metasploit_data_models 0.23.1 → 0.23.2

data/spec/app/models/metasploit_data_models/automatic_exploitation/match_spec.rb

@@ -0,0 +1,25 @@
+require 'spec_helper'
+
+describe MetasploitDataModels::AutomaticExploitation::Match do
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  describe "associations" do
+    describe "connecting to a Mdm::Module::Detail" do
+      let(:vuln){ FactoryGirl.create(:mdm_vuln) }
+      let(:module_detail){FactoryGirl.create(:mdm_module_detail)}
+
+      subject(:automatic_exploitation_match){ described_class.new }
+
+      before(:each ) do
+        automatic_exploitation_match.matchable = vuln
+        automatic_exploitation_match.module_fullname = module_detail.fullname
+        automatic_exploitation_match.save!
+      end
+
+      it 'should point to the Mdm::Module::Detail with a fullname corresponding to #module_fullname' do
+        expect(automatic_exploitation_match.module_detail).to eq(module_detail)
+      end
+
+    end
+  end
+end

data/spec/app/models/metasploit_data_models/automatic_exploitation/run_spec.rb

@@ -0,0 +1,40 @@
+require 'spec_helper'
+
+describe MetasploitDataModels::AutomaticExploitation::Run do
+  subject(:run) { FactoryGirl.create(:automatic_exploitation_run) }
+
+
+  describe "database" do
+    describe "columns" do
+      it { is_expected.to have_db_column(:workspace_id).of_type(:integer) }
+      it { is_expected.to have_db_index(:workspace_id) }
+      it { is_expected.to have_db_column(:user_id).of_type(:integer) }
+      it { is_expected.to have_db_index(:user_id) }
+    end
+  end
+
+  describe "associations" do
+    it { is_expected.to belong_to(:match_set).class_name('MetasploitDataModels::AutomaticExploitation::MatchSet') }
+    it { is_expected.to belong_to(:workspace).class_name('Mdm::Workspace') }
+    it { is_expected.to belong_to(:workspace).inverse_of(:automatic_exploitation_runs) }
+    it { is_expected.to belong_to(:user).class_name('Mdm::User') }
+    it { is_expected.to belong_to(:user).inverse_of(:automatic_exploitation_runs) }
+    it { is_expected.to have_many(:match_results) }
+  end
+
+  describe "destroying" do
+    describe "associated MatchResults" do
+      before(:each) do
+        match_set = FactoryGirl.create(:automatic_exploitation_match_set)
+        match = FactoryGirl.create(:automatic_exploitation_match, match_set: match_set)
+        run.match_set = match_set
+        FactoryGirl.create(:automatic_exploitation_match_result, match: match, run: run)
+      end
+
+      it 'should happen when you delete the Run' do
+        expect { run.destroy }.to change { MetasploitDataModels::AutomaticExploitation::MatchResult.count }.by(-1)
+      end
+    end
+
+  end
+end

