Class: Risu::Parsers::Nessus::PostProcess::PostProcess

Inherits:
Object
  • Object
show all
Defined in:
lib/risu/parsers/nessus/postprocess/post_process.rb

Overview

< Risu::Base::PostProcessBase

Instance Method Summary collapse

Constructor Details

#initialize ⇒ PostProcess

Returns a new instance of PostProcess.



29
30
31
32
33
34
35
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 29

def initialize
  @name = ""
  @plugin_id = -1
  @plugin_ids = []
  @plugin_name = ""
  @item_name = ""
end

Instance Method Details

#calculate_severity(current_severity, severity) ⇒ Object 



131
132
133
134
135
136
137
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 131

def calculate_severity current_severity, severity
  if severity > current_severity
    return severity
  else
    return current_severity
  end
end

#create_item(host_id, severity) ⇒ Object 



96
97
98
99
100
101
102
103
104
105
106
107
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 96

def create_item(host_id, severity)
  item = Item.new

    item.host_id = host_id
    item.plugin_id = @plugin_id
    item.plugin_output = nil
    item.port = 0
    item.severity = severity
    item.plugin_name = @item_name

  item.save
end

#create_plugin ⇒ Object

Creates a rollup plugin



61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 61

def create_plugin
  plugin = Plugin.find_by_id(@plugin_id)

  newest_plugin = newest_plugin()

  if newest_plugin == nil
    return
  end

  if plugin == nil
    plugin = Plugin.new
  end

  plugin.id = @plugin_id
  plugin.plugin_name = @plugin_name
  plugin.family_name = "Risu Rollup Plugins"
  plugin.description = @description #newest_plugin.description || ""
  plugin.plugin_version = newest_plugin.plugin_version || ""
  plugin.plugin_publication_date = newest_plugin.plugin_publication_date
  plugin.plugin_modification_date = newest_plugin.plugin_modification_date
  plugin.vuln_publication_date = newest_plugin.vuln_publication_date
  plugin.cvss_vector = newest_plugin.cvss_vector || ""
  plugin.cvss_base_score = newest_plugin.cvss_base_score
  plugin.cvss_temporal_score = newest_plugin.cvss_temporal_score
  plugin.cvss_temporal_vector = newest_plugin.cvss_temporal_vector
  plugin.risk_factor = newest_plugin.risk_factor
  plugin.solution = newest_plugin.solution
  plugin.synopsis = newest_plugin.synopsis
  plugin.plugin_type = "Rollup"
  plugin.rollup = true

  plugin.save
end

#has_findings ⇒ Object 



110
111
112
113
114
115
116
117
118
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 110

def has_findings
  @plugin_ids.each do |plugin_id|
    if Item.where(:plugin_id => plugin_id)
      return true
    end
  end

  return false
end

#has_host_findings?(host_id) ⇒ Boolean

Returns:

  • (Boolean) 


120
121
122
123
124
125
126
127
128
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 120

def has_host_findings? host_id
  @plugin_ids.each do |plugin_id|
    if Item.where(:plugin_id => plugin_id).where(:host_id => host_id).count >= 1
      return true
    end
  end

  return false
end

#newest_plugin ⇒ Object

NOTE: looks like its working



39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 39

def newest_plugin
  newest = DateTime.new(0001, 01, 01)
  newest_plugin = nil

  @plugin_ids.uniq.each do |id|
    plugin = Plugin.find_by_id(id)

    if plugin == nil || plugin.plugin_modification_date == nil
      next
    end

    if plugin.plugin_modification_date >= newest
      newest = plugin.plugin_modification_date if plugin.plugin_modification_date != nil
      newest_plugin = plugin
    end
  end

  return newest_plugin
end

#run ⇒ Object 



140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
 
# File 'lib/risu/parsers/nessus/postprocess/post_process.rb', line 140

def run
  if !has_findings()
    return
  end

  #Create the dummy plugin
  create_plugin()

  Host.all.each do |host|
    if !has_host_findings?(host.id)
      next
    end

    finding_severity = 0

    @plugin_ids.each do |plugin_id|
      Item.where(:plugin_id => plugin_id).each do |item|
        severity = item.severity
        item.real_severity = severity
        item.severity = -1
        item.save

        finding_severity = calculate_severity(finding_severity, severity)
      end
    end

    create_item(host.id, finding_severity)
  end
end