Glue – Application Security Automation

Glue is a framework for running a series of tools. Generally, it is intended as a backbone for automating a security analysis pipeline of tools.

Dependencies

• clamav
• hashdeep
• rm (*nix)
• git
• mount (*nix)
• docker

Download & Install

gem install owasp-glue
or
docker run owasp/glue

Installation & run for Development purpose

git clone https://github.com/owasp/glue
cd glue                     -- RVM will set to 2.3.1 with Gemset Glue
gem install bundler
bundle install

cd lib
../bin/glue -h

To run the code, run the following from the root directory:

>ruby bin/Glue <options> target

To build a gem, just run:

gem build Glue.gemspec

Glue is intended to be extended through added “tasks”. To add a new tool, copy an existing task and tweak to make it work for the tool in question.

For common options:

-d for debug
-f for format (takes "json", "csv", "jira")
glue --help (for full list)

• Filesystem (which is analyzed in place)
• Git repo (which is cloned for analysis)
• Other types of images (.iso, docker, etc. are experimental)

First, grab the hook from the code.

meditation:hooks mk$ cp /area53/owasp/Glue/hooks/pre-commit .

Then make it executable.

meditation:hooks mk$ chmod +x pre-commit