Add basic parser for Outpost24 scan format

dojo/forms.py

@@ -361,6 +361,7 @@ class ImportScanForm(forms.Form):
                          ("Aqua Scan", "Aqua Scan"),
                          ("HackerOne Cases", "HackerOne Cases"),
                          ("Xanitizer Scan", "Xanitizer Scan"),
+                         ("Outpost24 Scan", "Outpost24 Scan"),
                          ("Trivy Scan", "Trivy Scan"))
 
     SORTED_SCAN_TYPE_CHOICES = sorted(SCAN_TYPE_CHOICES, key=lambda x: x[1])

dojo/templates/dojo/import_scan_results.html

@@ -69,6 +69,7 @@ <h3> Add Tests</h3>
 	<li><b>NPM Audit</b> - NPM Audit Scan output file can be imported in JSON format.</li>
 	<li><b>IBM AppScan DAST</b> - XML file from IBM App Scanner.</li>
 	<li><b>Openscap Vulnerability Scan</b> - Import Openscap Vulnerability Scan in XML formats.</li>
+	<li><b>Outpost24 Scan</b> - Import Outpost24 endpoint vulnerability scan in XML format.</li>
 	<li><b>OpenVAS CSV</b> - Import OpenVAS Scan in CSV format. Export as CSV Results on OpenVAS.</li>
 	<li><b>PHP Security Audit v2</b> - Import PHP Security Audit v2 Scan in JSON format.</li>
 	<li><b>PHP Symfony Security Check</b> - Import results from the PHP Symfony Security Checker by Sensioslabs.</li>

dojo/tools/factory.py

@@ -68,6 +68,7 @@
 from dojo.tools.h1.parser import HackerOneJSONParser
 from dojo.tools.xanitizer.parser import XanitizerXMLParser
 from dojo.tools.trivy.parser import TrivyParser
+from dojo.tools.outpost24.parser import Outpost24Parser
 
 
 
@@ -224,6 +225,8 @@ def import_parser_factory(file, test, active, verified, scan_type=None):
         parser = XanitizerXMLParser(file, test)
     elif scan_type == 'Trivy Scan':
         parser = TrivyParser(file, test)
+    elif scan_type == 'Outpost24 Scan':
+        parser = Outpost24Parser(file, test)
     else:
         raise ValueError('Unknown Test Type')
 

dojo/tools/outpost24/parser.py

@@ -0,0 +1,38 @@
+from defusedxml import ElementTree
+from dojo.models import Finding
+
+
+class Outpost24Parser:
+    def __init__(self, file, test):
+        tree = ElementTree.parse(file)
+        # TODO: extract ./hostlist/host entries for endpoints
+        items = list()
+        for detail in tree.iterfind('//detaillist/detail'):
+            title = detail.findtext('name')
+            #date = detail.findtext('date') # can be used for Finding.date?
+            cve = detail.findtext('./cve/id')
+            url = detail.findtext('./referencelist/reference/[type=\'solution\']/../url')
+            description = detail.findtext('description')
+            mitigation = detail.findtext('solution')
+            impact = detail.findtext('information')
+            numerical_severity = detail.findtext('cvss_v3_score')
+            if numerical_severity:
+                score = float(numerical_severity)
+                if score < 4:
+                    severity = 'Low'
+                elif score < 7:
+                    severity = 'Medium'
+                elif score < 9:
+                    severity = 'High'
+                else:
+                    severity = 'Critical'
+                items.append(Finding(title=title, test=test, cve=cve, url=url,
+                                     description=description,
+                                     mitigation=mitigation, impact=impact,
+                                     severity=severity,
+                                     numerical_severity=numerical_severity))
+        self._items = items
+
+    @property
+    def items(self):
+        return self._items