metasploit_data_models 0.6.13

data/db/migrate/20100824151500_add_exploited_table.rb

@@ -0,0 +1,16 @@
+class AddExploitedTable < ActiveRecord::Migration
+	def self.up
+		create_table :exploited_hosts do |t|
+			t.integer   :host_id, :null => false
+			t.integer   :service_id
+			t.string    :session_uuid, :limit => 8
+			t.string    :name, :limit => 2048
+			t.string    :payload, :limit => 2048
+			t.timestamps 
+		end
+	end
+	def self.down
+		drop_table :exploited_hosts
+	end
+end
+

data/db/migrate/20100908001428_add_owner_to_workspaces.rb

@@ -0,0 +1,9 @@
+class AddOwnerToWorkspaces < ActiveRecord::Migration
+  def self.up
+    add_column :workspaces, :owner_id, :integer
+  end
+
+  def self.down
+    remove_column :workspaces, :owner_id
+  end
+end

data/db/migrate/20100911122000_add_report_templates.rb

@@ -0,0 +1,18 @@
+class AddReportTemplates < ActiveRecord::Migration
+
+	def self.up
+		create_table :report_templates do |t|
+			t.integer   :workspace_id, :null => false, :default => 1
+			t.string    :created_by
+			t.string    :path, :limit  => 1024
+			t.text      :name
+			t.timestamps
+		end
+	end
+
+	def self.down
+		drop_table :reports
+	end
+
+end
+

data/db/migrate/20100916151530_require_admin_flag.rb

@@ -0,0 +1,15 @@
+class RequireAdminFlag < ActiveRecord::Migration
+
+	# Make the admin flag required.
+	def self.up
+		# update any existing records
+		Mdm::User.update_all({:admin => true}, {:admin => nil})
+
+		change_column :users, :admin, :boolean, :null => false, :default => true
+	end
+
+	def self.down
+		change_column :users, :admin, :boolean, :default => true
+	end
+
+end

data/db/migrate/20100916175000_add_campaigns_and_templates.rb

@@ -0,0 +1,61 @@
+
+class AddCampaignsAndTemplates < ActiveRecord::Migration
+
+	def self.up
+		create_table :campaigns do |t|
+			t.integer   :workspace_id, :null => false
+			t.string    :name, :limit => 512
+			# Serialized, stores SMTP/other protocol config options etc.
+			t.text      :prefs
+			t.integer   :status, :default => 0
+			t.timestamp :started_at
+			t.timestamps
+		end
+
+		create_table :email_templates do |t|
+			t.string  :name,    :limit => 512
+			t.string  :subject, :limit => 1024
+			t.text    :body
+			t.integer :parent_id
+			t.integer :campaign_id
+		end
+		create_table :attachments do |t|
+			t.string  :name,    :limit => 512
+			t.binary  :data
+			t.string  :content_type, :limit => 512
+			t.boolean :inline,  :null => false, :default => true
+			t.boolean :zip,     :null => false, :default => false
+		end
+		create_table :attachments_email_templates, :id => false do |t|
+			t.integer :attachment_id
+			t.integer :email_template_id
+		end
+
+		create_table :email_addresses do |t|
+			t.integer :campaign_id, :null => false
+			t.string  :first_name,  :limit => 512
+			t.string  :last_name,   :limit => 512
+			t.string  :address,     :limit => 512
+			t.boolean :sent,        :null => false, :default => false
+			t.timestamp :clicked_at
+		end
+
+		create_table :web_templates do |t|
+			t.string  :name,    :limit => 512
+			t.string  :title,   :limit => 512
+			t.string  :body,    :limit => 524288
+			t.integer :campaign_id
+		end
+	end
+
+	def self.down
+		drop_table :campaigns
+		drop_table :email_templates
+		drop_table :attachments
+		drop_table :attachments_email_templates
+		drop_table :email_addresses
+		drop_table :web_templates
+	end
+
+end
+

data/db/migrate/20100920012100_add_generate_exe_column.rb

@@ -0,0 +1,8 @@
+class AddGenerateExeColumn < ActiveRecord::Migration
+	def self.up
+		add_column :email_templates, :generate_exe, :boolean, :null => false, :default => false
+	end
+	def self.down
+		remove_column :email_templates, :generate_exe
+	end
+end

data/db/migrate/20100926214000_add_template_prefs.rb

@@ -0,0 +1,11 @@
+class AddTemplatePrefs < ActiveRecord::Migration
+	def self.up
+		remove_column :email_templates, :generate_exe
+		add_column :email_templates, :prefs, :text
+		add_column :web_templates, :prefs, :text
+	end
+	def self.down
+		remove_column :email_templates, :prefs
+		remove_column :web_templates, :prefs
+	end
+end

