dradis-nipper 4.1.0 → 4.4.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +9 -0
- data/lib/dradis/plugins/nipper/gem_version.rb +1 -1
- data/lib/nipper/issue.rb +19 -5
- data/spec/fixtures/files/sample_v2.5.xml +68 -0
- data/spec/fixtures/files/{sample.xml → sample_v2.8.xml} +0 -0
- data/spec/upload_v2.5_spec.rb +44 -0
- data/spec/{upload_spec.rb → upload_v2.8_spec.rb} +0 -0
- data/templates/issue.fields +4 -0
- data/templates/issue.sample +6 -0
- data/templates/issue.template +12 -0
- metadata +11 -7
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 57bb0aec2967a467508b701013fe4fd3b6ee87480da0041871b793977265b68c
|
|
4
|
+
data.tar.gz: 2a8501baa7bce97a988826201c9fd7f5c77724e6266b035e6c0bd655f5735ac1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9a2c9c9e17ab57816e189f6d97ab903c100a3882960c9beee2db408bc6971ed141321c0d2a0b8a64fd908da6a40df4abcfc7c819b9aae7177a25dbfe657c5de1
|
|
7
|
+
data.tar.gz: 9bf1da5bb95545502df5d7e7da5f9e0db16d3631588cf04ddc12885ea85648d8a5fc83b35a58295dac66d858818b57a94c0bd3bfd7e85353284f2973405f1b62
|
data/CHANGELOG.md
CHANGED
data/lib/nipper/issue.rb
CHANGED
|
@@ -9,8 +9,9 @@ module Nipper
|
|
|
9
9
|
:cvss_base, :cvss_base_vector,
|
|
10
10
|
:cvss_environmental, :cvss_environmental_vector,
|
|
11
11
|
:cvss_temporal, :cvss_temporal_vector,
|
|
12
|
-
:ease, :finding, :impact, :
|
|
13
|
-
:
|
|
12
|
+
:ease, :finding, :impact, :nipperv1_ease, :nipperv1_fix,
|
|
13
|
+
:nipperv1_impact, :nipperv1_rating,
|
|
14
|
+
:recommendation, :title
|
|
14
15
|
]
|
|
15
16
|
end
|
|
16
17
|
|
|
@@ -40,6 +41,8 @@ module Nipper
|
|
|
40
41
|
@xml.attr('title')
|
|
41
42
|
elsif method.to_s.starts_with?('cvss')
|
|
42
43
|
process_cvss_field(method)
|
|
44
|
+
elsif method.to_s.starts_with?('nipperv1')
|
|
45
|
+
process_nipperv1_field(method)
|
|
43
46
|
else
|
|
44
47
|
collect_text(@xml.xpath("./#{translations_table[method]}"))
|
|
45
48
|
end
|
|
@@ -47,9 +50,9 @@ module Nipper
|
|
|
47
50
|
|
|
48
51
|
def process_cvss_field(method)
|
|
49
52
|
translations_table = {
|
|
50
|
-
cvss_base: 'issuedetails/ratings/cvssv2-base',
|
|
51
|
-
cvss_temporal: 'issuedetails/ratings/cvssv2-temporal',
|
|
52
|
-
cvss_environmental: 'issuedetails/ratings/cvssv2-environmental'
|
|
53
|
+
cvss_base: 'issuedetails/ratings[@type="CVSSv2"]/cvssv2-base',
|
|
54
|
+
cvss_temporal: 'issuedetails/ratings[@type="CVSSv2"]/cvssv2-temporal',
|
|
55
|
+
cvss_environmental: 'issuedetails/ratings[@type="CVSSv2"]/cvssv2-environmental'
|
|
53
56
|
}
|
|
54
57
|
|
|
55
58
|
base_method = method.to_s.sub('_vector', '').to_sym
|
|
@@ -61,6 +64,17 @@ module Nipper
|
|
|
61
64
|
end
|
|
62
65
|
end
|
|
63
66
|
|
|
67
|
+
def process_nipperv1_field(method)
|
|
68
|
+
translations_table = {
|
|
69
|
+
nipperv1_ease: 'issuedetails/ratings[@type="Nipperv1"]/ease',
|
|
70
|
+
nipperv1_fix: 'issuedetails/ratings[@type="Nipperv1"]/fix',
|
|
71
|
+
nipperv1_impact: 'issuedetails/ratings[@type="Nipperv1"]/impact',
|
|
72
|
+
nipperv1_rating: 'issuedetails/ratings[@type="Nipperv1"]/rating'
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
@xml.xpath("./#{translations_table[method]}").text
|
|
76
|
+
end
|
|
77
|
+
|
|
64
78
|
private
|
|
65
79
|
|
|
66
80
|
def collect_text(xml_field)
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="utf-8"?>
|
|
2
|
+
<document nipperstudio="2.5.5.5804" xmlrevision="3" xmlversion="2">
|
|
3
|
+
<information>
|
|
4
|
+
