arbor-atlas 0.1.0

data/.document

@@ -0,0 +1,5 @@
+lib/**/*.rb
+bin/*
+- 
+features/**/*.feature
+LICENSE.txt

data/Gemfile

@@ -0,0 +1,12 @@
+source "http://rubygems.org"
+# Add dependencies required to use your gem here.
+gem "crack", ">= 0.1.8"
+
+# Add dependencies to develop your gem here.
+# Include everything needed to run rake, tests, features, etc.
+group :development do
+  gem "shoulda", ">= 0"
+  gem "bundler", "~> 1.0.0"
+  gem "jeweler", "~> 1.5.2"
+  gem "rcov", ">= 0"
+end

data/Gemfile.lock

@@ -0,0 +1,22 @@
+GEM
+  remote: http://rubygems.org/
+  specs:
+    crack (0.1.8)
+    git (1.2.5)
+    jeweler (1.5.2)
+      bundler (~> 1.0.0)
+      git (>= 1.2.5)
+      rake
+    rake (0.8.7)
+    rcov (0.9.9)
+    shoulda (2.11.3)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 1.0.0)
+  crack (>= 0.1.8)
+  jeweler (~> 1.5.2)
+  rcov
+  shoulda

data/LICENSE.txt

@@ -0,0 +1,20 @@
+Copyright (c) 2011 Chris Lee
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.rdoc

@@ -0,0 +1,19 @@
+= arbor-atlas
+
+Description goes here.
+
+== Contributing to arbor-atlas
+ 
+* Check out the latest master to make sure the feature hasn't been implemented or the bug hasn't been fixed yet
+* Check out the issue tracker to make sure someone already hasn't requested it and/or contributed it
+* Fork the project
+* Start a feature/bugfix branch
+* Commit and push until you are happy with your contribution
+* Make sure to add tests for it. This is important so I don't break it in a future version unintentionally.
+* Please try not to mess with the Rakefile, version, or history. If you want to have your own version, or is otherwise necessary, that is fine, but please isolate to its own commit so I can cherry-pick around it.
+
+== Copyright
+
+Copyright (c) 2011 Chris Lee. See LICENSE.txt for
+further details.
+

data/Rakefile

@@ -0,0 +1,54 @@
+require 'rubygems'
+require 'bundler'
+begin
+	Bundler.setup(:default, :development)
+rescue Bundler::BundlerError => e
+	$stderr.puts e.message
+	$stderr.puts "Run `bundle install` to install missing gems"
+	exit e.status_code
+end
+require 'rake'
+
+require 'jeweler'
+Jeweler::Tasks.new do |gem|
+	# gem is a Gem::Specification... see http://docs.rubygems.org/read/chapter/20 for more options
+	gem.name = "arbor-atlas"
+	gem.homepage = "http://github.com/chrislee35/arbor-atlas"
+	gem.license = "MIT"
+	gem.summary = %Q{A very thin wrapper around Arbor Atlas' web interface}
+	gem.description = %Q{https://atlas.arbor.net}
+	gem.email = "rubygems@chrislee.dhs.org"
+	gem.authors = ["Chris Lee"]
+	# Include your dependencies below. Runtime dependencies are required when using your gem,
+	# and development dependencies are only needed for development (ie running rake tasks, tests, etc)
+	gem.add_runtime_dependency "crack", ">= 0.1.8"
+	gem.signing_key = "#{File.dirname(__FILE__)}/../gem-private_key.pem"
+	gem.cert_chain  = ["#{File.dirname(__FILE__)}/../gem-public_cert.pem"]
+end
+Jeweler::RubygemsDotOrgTasks.new
+
+require 'rake/testtask'
+Rake::TestTask.new(:test) do |test|
+	test.libs << 'lib' << 'test'
+	test.pattern = 'test/**/test_*.rb'
+	test.verbose = true
+end
+
+require 'rcov/rcovtask'
+Rcov::RcovTask.new do |test|
+	test.libs << 'test'
+	test.pattern = 'test/**/test_*.rb'
+	test.verbose = true
+end
+
+task :default => :test
+
+require 'rake/rdoctask'
+Rake::RDocTask.new do |rdoc|
+	version = File.exist?('VERSION') ? File.read('VERSION') : ""
+
+	rdoc.rdoc_dir = 'rdoc'
+	rdoc.title = "arbor-atlas #{version}"
+	rdoc.rdoc_files.include('README*')
+	rdoc.rdoc_files.include('lib/**/*.rb')
+end

