]

Closed #419

• Use Passive Scan
• Custom Passive Scan Rule
• Sync remote ruleset -> Add Remote Passive Scan Rule #422
• Printing

Signed-off-by: HAHWUL [email protected]

[hahwul]

Interim review

....
GET /token
  ○ body: client_id=&redirect_url=&grant_type=

GET /socket [websocket]

GET /1.html

GET /2.html

Passive Results:
ID: ...
Info: PassiveScan::Info(@name="ABCD", @author=["abcd", "aaaa"], @severity="critical", @description="....", @reference=["https://google.com"])
Matchers: [PassiveScan::Matcher(@type="word", @patterns=["api"], @condition="or"), PassiveScan::Matcher(@type="regex", @patterns=[".*", "^a"], @condition="or")]
Matchers Condition: and
Category: secret
Techs: *, ruby-rails
File Path: ./spec/functional_test/fixtures/crystal_kemal/src/testapp.cr
Line Number: 4
Extract:   env.request.headers["x-api-key"].as(String)

{
"passive_results": [
    {
      "id": "...",
      "info": {
        "name": "ABCD",
        "author": [
          "abcd",
          "aaaa"
        ],
        "severity": "critical",
        "description": "....",
        "reference": [
          "https://google.com"
        ]
      },
      "category": "secret",
      "techs": [
        "*",
        "ruby-rails"
      ],
      "file_path": "./spec/functional_test/fixtures/crystal_kemal/src/testapp.cr",
      "line_number": 4,
      "extract": "  env.request.headers[\"x-api-key\"].as(String)"
    }
]
}

[hahwul]

[hahwul]

[hahwul]