<title>Firewall Review Report</title>
|
|
5
|
+
<author>Compass IT Compliance</author>
|
|
6
|
+
<authorlogo>C:/Nipper Photos/CompassITC-logo-HiRes-TSP.png</authorlogo>
|
|
7
|
+
<date>Friday, September 11, 2020</date>
|
|
8
|
+
<generator>
|
|
9
|
+
<product>Nipper Studio</product>
|
|
10
|
+
<manufacturer>Titania</manufacturer>
|
|
11
|
+
<website>www.titania.com</website>
|
|
12
|
+
<version>2.8.0</version>
|
|
13
|
+
</generator>
|
|
14
|
+
<devices>
|
|
15
|
+
<device name="PA-200" os="PANOS" osversion="7.0.0" type="Palo Alto Firewall"/>
|
|
16
|
+
</devices>
|
|
17
|
+
</information>
|
|
18
|
+
<report>
|
|
19
|
+
<part index="2" title="Security Audit" ref="SECURITYAUDIT">
|
|
20
|
+
<section index="1.1" ref="INTRODUCTION" title="Introduction">
|
|
21
|
+
<issuedetails>
|
|
22
|
+
<devices>
|
|
23
|
+
<device name="PA-200" osversion="7.0.0" type="Palo Alto Firewall"/>
|
|
24
|
+
</devices>
|
|
25
|
+
<ratings type="Nipperv1">
|
|
26
|
+
<rating>High</rating>
|
|
27
|
+
<impact>Critical</impact>
|
|
28
|
+
<ease>Moderate</ease>
|
|
29
|
+
<fix>Quick</fix>
|
|
30
|
+
</ratings>
|
|
31
|
+
</issuedetails>
|
|
32
|
+
<section index="2.2.1" ref="FINDING" title="Finding">
|
|
33
|
+
<table index="10" ref="AUTHENTICATION.USERS.WEAKPASSWORD.1" title="Table Title">
|
|
34
|
+
<headings>
|
|
35
|
+
<heading>Heading 1</heading>
|
|
36
|
+
<heading>Heading 2</heading>
|
|
37
|
+
<heading>Heading 3</heading>
|
|
38
|
+
</headings>
|
|
39
|
+
<tablebody>
|
|
40
|
+
<tablerow>
|
|
41
|
+
<tablecell>
|
|
42
|
+
<item>Row 1A</item>
|
|
43
|
+
</tablecell>
|
|
44
|
+
<tablecell>
|
|
45
|
+
<item>Row 1B</item>
|
|
46
|
+
</tablecell>
|
|
47
|
+
<tablecell>
|
|
48
|
+
<item>Row 1C</item>
|
|
49
|
+
</tablecell>
|
|
50
|
+
</tablerow>
|
|
51
|
+
<tablerow>
|
|
52
|
+
<tablecell>
|
|
53
|
+
<item>Row 2A</item>
|
|
54
|
+
</tablecell>
|
|
55
|
+
<tablecell>
|
|
56
|
+
<item>Row 2B</item>
|
|
57
|
+
</tablecell>
|
|
58
|
+
<tablecell>
|
|
59
|
+
<item>Row 2C</item>
|
|
60
|
+
</tablecell>
|
|
61
|
+
</tablerow>
|
|
62
|
+
</tablebody>
|
|
63
|
+
</table>
|
|
64
|
+
</section>
|
|
65
|
+
</section>
|
|
66
|
+
</part>
|
|
67
|
+
</report>
|
|
68
|
+
</document>
|
|
File without changes
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
require 'rails_helper'
|
|
2
|
+
|
|
3
|
+
describe 'Nipper upload plugin' do
|
|
4
|
+
describe 'importer' do
|
|
5
|
+
before(:each) do
|
|
6
|
+
# Stub template service
|
|
7
|
+
templates_dir = File.expand_path('../../templates', __FILE__)
|
|
8
|
+
expect_any_instance_of(Dradis::Plugins::TemplateService)
|
|
9
|
+
.to receive(:default_templates_dir).and_return(templates_dir)
|
|
10
|
+
|
|
11
|
+
plugin = Dradis::Plugins::Nipper
|
|
12
|
+
|
|
13
|
+
@content_service = Dradis::Plugins::ContentService::Base.new(plugin: plugin)
|
|
14
|
+
|
|
15
|
+
@importer = plugin::Importer.new(
|
|
16
|
+
content_service: @content_service
|
|
17
|
+
)
|
|
18
|
+
end
|
|
19
|
+
|
|
20
|
+
context 'nipper v2.5 output' do
|
|
21
|
+
it 'imports Nipperv1 fields and findings table' do
|
|
22
|
+
expect(@content_service).to receive(:create_node) do |args|
|
|
23
|
+
expect(args[:label]).to eq('PA-200')
|
|
24
|
+
expect(args[:type]).to eq(:host)
|
|
25
|
+
@node = Node.create(label: args[:label])
|
|
26
|
+
end.once
|
|
27
|
+
expect(@content_service).to receive(:create_issue) do |args|
|
|
28
|
+
OpenStruct.new(args)
|
|
29
|
+
