Plextrac Database to Ghostwriter

[hansonryne]

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
It would be great if there was a conversion tool to bring a Plextrac findings database over to the Ghostwriter database.

Describe the solution you'd like
A command line tool or an integration with the web interface with a json drag and drop would be great.

Describe alternatives you've considered
The only way I am aware at this point is to copy/paste by hand.

Additional context
We would love to use Ghostwriter but have a large database that we want to bring over from Plextrac with us.

[chrismaddalena]

Hey @hansonryne, that should be feasible, but anyone developing that utility would need an example of a Plextrac database. I've never used Plextrac and don't know the schema.

If Plextrac has an API, the conversion could be scripted to pull findings from Plextrac and ad them to Ghostwriter via Ghostwriter's GraphQL API.

[hansonryne]

Thanks for the response. Here is a link to the API for the write-ups DB that has the fields for any findings saved to the database:
https://api-docs.plextrac.com/#cd707d09-1e7e-4bf0-9b97-92b48800821e

[chrismaddalena]

Thanks for sharing the link. Migrating seems very doable. You could loop over all the writeups in PlexTrac and send each one to Ghostwriter via the GraphQL API as a new finding. The title, description, recommendations, references, and severity fields all have counterparts in Ghostwriter. Then you could go through the findings and perform clean-up in Ghostwriter.

Ghostwriter breaks up findings into description and impact. There are also fields for detection recommendations and CVSS. You might want to go through the findings and break-up the description into those fields and.or add CVSS scoring.

It should be pretty simple.