Class: Risu::Parsers::Nessus::PostProcess::DowngradePlugins

Inherits:
Base::PostProcessBase show all
Defined in:
lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb

Instance Attribute Summary

Attributes inherited from Base::PostProcessBase

#info

Instance Method Summary collapse

Methods inherited from Base::PostProcessBase

#<=>, #==, #calculate_severity, #create_item, #create_plugin, #has_findings, #has_host_findings, inherited

Constructor Details

#initialize ⇒ DowngradePlugins

Returns a new instance of DowngradePlugins.



29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb', line 29

def initialize
  @info =
  {
    :description => "Downgrades the Severity of Certain Plugins",
    :plugin_id => 0
  }

       #0 - informational
       #1 - low
       #2 - medium
       #3 - high
       #4 - critical

  # TODO read from "extra" section

  @plugins_to_severity = {
    41028 => 0, # SNMP Agent Default Community Name (public) - 41028
                10264 => 0, # SNMP Agent Default Community Names - 10264
    10081 => 0, # FTP Privileged Port Bounce Scan - 10081
    42411 => 0, # Microsoft Windows SMB Shares Unprivileged Access
    66349 => 0, # X Server Unauthenticated Access: Screenshot
    26925 => 0, # VNC Server Unauthenticated Access
    66174 => 0, # VNC Server Unauthenticated Access: Screenshot
    10205 => 0, # rlogin Service Detection
    20007 => 2, # SSL Version 2 and 3 Protocol Detection
    80101 => 2, # IPMI v2.0 Password Hash Disclosure
  }
end

Instance Method Details

#run ⇒ Object 



59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
 
# File 'lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb', line 59

def run
  @plugins_to_severity.each do |k, v|
    items = Item.where(:plugin_id => k)

    if items == nil
      next
    end

         items.each do |item|
           if item == nil
             next
           end

           item.severity = v
         item.save
         end

  end
end