@issue = Issue.create(text: args[:text])
|
|
30
|
+
end.exactly(1).times
|
|
31
|
+
expect(@content_service).to receive(:create_evidence) do |args|
|
|
32
|
+
OpenStruct.new(args)
|
|
33
|
+
end.exactly(1).times
|
|
34
|
+
|
|
35
|
+
@importer.import(file: File.expand_path('../spec/fixtures/files/sample_v2.5.xml', __dir__))
|
|
36
|
+
|
|
37
|
+
expect(@issue.fields['Nipperv1.Ease']).to eq('Moderate')
|
|
38
|
+
expect(@issue.fields['Nipperv1.Fix']).to eq('Quick')
|
|
39
|
+
expect(@issue.fields['Nipperv1.Impact']).to eq('Critical')
|
|
40
|
+
expect(@issue.fields['Nipperv1.Rating']).to eq('High')
|
|
41
|
+
end
|
|
42
|
+
end
|
|
43
|
+
end
|
|
44
|
+
end
|
|
File without changes
|
data/templates/issue.fields
CHANGED
data/templates/issue.sample
CHANGED
|
@@ -10,6 +10,12 @@
|
|
|
10
10
|
<cvssv2-environmental score="5.6">CDP:ND/TD:ND/CR:ND/IR:ND/AR:ND</cvssv2-environmental>
|
|
11
11
|
<FindingID>TEST-ISSUE</FindingID>
|
|
12
12
|
</ratings>
|
|
13
|
+
<ratings type="Nipperv1">
|
|
14
|
+
<rating>Test Nipperv1 Rating</rating>
|
|
15
|
+
<impact>Test Nipperv1 Impact</impact>
|
|
16
|
+
<ease>Test Nipperv1 Ease</ease>
|
|
17
|
+
<fix>Test Nipperv1 Fix</fix>
|
|
18
|
+
</ratings>
|
|
13
19
|
</issuedetails>
|
|
14
20
|
<section index="2.3.1" title="Finding" ref="FINDING">
|
|
15
21
|
<text>Test Finding</text>
|
data/templates/issue.template
CHANGED
|
@@ -19,5 +19,17 @@
|
|
|
19
19
|
#[Ease]#
|
|
20
20
|
%issue.ease%
|
|
21
21
|
|
|
22
|
+
#[Nipperv1.Ease]#
|
|
23
|
+
%issue.nipperv1_ease%
|
|
24
|
+
|
|
25
|
+
#[Nipperv1.Fix]#
|
|
26
|
+
%issue.nipperv1_fix%
|
|
27
|
+
|
|
28
|
+
#[Nipperv1.Impact]#
|
|
29
|
+
%issue.nipperv1_impact%
|
|
30
|
+
|
|
31
|
+
#[Nipperv1.Rating]#
|
|
32
|
+
%issue.nipperv1_rating%
|
|
33
|
+
|
|
22
34
|
#[Recommendation]#
|
|
23
35
|
%issue.recommendation%
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dradis-nipper
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.
|
|
4
|
+
version: 4.4.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dradis Team
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2022-06-13 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dradis-plugins
|
|
@@ -107,9 +107,11 @@ files:
|
|
|
107
107
|
- lib/nipper/issue.rb
|
|
108
108
|
- lib/tasks/thorfile.rb
|
|
109
109
|
- spec/fixtures/files/invalid.xml
|
|
110
|
-
- spec/fixtures/files/
|
|
110
|
+
- spec/fixtures/files/sample_v2.5.xml
|
|
111
|
+
- spec/fixtures/files/sample_v2.8.xml
|
|
111
112
|
- spec/spec_helper.rb
|
|
112
|
-
- spec/
|
|
113
|
+
- spec/upload_v2.5_spec.rb
|
|
114
|
+
- spec/upload_v2.8_spec.rb
|
|
113
115
|
- templates/evidence.fields
|
|
114
116
|
- templates/evidence.sample
|
|
115
117
|
- templates/evidence.template
|
|
@@ -135,12 +137,14 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
135
137
|
- !ruby/object:Gem::Version
|
|
136
138
|
version: '0'
|
|
137
139
|
requirements: []
|
|
138
|
-
rubygems_version: 3.
|
|
140
|
+
rubygems_version: 3.2.32
|
|
139
141
|
signing_key:
|
|
140
142
|
specification_version: 4
|
|
141
143
|
summary: Nipper upload add-on for Dradis Framework.
|
|
142
144
|
test_files:
|
|
143
145
|
- spec/fixtures/files/invalid.xml
|
|
144
|
-
- spec/fixtures/files/
|
|
146
|
+
- spec/fixtures/files/sample_v2.5.xml
|
|
147
|
+
- spec/fixtures/files/sample_v2.8.xml
|
|
145
148
|
- spec/spec_helper.rb
|
|
146
|
-
- spec/
|
|
149
|
+
- spec/upload_v2.5_spec.rb
|
|
150
|
+
- spec/upload_v2.8_spec.rb
|