metasploit_data_models 0.7.0-java

data/app/models/mdm/module_platform.rb

@@ -0,0 +1,24 @@
+class Mdm::ModulePlatform < ActiveRecord::Base
+  self.table_name = 'module_platforms'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_platform, self)
+end

data/app/models/mdm/module_ref.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleRef < ActiveRecord::Base
+  self.table_name = 'module_refs'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_ref, self)
+end

data/app/models/mdm/module_target.rb

@@ -0,0 +1,26 @@
+class Mdm::ModuleTarget < ActiveRecord::Base
+  self.table_name = 'module_targets'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :index
+  attr_accessible :name
+
+  #
+  # Validators
+  #
+
+  validates :index, :presence => true
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_target, self)
+end

data/app/models/mdm/nexpose_console.rb

@@ -0,0 +1,20 @@
+class Mdm::NexposeConsole < ActiveRecord::Base
+  #
+  # Serializations
+  #
+
+  serialize :cached_sites, MetasploitDataModels::Base64Serializer.new
+
+  #
+  # Validations
+  #
+
+  validates :address, :presence => true
+  validates :name, :presence => true
+  validates :password, :presence => true
+  validates :port, :inclusion => {:in => 1..65535}
+  validates :username, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_nexpose_console, self)
+end
+

data/app/models/mdm/note.rb

@@ -0,0 +1,49 @@
+class Mdm::Note < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  after_save :normalize
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => "Mdm::Workspace"
+  belongs_to :host, :class_name => "Mdm::Host", :counter_cache => :note_count
+  belongs_to :service, :class_name => "Mdm::Service"
+
+  #
+  # Scopes
+  #
+
+  scope :flagged, where('critical = true AND seen = false')
+
+  notes = self.arel_table
+  scope :visible, where(notes[:ntype].not_in(['web.form', 'web.url', 'web.vuln']))
+
+  scope :search, lambda { |*args|
+    where(["(data NOT ILIKE 'BAh7%' AND data LIKE ?)" +
+               "OR (data ILIKE 'BAh7%' AND decode(data, 'base64') LIKE ?)" +
+               "OR ntype ILIKE ?",
+           "%#{args[0]}%", "%#{args[0]}%", "%#{args[0]}%"
+          ])
+  }
+
+  #
+  # Serializations
+  #
+
+  serialize :data, ::MetasploitDataModels::Base64Serializer.new
+
+  private
+
+  def normalize
+    if data_changed? and ntype =~ /fingerprint/
+      host.normalize_os
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_note, self)
+end
+

data/app/models/mdm/profile.rb

@@ -0,0 +1,9 @@
+class Mdm::Profile < ActiveRecord::Base
+  #
+  # Serializations
+  #
+  serialize :settings, MetasploitDataModels::Base64Serializer.new
+
+  ActiveSupport.run_load_hooks(:mdm_profile, self)
+end
+

data/app/models/mdm/ref.rb

@@ -0,0 +1,14 @@
+class Mdm::Ref < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  has_many :vulns_refs, :class_name => 'Mdm::VulnRef'
+
+  #
+  # Through :vuln_refs
+  #
+  has_many :vulns, :class_name => 'Mdm::Vuln', :through => :vulns_refs
+
+  ActiveSupport.run_load_hooks(:mdm_ref, self)
+end

data/app/models/mdm/report.rb

@@ -0,0 +1,50 @@
+class Mdm::Report < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Scopes
+  #
+
+  scope :flagged, where('reports.downloaded_at is NULL')
+
+  #
+  # Serializations
+  #
+
+  serialize :options, MetasploitDataModels::Base64Serializer.new
+
+  #
+  # Validations
+  #
+
+  validates :name,
+            :format => {
+                :allow_blank => true,
+                :message => "name must consist of A-Z, 0-9, space, dot, underscore, or dash",
+                :with => /^[A-Za-z0-9\x20\x2e\x2d\x5f\x5c]+$/
+            }
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.report_delete_file(self[:id])
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_report, self)
+end
+

data/app/models/mdm/report_template.rb

@@ -0,0 +1,27 @@
+class Mdm::ReportTemplate < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.report_template_delete_file(self[:id])
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_report_template, self)
+end
+

data/app/models/mdm/route.rb

@@ -0,0 +1,9 @@
+class Mdm::Route < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :session, :class_name => 'Mdm::Session'
+
+  ActiveSupport.run_load_hooks(:mdm_route, self)
+end