data/spec/app/models/metasploit_data_models/module_run_spec.rb

@@ -0,0 +1,136 @@
+require 'spec_helper'
+
+describe MetasploitDataModels::ModuleRun do
+
+  subject(:module_run){FactoryGirl.build(:metasploit_data_models_module_run)}
+
+  context "database columns" do
+    it { is_expected.to have_db_column(:attempted_at).of_type(:datetime) }
+    it { is_expected.to have_db_column(:fail_detail).of_type(:text) }
+    it { is_expected.to have_db_column(:fail_reason).of_type(:string) }
+    it { is_expected.to have_db_column(:module_fullname).of_type(:text) }
+    it { is_expected.to have_db_column(:port).of_type(:integer) }
+    it { is_expected.to have_db_column(:proto).of_type(:string) }
+    it { is_expected.to have_db_column(:session_id).of_type(:integer) }
+    it { is_expected.to have_db_column(:status).of_type(:string) }
+    it { is_expected.to have_db_column(:trackable_id).of_type(:integer) }
+    it { is_expected.to have_db_column(:trackable_type).of_type(:string) }
+    it { is_expected.to have_db_column(:user_id).of_type(:integer) }
+    it { is_expected.to have_db_column(:username).of_type(:string) }
+  end
+
+  context "associations" do
+    it { is_expected.to belong_to(:user).class_name('Mdm::User') }
+    it { is_expected.to belong_to(:user).inverse_of(:module_runs) }
+    it { is_expected.to belong_to(:target_session).class_name('Mdm::Session') }
+    it { is_expected.to belong_to(:target_session).inverse_of(:target_module_runs) }
+    it { is_expected.to belong_to(:trackable) }
+    it { is_expected.to belong_to(:module_detail).class_name('Mdm::Module::Detail') }
+    it { is_expected.to belong_to(:module_detail).inverse_of(:module_runs) }
+    it { is_expected.to have_many(:loots).class_name('Mdm::Loot') }
+    it { is_expected.to have_many(:loots).inverse_of(:module_run) }
+    it { is_expected.to have_one(:spawned_session).class_name('Mdm::Session') }
+    it { is_expected.to have_one(:spawned_session).inverse_of(:originating_module_run) }
+  end
+
+  context "validations" do
+    describe "when a target_session is set on the module run" do
+      before(:each) do
+        module_run.target_session = FactoryGirl.build(:mdm_session)
+      end
+
+      context "when the module is an exploit" do
+        context "and that exploit IS NOT local" do
+          before(:each) do
+            module_run.module_fullname = 'exploit/windows/mah-crazy-exploit'
+          end
+
+          it { is_expected.to_not be_valid }
+        end
+
+        context "and that exploit IS local" do
+          before(:each) do
+            module_run.module_fullname = 'exploit/windows/local/mah-crazy-exploit'
+          end
+
+          it { is_expected.to be_valid }
+        end
+      end
+    end
+
+    describe "when a spawned_session is set on the module run" do
+      before(:each) do
+        module_run.spawned_session  = FactoryGirl.build(:mdm_session)
+      end
+
+      context "when the module is not an exploit" do
+
+        context "and it IS NOT a login scanner" do
+          before(:each) do
+            module_run.module_fullname = 'post/multi/gather/steal-minecraft-maps'
+          end
+
+          it { is_expected.to_not be_valid }
+        end
+
+        context "and it IS a login scanner" do
+          before(:each) do
+            module_run.module_fullname = 'auxiliary/scanner/ssh/ssh_login'
+          end
+
+          it { is_expected.to be_valid }
+        end
+      end
+    end
+
+    describe "attempted_at" do
+      before(:each){ module_run.attempted_at = nil }
+
+      it { is_expected.to_not be_valid } 
+    end
+
+    describe "content information" do
+      context "when there is no module_name" do
+        before(:each) do
+          module_run.module_fullname = nil
+        end
+
+        it { is_expected.to_not be_valid }
+      end
+    end
+
+
+    describe "status" do
+      describe "invalidity" do
+        before(:each) do
+          module_run.status = "invalid nonsense"
+        end
+
+        it { expect(module_run).to_not be_valid}
+      end
+
+      describe "validity" do
+        context "when the module run succeeded" do
+          before(:each){ module_run.status = MetasploitDataModels::ModuleRun::SUCCEED}
+
+          it{ expect(module_run).to be_valid }
+        end
+
+        context "when the module run went normally but failed" do
+          before(:each){ module_run.status = MetasploitDataModels::ModuleRun::FAIL}
+
+          it{ expect(module_run).to be_valid }
+        end
+
+        context "when the module run errored out" do
+          before(:each){ module_run.status = MetasploitDataModels::ModuleRun::ERROR}
+
+          it{ expect(module_run).to be_valid }
+        end
+
+      end
+
+    end
+  end
+end
+

data/spec/dummy/db/structure.sql

@@ -60,6 +60,141 @@ CREATE SEQUENCE api_keys_id_seq
 ALTER SEQUENCE api_keys_id_seq OWNED BY api_keys.id;
 
