active_attack 0.1.14

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 46fe12fa14d51d865e4a9f3a92f2b154d15da007edaa4cc904b1932d73dd035c
+  data.tar.gz: bce4df5c83d87c5a550b2351ab55e9af977a1b29ac8b053502fff82abc29245a
+SHA512:
+  metadata.gz: a6eac4ae2ca3600368dcdf78243fc0b9d4c2f3228698d17cc8f40f8af3ad550bfba301f7070093a4fc1f282ed8fcc42d9dce827b507128b60409416297d3c7cd
+  data.tar.gz: 7b823866e18e921fcc0aabe02f847b0dd298e6bb947ff3aad7c25595272ae70d10fa11f8ca81308b202c077a1eb6f5c6da2a2e3a0052e95220293fadf8c7bac5

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2019 Adam Dalton
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,50 @@
+# ActiveAttack
+Short description and motivation.
+
+## Usage
+How to use my plugin.
+
+## Installation
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'active_attack'
+```
+
+Add this line to your routes.rb
+
+And then execute:
+```bash
+$ bundle
+```
+
+```ruby
+  mount ActiveAttack::Engine, at: "/attack"
+```
+
+run
+
+```ruby
+$ rails railties:install:migrations
+```
+
+In `application.css`
+
+```ruby
+ *= require active_attack/playbooks
+```
+
+```ruby
+$ rails railties:install:migrations
+```
+
+Or install it yourself as:
+```bash
+$ gem install active_attack
+```
+
+## Contributing
+Contribution directions go here.
+
+## License
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,32 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'ActiveAttack'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.md')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("test/dummy/Rakefile", __dir__)
+load 'rails/tasks/engine.rake'
+
+load 'rails/tasks/statistics.rake'
+
+require 'bundler/gem_tasks'
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+task default: :test

data/app/assets/config/active_attack_manifest.js

@@ -0,0 +1,2 @@
+//= link_directory ../javascripts/active_attack .js
+//= link_directory ../stylesheets/active_attack .css

data/app/assets/javascripts/active_attack/application.js

@@ -0,0 +1,8 @@
+// Playbooks Javascript
+//
+//= require jquery
+//= require bootstrap
+//= require_tree ./initializers
+//= require_tree ./controllers
+
+

data/app/assets/javascripts/active_attack/controllers/campaign_controller.es6

@@ -0,0 +1,23 @@
+stimulus.register("campaign", class extends Stimulus.Controller {
+    // https://discourse.stimulusjs.org/t/syntax-error-when-using-targets/23/5
+    // static targets = [ "name", "output" ]
+
+
+    static get targets() {
+        return ["description", "campaign"]
+    }
+
+    view() {
+        event.preventDefault()
+        this.descriptionTargets.forEach((el, i) => {
+            console.log('selected field => name')
+
+            if (el.id == "campaign-" + event.currentTarget.getAttribute("index")) {
+                el.classList.remove("filter--notUsed")
+            } else {
+                el.classList.add("filter--notUsed")
+            }
+        })
+    }
+
+})

data/app/assets/javascripts/active_attack/controllers/matrix_controller.es6

@@ -0,0 +1,23 @@
+stimulus.register("matrix", class extends Stimulus.Controller {
+    // https://discourse.stimulusjs.org/t/syntax-error-when-using-targets/23/5
+    // static targets = [ "name", "output" ]
+
+
+    static get targets() {
+        return ["attackPattern", "row"]
+    }
+
+    playbook() {
+        this.attackPatternTargets.forEach((el, i) => {
+            if(!el.classList.contains("used")){
+                el.classList.toggle("filter--notUsed")
+            }
+        })
+
+        this.rowTargets.forEach((el, i) => {
+            if (el.querySelectorAll("div span.notused").length == el.children.length) {
+                el.classList.toggle("filter--notUsed")
+            }
+        })
+    }
+})

data/app/assets/javascripts/active_attack/controllers/playbooks_controller.es6

@@ -0,0 +1,28 @@
+stimulus.register("playbooks", class extends Stimulus.Controller {
+    // https://discourse.stimulusjs.org/t/syntax-error-when-using-targets/23/5
+    // static targets = [ "name", "output" ]
+
+
+    static get targets() {
+        return [ "attackPattern", "campaign", "row" ]
+    }
+
+    updateMatrix() {
+        let campaign = event.currentTarget.id
+
+        this.rowTargets.forEach((el, i) => {
+            el.classList.remove("filter--notUsed")
+        })
+
+        this.attackPatternTargets.forEach((el, i) => {
+            el.classList.remove("filter--notUsed")
+            if(el.classList.contains(campaign)){
+                el.classList.add("used")
+                el.classList.remove("notused")
+            } else {
+                el.classList.add("notused")
+                el.classList.remove("used")
+            }
+        })
+    }
+})

data/app/assets/javascripts/active_attack/initializers/stimulus.coffee

@@ -0,0 +1,2 @@
+# initializers/stimulus.coffee
+window.stimulus = Stimulus.Application.start() unless 'stimulus' of window

data/app/assets/stylesheets/active_attack/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
+ * files in this directory. Styles in this file should be added after the last require_* statement.
+ * It is generally better to create a new file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */

data/app/assets/stylesheets/active_attack/data_sources.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/app/assets/stylesheets/active_attack/detections.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/app/assets/stylesheets/active_attack/difficulty_for_adversaries.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/app/assets/stylesheets/active_attack/matrices.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/app/assets/stylesheets/active_attack/permissions_requireds.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/app/assets/stylesheets/active_attack/platforms.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/app/assets/stylesheets/active_attack/playbooks.css

