Check to make sure all services are running. Uses multiple resources to check the full stack.
\nServer CPU load in precent for debuging and status reports.
\nID / Search regex of OS-CFDB ID's
\n","type":"text/plain"},"key":"id","value":"OS-CFDB"}],"variable":[]}},"response":[{"id":"cf78f9d0-0a1e-4390-b0d3-4647b4242a4c","name":"API Finding ID Search","originalRequest":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[]},"url":{"raw":"https://os-cfdb.obscuritylabs.com/api/v1/retrive/finding/id/search?id=OS-CFDB","protocol":"https","host":["os-cfdb","obscuritylabs","com"],"path":["api","v1","retrive","finding","id","search"],"query":[{"key":"id","value":"OS-CFDB","description":"ID / Search regex of OS-CFDB ID's"}]}},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"CF-RAY","value":"445defbf6d26ae02-BOS","name":"CF-RAY","description":"Custom header"},{"key":"Connection","value":"keep-alive","name":"Connection","description":"Options that are desired for the connection"},{"key":"Content-Encoding","value":"gzip","name":"Content-Encoding","description":"The type of encoding used on the data."},{"key":"Content-Type","value":"application/json","name":"Content-Type","description":"The mime type of this content"},{"key":"Date","value":"Mon, 06 Aug 2018 02:05:05 GMT","name":"Date","description":"The date and time that the message was sent"},{"key":"Expect-CT","value":"max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\"","name":"Expect-CT","description":"Custom header"},{"key":"Server","value":"cloudflare","name":"Server","description":"A name for the server"},{"key":"Transfer-Encoding","value":"chunked","name":"Transfer-Encoding","description":"The form of encoding used to safely transfer the entity to the user. Currently defined methods are: chunked, compress, deflate, gzip, identity."}],"cookie":[{"expires":"Tue Aug 06 2019 01:55:12 GMT+0000 (Coordinated Universal Time)","httpOnly":true,"domain":"obscuritylabs.com","path":"/","secure":false,"value":"d803a908321f075e2b0469dba56ab96bc1533520512","key":"__cfduid"}],"responseTime":null,"body":"[\n {\n \"data\": {\n \"findingDetails\": {\n \"findingMatrix\": {\n \"cvss\": \"8.0 \\u2013 10.0\", \n \"id\": \"OS-CFDB-1000\", \n \"risk\": \"Critical\", \n \"title\": \"Insecure Active Direcotry User ACLs\", \n \"vsr\": 5\n }\n }\n }, \n \"id\": \"5b67a8f2c4af610016bcff5f\"\n }, \n {\n \"data\": {\n \"findingDetails\": {\n \"findingMatrix\": {\n \"cvss\": \"4.0-5.9\", \n \"id\": \"OS-CFDB-1001\", \n \"risk\": \"Medium\", \n \"title\": \"Default Administrator Enabled (RID 500)\", \n \"vsr\": 3\n }\n }\n }, \n \"id\": \"5b67a8f2c4af610016bcff60\"\n }, \n {\n \"data\": {\n \"findingDetails\": {\n \"findingMatrix\": {\n \"cvss\": \"6.0 \\u2013 7.9\", \n \"id\": \"OS-CFDB-1002\", \n \"risk\": \"High\", \n \"title\": \"Firewall Misconfiguration\", \n \"vsr\": 4\n }\n }\n }, \n \"id\": \"5b67a8f2c4af610016bcff61\"\n }\n]\n"}],"_postman_id":"17f952c3-6be7-444a-8310-6e43a625f48d"},{"name":"API Finding Title Search","event":[{"listen":"test","script":{"id":"ed11160e-6ee3-4d47-9bde-52b9117f96c9","type":"text/javascript","exec":["pm.test(\"Loads JSON\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.load);","});","","pm.test(\"Response time is less than 500ms\", function () {"," pm.expect(pm.response.responseTime).to.be.below(500);","});","","pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});",""]}}],"id":"5dd04342-b92a-4c2f-b371-81339e0d5597","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[]},"url":"https://os-cfdb.obscuritylabs.com/api/v1//retrive/finding/title/search?title=D","description":"Search regex of finding title.
\nregex of finding title to search.
\n","type":"text/plain"},"key":"title","value":"D"}],"variable":[]}},"response":[],"_postman_id":"5dd04342-b92a-4c2f-b371-81339e0d5597"},{"name":"API Finding ID","event":[{"listen":"test","script":{"id":"810c01d3-2476-4486-8818-4b99c20c144a","type":"text/javascript","exec":["pm.test(\"Loads JSON\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.load);","});","","pm.test(\"Response time is less than 500ms\", function () {"," pm.expect(pm.response.responseTime).to.be.below(500);","});","","pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});",""]}}],"id":"c2121e4f-471a-472f-b649-2d6f6f992db1","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[]},"url":"https://os-cfdb.obscuritylabs.com/api/v1/retrive/finding/id?id=OS-CFDB-1001","description":"Retrive findings by ID.