 
+--
+-- Name: automatic_exploitation_match_results; Type: TABLE; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE TABLE automatic_exploitation_match_results (
+    id integer NOT NULL,
+    match_id integer,
+    run_id integer,
+    state character varying(255) NOT NULL,
+    created_at timestamp without time zone NOT NULL,
+    updated_at timestamp without time zone NOT NULL
+);
+
+
+--
+-- Name: automatic_exploitation_match_results_id_seq; Type: SEQUENCE; Schema: public; Owner: -
+--
+
+CREATE SEQUENCE automatic_exploitation_match_results_id_seq
+    START WITH 1
+    INCREMENT BY 1
+    NO MINVALUE
+    NO MAXVALUE
+    CACHE 1;
+
+
+--
+-- Name: automatic_exploitation_match_results_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: -
+--
+
+ALTER SEQUENCE automatic_exploitation_match_results_id_seq OWNED BY automatic_exploitation_match_results.id;
+
+
+--
+-- Name: automatic_exploitation_match_sets; Type: TABLE; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE TABLE automatic_exploitation_match_sets (
+    id integer NOT NULL,
+    workspace_id integer,
+    user_id integer,
+    created_at timestamp without time zone NOT NULL,
+    updated_at timestamp without time zone NOT NULL
+);
+
+
+--
+-- Name: automatic_exploitation_match_sets_id_seq; Type: SEQUENCE; Schema: public; Owner: -
+--
+
+CREATE SEQUENCE automatic_exploitation_match_sets_id_seq
+    START WITH 1
+    INCREMENT BY 1
+    NO MINVALUE
+    NO MAXVALUE
+    CACHE 1;
+
+
+--
+-- Name: automatic_exploitation_match_sets_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: -
+--
+
+ALTER SEQUENCE automatic_exploitation_match_sets_id_seq OWNED BY automatic_exploitation_match_sets.id;
+
+
+--
+-- Name: automatic_exploitation_matches; Type: TABLE; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE TABLE automatic_exploitation_matches (
+    id integer NOT NULL,
+    module_detail_id integer,
+    state character varying(255),
+    nexpose_data_vulnerability_definition_id integer,
+    created_at timestamp without time zone NOT NULL,
+    updated_at timestamp without time zone NOT NULL,
+    match_set_id integer,
+    matchable_type character varying(255),
+    matchable_id integer,
+    module_fullname text
+);
+
+
+--
+-- Name: automatic_exploitation_matches_id_seq; Type: SEQUENCE; Schema: public; Owner: -
+--
+
+CREATE SEQUENCE automatic_exploitation_matches_id_seq
+    START WITH 1
+    INCREMENT BY 1
+    NO MINVALUE
+    NO MAXVALUE
+    CACHE 1;
+
+
+--
+-- Name: automatic_exploitation_matches_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: -
+--
+
+ALTER SEQUENCE automatic_exploitation_matches_id_seq OWNED BY automatic_exploitation_matches.id;
+
+
+--
+-- Name: automatic_exploitation_runs; Type: TABLE; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE TABLE automatic_exploitation_runs (
+    id integer NOT NULL,
+    workspace_id integer,
+    user_id integer,
+    match_set_id integer,
+    created_at timestamp without time zone NOT NULL,
+    updated_at timestamp without time zone NOT NULL
+);
+
+
+--
+-- Name: automatic_exploitation_runs_id_seq; Type: SEQUENCE; Schema: public; Owner: -
+--
+
+CREATE SEQUENCE automatic_exploitation_runs_id_seq
+    START WITH 1
+    INCREMENT BY 1
+    NO MINVALUE
+    NO MAXVALUE
+    CACHE 1;
+
+
+--
+-- Name: automatic_exploitation_runs_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: -
+--
+
+ALTER SEQUENCE automatic_exploitation_runs_id_seq OWNED BY automatic_exploitation_runs.id;
+
+
 --
 -- Name: clients; Type: TABLE; Schema: public; Owner: -; Tablespace: 
 --
@@ -419,7 +554,8 @@ CREATE TABLE loots (
     updated_at timestamp without time zone NOT NULL,
     content_type character varying(255),
     name text,
-    info text
+    info text,
+    module_run_id integer
 );
 
 
@@ -732,6 +868,48 @@ CREATE SEQUENCE module_refs_id_seq
 ALTER SEQUENCE module_refs_id_seq OWNED BY module_refs.id;
 
 
+--
+-- Name: module_runs; Type: TABLE; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE TABLE module_runs (
+    id integer NOT NULL,
+    attempted_at timestamp without time zone,
+    fail_detail text,
+    fail_reason character varying(255),
+    module_fullname text,
+    port integer,
+    proto character varying(255),
+    session_id integer,
+    status character varying(255),
+    trackable_id integer,
+    trackable_type character varying(255),
+    user_id integer,
+    username character varying(255),
+    created_at timestamp without time zone NOT NULL,
+    updated_at timestamp without time zone NOT NULL
+);
+
+
+--
+-- Name: module_runs_id_seq; Type: SEQUENCE; Schema: public; Owner: -
+--
+
+CREATE SEQUENCE module_runs_id_seq
+    START WITH 1
+    INCREMENT BY 1
+    NO MINVALUE
+    NO MAXVALUE
+    CACHE 1;
+
+
+--
+-- Name: module_runs_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: -
+--
+
+ALTER SEQUENCE module_runs_id_seq OWNED BY module_runs.id;
+
+
 --
 -- Name: module_targets; Type: TABLE; Schema: public; Owner: -; Tablespace: 
 --
@@ -1109,7 +1287,8 @@ CREATE TABLE sessions (
     closed_at timestamp without time zone,
     close_reason character varying(255),
     local_id integer,
-    last_seen timestamp without time zone
+    last_seen timestamp without time zone,
+    module_run_id integer
 );
 