data/db/migrate/20101001000000_add_web_tables.rb

@@ -0,0 +1,57 @@
+class AddWebTables < ActiveRecord::Migration
+	
+	def self.up
+		create_table :web_sites do |t|
+			t.integer   :service_id, :null => false
+			t.timestamps 
+			t.string    :vhost, :limit => 2048
+			t.text      :comments
+			t.text      :options
+		end
+		
+		create_table :web_pages do |t|
+			t.integer   :web_site_id, :null => false
+			t.timestamps 
+			t.text      :path
+			t.text      :query
+			t.integer   :code, :null => false
+			t.text      :cookie
+			t.text      :auth
+			t.text      :ctype
+			t.timestamp :mtime				
+			t.text      :location
+			t.text      :body
+			t.text      :headers
+		end	
+
+		create_table :web_forms do |t|
+			t.integer   :web_site_id, :null => false
+			t.timestamps 
+			t.text      :path
+			t.string    :method, :limit => 1024
+			t.text      :params
+		end	
+
+		create_table :web_vulns do |t|
+			t.integer   :web_site_id, :null => false
+			t.timestamps 
+			t.text      :path
+			t.string    :method, :limit => 1024
+			t.text      :params
+			t.text      :pname
+			t.text      :proof
+			t.integer   :risk
+			t.string    :name,    :limit => 1024	
+		end	
+							
+	end
+	
+	def self.down
+		drop_table :web_sites
+		drop_table :web_pages
+		drop_table :web_forms
+		drop_table :web_vulns
+	end
+end
+
+

data/db/migrate/20101002000000_add_query.rb

@@ -0,0 +1,10 @@
+class AddQuery < ActiveRecord::Migration
+	def self.up
+		add_column :web_forms, :query, :text
+		add_column :web_vulns, :query, :text
+	end
+	def self.down
+		remove_column :web_forms, :query
+		remove_column :web_vulns, :query
+	end
+end

data/db/migrate/20101007000000_add_vuln_info.rb

@@ -0,0 +1,15 @@
+class AddVulnInfo < ActiveRecord::Migration
+	def self.up
+		add_column :web_vulns, :category, :text
+		add_column :web_vulns, :confidence, :text		
+		add_column :web_vulns, :description, :text
+		add_column :web_vulns, :blame, :text
+	end
+	def self.down
+		remove_column :web_forms, :category
+		remove_column :web_vulns, :confidence
+		remove_column :web_vulns, :description
+		remove_column :web_vulns, :blame		
+	end
+end
+

data/db/migrate/20101008111800_add_clients_to_campaigns.rb

@@ -0,0 +1,10 @@
+
+class AddClientsToCampaigns < ActiveRecord::Migration
+	def self.up
+		add_column :clients, :campaign_id, :integer
+	end
+
+	def self.down
+		remove_column :clients, :campaign_id
+	end
+end

data/db/migrate/20101009023300_add_campaign_attachments.rb

@@ -0,0 +1,15 @@
+
+
+class AddCampaignAttachments < ActiveRecord::Migration
+
+	def self.up
+		add_column :attachments, :campaign_id, :integer
+	end
+
+	def self.down
+		remove_column :attachments, :campaign_id
+	end
+
+end
+
+

data/db/migrate/20101104135100_add_imported_creds.rb

@@ -0,0 +1,17 @@
+class AddImportedCreds < ActiveRecord::Migration
+
+	def self.up
+		create_table :imported_creds do |t|
+			t.integer   :workspace_id, :null => false, :default => 1
+			t.string    :user, :limit  => 512
+			t.string    :pass, :limit  => 512
+			t.string    :ptype, :limit  => 16, :default => "password"
+		end
+	end
+
+	def self.down
+		drop_table :imported_creds
+	end
+
+end
+

data/db/migrate/20101203000000_fix_web_tables.rb

@@ -0,0 +1,34 @@
+class FixWebTables < ActiveRecord::Migration
+	
+	def self.up
+		change_column :web_pages, :path, :text
+		change_column :web_pages, :query, :text
+		change_column :web_pages, :cookie, :text
+		change_column :web_pages, :auth, :text
+		change_column :web_pages, :ctype, :text
+		change_column :web_pages, :location, :text
+		change_column :web_pages, :path, :text
+		change_column :web_vulns, :path, :text
+		change_column :web_vulns, :pname, :text
+		
+		add_column :web_pages, :request, :text
+		add_column :web_vulns, :request, :text				
+	end
+	
+	def self.down
+		change_column :web_pages, :path, :text
+		change_column :web_pages, :query, :text
+		change_column :web_pages, :cookie, :text
+		change_column :web_pages, :auth, :text
+		change_column :web_pages, :ctype, :text
+		change_column :web_pages, :location, :text
+		change_column :web_pages, :path, :text
+		change_column :web_vulns, :path, :text
+		change_column :web_vulns, :pname, :text
+		
+		remove_column :web_pages, :request
+		remove_column :web_vulns, :request
+	end
+end
+
+

data/db/migrate/20101203000001_expand_host_comment.rb

@@ -0,0 +1,12 @@
+class ExpandHostComment < ActiveRecord::Migration
+	
+	def self.up
+		change_column :hosts, :comments, :text
+	end
+	
+	def self.down
+		change_column :hosts, :comments, :string, :limit => 4096
+	end
+end
+
+

