metasploit_data_models 0.6.13

data/app/models/mdm/host_detail.rb

@@ -0,0 +1,15 @@
+class Mdm::HostDetail < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host', :counter_cache => :host_detail_count
+
+  #
+  # Validations
+  #
+
+  validates :host_id, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_host_detail, self)
+end

data/app/models/mdm/host_tag.rb

@@ -0,0 +1,13 @@
+class Mdm::HostTag < ActiveRecord::Base
+  self.table_name = "hosts_tags"
+
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host'
+  belongs_to :tag, :class_name => 'Mdm::Tag'
+
+  ActiveSupport.run_load_hooks(:mdm_host_tag, self)
+end
+

data/app/models/mdm/imported_cred.rb

@@ -0,0 +1,10 @@
+class Mdm::ImportedCred < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => "Mdm::Workspace"
+
+  ActiveSupport.run_load_hooks(:mdm_imported_cred, self)
+end
+

data/app/models/mdm/listener.rb

@@ -0,0 +1,24 @@
+class Mdm::Listener < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :task, :class_name => 'Mdm::Task'
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Serializations
+  #
+
+  serialize :options, MetasploitDataModels::Base64Serializer.new
+
+  #
+  # Validations
+  #
+
+  validates :address, :ip_format => true, :presence => true
+  validates :port, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_listener, self)
+end
+

data/app/models/mdm/loot.rb

@@ -0,0 +1,63 @@
+class Mdm::Loot < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # CONSTANTS
+  #
+
+  RELATIVE_SEARCH_FIELDS = [
+      'ltype',
+      'name',
+      'info',
+      'data'
+  ]
+
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host'
+  belongs_to :service, :class_name => 'Mdm::Service'
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Scopes
+  #
+
+  scope :search, lambda { |*args|
+    # @todo replace with AREL
+    terms = RELATIVE_SEARCH_FIELDS.collect { |relative_field|
+      "loots.#{relative_field} ILIKE ?"
+    }
+    disjunction = terms.join(' OR ')
+    formatted_parameter = "%#{args[0]}%"
+    parameters = [formatted_parameter] * RELATIVE_SEARCH_FIELDS.length
+    conditions = [disjunction] + parameters
+
+    where(conditions)
+  }
+
+  #
+  # Serializations
+  #
+
+  serialize :data, MetasploitDataModels::Base64Serializer.new
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.loot_delete_file(self[:id])
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_loot, self)
+end
+

data/app/models/mdm/macro.rb

@@ -0,0 +1,20 @@
+class Mdm::Macro < ActiveRecord::Base
+  extend MetasploitDataModels::SerializedPrefs
+
+  #
+  # Serialization
+  #
+
+  serialize :actions, MetasploitDataModels::Base64Serializer.new
+  serialize :prefs, MetasploitDataModels::Base64Serializer.new
+  serialized_prefs_attr_accessor :max_time
+
+  #
+  # Validations
+  #
+
+  validates :name, :presence => true, :format => /^[^'|"]+$/
+
+  ActiveSupport.run_load_hooks(:mdm_macro, self)
+end
+

data/app/models/mdm/mod_ref.rb

@@ -0,0 +1,3 @@
+class Mdm::ModRef < ActiveRecord::Base
+  ActiveSupport.run_load_hooks(:mdm_mod_ref, self)
+end

data/app/models/mdm/module_action.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleAction < ActiveRecord::Base
+  self.table_name = 'module_actions'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_action, self)
+end

data/app/models/mdm/module_arch.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleArch < ActiveRecord::Base
+  self.table_name = 'module_archs'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_arch, self)
+end

data/app/models/mdm/module_author.rb

@@ -0,0 +1,25 @@
+class Mdm::ModuleAuthor < ActiveRecord::Base
+  self.table_name = 'module_authors'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :email
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_author, self)
+end

