Class: Dradis::Plugins::NTOSpider::Importer

Inherits:
Upload::Importer
  • Object
show all
Defined in:
lib/dradis/plugins/ntospider/importer.rb

Constant Summary collapse

BAD_FILENAME_ERROR_MESSAGE = 
"The uploaded file should be named VulnerabilitiesSummary.xml. "\
"You'll find VulnerabilitiesSummary.xml inside the /report subdirectory in NTO Spider's output."
NO_VULNSUMMARY_ERROR_MESSAGE = 
"A proper root element (/VulnSummary) wasn't detected in the uploaded file. "\
"Ensure the file you uploaded comes from a NTOSpider report."
NO_VULNS_ERROR_MESSAGE = 
"No vulnerabilities were detected in the uploaded file (/VulnSummary/VulnList/Vuln). "\
"Ensure the file you uploaded comes from a NTOSpider report."

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.templates ⇒ Object 



14
15
16
 
# File 'lib/dradis/plugins/ntospider/importer.rb', line 14

def self.templates
  { evidence: 'evidence', issue: 'vuln' }
end

Instance Method Details

#import(params = {}) ⇒ Object

The framework will call this function if the user selects this plugin from the dropdown list and uploads a file.



21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
 
# File 'lib/dradis/plugins/ntospider/importer.rb', line 21

def import(params={})
  file = params.fetch(:file)

  filename = File.basename(file)
  unless filename == "VulnerabilitiesSummary.xml"
    log_error_and_return(BAD_FILENAME_ERROR_MESSAGE)
    return false
  end

  file_content = File.read(file)
  logger.info{'Parsing VulnerabilitiesSummary.xml...'}
  @doc = Nokogiri::XML( file_content )
  if @doc.root && @doc.root.name == 'VulnSummary'
    logger.info{'Done.'}
  else
    log_error_and_return(NO_VULNSUMMARY_ERROR_MESSAGE)
    return false
  end


  if @doc.xpath('/VulnSummary/VulnList/Vuln').empty?
    log_error_and_return(NO_VULNS_ERROR_MESSAGE)
    return false
  end

  @doc.xpath('/VulnSummary/VulnList/Vuln').each do |xml_vuln|
    vuln = ::NTOSpider::Vuln.new(xml_vuln)

    host_node_label = xml_vuln.at_xpath('./WebSite').text
    host_node_label = URI.parse(host_node_label).host rescue host_node_label
    host_node = content_service.create_node(label: host_node_label, type: :host)

    plugin_id = vuln.vuln_type
    logger.info{ "\t\t => Creating new issue (plugin_id: #{plugin_id})" }
    issue_text = mapping_service.apply_mapping(
      source: 'vuln', data: vuln.xml
    )
    issue = content_service.create_issue text: issue_text, id: plugin_id

    # App Spider can provide multiple pieces of evidence for an issue.
    xml_vuln.xpath('./AttackList/Attack').each do |attack_xml|
      logger.info{ "\t\t => Creating new evidence" }
      evidence_content = mapping_service.apply_mapping(
        source: 'evidence', data: attack_xml
      )
      content_service.create_evidence(
        issue: issue, node: host_node, content: evidence_content
      )
    end
  end

  true
end