dradis-nipper 4.10.0 → 4.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/pull_request_template.md +45 -0
- data/CHANGELOG.md +7 -0
- data/README.md +1 -2
- data/lib/dradis/plugins/nipper/gem_version.rb +1 -1
- data/lib/dradis/plugins/nipper/importer.rb +2 -2
- data/lib/dradis/plugins/nipper/mapping.rb +50 -0
- data/lib/dradis/plugins/nipper.rb +1 -0
- metadata +8 -10
- data/templates/evidence.fields +0 -3
- data/templates/evidence.template +0 -8
- data/templates/issue.fields +0 -15
- data/templates/issue.template +0 -35
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 3f8377871f64d9ed5b124dfae754181bd176235c414d29646e8bb08c6b7eb7ea
|
|
4
|
+
data.tar.gz: 215f41bb92b6f369eb9ebefba2ff0af8bb78dda2404558db71babb818aa05860
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 869085b2efc2c60ea8223434e60c72fa7a7a66f84f2f3aff3775a848c5ffe4a71a6e37deff7ea5050e338c9ba489a58f5e05bcdee25c953cc732f0d46e00d768
|
|
7
|
+
data.tar.gz: 709dc9d2ca85726bb7965e1596274bc692d1bbd554bffa2883c4de78d94407467e010aeb4f5f266f0d9030038c59caa12fb24cccbfe71f0ef164ab51a86c4eb9
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
Please review [CONTRIBUTING.md](https://github.com/dradis/dradis-ce/blob/develop/CONTRIBUTING.md) and remove this line.
|
|
2
|
+
|
|
3
|
+
### Summary
|
|
4
|
+
|
|
5
|
+
Provide a general description of the code changes in your pull
|
|
6
|
+
request... were there any bugs you had fixed? If so, mention them. If
|
|
7
|
+
these bugs have open GitHub issues, be sure to tag them here as well,
|
|
8
|
+
to keep the conversation linked together.
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
### Testing Steps
|
|
12
|
+
|
|
13
|
+
Provide steps to test functionality, described in detail for someone not familiar with this part of the application / code base
|
|
14
|
+
|
|
15
|
+
|
|
16
|
+
### Other Information
|
|
17
|
+
|
|
18
|
+
If there's anything else that's important and relevant to your pull
|
|
19
|
+
request, mention that information here. This could include
|
|
20
|
+
benchmarks, or other information.
|
|
21
|
+
|
|
22
|
+
Thanks for contributing to Dradis!
|
|
23
|
+
|
|
24
|
+
|
|
25
|
+
### Copyright assignment
|
|
26
|
+
|
|
27
|
+
Collaboration is difficult with commercial closed source but we want
|
|
28
|
+
to keep as much of the OSS ethos as possible available to users
|
|
29
|
+
who want to fix it themselves.
|
|
30
|
+
|
|
31
|
+
In order to unambiguously own and sell Dradis Framework commercial
|
|
32
|
+
products, we must have the copyright associated with the entire
|
|
33
|
+
codebase. Any code you create which is merged must be owned by us.
|
|
34
|
+
That's not us trying to be a jerks, that's just the way it works.
|
|
35
|
+
|
|
36
|
+
You can delete this section, but the following sentence needs to
|
|
37
|
+
remain in the PR's description:
|
|
38
|
+
|
|
39
|
+
> I assign all rights, including copyright, to any future Dradis
|
|
40
|
+
> work by myself to Security Roots.
|
|
41
|
+
|
|
42
|
+
### Check List
|
|
43
|
+
|
|
44
|
+
- [ ] Added a CHANGELOG entry
|
|
45
|
+
- [ ] Added specs
|
data/CHANGELOG.md
CHANGED
data/README.md
CHANGED
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
This add-on will enable the user to upload Nipper output files in the XML format (.xml) to create a structure of Dradis nodes, issues, and evidences that contain the same information about the hosts and vulnerabilities in the original file.
|
|
4
4
|
|
|
5
|
-
The add-on requires Dradis 3.0 or
|
|
6
|
-
|
|
5
|
+
The add-on requires [Dradis CE](https://dradis.com/ce/) > 3.0, or [Dradis Pro](https://dradis.com/).