data/VERSION

@@ -0,0 +1 @@
+0.1.0

data/lib/arbor-atlas.rb

@@ -0,0 +1 @@
+require 'arbor-atlas/arbor-atlas'

data/lib/arbor-atlas/arbor-atlas.rb

@@ -0,0 +1,97 @@
+require 'net/http'
+require 'net/https'
+require 'crack'
+
+module Arbor
+	class Atlas
+		@@baseurl = "https://atlas.arbor.net"
+		
+		attr_reader :cookie
+		def initialize(username, password)
+			params = {'name' => username, 'password' => password, 'referer' => @@baseurl+"/"}
+			@cookie = nil
+			_post("user/login",params)
+		end
+		
+		def _post(path, params)
+			url = URI.parse "#{@@baseurl}/#{path}"
+			request = Net::HTTP::Post.new(url.path)
+			request.add_field("User-Agent", "Ruby/#{RUBY_VERSION} arbor-atlas rubygem (https://github.com/chrislee35/arbor-atlas)")
+			request.add_field("Referer", @@baseurl)
+			request.add_field("Cookie", @cookie) if @cookie
+			request.set_form_data(params)
+			
+			http = Net::HTTP.new(url.host, url.port)
+			if url.scheme == 'https'
+				http.use_ssl = true
+				http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+				http.verify_depth = 5
+			end
+			resp = http.request(request)
+			@cookie = resp.header["set-cookie"] if resp.header["set-cookie"]
+			resp.body
+		end
+		
+		def _get(path, params)
+			url = URI.parse "#{@@baseurl}/#{path}"
+			data = params.map { |k,v|
+				"#{k}=#{v}".gsub(/([^ a-zA-Z0-9_.-=]+)/) do
+					'%' + $1.unpack('H2' * $1.bytesize).join('%').upcase
+				end.tr(' ', '+')
+			}.join("&")
+			request = Net::HTTP::Get.new(url.path+"?"+data)
+			request.add_field("User-Agent", "Ruby/#{RUBY_VERSION} arbor-atlas rubygem (https://github.com/chrislee35/arbor-atlas)")
+			request.add_field("Referer", @@baseurl)
+			request.add_field("Cookie", @cookie) if @cookie
+
+			http = Net::HTTP.new(url.host, url.port)
+			if url.scheme == 'https'
+				http.use_ssl = true
+				http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+				http.verify_depth = 5
+			end
+			resp = http.request(request)
+			@cookie = resp.header["set-cookie"] if resp.header["set-cookie"]
+			resp.body
+		end
+
+		def lookup_ip(ip)
+			doc = _get("ip/#{ip}",{'out'=>'xml'})
+			Crack::XML.parse(doc)
+		end
+		
+		def lookup_asn(asn)
+			asn = asn.gsub(/[^0-9]/,'')
+			doc = _get("asn/#{asn}",{'out'=>'xml'})
+			Crack::XML.parse(doc)
+		end
+		
+		def lookup_cve(cve)
+			doc = _get("vuln/#{cve.upcase}",{'out'=>'xml'})
+			Crack::XML.parse(doc)
+		end
+		
+		def lookup_cc(cc)
+			doc = _get("cc/#{cc.upcase}",{'out'=>'xml'})
+			Crack::XML.parse(doc)
+		end
+		
+		def lookup_cidr(cidr)
+			lookup_ip(cidr)
+		end
+		
+		def lookup(item)
+			if item =~ /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(\/\d{1,2})?$/
+				lookup_ip(item)
+			elsif item =~ /^(AS)?\d{1,7}$/i
+				lookup_asn(item)
+			elsif item =~ /^CVE\-\d{4}-\d+$/i
+				lookup_cve(item)
+			elsif item =~ /^\w{2}$/i
+				lookup_cc(item)
+			else
+				raise ArgumentError, "unknown query type for item: #{item}"
+			end
+		end
+	end
+end

