dradis-nexpose 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. checksums.yaml +7 -0
  2. data/.gitignore +11 -0
  3. data/.rspec +2 -0
  4. data/CHANGELOG.md +3 -0
  5. data/CONTRIBUTING.md +3 -0
  6. data/Gemfile +19 -0
  7. data/LICENSE +339 -0
  8. data/README.md +29 -0
  9. data/Rakefile +1 -0
  10. data/dradis-nexpose.gemspec +35 -0
  11. data/lib/dradis-nexpose.rb +12 -0
  12. data/lib/dradis/plugins/nexpose.rb +11 -0
  13. data/lib/dradis/plugins/nexpose/engine.rb +9 -0
  14. data/lib/dradis/plugins/nexpose/field_processor.rb +89 -0
  15. data/lib/dradis/plugins/nexpose/formats/full.rb +152 -0
  16. data/lib/dradis/plugins/nexpose/formats/simple.rb +76 -0
  17. data/lib/dradis/plugins/nexpose/gem_version.rb +19 -0
  18. data/lib/dradis/plugins/nexpose/importer.rb +34 -0
  19. data/lib/dradis/plugins/nexpose/version.rb +13 -0
  20. data/lib/nexpose/endpoint.rb +81 -0
  21. data/lib/nexpose/node.rb +117 -0
  22. data/lib/nexpose/scan.rb +65 -0
  23. data/lib/nexpose/service.rb +101 -0
  24. data/lib/nexpose/vulnerability.rb +95 -0
  25. data/lib/tasks/thorfile.rb +26 -0
  26. data/spec/fixtures/files/full.xml +144 -0
  27. data/spec/fixtures/files/simple.xml +53 -0
  28. data/spec/nexpose_upload_spec.rb +154 -0
  29. data/spec/spec_helper.rb +13 -0
  30. data/templates/full_node.fields +8 -0
  31. data/templates/full_node.sample +65 -0
  32. data/templates/full_node.template +13 -0
  33. data/templates/full_scan.fields +5 -0
  34. data/templates/full_scan.sample +6 -0
  35. data/templates/full_scan.template +9 -0
  36. data/templates/full_service.fields +4 -0
  37. data/templates/full_service.sample +17 -0
  38. data/templates/full_service.template +11 -0
  39. data/templates/full_vulnerability.fields +13 -0
  40. data/templates/full_vulnerability.sample +59 -0
  41. data/templates/full_vulnerability.template +34 -0
  42. data/templates/simple_port.fields +2 -0
  43. data/templates/simple_port.sample +23 -0
  44. data/templates/simple_port.template +5 -0
  45. metadata +176 -0
@@ -0,0 +1,34 @@
1
+ #[Title]#
2
+ %vulnerability.title%
3
+
4
+ #[Nexpose Id]#
5
+ %vulnerability.nexpose_id%
6
+
7
+ #[Severity]#
8
+ %vulnerability.severity%
9
+
10
+ #[PCI Severity]#
11
+ %vulnerability.pci_severity%
12
+
13
+ #[CVSS Score]#
14
+ %vulnerability.cvss_score%
15
+
16
+ #[CVSS Vector]#
17
+ %vulnerability.cvss_vector%
18
+
19
+ #[Published]#
20
+ %vulnerability.published%
21
+
22
+ #[Description]#
23
+ %vulnerability.description%
24
+
25
+
26
+ #[Solution]#
27
+ %vulnerability.solution%
28
+
29
+
30
+ #[References]#
31
+ %vulnerability.references%
32
+
33
+ #[Tags]#
34
+ %vulnerability.tags%
@@ -0,0 +1,2 @@
1
+ port.finding
2
+ port.id
@@ -0,0 +1,23 @@
1
+ <vulnerability
2
+ id="ntpd-crypto"
3
+ resultCode="VV">
4
+
5
+ <id type="cve">CVE-2009-1252</id>
6
+ <id type="bid">35017</id>
7
+ <id type="secunia">35137</id>
8
+ <id type="secunia">35138</id>
9
+ <id type="secunia">35166</id>
10
+ <id type="secunia">35169</id>
11
+ <id type="secunia">35243</id>
12
+ <id type="secunia">35253</id>
13
+ <id type="secunia">35308</id>
14
+ <id type="secunia">35336</id>
15
+ <id type="secunia">35388</id>
16
+ <id type="secunia">35416</id>
17
+ <id type="secunia">35630</id>
18
+ <id type="secunia">37470</id>
19
+ <id type="secunia">37471</id>
20
+ <id type="url">http://bugs.ntp.org/1151</id>
21
+ <id type="url">http://www.kb.cert.org/vuls/id/853097</id>
22
+ <id type="url">https://lists.ntp.org/pipermail/announce/2009-May/000062.html</id>
23
+ </vulnerability>
@@ -0,0 +1,5 @@
1
+ #[Id]#
2
+ %port.id%
3
+
4
+ #[References]#
5
+ %port.finding%
metadata ADDED
@@ -0,0 +1,176 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: dradis-nexpose
3
+ version: !ruby/object:Gem::Version
4
+ version: 3.6.0
5
+ platform: ruby
6
+ authors:
7
+ - Daniel Martin
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2017-04-06 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: dradis-plugins
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '3.6'
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '3.6'
27
+ - !ruby/object:Gem::Dependency
28
+ name: nokogiri
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - "~>"