|
|
7
6
|
|
|
8
7
|
## More information
|
|
9
8
|
|
|
@@ -48,7 +48,7 @@ module Dradis::Plugins::Nipper
|
|
|
48
48
|
def process_evidence(xml_evidence, issue)
|
|
49
49
|
logger.info { 'Creating evidence...' }
|
|
50
50
|
|
|
51
|
-
evidence_text =
|
|
51
|
+
evidence_text = mapping_service.apply_mapping(source: 'evidence', data: xml_evidence)
|
|
52
52
|
content_service.create_evidence(issue: issue, node: @host_node, content: evidence_text)
|
|
53
53
|
end
|
|
54
54
|
|
|
@@ -57,7 +57,7 @@ module Dradis::Plugins::Nipper
|
|
|
57
57
|
|
|
58
58
|
logger.info { "Creating issue: #{plugin_id}" }
|
|
59
59
|
|
|
60
|
-
issue_text =
|
|
60
|
+
issue_text = mapping_service.apply_mapping(source: 'issue', data: xml_issue)
|
|
61
61
|
issue = content_service.create_issue(text: issue_text, id: plugin_id)
|
|
62
62
|
|
|
63
63
|
xml_evidence = xml_issue.at_xpath('./issuedetails/devices')
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
module Dradis::Plugins::Nipper
|
|
2
|
+
module Mapping
|
|
3
|
+
DEFAULT_MAPPING = {
|
|
4
|
+
evidence: {
|
|
5
|
+
'DeviceName' => '{{ nipper[evidence.device_name] }}',
|
|
6
|
+
'DeviceType' => '{{ nipper[evidence.device_type] }}',
|
|
7
|
+
'OS' => '{{ nipper[evidence.device_osversion] }}'
|
|
8
|
+
},
|
|
9
|
+
issue: {
|
|
10
|
+
'Title' => '{{ nipper[issue.title] }}',
|
|
11
|
+
'CVSSv2.Base' => '{{ nipper[issue.cvss_base] }}',
|
|
12
|
+
'CVSSv2.Temporal' => '{{ nipper[issue.cvss_temporal] }}',
|
|
13
|
+
'CVSSv2.Environmental' => '{{ nipper[issue.cvss_environmental] }}',
|
|
14
|
+
'Finding' => '{{ nipper[issue.finding] }}',
|
|
15
|
+
'Impact' => '{{ nipper[issue.impact] }}',
|
|
16
|
+
'Ease' => '{{ nipper[issue.ease] }}',
|
|
17
|
+
'Nipperv1.Ease' => '{{ nipper[issue.nipperv1_ease] }}',
|
|
18
|
+
'Nipperv1.Fix' => '{{ nipper[issue.nipperv1_fix] }}',
|
|
19
|
+
'Nipperv1.Impact' => '{{ nipper[issue.nipperv1_impact] }}',
|
|
20
|
+
'Nipperv1.Rating' => '{{ nipper[issue.nipperv1_rating] }}',
|
|
21
|
+
'Recommendation' => '{{ nipper[issue.recommendation] }}'
|
|
22
|
+
}
|
|
23
|
+
}.freeze
|
|
24
|
+
|
|
25
|
+
SOURCE_FIELDS = {
|
|
26
|
+
evidence: [
|
|
27
|
+
'evidence.device_name',
|
|
28
|
+
'evidence.device_type',
|
|
29
|
+
'evidence.device_osversion'
|
|
30
|
+
],
|
|
31
|
+
issue: [
|
|
32
|
+
'issue.title',
|
|
33
|
+
'issue.cvss_base',
|
|
34
|
+
'issue.cvss_base_vector',
|
|
35
|
+
'issue.cvss_temporal',
|
|
36
|
+
'issue.cvss_temporal_vector',
|
|
37
|
+
'issue.cvss_environmental',
|
|
38
|
+
'issue.cvss_environmental_vector',
|
|
39
|
+
'issue.finding',
|
|
40
|
+
'issue.impact',
|
|
41
|
+
'issue.ease',
|
|
42
|
+
'issue.nipperv1_ease',
|
|
43
|
+
'issue.nipperv1_fix',
|
|
44
|
+
'issue.nipperv1_impact',
|
|
45
|
+
'issue.nipperv1_rating',
|
|
46
|
+
'issue.recommendation'
|
|
47
|
+
]
|
|
48
|
+
}.freeze
|
|
49
|
+
end
|
|
50
|
+
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dradis-nipper
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.
|
|
4
|
+
version: 4.12.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dradis Team
|
|
8
|
-
autorequire:
|
|
8
|
+
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2024-05-07 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dradis-plugins
|
|
@@ -81,11 +81,12 @@ dependencies:
|
|
|
81
81
|
- !ruby/object:Gem::Version
|
|
82
82
|
version: 0.5.2
|
|
83
83
|
description: This add-on allows you to upload and parse reports from Nipper.