data/test/helper.rb

@@ -0,0 +1,18 @@
+require 'rubygems'
+require 'bundler'
+begin
+  Bundler.setup(:default, :development)
+rescue Bundler::BundlerError => e
+  $stderr.puts e.message
+  $stderr.puts "Run `bundle install` to install missing gems"
+  exit e.status_code
+end
+require 'test/unit'
+require 'shoulda'
+
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(File.dirname(__FILE__))
+require 'arbor-atlas'
+
+class Test::Unit::TestCase
+end

data/test/test_arbor-atlas.rb

@@ -0,0 +1,99 @@
+require 'helper'
+
+class TestArborAtlas < Test::Unit::TestCase
+	should "return host report on 1.2.3.4" do
+		raise "You must set ARBORUSER and ARBORPASS in your environment before running tests" unless ENV['ARBORUSER'] and ENV['ARBORPASS']
+		a = Arbor::Atlas.new(ENV['ARBORUSER'], ENV['ARBORPASS'])
+		assert_not_nil(a.cookie)
+		ipinfo = a.lookup("1.2.3.4")
+		assert_not_nil(ipinfo)
+		assert_not_nil(ipinfo['report'])
+		assert_not_nil(ipinfo['report']['title'])
+		assert_equal("ATLAS Host Report: Global 1.2.3.4", ipinfo['report']['title'])
+		assert_not_nil(ipinfo['report']['background'])
+		assert_not_nil(ipinfo['report']['background']['blacklist'])
+		assert_not_nil(ipinfo['report']['background']['blacklist']['dnsbl'])
+		assert_not_nil(ipinfo['report']['background']['blacklist']['dnsbl'][0])
+		assert_not_nil(ipinfo['report']['background']['blacklist']['dnsbl'][0]['status'])
+		assert_equal("OK", ipinfo['report']['background']['blacklist']['dnsbl'][0]['status'])
+		assert_not_nil(ipinfo['report']['scans'])
+		assert_not_nil(ipinfo['report']['attacks'])
+		assert_not_nil(ipinfo['report']['servers'])
+	end
+	
+	should "return network report on 1.2.3.0/24" do
+		raise "You must set ARBORUSER and ARBORPASS in your environment before running tests" unless ENV['ARBORUSER'] and ENV['ARBORPASS']
+		a = Arbor::Atlas.new(ENV['ARBORUSER'], ENV['ARBORPASS'])
+		assert_not_nil(a.cookie)
+		ipinfo = a.lookup("1.2.3.0/24")
+		assert_not_nil(ipinfo)
+		assert_not_nil(ipinfo['report'])
+		assert_not_nil(ipinfo['report']['title'])
+		assert_equal("ATLAS Network Report: Global 1.2.3.0/24", ipinfo['report']['title'])
+		assert_not_nil(ipinfo['report']['background'])
+		assert_not_nil(ipinfo['report']['background']['blacklist'])
+		assert_not_nil(ipinfo['report']['background']['blacklist']['dnsbl'])
+		assert_not_nil(ipinfo['report']['background']['blacklist']['dnsbl'][0])
+		assert_not_nil(ipinfo['report']['background']['blacklist']['dnsbl'][0]['status'])
+		assert_equal("OK", ipinfo['report']['background']['blacklist']['dnsbl'][0]['status'])
+		assert_not_nil(ipinfo['report']['scans'])
+		assert_not_nil(ipinfo['report']['attacks'])
+		assert_not_nil(ipinfo['report']['servers'])
+	end
+	
+	should "return network as report for AS701" do
