@@ -9,4 +9,6 @@ classification :name => 'Compromised' localize :name => 'localhost', :cidr => '127.0.0.1/32', :as => 'Local' -user :name => '', :locations => ['Local'] \ No newline at end of file +user :name => '', :locations => ['Local'] + +plugin :id => 0, :name => 'Port Scanner', :category => 'scanners', :family => 'Port scanners', :risk => 'None', :summary => 'Scans for open ports.' db/fixtures/setup.rb @@ -89,4 +89,25 @@ module FixtureHelpers subnet.location_id = options[:location_id] subnet.save! end + + def plugin(options) + options[:family_id] = Family.find_or_create_by_name(options[:family]) if options[:family] + options[:risk_id] = Risk.find_or_create_by_name(options[:risk]) if options[:risk] + + fail unless options[:id] && + options[:name] && + options[:category] && + options[:family_id] && + options[:risk_id] && + options[:summary] + + plugin = Plugin.new + plugin.id = options[:id] + plugin.name = options[:name] + plugin.category = options[:category] + plugin.family_id = options[:family_id] + plugin.risk_id = options[:risk_id] + plugin.summary = options[:summary] + plugin.save! + end end \ No newline at end of file lib/fixture_helpers.rb @@ -99,9 +99,9 @@ module Nessus def self.process(scan, nessus_file, plugins_file) # Parse results scan.puts("Parsing results in #{nessus_file}...") - + nessus_report = NessusReport.parse(XML::Document.file(nessus_file)) - + # Parse plugins scan.puts("Parsing plugins in #{plugins_file}...") @@ -111,13 +111,13 @@ module Nessus nessus_plugin = NessusPlugin.parse(scan, line) next unless nessus_plugin - + nessus_plugins[nessus_plugin.id] = nessus_plugin end - + # Import results scan.puts("Importing #{nessus_report.hosts.size} hosts...") - + nessus_report.hosts.each do |nessus_host| scan.hosts.new do |host| host.name = nessus_host.name @@ -125,16 +125,16 @@ module Nessus host.scan_start = nessus_host.scan_start host.scan_end = nessus_host.scan_end host.save! - + nessus_host.vulnerabilities.each do |nessus_vulnerability| host.vulnerabilities.new do |vulnerability| - nessus_plugin = nessus_plugins[nessus_vulnerability.plugin_id] - - fail "Couldn't find plugin #{nessus_vulnerability.plugin_id} referenced by vulnerability!" unless nessus_plugin + plugin = Plugin.find_by_id(nessus_vulnerability.plugin_id) - plugin = Plugin.find_by_id(nessus_plugin.id) - unless plugin + nessus_plugin = nessus_plugins[nessus_vulnerability.plugin_id] + + fail "Couldn't find plugin #{nessus_vulnerability.plugin_id} referenced by vulnerability!" unless nessus_plugin + Plugin.new do |plugin| plugin.id = nessus_plugin.id plugin.name = nessus_plugin.name lib/nessus.rb @@ -16,7 +16,7 @@ namespace :db do task :rebuild => :environment do Rake::Task['db:drop'].invoke Rake::Task['db:create'].invoke - Rake::Task['db:migrate'].invoke + Rake::Task['db:schema:load'].invoke Rake::Task['db:populate'].invoke end end lib/tasks/db.rake a31cc86b925374e51de1c2103afba07779b498d0 Cory T. Cornelius Cory.T.Cornelius@Dartmouth.edu http://github.com/dxoigmn/achilles/commit/65b8aec6dbddcd7ac0d317cce8d87e11dfedbd2e 65b8aec6dbddcd7ac0d317cce8d87e11dfedbd2e 2009-03-05T14:42:49-08:00 2009-03-05T14:42:49-08:00 Fix bug in parsing Nessus results when pluginId = 0. 26a45964e8d7c4b296a56d97ee1eeca8cce6a097 Cory T. Cornelius Cory.T.Cornelius@Dartmouth.edu