feat!(detector): replace go-exploitdb with vuls2

config/config.go

@@ -40,7 +40,6 @@ type Config struct {
 	// report
 	CveDict GoCveDictConf `json:"cveDict,omitzero"`
 	Gost    GostConf      `json:"gost,omitzero"`
-	Exploit ExploitConf   `json:"exploit,omitzero"`
 	Cti     CtiConf       `json:"cti,omitzero"`
 	Vuls2   Vuls2Conf     `json:"vuls2,omitzero"`
 
@@ -188,7 +187,6 @@ func (c *Config) ValidateOnReport() bool {
 	for _, cnf := range []VulnDictInterface{
 		&Conf.CveDict,
 		&Conf.Gost,
-		&Conf.Exploit,
 		&Conf.Cti,
 	} {
 		if err := cnf.Validate(); err != nil {

config/tomlloader.go

@@ -40,7 +40,6 @@ func (c TOMLLoader) Load(pathToToml string) error {
 	for _, cnf := range []VulnDictInterface{
 		&Conf.CveDict,
 		&Conf.Gost,
-		&Conf.Exploit,
 		&Conf.Cti,
 	} {
 		cnf.Init()

config/vulnDictConf.go

@@ -146,33 +146,6 @@ func (cnf VulnDict) CheckHTTPHealth() error {
 	return nil
 }
 
-// ExploitConf is exploit config
-type ExploitConf struct {
-	VulnDict
-}
-
-const exploitDBType = "EXPLOITDB_TYPE"
-const exploitDBURL = "EXPLOITDB_URL"
-const exploitDBPATH = "EXPLOITDB_SQLITE3_PATH"
-
-// Init set options with the following priority.
-// 1. Environment variable
-// 2. config.toml
-func (cnf *ExploitConf) Init() {
-	cnf.Name = "exploit"
-	if os.Getenv(exploitDBType) != "" {
-		cnf.Type = os.Getenv(exploitDBType)
-	}
-	if os.Getenv(exploitDBURL) != "" {
-		cnf.URL = os.Getenv(exploitDBURL)
-	}
-	if os.Getenv(exploitDBPATH) != "" {
-		cnf.SQLite3Path = os.Getenv(exploitDBPATH)
-	}
-	cnf.setDefault("go-exploitdb.sqlite3")
-	cnf.DebugSQL = Conf.DebugSQL
-}
-
 // GoCveDictConf is GoCveDict config
 type GoCveDictConf struct {
 	VulnDict

detector/detector.go

@@ -203,12 +203,6 @@ func Detect(rs []models.ScanResult, dir string) ([]models.ScanResult, error) {
 			return nil, xerrors.Errorf("Failed to fill with CVE: %w", err)
 		}
 
-		nExploitCve, err := FillWithExploit(&r, config.Conf.Exploit, config.Conf.LogOpts)
-		if err != nil {
-			return nil, xerrors.Errorf("Failed to fill with exploit: %w", err)
-		}
-		logging.Log.Infof("%s: %d PoC are detected", r.FormatServerName(), nExploitCve)
-
 		if err := FillWithCTI(&r, config.Conf.Cti, config.Conf.LogOpts); err != nil {
 			return nil, xerrors.Errorf("Failed to fill with Cyber Threat Intelligences: %w", err)
 		}