+		raise "You must set ARBORUSER and ARBORPASS in your environment before running tests" unless ENV['ARBORUSER'] and ENV['ARBORPASS']
+		a = Arbor::Atlas.new(ENV['ARBORUSER'], ENV['ARBORPASS'])
+		assert_not_nil(a.cookie)
+		ipinfo = a.lookup("AS701")
+		assert_not_nil(ipinfo)
+		assert_not_nil(ipinfo['report'])
+		assert_not_nil(ipinfo['report']['title'])
+		assert_equal("ATLAS Network AS Report: Global AS701 (UUNET)", ipinfo['report']['title'])
+		assert_not_nil(ipinfo['report']['background'])
+		assert_not_nil(ipinfo['report']['background']['peers'])
+		assert_not_nil(ipinfo['report']['background']['peers']['peer'])
+		assert_not_nil(ipinfo['report']['background']['peers']['peer'].index("AS174 (COGENT)"))
+		assert_not_nil(ipinfo['report']['scans'])
+		assert_not_nil(ipinfo['report']['attacks'])
+		assert_not_nil(ipinfo['report']['servers'])
+		assert_not_nil(ipinfo['report']['dos_attacks'])
+	end
+	
+	should "return vulnerability report for CVE-2006-4139" do
+		raise "You must set ARBORUSER and ARBORPASS in your environment before running tests" unless ENV['ARBORUSER'] and ENV['ARBORPASS']
+		a = Arbor::Atlas.new(ENV['ARBORUSER'], ENV['ARBORPASS'])
+		assert_not_nil(a.cookie)
+		ipinfo = a.lookup("CVE-2006-4139")
+		assert_not_nil(ipinfo)
+		assert_not_nil(ipinfo['report'])
+		assert_not_nil(ipinfo['report']['title'])
+		assert_equal("ATLAS Vulnerability Report: Global CVE-2006-4139", ipinfo['report']['title'])
+		assert_not_nil(ipinfo['report']['scans'])
+		assert_not_nil(ipinfo['report']['background'])
+		assert_not_nil(ipinfo['report']['background']['description'])
+		assert_equal("Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries.", ipinfo['report']['background']['description'])
+		assert_not_nil(ipinfo['report']['attacks'])
+	end
+	
+	should "return country report report for US" do
+		raise "You must set ARBORUSER and ARBORPASS in your environment before running tests" unless ENV['ARBORUSER'] and ENV['ARBORPASS']
+		a = Arbor::Atlas.new(ENV['ARBORUSER'], ENV['ARBORPASS'])
+		assert_not_nil(a.cookie)
+		ipinfo = a.lookup("US")
+		assert_not_nil(ipinfo['report'])
+		assert_not_nil(ipinfo['report']['title'])
+		assert_equal("ATLAS Country Report: Global United States", ipinfo['report']['title'])
+		assert_not_nil(ipinfo['report']['background'])
+		assert_not_nil(ipinfo['report']['attacks'])
+		assert_not_nil(ipinfo['report']['dos_attacks'])
+		assert_not_nil(ipinfo['report']['servers'])
+	end
+	
+	should "raise exception on unknown query type" do
+		raise "You must set ARBORUSER and ARBORPASS in your environment before running tests" unless ENV['ARBORUSER'] and ENV['ARBORPASS']
+		a = Arbor::Atlas.new(ENV['ARBORUSER'], ENV['ARBORPASS'])
+		assert_not_nil(a.cookie)
+		assert_raise(ArgumentError) do a.lookup("unknown type") end
+	end
+end