data/app/models/mdm/service.rb

@@ -0,0 +1,56 @@
+class Mdm::Service < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  after_save :normalize_host_os
+
+  #
+  # CONSTANTS
+  #
+
+  STATES = ['open', 'closed', 'filtered', 'unknown']
+
+  #
+  # Relations
+  #
+
+  has_many :creds, :dependent => :destroy, :class_name => 'Mdm::Cred'
+  has_many :exploited_hosts, :dependent => :destroy, :class_name => 'Mdm::ExploitedHost'
+  belongs_to :host, :class_name => 'Mdm::Host', :counter_cache => :service_count
+  has_many :notes, :dependent => :destroy, :class_name => 'Mdm::Note'
+  has_many :vulns, :dependent => :destroy, :class_name => 'Mdm::Vuln'
+  has_many :web_sites, :dependent => :destroy, :class_name => 'Mdm::WebSite'
+
+  #
+  # Through :web_sites
+  #
+  has_many :web_pages, :through => :web_sites, :class_name => 'Mdm::WebPage'
+  has_many :web_forms, :through => :web_sites, :class_name => 'Mdm::WebForm'
+  has_many :web_vulns, :through => :web_sites, :class_name => 'Mdm::WebVuln'
+
+  #
+  # Scopes
+  #
+
+  scope :inactive, where("services.state != 'open'")
+  scope :with_state, lambda { |a_state|  where("services.state = ?", a_state)}
+  scope :search, lambda { |*args|
+    where([
+              "services.name ILIKE ? OR " +
+                  "services.info ILIKE ? OR " +
+                  "services.proto ILIKE ? OR " +
+                  "services.port = ? ",
+              "%#{args[0]}%", "%#{args[0]}%", "%#{args[0]}%", (args[0].to_i > 0) ? args[0].to_i : 99999
+          ])
+  }
+
+  def normalize_host_os
+    if info_changed?
+      host.normalize_os
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_service, self)
+end
+

data/app/models/mdm/session.rb

@@ -0,0 +1,48 @@
+class Mdm::Session < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :stop
+
+  #
+  # Relations
+  #
+
+  has_many :events, :class_name => 'Mdm::SessionEvent', :order => 'created_at', :dependent => :delete_all
+  belongs_to :host, :class_name => 'Mdm::Host'
+  has_many :routes, :class_name => 'Mdm::Route', :dependent => :delete_all
+
+  #
+  # Through :host
+  #
+  has_one :workspace, :through => :host, :class_name => 'Mdm::Workspace'
+
+  #
+  # Scopes
+  #
+
+  scope :alive, where('closed_at IS NULL')
+  scope :dead, where('closed_at IS NOT NULL')
+  scope :upgradeable, where("closed_at IS NULL AND stype = 'shell' and platform ILIKE '%win%'")
+
+  #
+  # Serializations
+  #
+
+  serialize :datastore, ::MetasploitDataModels::Base64Serializer.new
+
+  def upgradeable?
+    (self.platform =~ /win/ and self.stype == 'shell')
+  end
+
+  private
+
+  def stop
+    c = Pro::Client.get rescue nil
+    # ignore exceptions (XXX - ideally, stopped an already-stopped session wouldn't throw XMLRPCException)
+    c.session_stop(self.local_id) rescue nil
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_session, self)
+end

data/app/models/mdm/session_event.rb

@@ -0,0 +1,9 @@
+class Mdm::SessionEvent < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :session, :class_name => 'Mdm::Session'
+
+  ActiveSupport.run_load_hooks(:mdm_session_event, self)
+end

data/app/models/mdm/tag.rb

@@ -0,0 +1,46 @@
+class Mdm::Tag < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :cleanup_hosts
+
+  #
+  # Relations
+  #
+
+  has_many :hosts_tags, :class_name => 'Mdm::HostTag'
+  belongs_to :user, :class_name => 'Mdm::User'
+
+  #
+  # Through :hosts_tags
+  #
+  has_many :hosts, :through => :hosts_tags, :class_name => 'Mdm::Host'
+
+
+  #
+  # Validations
+  #
+
+  validates :desc,
+            :length => {
+                :maximum => ((8 * (2 ** 10)) - 1),
+                :message => "desc must be less than 8k."
+            }
+  validates :name,
+            :format => {
+                :with => /^[A-Za-z0-9\x2e\x2d_]+$/, :message => "must be alphanumeric, dots, dashes, or underscores"
+            },
+            :presence => true
+
+  def cleanup_hosts
+    # Clean up association table records
+    Mdm::HostTag.delete_all("tag_id = #{self.id}")
+  end
+
+  def to_s
+    name
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_tag, self)
+end

data/app/models/mdm/task.rb

@@ -0,0 +1,41 @@
+class Mdm::Task < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => "Mdm::Workspace"
+
+  #
+  # Scopes
+  #
+
+  scope :running, order( "created_at DESC" ).where("completed_at IS NULL")
+
+  #
+  # Serializations
+  #
+
+  serialize :options, MetasploitDataModels::Base64Serializer.new
+  serialize :result, MetasploitDataModels::Base64Serializer.new
+  serialize :settings, MetasploitDataModels::Base64Serializer.new
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.task_delete_log(self[:id]) if c
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_task, self)
+end
+