\nEach finding has a provided OS-CFDB ID to provide a Unique ID to each finding.
\n","type":"text/plain"},"key":"id","value":"OS-CFDB-1001"}],"variable":[]}},"response":[{"id":"b9a1e298-ef6d-4f92-b93e-c3440ed3178c","name":"API Finding ID","originalRequest":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[]},"url":{"raw":"https://os-cfdb.obscuritylabs.com/api/v1/retrive/finding/id?id=OS-CFDB-1001","protocol":"https","host":["os-cfdb","obscuritylabs","com"],"path":["api","v1","retrive","finding","id"],"query":[{"key":"id","value":"OS-CFDB-1001","description":"Each finding has a provided OS-CFDB ID to provide a Unique ID to each finding. "}]}},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"CF-RAY","value":"446bab26fc2391e8-EWR","name":"CF-RAY","description":"Custom header"},{"key":"Connection","value":"keep-alive","name":"Connection","description":"Options that are desired for the connection"},{"key":"Content-Encoding","value":"gzip","name":"Content-Encoding","description":"The type of encoding used on the data."},{"key":"Content-Type","value":"application/json","name":"Content-Type","description":"The mime type of this content"},{"key":"Date","value":"Tue, 07 Aug 2018 18:04:56 GMT","name":"Date","description":"The date and time that the message was sent"},{"key":"Expect-CT","value":"max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\"","name":"Expect-CT","description":"Custom header"},{"key":"Server","value":"cloudflare","name":"Server","description":"A name for the server"},{"key":"Transfer-Encoding","value":"chunked","name":"Transfer-Encoding","description":"The form of encoding used to safely transfer the entity to the user. Currently defined methods are: chunked, compress, deflate, gzip, identity."}],"cookie":[{"expires":"Tue Aug 06 2019 01:55:12 GMT+0000 (Coordinated Universal Time)","httpOnly":true,"domain":"obscuritylabs.com","path":"/","secure":false,"value":"d803a908321f075e2b0469dba56ab96bc1533520512","key":"__cfduid"}],"responseTime":null,"body":"{\n \"data\": {\n \"finding\": {\n \"findingDetails\": {\n \"findingMatrix\": {\n \"cvss\": \"4.0-5.9\", \n \"id\": \"OS-CFDB-1001\", \n \"risk\": \"Medium\", \n \"title\": \"Default Administrator Enabled (RID 500)\", \n \"vsr\": 3\n }, \n \"findingRefrences\": [\n {\n \"url\": \"https://nvd.nist.gov/800-53/Rev4/control/IA-2\"\n }, \n {\n \"url\": \"https://technet.microsoft.com/en-us/mt227395.aspx\"\n }\n ], \n \"findingService\": [\n {\n \"service\": \"Internal Penetration Testing\"\n }, \n {\n \"service\": \"External Penetration Testing\"\n }\n ], \n \"mitreAttack\": [\n {\n \"id\": \"T1075\", \n \"link\": \"https://attack.mitre.org/wiki/Technique/T1075\", \n \"name\": \"Pass the Hash\", \n \"tactic\": \"Lateral Movement\"\n }\n ], \n \"nistControls\": [\n {\n \"nist\": \"CM-2\"\n }, \n {\n \"nist\": \"CM-6\"\n }, \n {\n \"nist\": \"IA-2\"\n }, \n {\n \"nist\": \"IA-3\"\n }\n ]\n }, \n \"findingMetadata\": {\n \"findingDevelopment\": [\n {\n \"authorName\": \"Alexander Rymdeko-Harvey\", \n \"created\": \"09/27/2017\", \n \"email\": \"\", \n \"twitterHandle\": \"@Killswitch-GUI\", \n \"updated\": \"09/27/2017\"\n }\n ]\n }, \n \"technicalInformation\": {\n \"description\": \"The default administrator account is often used during initial setup of a host and joining an AD (Active Directory) Domain environment. This type of account is often referred to as BUILTIN\\\\Administrator, also known as NT AUTHORITY\\\\Administrator with the relative identifier (RID) 500. This account exists by default on all Microsoft Windows (Windows NT-based) systems as well as Active Directory domains. The assessment team discovered that hosts contained an enabled Administrator Account.\", \n \"impact\": \"If an attacker can gain elevated system privileges on a compromised host, the attacker could gather clear-text and the NTLM hash of this account. These credentials could be used to further access or lateral spread mechanisms such as Pass-The-Hash attacks where other machines use this same password.\", \n \"recommendation\": \"The assessment team recommends disabling the built-in Administrator if business requirements allow for it. This account should only be used during initial setup and disaster recovery if possible. If disabling the account is not an option, its recommend to use a solution such as LAPS (Local Administrator Password Solution) or enroll in third-party solutions to randomize and manage bulk password management.\"\n }\n }\n }\n}\n"}],"_postman_id":"c2121e4f-471a-472f-b649-2d6f6f992db1"}]}