 
@@ -1819,6 +1998,34 @@ ALTER SEQUENCE workspaces_id_seq OWNED BY workspaces.id;
 ALTER TABLE ONLY api_keys ALTER COLUMN id SET DEFAULT nextval('api_keys_id_seq'::regclass);
 
 
+--
+-- Name: id; Type: DEFAULT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY automatic_exploitation_match_results ALTER COLUMN id SET DEFAULT nextval('automatic_exploitation_match_results_id_seq'::regclass);
+
+
+--
+-- Name: id; Type: DEFAULT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY automatic_exploitation_match_sets ALTER COLUMN id SET DEFAULT nextval('automatic_exploitation_match_sets_id_seq'::regclass);
+
+
+--
+-- Name: id; Type: DEFAULT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY automatic_exploitation_matches ALTER COLUMN id SET DEFAULT nextval('automatic_exploitation_matches_id_seq'::regclass);
+
+
+--
+-- Name: id; Type: DEFAULT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY automatic_exploitation_runs ALTER COLUMN id SET DEFAULT nextval('automatic_exploitation_runs_id_seq'::regclass);
+
+
 --
 -- Name: id; Type: DEFAULT; Schema: public; Owner: -
 --
@@ -1952,6 +2159,13 @@ ALTER TABLE ONLY module_platforms ALTER COLUMN id SET DEFAULT nextval('module_pl
 ALTER TABLE ONLY module_refs ALTER COLUMN id SET DEFAULT nextval('module_refs_id_seq'::regclass);
 
 
+--
+-- Name: id; Type: DEFAULT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY module_runs ALTER COLUMN id SET DEFAULT nextval('module_runs_id_seq'::regclass);
+
+
 --
 -- Name: id; Type: DEFAULT; Schema: public; Owner: -
 --
@@ -2163,6 +2377,38 @@ ALTER TABLE ONLY api_keys
     ADD CONSTRAINT api_keys_pkey PRIMARY KEY (id);
 
 
+--
+-- Name: automatic_exploitation_match_results_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
+--
+
+ALTER TABLE ONLY automatic_exploitation_match_results
+    ADD CONSTRAINT automatic_exploitation_match_results_pkey PRIMARY KEY (id);
+
+
+--
+-- Name: automatic_exploitation_match_sets_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
+--
+
+ALTER TABLE ONLY automatic_exploitation_match_sets
+    ADD CONSTRAINT automatic_exploitation_match_sets_pkey PRIMARY KEY (id);
+
+
+--
+-- Name: automatic_exploitation_matches_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
+--
+
+ALTER TABLE ONLY automatic_exploitation_matches
+    ADD CONSTRAINT automatic_exploitation_matches_pkey PRIMARY KEY (id);
+
+
+--
+-- Name: automatic_exploitation_runs_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
+--
+
+ALTER TABLE ONLY automatic_exploitation_runs
+    ADD CONSTRAINT automatic_exploitation_runs_pkey PRIMARY KEY (id);
+
+
 --
 -- Name: clients_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
 --
@@ -2315,6 +2561,14 @@ ALTER TABLE ONLY module_refs
     ADD CONSTRAINT module_refs_pkey PRIMARY KEY (id);
 
 
+--
+-- Name: module_runs_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
+--
+
+ALTER TABLE ONLY module_runs
+    ADD CONSTRAINT module_runs_pkey PRIMARY KEY (id);
+
+
 --
 -- Name: module_targets_pkey; Type: CONSTRAINT; Schema: public; Owner: -; Tablespace: 
 --
@@ -2547,6 +2801,69 @@ ALTER TABLE ONLY workspaces
     ADD CONSTRAINT workspaces_pkey PRIMARY KEY (id);
 