|
|
84
|
-
email:
|
|
84
|
+
email:
|
|
85
85
|
executables: []
|
|
86
86
|
extensions: []
|
|
87
87
|
extra_rdoc_files: []
|
|
88
88
|
files:
|
|
89
|
+
- ".github/pull_request_template.md"
|
|
89
90
|
- ".gitignore"
|
|
90
91
|
- CHANGELOG.md
|
|
91
92
|
- CHANGELOG.template
|
|
@@ -101,6 +102,7 @@ files:
|
|
|
101
102
|
- lib/dradis/plugins/nipper/field_processor.rb
|
|
102
103
|
- lib/dradis/plugins/nipper/gem_version.rb
|
|
103
104
|
- lib/dradis/plugins/nipper/importer.rb
|
|
105
|
+
- lib/dradis/plugins/nipper/mapping.rb
|
|
104
106
|
- lib/dradis/plugins/nipper/version.rb
|
|
105
107
|
- lib/nipper/evidence.rb
|
|
106
108
|
- lib/nipper/issue.rb
|
|
@@ -111,17 +113,13 @@ files:
|
|
|
111
113
|
- spec/spec_helper.rb
|
|
112
114
|
- spec/upload_v2.5_spec.rb
|
|
113
115
|
- spec/upload_v2.8_spec.rb
|
|
114
|
-
- templates/evidence.fields
|
|
115
116
|
- templates/evidence.sample
|
|
116
|
-
- templates/evidence.template
|
|
117
|
-
- templates/issue.fields
|
|
118
117
|
- templates/issue.sample
|
|
119
|
-
- templates/issue.template
|
|
120
118
|
homepage: https://dradis.com/integrations/nipper.html
|
|
121
119
|
licenses:
|
|
122
120
|
- Commercial - Dradis Pro
|
|
123
121
|
metadata: {}
|
|
124
|
-
post_install_message:
|
|
122
|
+
post_install_message:
|
|
125
123
|
rdoc_options: []
|
|
126
124
|
require_paths:
|
|
127
125
|
- lib
|
|
@@ -137,7 +135,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
137
135
|
version: '0'
|
|
138
136
|
requirements: []
|
|
139
137
|
rubygems_version: 3.1.4
|
|
140
|
-
signing_key:
|
|
138
|
+
signing_key:
|
|
141
139
|
specification_version: 4
|
|
142
140
|
summary: Nipper upload add-on for Dradis Framework.
|
|
143
141
|
test_files:
|
data/templates/evidence.fields
DELETED
data/templates/evidence.template
DELETED
data/templates/issue.fields
DELETED
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
issue.title
|
|
2
|
-
issue.cvss_base
|
|
3
|
-
issue.cvss_base_vector
|
|
4
|
-
issue.cvss_temporal
|
|
5
|
-
issue.cvss_temporal_vector
|
|
6
|
-
issue.cvss_environmental
|
|
7
|
-
issue.cvss_environmental_vector
|
|
8
|
-
issue.finding
|
|
9
|
-
issue.impact
|
|
10
|
-
issue.ease
|
|
11
|
-
issue.nipperv1_ease
|
|
12
|
-
issue.nipperv1_fix
|
|
13
|
-
issue.nipperv1_impact
|
|
14
|
-
issue.nipperv1_rating
|
|
15
|
-
issue.recommendation
|
data/templates/issue.template
DELETED
|
@@ -1,35 +0,0 @@
|
|
|
1
|
-
#[Title]#
|
|
2
|
-
%issue.title%
|
|
3
|
-
|
|
4
|
-
#[CVSSv2.Base]#
|
|
5
|
-
%issue.cvss_base%
|
|
6
|
-
|
|
7
|
-
#[CVSSv2.Temporal]#
|
|
8
|
-
%issue.cvss_temporal%
|
|
9
|
-
|
|
10
|
-
#[CVSSv2.Environmental]#
|
|
11
|
-
%issue.cvss_environmental%
|
|
12
|
-
|
|
13
|
-
#[Finding]#
|
|
14
|
-
%issue.finding%
|
|
15
|
-
|
|
16
|
-
#[Impact]#
|
|
17
|
-
%issue.impact%
|
|
18
|
-
|
|
19
|
-
#[Ease]#
|
|
20
|
-
%issue.ease%
|
|
21
|
-
|
|
22
|
-
#[Nipperv1.Ease]#
|
|
23
|
-
%issue.nipperv1_ease%
|
|
24
|
-
|
|
25
|
-
#[Nipperv1.Fix]#
|
|
26
|
-
%issue.nipperv1_fix%
|
|
27
|
-
|
|
28
|
-
#[Nipperv1.Impact]#
|
|
29
|
-
%issue.nipperv1_impact%
|
|
30
|
-
|
|
31
|
-
#[Nipperv1.Rating]#
|
|
32
|
-
%issue.nipperv1_rating%
|
|
33
|
-
|
|
34
|
-
#[Recommendation]#
|
|
35
|
-
%issue.recommendation%
|