Class: Risu::Templates::TechnicalFindingsTemplate

Inherits:
Base::TemplateBase show all
Includes:
TemplateHelper
Defined in:
lib/risu/templates/technical_findings.rb

Instance Attribute Summary

Attributes inherited from Base::TemplateBase

#output, #template_info

Instance Method Summary collapse

Methods included from TemplateHelper

#default_credential_plugins, #default_credentials_appendix_section, #default_credentials_section, #definition, #has_default_credentials?, #heading1, #heading2, #heading3, #heading4, #heading5, #heading6, #item_count_by_plugin_id, #item_count_by_plugin_name, #new_page, #report_author, #report_classification, #report_subtitle, #report_title, #table, #text, #title

Methods included from ScanHelper

#authenticated_count, #scan_info_to_hash

Methods included from SharesTemplateHelper

#anon_ftp_count, #anon_ftp_section, #anon_smb_count, #anon_smb_query, #anon_smb_section, #shares_appendix_section, #shares_section, #shares_section_has_findings?

Methods included from GraphTemplateHelper

#other_os_graph_page, #risks_by_service_graph_page, #risks_by_severity_graph_page, #root_cause_graph_page, #windows_os_graph_page

Methods included from MalwareTemplateHelper

#conficker_appendix_section, #conficker_count, #conficker_section, #known_malicious_process_appendix_section, #known_malicious_process_count, #known_malicious_process_section, #malware_appendix_section, #malware_section

Methods included from HostTemplateHelper

#unsupported_os, #unsupported_os_appendix_section

Methods inherited from Base::TemplateBase

inherited

Constructor Details

#initialize ⇒ TechnicalFindingsTemplate

Returns a new instance of TechnicalFindingsTemplate.



27
28
29
30
31
32
33
34
35
36
 
# File 'lib/risu/templates/technical_findings.rb', line 27

def initialize
	@template_info =
	{
		:name => "technical_findings",
		:author => "hammackj",
		:version => "0.0.9",
		:renderer => "PDF",
		:description => "Generates a Technical Findings Report"
	}
end

Instance Method Details



38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
 
# File 'lib/risu/templates/technical_findings.rb', line 38

def print_technical_findings(risks, text, color, last=false)
	if risks.length > 0
		title text, 18, color

		risks.each do |f|
			hosts = Item.where(:plugin_id => f.plugin_id).group(:host_id)
			plugin = Plugin.find_by_id(f.plugin_id)

			#references = Reference.where(:plugin_id => plugin.id).group(:value).order(:reference_name)

			output.font_size(16) do
				text "#{plugin.plugin_name}\n"
			end

			if hosts.length > 1
				text "Hosts (#{hosts.length})", :style => :bold
			else
				text "Host", :style => :bold
			end

			hostlist = Array.new
			hosts.each do |host|
				ho = Host.find_by_id(host.host_id)
				host_string = "#{ho.name}"
				host_string << " (#{ho.fqdn})" if ho.fqdn != nil
				hostlist << host_string
			end

			text hostlist.join(', ')

			definition "Plugin output", f.plugin_output
			definition "Description", plugin.description.gsub(/[ ]{2,}/, " ") if plugin.description != nil
			definition "Synopsis", plugin.synopsis
			definition "CVSS Base Score", plugin.cvss_base_score
			definition "Exploit Available", plugin.exploit_available? ? "Yes" : "No"
			definition "Solution", plugin.solution
			definition "References", plugin.references.reference_string, :inline_format => true

			plugin_url = "http://www.tenablesecurity.com/plugins/index.php?view=single&id=#{plugin.id}"
			definition "Nessus Plugin", plugin_url, :inline_format => true, :link => plugin_url

			text "\n"
		end

		@output.start_new_page if last == false
	end
end

#render(output) ⇒ Object 



86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
 
# File 'lib/risu/templates/technical_findings.rb', line 86

def render output
	text Report.classification.upcase, :align => :center
	text "\n"

	report_title Report.title
	report_subtitle "Technical Findings"
	report_author "This report was prepared by\n#{Report.author}"
	text "\n\n\n"

	# If you uncomment the med/low change the true in high to false for a new page after it

	print_technical_findings(Item.critical_risks_unique, "Critical Findings", Risu::GRAPH_COLORS[0]) if Item.critical_risks_unique.to_a.size != 0
	print_technical_findings(Item.high_risks_unique, "High Findings", Risu::GRAPH_COLORS[1], true) if Item.high_risks_unique.to_a.size != 0
	#print_technical_findings(Item.medium_risks_unique, "Medium Findings", Risu::GRAPH_COLORS[2]) if Item.medium_risks_unique.to_a.size != 0
	#print_technical_findings(Item.low_risks_unique, "Low Findings", Risu::GRAPH_COLORS[3], true) if Item.low_risks_unique.to_a.size != 0

	output.number_pages "<page> of <total>", :at => [output.bounds.right - 75, 0], :width => 150, :page_filter => :all
end