32
+ - !ruby/object:Gem::Version
33
+ version: '1.3'
34
+ type: :runtime
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - "~>"
39
+ - !ruby/object:Gem::Version
40
+ version: '1.3'
41
+ - !ruby/object:Gem::Dependency
42
+ name: bundler
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - "~>"
46
+ - !ruby/object:Gem::Version
47
+ version: '1.6'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - "~>"
53
+ - !ruby/object:Gem::Version
54
+ version: '1.6'
55
+ - !ruby/object:Gem::Dependency
56
+ name: rake
57
+ requirement: !ruby/object:Gem::Requirement
58
+ requirements:
59
+ - - "~>"
60
+ - !ruby/object:Gem::Version
61
+ version: '10.0'
62
+ type: :development
63
+ prerelease: false
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - "~>"
67
+ - !ruby/object:Gem::Version
68
+ version: '10.0'
69
+ - !ruby/object:Gem::Dependency
70
+ name: rspec-rails
71
+ requirement: !ruby/object:Gem::Requirement
72
+ requirements:
73
+ - - ">="
74
+ - !ruby/object:Gem::Version
75
+ version: '0'
76
+ type: :development
77
+ prerelease: false
78
+ version_requirements: !ruby/object:Gem::Requirement
79
+ requirements:
80
+ - - ">="
81
+ - !ruby/object:Gem::Version
82
+ version: '0'
83
+ - !ruby/object:Gem::Dependency
84
+ name: combustion
85
+ requirement: !ruby/object:Gem::Requirement
86
+ requirements:
87
+ - - "~>"
88
+ - !ruby/object:Gem::Version
89
+ version: 0.5.2
90
+ type: :development
91
+ prerelease: false
92
+ version_requirements: !ruby/object:Gem::Requirement
93
+ requirements:
94
+ - - "~>"
95
+ - !ruby/object:Gem::Version
96
+ version: 0.5.2
97
+ description: This add-on allows you to upload and parse output produced from Nexpose
98
+ scanner into Dradis.
99
+ email:
100
+ - etd@nomejortu.com
101
+ executables: []
102
+ extensions: []
103
+ extra_rdoc_files: []
104
+ files:
105
+ - ".gitignore"
106
+ - ".rspec"
107
+ - CHANGELOG.md
108
+ - CONTRIBUTING.md
109
+ - Gemfile
110
+ - LICENSE
111
+ - README.md
112
+ - Rakefile
113
+ - dradis-nexpose.gemspec
114
+ - lib/dradis-nexpose.rb
115
+ - lib/dradis/plugins/nexpose.rb
116
+ - lib/dradis/plugins/nexpose/engine.rb
117
+ - lib/dradis/plugins/nexpose/field_processor.rb
118
+ - lib/dradis/plugins/nexpose/formats/full.rb
119
+ - lib/dradis/plugins/nexpose/formats/simple.rb
120
+ - lib/dradis/plugins/nexpose/gem_version.rb
121
+ - lib/dradis/plugins/nexpose/importer.rb
122
+ - lib/dradis/plugins/nexpose/version.rb
123
+ - lib/nexpose/endpoint.rb
124
+ - lib/nexpose/node.rb
125
+ - lib/nexpose/scan.rb
126
+ - lib/nexpose/service.rb
127
+ - lib/nexpose/vulnerability.rb
128
+ - lib/tasks/thorfile.rb
129
+ - spec/fixtures/files/full.xml
130
+ - spec/fixtures/files/simple.xml
131
+ - spec/nexpose_upload_spec.rb
132
+ - spec/spec_helper.rb
133
+ - templates/full_node.fields
134
+ - templates/full_node.sample
135
+ - templates/full_node.template
136
+ - templates/full_scan.fields
137
+ - templates/full_scan.sample
138
+ - templates/full_scan.template
139
+ - templates/full_service.fields
140
+ - templates/full_service.sample
141
+ - templates/full_service.template
142
+ - templates/full_vulnerability.fields
143
+ - templates/full_vulnerability.sample
144
+ - templates/full_vulnerability.template
145
+ - templates/simple_port.fields
146
+ - templates/simple_port.sample
147
+ - templates/simple_port.template
148
+ homepage: http://dradisframework.org
149
+ licenses:
150
+ - GPL-2
151
+ metadata: {}
152
+ post_install_message:
153
+ rdoc_options: []
154
+ require_paths:
155
+ - lib
156
+ required_ruby_version: !ruby/object:Gem::Requirement
157
+ requirements:
158
+ - - ">="
159
+ - !ruby/object:Gem::Version
160
+ version: '0'
161
+ required_rubygems_version: !ruby/object:Gem::Requirement
162
+ requirements:
163
+ - - ">="
164
+ - !ruby/object:Gem::Version
165
+ version: '0'
166
+ requirements: []
167
+ rubyforge_project:
168
+ rubygems_version: 2.4.5
169
+ signing_key:
170
+ specification_version: 4
171
+ summary: Nexpose add-on for the Dradis Framework.
172
+ test_files:
173
+ - spec/fixtures/files/full.xml
174
+ - spec/fixtures/files/simple.xml
175
+ - spec/nexpose_upload_spec.rb
176
+ - spec/spec_helper.rb