On branch https://github.com/Xisabla/fingerlib/tree/feat/server-docker

Have a python script to retrieve HTTP Requests from a pcap file, compute their fingerprints (using hfinger) and provide a JSON formatted output file, such as:

[
    {
    	"request": "GET /\nHost: ...."
		"fingerprint": "<.....>"
	}
]

As asked by aDvens team, we should try using faup instead of poco as faup is already used in their environment

Usage in code:

• https://github.com/Xisabla/fingerlib/blob/dev/src/fingerprint.cpp#L30 (getPath)
• https://github.com/Xisabla/fingerlib/blob/dev/src/fingerprint.cpp#L78 (getQuery, getQueryParameters)

Such as in hfinger we should be able to use featureset configuration from configs.hpp to generate the fingerprint

The idea is to be able to configure the "shape" of the fingerprint with a vector of pair as values describing the targetted fields and the format used, eg:

std::vector<std::pair<unsigned, char>> FEATURESET = {
	{ 0, 'f' },
	{ 2, 's' },
	{ 3, 'i' },
	// ...
}

• Set up server using WebGoat and Wireshark

• Have a docker image embedding the full server to make it easy to reset the environment for a new toolset

• Use tools from the owasp list and tag the fingerprints with the tool used (eg: sqlmap, vega) and the attack type (eg: brute-force, xss, sql)

• Provide a documentation on the wiki pages about the tools and methods used

• Resulting dataset can be under a dataset/ directory

• Server sources and docker images can be under a server/ folder at directory

On branch https://github.com/Xisabla/fingerlib/tree/feat/server-docker

Volume mounted by docker have rights issues as the running user is root.

Find a way to run tshark under webgoat user, or to have read/write on out files without being root

Used featureset is a new one that uses all piece of information, it is a copy of the featureset 4 with the missing field (5, "i"),

• Document it's usage and result: fields content, examples
• Give an implementation method for users that currently have hfinger installed and would use this new featureset (script/detailled instructions)

It would be nice to have some methods callable from C programs in the library.
Even though it is a very secondary feature, it looks like it wouldn't take much effort to do:

• https://stackoverflow.com/a/199422
• https://isocpp.org/wiki/faq/mixing-c-and-cpp#call-cpp