metasploit_data_models 0.6.13

data/app/models/mdm/profile.rb

@@ -0,0 +1,9 @@
+class Mdm::Profile < ActiveRecord::Base
+  #
+  # Serializations
+  #
+  serialize :settings, MetasploitDataModels::Base64Serializer.new
+
+  ActiveSupport.run_load_hooks(:mdm_profile, self)
+end
+

data/app/models/mdm/ref.rb

@@ -0,0 +1,14 @@
+class Mdm::Ref < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  has_many :vulns_refs, :class_name => 'Mdm::VulnRef'
+
+  #
+  # Through :vuln_refs
+  #
+  has_many :vulns, :class_name => 'Mdm::Vuln', :through => :vulns_refs
+
+  ActiveSupport.run_load_hooks(:mdm_ref, self)
+end

data/app/models/mdm/report.rb

@@ -0,0 +1,50 @@
+class Mdm::Report < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Scopes
+  #
+
+  scope :flagged, where('reports.downloaded_at is NULL')
+
+  #
+  # Serializations
+  #
+
+  serialize :options, MetasploitDataModels::Base64Serializer.new
+
+  #
+  # Validations
+  #
+
+  validates :name,
+            :format => {
+                :allow_blank => true,
+                :message => "name must consist of A-Z, 0-9, space, dot, underscore, or dash",
+                :with => /^[A-Za-z0-9\x20\x2e\x2d\x5f\x5c]+$/
+            }
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.report_delete_file(self[:id])
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_report, self)
+end
+

data/app/models/mdm/report_template.rb

@@ -0,0 +1,27 @@
+class Mdm::ReportTemplate < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.report_template_delete_file(self[:id])
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_report_template, self)
+end
+

data/app/models/mdm/route.rb

@@ -0,0 +1,9 @@
+class Mdm::Route < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :session, :class_name => 'Mdm::Session'
+
+  ActiveSupport.run_load_hooks(:mdm_route, self)
+end

data/app/models/mdm/service.rb

@@ -0,0 +1,56 @@
+class Mdm::Service < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  after_save :normalize_host_os
+
+  #
+  # CONSTANTS
+  #
+
+  STATES = ['open', 'closed', 'filtered', 'unknown']
+
+  #
+  # Relations
+  #
+
+  has_many :creds, :dependent => :destroy, :class_name => 'Mdm::Cred'
+  has_many :exploited_hosts, :dependent => :destroy, :class_name => 'Mdm::ExploitedHost'
+  belongs_to :host, :class_name => 'Mdm::Host', :counter_cache => :service_count
+  has_many :notes, :dependent => :destroy, :class_name => 'Mdm::Note'
+  has_many :vulns, :dependent => :destroy, :class_name => 'Mdm::Vuln'
+  has_many :web_sites, :dependent => :destroy, :class_name => 'Mdm::WebSite'
+
+  #
+  # Through :web_sites
+  #
+  has_many :web_pages, :through => :web_sites, :class_name => 'Mdm::WebPage'
+  has_many :web_forms, :through => :web_sites, :class_name => 'Mdm::WebForm'
+  has_many :web_vulns, :through => :web_sites, :class_name => 'Mdm::WebVuln'
+
+  #
+  # Scopes
+  #
+
+  scope :inactive, where("services.state != 'open'")
+  scope :with_state, lambda { |a_state|  where("services.state = ?", a_state)}
+  scope :search, lambda { |*args|
+    where([
+              "services.name ILIKE ? OR " +
+                  "services.info ILIKE ? OR " +
+                  "services.proto ILIKE ? OR " +
+                  "services.port = ? ",
+              "%#{args[0]}%", "%#{args[0]}%", "%#{args[0]}%", (args[0].to_i > 0) ? args[0].to_i : 99999
+          ])
+  }
+
+  def normalize_host_os
+    if info_changed?
+      host.normalize_os
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_service, self)
+end
+

data/app/models/mdm/session.rb

@@ -0,0 +1,48 @@
+class Mdm::Session < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :stop
+
+  #
+  # Relations
+  #
+
+  has_many :events, :class_name => 'Mdm::SessionEvent', :order => 'created_at', :dependent => :delete_all
+  belongs_to :host, :class_name => 'Mdm::Host'
+  has_many :routes, :class_name => 'Mdm::Route', :dependent => :delete_all
+
+  #
+  # Through :host
+  #
+  has_one :workspace, :through => :host, :class_name => 'Mdm::Workspace'
+
+  #
+  # Scopes
+  #
+
+  scope :alive, where('closed_at IS NULL')
+  scope :dead, where('closed_at IS NOT NULL')
+  scope :upgradeable, where("closed_at IS NULL AND stype = 'shell' and platform ILIKE '%win%'")
+
+  #
+  # Serializations
+  #
+
+  serialize :datastore, ::MetasploitDataModels::Base64Serializer.new
+
+  def upgradeable?
+    (self.platform =~ /win/ and self.stype == 'shell')
+  end
+
+  private
+
+  def stop
+    c = Pro::Client.get rescue nil
+    # ignore exceptions (XXX - ideally, stopped an already-stopped session wouldn't throw XMLRPCException)
+    c.session_stop(self.local_id) rescue nil
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_session, self)
+end

data/app/models/mdm/session_event.rb

@@ -0,0 +1,9 @@
+class Mdm::SessionEvent < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :session, :class_name => 'Mdm::Session'
+
+  ActiveSupport.run_load_hooks(:mdm_session_event, self)
+end