metadata

@@ -0,0 +1,190 @@
+--- !ruby/object:Gem::Specification 
+name: arbor-atlas
+version: !ruby/object:Gem::Version 
+  hash: 27
+  prerelease: 
+  segments: 
+  - 0
+  - 1
+  - 0
+  version: 0.1.0
+platform: ruby
+authors: 
+- Chris Lee
+autorequire: 
+bindir: bin
+cert_chain: 
+- |
+  -----BEGIN CERTIFICATE-----
+  MIIDYjCCAkqgAwIBAgIBADANBgkqhkiG9w0BAQUFADBXMREwDwYDVQQDDAhydWJ5
+  Z2VtczEYMBYGCgmSJomT8ixkARkWCGNocmlzbGVlMRMwEQYKCZImiZPyLGQBGRYD
+  ZGhzMRMwEQYKCZImiZPyLGQBGRYDb3JnMB4XDTExMDIyNzE1MzAxOVoXDTEyMDIy
+  NzE1MzAxOVowVzERMA8GA1UEAwwIcnVieWdlbXMxGDAWBgoJkiaJk/IsZAEZFghj
+  aHJpc2xlZTETMBEGCgmSJomT8ixkARkWA2RoczETMBEGCgmSJomT8ixkARkWA29y
+  ZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNM1Hjs6q58sf7Jp64A
+  vEY2cnRWDdFpD8UWpwaJK5kgSHOVgs+0mtszn+YlYjmx8kpmuYpyU4g9mNMImMQe
+  ow8pVsL4QBBK/1Ozgdxrsptk3IiTozMYA+g2I/+WvZSEDu9uHkKe8pvMBEMrg7RJ
+  IN7+jWaPnSzg3DbFwxwOdi+QRw33DjK7oFWcOaaBqWTUpI4epdi/c/FE1I6UWULJ
+  ZF/Uso0Sc2Pp/YuVhuMHGrUbn7zrWWo76nnK4DTLfXFDbZF5lIXT1w6BtIiN6Ho9
+  Rdr/W6663hYUo3WMsUSa3I5+PJXEBKmGHIZ2TNFnoFIRHha2fmm1HC9+BTaKwcO9
+  PLcCAwEAAaM5MDcwCQYDVR0TBAIwADAdBgNVHQ4EFgQURzsNkZo2rv86Ftc+hVww
+  RNICMrwwCwYDVR0PBAQDAgSwMA0GCSqGSIb3DQEBBQUAA4IBAQBRRw/iNA/PdnvW
+  OBoNCSr/IiHOGZqMHgPJwyWs68FhThnLc2EyIkuLTQf98ms1/D3p0XX9JsxazvKT
+  W/in8Mm/R2fkVziSdzqChtw/4Z4bW3c+RF7TgX6SP5cKxNAfKmAPuItcs2Y+7bdS
+  hr/FktVtT2iAmISRnlEbdaTpfl6N2ZWNT83khV6iOs5xRkX/+0e+GgAv9mE6nqr1
+  AkuDXMhposxcnFZUrZ3UtMPEe/JnyP7Vv6pvr3qtZm8FidFZU91+rX/fwdyBU8RP
+  /5l8uLWXXNt1wEbtu4N1I66LwTK2iRrQZE8XtlgZGbxYDFUkiurq3OafF2YwRs6W
+  6yhklP75
+  -----END CERTIFICATE-----
+
+date: 2011-05-07 00:00:00 Z
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  version_requirements: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 11
+        segments: 
+        - 0
+        - 1
+        - 8
+        version: 0.1.8
+  requirement: *id001
+  prerelease: false
+  name: crack
+  type: :runtime
+- !ruby/object:Gem::Dependency 
+  version_requirements: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  requirement: *id002
+  prerelease: false
+  name: shoulda
+  type: :development
+- !ruby/object:Gem::Dependency 
+  version_requirements: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 23
+        segments: 
+        - 1
+        - 0
+        - 0
+        version: 1.0.0
+  requirement: *id003
+  prerelease: false
+  name: bundler
+  type: :development
+- !ruby/object:Gem::Dependency 
+  version_requirements: &id004 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 7
+        segments: 
+        - 1
+        - 5
+        - 2
+        version: 1.5.2
+  requirement: *id004
+  prerelease: false
+  name: jeweler
+  type: :development
+- !ruby/object:Gem::Dependency 
+  version_requirements: &id005 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  requirement: *id005
+  prerelease: false
+  name: rcov
+  type: :development
+- !ruby/object:Gem::Dependency 
+  version_requirements: &id006 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 11
+        segments: 
+        - 0
+        - 1
+        - 8
+        version: 0.1.8
+  requirement: *id006
+  prerelease: false
+  name: crack
+  type: :runtime
+description: https://atlas.arbor.net
+email: rubygems@chrislee.dhs.org
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- LICENSE.txt
+- README.rdoc
+files: 
+- .document
+- Gemfile
+- Gemfile.lock
+- LICENSE.txt
+- README.rdoc
+- Rakefile
+- VERSION
+- lib/arbor-atlas.rb
+- lib/arbor-atlas/arbor-atlas.rb
+- test/helper.rb
+- test/test_arbor-atlas.rb
+homepage: http://github.com/chrislee35/arbor-atlas
+licenses: 
+- MIT
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.7.2
+signing_key: 
+specification_version: 3
+summary: A very thin wrapper around Arbor Atlas' web interface
+test_files: 
+- test/helper.rb
+- test/test_arbor-atlas.rb

metadata.gz.sig

@@ -0,0 +1 @@
+�.A�d����>I�e���sS�q���T4L