data/app/models/mdm/module_detail.rb

@@ -0,0 +1,59 @@
+class Mdm::ModuleDetail < ActiveRecord::Base
+  self.table_name = 'module_details'
+
+  #
+  # Associations
+  #
+
+  has_many :actions,   :class_name => 'Mdm::ModuleAction',   :dependent => :destroy, :source => :module_action
+  has_many :archs,     :class_name => 'Mdm::ModuleArch',     :dependent => :destroy, :source => :module_arch
+  has_many :authors,   :class_name => 'Mdm::ModuleAuthor',   :dependent => :destroy, :source => :module_author
+  has_many :mixins,    :class_name => 'Mdm::ModuleMixin',    :dependent => :destroy, :source => :module_mixin
+  has_many :platforms, :class_name => 'Mdm::ModulePlatform', :dependent => :destroy, :source => :module_platform
+  has_many :refs,      :class_name => 'Mdm::ModuleRef',      :dependent => :destroy, :source => :module_ref
+  has_many :targets,   :class_name => 'Mdm::ModuleTarget',   :dependent => :destroy, :source => :module_target
+
+  #
+  # Validations
+  #
+
+  validates :refname,   :presence => true
+
+  validates_associated :actions
+  validates_associated :archs
+  validates_associated :authors
+  validates_associated :mixins
+  validates_associated :platforms
+  validates_associated :refs
+  validates_associated :targets
+
+  def add_action(name)
+    self.actions.build(:name => name).save
+  end
+
+  def add_arch(name)
+    self.archs.build(:name => name).save
+  end
+
+  def add_author(name, email=nil)
+    self.authors.build(:name => name, :email => email).save
+  end
+
+  def add_mixin(name)
+    self.mixins.build(:name => name).save
+  end
+
+  def add_platform(name)
+    self.platforms.build(:name => name).save
+  end
+
+  def add_ref(name)
+    self.refs.build(:name => name).save
+  end
+
+  def add_target(index, name)
+    self.targets.build(:index => index, :name => name).save
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_module_detail, self)
+end

data/app/models/mdm/module_mixin.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleMixin < ActiveRecord::Base
+  self.table_name = 'module_mixins'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validation
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_mixin, self)
+end

data/app/models/mdm/module_platform.rb

@@ -0,0 +1,24 @@
+class Mdm::ModulePlatform < ActiveRecord::Base
+  self.table_name = 'module_platforms'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_platform, self)
+end

data/app/models/mdm/module_ref.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleRef < ActiveRecord::Base
+  self.table_name = 'module_refs'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_ref, self)
+end

data/app/models/mdm/module_target.rb

@@ -0,0 +1,26 @@
+class Mdm::ModuleTarget < ActiveRecord::Base
+  self.table_name = 'module_targets'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :index
+  attr_accessible :name
+
+  #
+  # Validators
+  #
+
+  validates :index, :presence => true
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_target, self)
+end

data/app/models/mdm/nexpose_console.rb

@@ -0,0 +1,20 @@
+class Mdm::NexposeConsole < ActiveRecord::Base
+  #
+  # Serializations
+  #
+
+  serialize :cached_sites, MetasploitDataModels::Base64Serializer.new
+
+  #
+  # Validations
+  #
+
+  validates :address, :presence => true
+  validates :name, :presence => true
+  validates :password, :presence => true
+  validates :port, :inclusion => {:in => 1..65535}
+  validates :username, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_nexpose_console, self)
+end
+

data/app/models/mdm/note.rb

@@ -0,0 +1,49 @@
+class Mdm::Note < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  after_save :normalize
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => "Mdm::Workspace"
+  belongs_to :host, :class_name => "Mdm::Host", :counter_cache => :note_count
+  belongs_to :service, :class_name => "Mdm::Service"
+
+  #
+  # Scopes
+  #
+
+  scope :flagged, where('critical = true AND seen = false')
+
+  notes = self.arel_table
+  scope :visible, where(notes[:ntype].not_in(['web.form', 'web.url', 'web.vuln']))
+
+  scope :search, lambda { |*args|
+    where(["(data NOT ILIKE 'BAh7%' AND data LIKE ?)" +
+               "OR (data ILIKE 'BAh7%' AND decode(data, 'base64') LIKE ?)" +
+               "OR ntype ILIKE ?",
+           "%#{args[0]}%", "%#{args[0]}%", "%#{args[0]}%"
+          ])
+  }
+
+  #
+  # Serializations
+  #
+
+  serialize :data, ::MetasploitDataModels::Base64Serializer.new
+
+  private
+
+  def normalize
+    if data_changed? and ntype =~ /fingerprint/
+      host.normalize_os
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_note, self)
+end
+