data/db/migrate/20101206212033_add_limit_to_network_to_workspaces.rb

@@ -0,0 +1,9 @@
+class AddLimitToNetworkToWorkspaces < ActiveRecord::Migration
+	def self.up
+		add_column :workspaces, :limit_to_network, :boolean, :null => false, :default => false
+	end
+
+	def self.down
+		remove_column :workspaces, :limit_to_network
+	end
+end

data/db/migrate/20110112154300_add_module_uuid_to_tasks.rb

@@ -0,0 +1,9 @@
+class AddModuleUuidToTasks < ActiveRecord::Migration
+  def self.up
+    add_column :tasks, :module_uuid, :string, :limit => 8
+  end
+
+  def self.down
+    remove_column :tasks, :module_uuid
+  end
+end

data/db/migrate/20110204112800_add_host_tags.rb

@@ -0,0 +1,28 @@
+class AddHostTags < ActiveRecord::Migration
+
+	def self.up
+
+		create_table :tags do |t|
+			t.integer  :user_id
+			t.string   :name, :limit => 1024
+			t.text     :desc
+			t.boolean  :report_summary, :null => false, :default => false
+			t.boolean  :report_detail, :null => false, :default => false
+			t.boolean  :critical, :null => false, :default => false
+			t.timestamps
+		end
+
+		create_table :hosts_tags, :id => false do |t|
+			t.integer :host_id
+			t.integer :tag_id
+		end
+
+	end
+
+	def self.down
+		drop_table :hosts_tags
+		drop_table :tags
+	end
+
+end
+

data/db/migrate/20110317144932_add_session_table.rb

@@ -0,0 +1,110 @@
+class AddSessionTable < ActiveRecord::Migration
+
+	class Event < ActiveRecord::Base
+		serialize :info
+	end
+
+	class SessionEvent < ActiveRecord::Base
+		belongs_to :session
+	end
+
+	class Session < ActiveRecord::Base
+		has_many :events, :class_name => 'AddSessionTable::SessionEvent'
+		serialize :datastore
+	end
+
+	def self.up
+
+ 		create_table :sessions do |t|
+ 			t.integer :host_id
+
+ 			t.string  :stype       # session type: meterpreter, shell, etc
+ 			t.string  :via_exploit # module name 
+ 			t.string  :via_payload # payload name
+ 			t.string  :desc        # session description
+ 			t.integer :port
+ 			t.string  :platform    # platform type of the remote system
+ 			t.string  :routes
+
+ 			t.text    :datastore   # module's datastore
+
+ 			t.timestamp :opened_at, :null => false
+ 			t.timestamp :closed_at
+
+ 			t.string :close_reason
+ 		end
+
+ 		create_table :session_events do |t|
+ 			t.integer :session_id
+
+ 			t.string  :etype # event type: command, output, upload, download, filedelete
+ 			t.binary  :command
+ 			t.binary  :output
+ 			t.string  :remote_path
+ 			t.string  :local_path
+
+ 			t.timestamp :created_at
+ 		end
+
+ 		#
+ 		# Migrate session data from events table
+ 		#
+
+ 		close_events = Event.find_all_by_name("session_close")
+ 		open_events  = Event.find_all_by_name("session_open")
+
+ 		command_events  = Event.find_all_by_name("session_command")
+ 		output_events   = Event.find_all_by_name("session_output")
+ 		upload_events   = Event.find_all_by_name("session_upload")
+ 		download_events = Event.find_all_by_name("session_download")
+
+ 		open_events.each do |o|
+ 			c = close_events.find { |e| e.info[:session_uuid] == o.info[:session_uuid] }
+
+ 			s = Session.new(
+ 				:host_id => o.host_id,
+ 				:stype => o.info[:session_type],
+ 				:via_exploit => o.info[:via_exploit],
+ 				:via_payload => o.info[:via_payload],
+ 				:datastore => o.info[:datastore],
+ 				:opened_at => o.created_at
+ 			)
+
+			if c
+	 			s.closed_at = c.created_at
+ 				s.desc = c.info[:session_info]
+ 			else
+ 				# couldn't find the corresponding close event
+ 				s.closed_at = s.opened_at
+ 				s.desc = "?"
+ 			end
+
+ 			uuid = o.info[:session_uuid]
+
+ 			command_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
+ 				s.events.build(:created_at => e.created_at, :etype => "command", :command => e.info[:command] )
+ 			end
+
+ 			output_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
+ 				s.events.build(:created_at => e.created_at, :etype => "output", :output => e.info[:output] )
+ 			end
+
+ 			upload_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
+ 				s.events.build(:created_at => e.created_at, :etype => "upload", :local_path => e.info[:local_path], :remote_path  => e.info[:remote_path] )
+ 			end
+
+ 			download_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
+ 				s.events.build(:created_at => e.created_at, :etype => "download", :local_path => e.info[:local_path], :remote_path  => e.info[:remote_path] )
+ 			end
+
+ 			s.events.sort_by(&:created_at)
+
+ 			s.save!
+ 		end
+	end
+
+	def self.down
+		drop_table :sessions
+		drop_table :session_events
+	end
+end