@@ -0,0 +1,400 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/
+
+.filter--notUsed {
+    display: none;
+}
+
+body {
+    background-color: #14181c;
+    font-family: 'Rajdhani', sans-serif;
+    font-size: 16px;
+    margin-left: 0;
+    margin-top: 0;
+    margin-bottom: 0;
+    overflow-y: scroll;
+}
+
+sup {
+    font-size: 8px;
+
+}
+
+th, td {
+    text-align: left;
+    border-bottom: 1px solid #2b323b;
+    padding: 10px;
+}
+
+.indicators {
+    font-size: 16px;
+    font-family: 'Inconsolata', monospace;
+}
+
+.used {
+    color: #F70000;
+}
+
+table {
+    width: 100%;
+}
+
+.info {
+    display: grid;
+    background-color: #ef9124;
+    color: #fff;
+    grid-template-columns: repeat(4, 1fr);
+    grid-template-rows: 40px;
+    grid-template-areas: "left middle middle2 right";
+    justify-items: center;
+    align-items: center;
+    border-radius: 5px;
+
+}
+
+.left span, .right span, .middle span, .middle2 span {
+    font-family: 'Jura', sans-serif;
+    font-weight: 600;
+}
+
+.description {
+    grid-area: description;
+    background-color: #2b323b;
+    margin-top: 10px;
+    font-size: 100%;
+    padding: 20px;
+    border-radius: 5px;
+    overflow-y: scroll;
+    -webkit-overflow-scrolling: touch;
+
+}
+
+.timeline {
+    grid-area: timeline;
+    background-color: #2b323b;
+    margin-top: 10px;
+    padding: 20px;
+    border-radius: 5px;
+
+}
+
+.sidebar {
+    grid-area: sidebar;
+    grid-template-columns: auto;
+    background-color: #2b323b;
+    padding-left: 20px;
+    padding-right: 20px;
+    padding-top: 20px;
+    min-height: calc(100vh - 90px);
+
+}
+
+.sidebar span {
+    color: #95989a;
+    font-size: 16px;
+    /*padding-left: 12px;*/
+    padding-right: 12px;
+}
+
+.sidebar .btn {
+    padding: 0 5px;
+    /*text-align: center;*/
+    text-align: left;
+}
+
+.header {
+    grid-area: header;
+    background-color: #2b323b;
+    max-width: 100%;
+    font-size: 30px;
+    color: #95989a;
+    border-radius: 0px 0px 5px 5px;
+    padding-left: 10px;
+    padding-top: 8px;
+}
+
+.sidebar img {
+    width: 100%;
+    padding-bottom: 20px;
+}
+
+.header span {
+    font-size: 42px;
+    font-family: 'Jura', sans-serif;
+}
+
+.wrapper {
+    display: grid;
+    /*grid-template-columns: 200px 1fr;*/
+    grid-template-columns: min-content;
+    grid-template-areas: "sidebar header" "sidebar inside" "sidebar info" "sidebar bottomheader" "sidebar phasescontainer" "footer ...";
+    color: #fff;
+    grid-template-rows: 70px 350px 40px 50px 1fr 70px;
+    grid-column-gap: 10px;
+
+}
+
+.inside {
+    display: grid;
+    grid-template-columns: 65% auto;
+    grid-template-rows: 1fr;
+    grid-template-areas: "description timeline";
+    grid-gap: 10px;
+    margin-bottom: 10px;
+}
+
+.bottomheader {
+    display: grid;
+    grid-template-columns: repeat(7, 1fr);
+    grid-template-rows: 50px;
+    grid-template-areas: "recon weaponization delivery exploit install command objective";
+    grid-gap: 10px;
+    margin-bottom: 10px;
+}
+
+.recon, .delivery, .exploit, .install, .command, .objective, .weaponization {
+    color: #95989a;
+    padding: 20px 10px 10px;
+    font-family: 'Jura', sans-serif;
+}
+
+.phasescontainer {
+    display: grid;
+    grid-template-columns: repeat(7, 1fr);
+    grid-auto-rows: 125px;
+    grid-gap: 12px;
+    margin-top: 10px;
+}
+
+.phases {
+    background-color: #2b323b;
+    padding: 10px;
+    border-radius: 5px;
+    overflow: hidden;
+    position: relative;
+}
+
+.phases div {
+    min-width: 0.75rem;
+    min-height: 0.75rem;
+    padding: .5rem;
+    line-height: 0.75rem;
+    text-align: center;
+    border-radius: 500rem;
+    background-color: #ef9124;
+    border-color: white;
+    position: absolute;