 
+--
+-- Name: index_automatic_exploitation_match_results_on_match_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_match_results_on_match_id ON automatic_exploitation_match_results USING btree (match_id);
+
+
+--
+-- Name: index_automatic_exploitation_match_results_on_run_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_match_results_on_run_id ON automatic_exploitation_match_results USING btree (run_id);
+
+
+--
+-- Name: index_automatic_exploitation_match_sets_on_user_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_match_sets_on_user_id ON automatic_exploitation_match_sets USING btree (user_id);
+
+
+--
+-- Name: index_automatic_exploitation_match_sets_on_workspace_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_match_sets_on_workspace_id ON automatic_exploitation_match_sets USING btree (workspace_id);
+
+
+--
+-- Name: index_automatic_exploitation_matches_on_module_fullname; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_matches_on_module_fullname ON automatic_exploitation_matches USING btree (module_fullname);
+
+
+--
+-- Name: index_automatic_exploitation_matches_on_ref_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_matches_on_ref_id ON automatic_exploitation_matches USING btree (module_detail_id);
+
+
+--
+-- Name: index_automatic_exploitation_runs_on_match_set_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_runs_on_match_set_id ON automatic_exploitation_runs USING btree (match_set_id);
+
+
+--
+-- Name: index_automatic_exploitation_runs_on_user_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_runs_on_user_id ON automatic_exploitation_runs USING btree (user_id);
+
+
+--
+-- Name: index_automatic_exploitation_runs_on_workspace_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_automatic_exploitation_runs_on_workspace_id ON automatic_exploitation_runs USING btree (workspace_id);
+
+
 --
 -- Name: index_hosts_on_name; Type: INDEX; Schema: public; Owner: -; Tablespace: 
 --
@@ -2589,6 +2906,13 @@ CREATE INDEX index_hosts_on_state ON hosts USING btree (state);
 CREATE UNIQUE INDEX index_hosts_on_workspace_id_and_address ON hosts USING btree (workspace_id, address);
 
 
+--
+-- Name: index_loots_on_module_run_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_loots_on_module_run_id ON loots USING btree (module_run_id);
+
+
 --
 -- Name: index_module_actions_on_module_detail_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
 --
@@ -2666,6 +2990,20 @@ CREATE INDEX index_module_refs_on_module_detail_id ON module_refs USING btree (d
 CREATE INDEX index_module_refs_on_name ON module_refs USING btree (name);
 
 
+--
+-- Name: index_module_runs_on_session_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_module_runs_on_session_id ON module_runs USING btree (session_id);
+
+
+--
+-- Name: index_module_runs_on_user_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_module_runs_on_user_id ON module_runs USING btree (user_id);
+
+
 --
 -- Name: index_module_targets_on_module_detail_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
 --
@@ -2729,6 +3067,13 @@ CREATE INDEX index_services_on_proto ON services USING btree (proto);
 CREATE INDEX index_services_on_state ON services USING btree (state);
 
 
+--
+-- Name: index_sessions_on_module_run_id; Type: INDEX; Schema: public; Owner: -; Tablespace: 
+--
+
+CREATE INDEX index_sessions_on_module_run_id ON sessions USING btree (module_run_id);
+
+
 --
 -- Name: index_vulns_on_name; Type: INDEX; Schema: public; Owner: -; Tablespace: 
 --
@@ -3000,6 +3345,18 @@ INSERT INTO schema_migrations (version) VALUES ('20130604145732');
 
 INSERT INTO schema_migrations (version) VALUES ('20130717150737');
 
+INSERT INTO schema_migrations (version) VALUES ('20131002004641');
+
+INSERT INTO schema_migrations (version) VALUES ('20131002164449');
+
+INSERT INTO schema_migrations (version) VALUES ('20131008213344');
+
+INSERT INTO schema_migrations (version) VALUES ('20131011184338');
+
+INSERT INTO schema_migrations (version) VALUES ('20131017150735');
+
+INSERT INTO schema_migrations (version) VALUES ('20131021185657');
+
 INSERT INTO schema_migrations (version) VALUES ('20140905031549');
 
 INSERT INTO schema_migrations (version) VALUES ('20150112203945');
@@ -3010,6 +3367,16 @@ INSERT INTO schema_migrations (version) VALUES ('20150209195939');
 
 INSERT INTO schema_migrations (version) VALUES ('20150212214222');
 
+INSERT INTO schema_migrations (version) VALUES ('20150219173821');
+
+INSERT INTO schema_migrations (version) VALUES ('20150219215039');
+
+INSERT INTO schema_migrations (version) VALUES ('20150226151459');
+
+INSERT INTO schema_migrations (version) VALUES ('20150312155312');
+
+INSERT INTO schema_migrations (version) VALUES ('20150326183742');
+
 INSERT INTO schema_migrations (version) VALUES ('21');
 
 INSERT INTO schema_migrations (version) VALUES ('22');