data/app/models/mdm/tag.rb

@@ -0,0 +1,46 @@
+class Mdm::Tag < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :cleanup_hosts
+
+  #
+  # Relations
+  #
+
+  has_many :hosts_tags, :class_name => 'Mdm::HostTag'
+  belongs_to :user, :class_name => 'Mdm::User'
+
+  #
+  # Through :hosts_tags
+  #
+  has_many :hosts, :through => :hosts_tags, :class_name => 'Mdm::Host'
+
+
+  #
+  # Validations
+  #
+
+  validates :desc,
+            :length => {
+                :maximum => ((8 * (2 ** 10)) - 1),
+                :message => "desc must be less than 8k."
+            }
+  validates :name,
+            :format => {
+                :with => /^[A-Za-z0-9\x2e\x2d_]+$/, :message => "must be alphanumeric, dots, dashes, or underscores"
+            },
+            :presence => true
+
+  def cleanup_hosts
+    # Clean up association table records
+    Mdm::HostTag.delete_all("tag_id = #{self.id}")
+  end
+
+  def to_s
+    name
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_tag, self)
+end

data/app/models/mdm/task.rb

@@ -0,0 +1,41 @@
+class Mdm::Task < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => "Mdm::Workspace"
+
+  #
+  # Scopes
+  #
+
+  scope :running, order( "created_at DESC" ).where("completed_at IS NULL")
+
+  #
+  # Serializations
+  #
+
+  serialize :options, MetasploitDataModels::Base64Serializer.new
+  serialize :result, MetasploitDataModels::Base64Serializer.new
+  serialize :settings, MetasploitDataModels::Base64Serializer.new
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.task_delete_log(self[:id]) if c
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_task, self)
+end
+

data/app/models/mdm/user.rb

@@ -0,0 +1,25 @@
+class Mdm::User < ActiveRecord::Base
+  extend MetasploitDataModels::SerializedPrefs
+
+  #
+  # Relations
+  #
+
+  has_many :owned_workspaces, :foreign_key => 'owner_id', :class_name => 'Mdm::Workspace'
+  has_many :tags, :class_name => 'Mdm::Tag'
+  has_and_belongs_to_many :workspaces, :join_table => 'workspace_members', :uniq => true, :class_name => 'Mdm::Workspace'
+
+  #
+  # Serialziations
+  #
+
+  serialize :prefs, MetasploitDataModels::Base64Serializer.new
+
+  serialized_prefs_attr_accessor :nexpose_host, :nexpose_port, :nexpose_user, :nexpose_pass, :nexpose_creds_type, :nexpose_creds_user, :nexpose_creds_pass
+  serialized_prefs_attr_accessor :http_proxy_host, :http_proxy_port, :http_proxy_user, :http_proxy_pass
+  serialized_prefs_attr_accessor :time_zone, :session_key
+  serialized_prefs_attr_accessor :last_login_address # specifically NOT last_login_ip to prevent confusion with AuthLogic magic columns (which dont work for serialized fields)
+
+  ActiveSupport.run_load_hooks(:mdm_user, self)
+end
+

data/app/models/mdm/vuln.rb

@@ -0,0 +1,60 @@
+class Mdm::Vuln < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  after_update :save_refs
+
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host', :counter_cache => :vuln_count
+  belongs_to :service, :class_name => 'Mdm::Service', :foreign_key => :service_id
+  has_many :vuln_attempts,  :dependent => :destroy, :class_name => 'Mdm::VulnAttempt'
+  has_many :vuln_details,  :dependent => :destroy, :class_name => 'Mdm::VulnDetail'
+  has_many :vulns_refs, :class_name => 'Mdm::VulnRef'
+
+  #
+  # Through :vuln_refs
+  #
+  has_many :refs, :through => :vulns_refs, :class_name => 'Mdm::Ref'
+
+  #
+  # Scopes
+  #
+
+  scope :search, lambda { |*args|
+    where(
+        [
+            '(vulns.name ILIKE ? or vulns.info ILIKE ? or refs.name ILIKE ?)',
+            "%#{args[0]}%",
+            "%#{args[0]}%",
+            "%#{args[0]}%"
+        ]
+    ).joins(
+        'LEFT OUTER JOIN vulns_refs ON vulns_refs.vuln_id=vulns.id LEFT OUTER JOIN refs ON refs.id=vulns_refs.ref_id'
+    )
+  }
+
+  #
+  # Validations
+  #
+
+  validates :name, :presence => true
+  validates_associated :refs
+
+  private
+
+  def before_destroy
+    Mdm::VulnRef.delete_all('vuln_id = ?', self.id)
+    Mdm::VulnDetail.delete_all('vuln_id = ?', self.id)
+    Mdm::VulnAttempt.delete_all('vuln_id = ?', self.id)
+  end
+
+  def save_refs
+    refs.each { |ref| ref.save(:validate => false) }
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_vuln, self)
+end

data/app/models/mdm/vuln_attempt.rb

@@ -0,0 +1,15 @@
+class Mdm::VulnAttempt < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :vuln, :class_name => 'Mdm::Vuln', :counter_cache => :vuln_attempt_count
+
+  #
+  # Validations
+  #
+
+  validates :vuln_id, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_vuln_attempt, self)
+end

data/app/models/mdm/vuln_detail.rb

@@ -0,0 +1,14 @@
+class Mdm::VulnDetail < ActiveRecord::Base
+  #
+  # Relations
+  #
+  belongs_to :vuln, :class_name => 'Mdm::Vuln', :counter_cache => :vuln_detail_count
+
+  #
+  # Validations
+  #
+
+  validates :vuln_id, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_vuln_detail, self)
+end