+    bottom: 10px;
+    right: 10px;
+}
+
+.indicator-list {
+    display: none;
+    /*position: fixed;*/
+    z-index: 1;
+    /*left: 0;*/
+    /*top: 0;*/
+    width: 50%;
+    height: 800px;
+    overflow: auto;
+    background-color: #14181c;
+    /*background-color: rgba(0, 0, 0, 0.4);*/
+    margin: 15% auto;
+    padding: 20px;
+    color: white;
+    border-radius: 5px;
+    border: 1px solid #EF9124;
+
+    left: 50% !important;
+    top: 50% !important;
+    margin-top: 0;
+    position: absolute;
+    transform: translate(-50%, -50%) !important;
+}
+
+.indicator-list-inner {
+    list-style: none;
+    margin: 0;
+    padding: 0;
+}
+
+.indicator-list-entry {
+    margin: 0;
+    padding: 0;
+}
+
+.phases:hover {
+    background: #ef9124;
+}
+
+.phasesblank {
+    background-color: #14181c;
+}
+
+.box {
+    color: #fff;
+    font-size: 100%;
+}
+
+.footer {
+    grid-area: footer;
+    color: #95989a;
+    padding-left: 10px;
+    padding-top: 30px;
+    font-size: 10px;
+    background-color: #2b323b;
+
+}
+
+.btn {
+    color: #ffffff;
+    font-size: 24px;
+    background: #2b323b;
+    height: 40px;
+    width: 100%;
+    text-decoration: none;
+    vertical-align: middle;
+    line-height: 40px;
+    font-family: 'Jura', sans-serif;
+    display: inline-block;
+    border-radius: 5px;
+    padding-left: 10px;
+    /*padding-right: 10px;*/
+    margin-bottom: 4px;
+}
+
+.btn-report {
+    font-size: 16px;
+    margin-bottom: 6px;
+}
+
+.btn:hover {
+    color: #000000;
+    background: #ef9124;
+    text-decoration: none;
+}
+
+.activebtn:hover {
+    color: #ffffff;
+}
+
+.activebtn {
+    color: #ffffff;
+    background: #ef9124;
+    text-decoration: none;
+}
+
+a:link {
+    color: #95989a;
+    text-decoration: none;
+}
+
+/* visited link */
+a:visited {
+    color: #95989a;
+    text-decoration: none;
+}
+
+/* mouse over link */
+a:hover {
+    color: white;
+    text-decoration: none;
+}
+
+a:active {
+    color: white;
+    text-decoration: none;
+}
+
+.modal {
+    display: none;
+    position: fixed;
+    z-index: 1;
+    left: 0;
+    top: 0;
+    width: 100%;
+    height: 100%;
+    overflow: auto;
+    background-color: black;
+    background-color: rgba(0, 0, 0, 0.4);
+}
+
+.modal-content {
+    background-color: #14181c;
+    margin: 15% auto;
+    padding: 20px;
+    color: white;
+    width: 80%;
+    border-radius: 5px;
+    border: 1px solid #EF9124;
+}
+
+.close {
+    color: #aaa;
+    float: right;
+    font-size: 28px;
+    font-weight: bold;
+}
+
+.close:hover,
+.close:focus {
+    color: black;
+    text-decoration: none;
+    cursor: pointer;
+}
+
+
+/*Demo*/
+.popover.tour {
+    width: 350px;
+    background-color: #FFFFFF;
+    align-items: center;
+    /*border-width: 2px;*/
+    /*border-color:#EF9124;*/
+}
+
+.popover-title {
+    text-align: center;
+    margin-left: 14px;
+    margin-right: 14px;
+    max-width: 350px;
+    color: #EF9124;
+}
+
+.popover-content {
+    text-align: center;
+    margin-left: 14px;
+    margin-right: 14px;
+    max-width: 350px;
+    color: #000000;
+}
+
+.popover-btn-tour-control {
+    height: 40px;
+    width: 80px;
+    align-items: center;
+}
+
+.btn-tour-control:hover {
+    background: #ef9124;
+    text-decoration: none;
+}
+
+.popover.bs-popover-right .arrow::after, .popover.bs-popover-auto[x-placement^="right"] .arrow::after {
+    border-right-color: #FFFFFF;
+}
+
+.popover.bs-popover-left .arrow::after, .popover.bs-popover-auto[x-placement^="left"] .arrow::after {
+    border-left-color: #FFFFFF;
+
+}
+
+.popover[class*="tour-"].orphan {
+    left: 50% !important;
+    top: 50% !important;
+    margin-top: 0;
+    position: absolute;
+    transform: translate(-50%, -50%) !important;
+}