metasploit_data_models 0.7.0-java

data/app/models/mdm/host.rb

@@ -0,0 +1,134 @@
+
+class Mdm::Host < ActiveRecord::Base
+  include Mdm::Host::OperatingSystemNormalization
+
+  #
+  # Callbacks
+  #
+
+  before_destroy :cleanup_tags
+
+  #
+  # CONSTANTS
+  #
+
+  # Fields searched for the search scope
+  SEARCH_FIELDS = [
+      'address::text',
+      'hosts.name',
+      'os_name',
+      'os_flavor',
+      'os_sp',
+      'mac',
+      'purpose',
+      'comments'
+  ]
+
+  #
+  # Relations
+  #
+
+  has_many :exploit_attempts, :dependent => :destroy, :class_name => 'Mdm::ExploitAttempt'
+  has_many :exploited_hosts, :dependent => :destroy, :class_name => 'Mdm::ExploitedHost'
+  has_many :clients, :dependent => :delete_all, :class_name => 'Mdm::Client'
+  has_many :host_details, :dependent => :destroy, :class_name => 'Mdm::HostDetail'
+  # hosts_tags are cleaned up in before_destroy:
+  has_many :hosts_tags, :class_name => 'Mdm::HostTag'
+  has_many :loots, :dependent => :destroy, :class_name => 'Mdm::Loot', :order => 'loots.created_at desc'
+  has_many :notes, :dependent => :delete_all, :class_name => 'Mdm::Note', :order => 'notes.created_at'
+  has_many :services, :dependent => :destroy, :class_name => 'Mdm::Service', :order => 'services.port, services.proto'
+  has_many :sessions, :dependent => :destroy, :class_name => 'Mdm::Session', :order => 'sessions.opened_at'
+  has_many :vulns, :dependent => :delete_all, :class_name => 'Mdm::Vuln'
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Through host_tags
+  #
+  has_many :tags, :through => :hosts_tags, :class_name => 'Mdm::Tag'
+
+  #
+  # Through services
+  #
+  has_many :creds, :through => :services, :class_name => 'Mdm::Cred'
+  has_many :service_notes, :through => :services
+  has_many :web_sites, :through => :services, :class_name => 'Mdm::WebSite'
+
+  #
+  # Nested Attributes
+  # @note Must be declared after relations being referenced.
+  #
+
+  accepts_nested_attributes_for :services, :reject_if => lambda { |s| s[:port].blank? }, :allow_destroy => true
+
+  #
+  # Validations
+  #
+
+  validates :address,
+            :exclusion => {
+                :in => ['127.0.0.1']
+            },
+            :ip_format => true,
+            :presence => true,
+            :uniqueness => {
+                :scope => :workspace_id,
+                :unless => :ip_address_invalid?
+            }
+  validates :workspace, :presence => true
+
+  #
+  # Scopes
+  #
+
+  scope :alive, where({'hosts.state' => 'alive'})
+  scope :flagged, where('notes.critical = true AND notes.seen = false').includes(:notes)
+  scope :search,
+        lambda { |*args|
+          # @todo replace with AREL
+          terms = SEARCH_FIELDS.collect { |field|
+            "#{field} ILIKE ?"
+          }
+          disjunction = terms.join(' OR ')
+          formatted_parameter = "%#{args[0]}%"
+          parameters = [formatted_parameter] * SEARCH_FIELDS.length
+          conditions = [disjunction] + parameters
+
+          {
+              :conditions => conditions
+          }
+        }
+  scope :tag_search,
+        lambda { |*args| where("tags.name" => args[0]).includes(:tags) }
+
+  def attribute_locked?(attr)
+    n = notes.find_by_ntype("host.updated.#{attr}")
+    n && n.data[:locked]
+  end
+
+  def cleanup_tags
+    # No need to keep tags with no hosts
+    tags.each do |tag|
+      tag.destroy if tag.hosts == [self]
+    end
+    # Clean up association table records
+    Mdm::HostTag.delete_all("host_id = #{self.id}")
+  end
+
+  # This is replicated by the IpAddressValidator class. Had to put it here as well to avoid
+  # SQL errors when checking address uniqueness.
+  def ip_address_invalid?
+    begin
+      potential_ip = IPAddr.new(address)
+      return true unless potential_ip.ipv4? || potential_ip.ipv6?
+    rescue ArgumentError
+      return true
+    end
+  end
+
+  def is_vm?
+    !!self.virtual_host
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_host, self)
+end
+

data/app/models/mdm/host_detail.rb

@@ -0,0 +1,15 @@
+class Mdm::HostDetail < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host', :counter_cache => :host_detail_count
+
+  #
+  # Validations
+  #
+
+  validates :host_id, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_host_detail, self)
+end

data/app/models/mdm/host_tag.rb

@@ -0,0 +1,13 @@
+class Mdm::HostTag < ActiveRecord::Base
+  self.table_name = "hosts_tags"
+
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host'
+  belongs_to :tag, :class_name => 'Mdm::Tag'
+
+  ActiveSupport.run_load_hooks(:mdm_host_tag, self)
+end
+

data/app/models/mdm/imported_cred.rb

@@ -0,0 +1,10 @@
+class Mdm::ImportedCred < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :workspace, :class_name => "Mdm::Workspace"
+
+  ActiveSupport.run_load_hooks(:mdm_imported_cred, self)
+end
+

data/app/models/mdm/listener.rb

@@ -0,0 +1,24 @@
+class Mdm::Listener < ActiveRecord::Base
+  #
+  # Relations
+  #
+
+  belongs_to :task, :class_name => 'Mdm::Task'
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Serializations
+  #
+
+  serialize :options, MetasploitDataModels::Base64Serializer.new
+
+  #
+  # Validations
+  #
+
+  validates :address, :ip_format => true, :presence => true
+  validates :port, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_listener, self)
+end
+

data/app/models/mdm/loot.rb

@@ -0,0 +1,63 @@
+class Mdm::Loot < ActiveRecord::Base
+  #
+  # Callbacks
+  #
+
+  before_destroy :delete_file
+
+  #
+  # CONSTANTS
+  #
+
+  RELATIVE_SEARCH_FIELDS = [
+      'ltype',
+      'name',
+      'info',
+      'data'
+  ]
+
+  #
+  # Relations
+  #
+
+  belongs_to :host, :class_name => 'Mdm::Host'
+  belongs_to :service, :class_name => 'Mdm::Service'
+  belongs_to :workspace, :class_name => 'Mdm::Workspace'
+
+  #
+  # Scopes
+  #
+
+  scope :search, lambda { |*args|
+    # @todo replace with AREL
+    terms = RELATIVE_SEARCH_FIELDS.collect { |relative_field|
+      "loots.#{relative_field} ILIKE ?"
+    }
+    disjunction = terms.join(' OR ')
+    formatted_parameter = "%#{args[0]}%"
+    parameters = [formatted_parameter] * RELATIVE_SEARCH_FIELDS.length
+    conditions = [disjunction] + parameters
+
+    where(conditions)
+  }
+
+  #
+  # Serializations
+  #
+
+  serialize :data, MetasploitDataModels::Base64Serializer.new
+
+  private
+
+  def delete_file
+    c = Pro::Client.get rescue nil
+    if c
+      c.loot_delete_file(self[:id])
+    else
+      ::File.unlink(self.path) rescue nil
+    end
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_loot, self)
+end
+

data/app/models/mdm/macro.rb

@@ -0,0 +1,20 @@
+class Mdm::Macro < ActiveRecord::Base
+  extend MetasploitDataModels::SerializedPrefs
+
+  #
+  # Serialization
+  #
+
+  serialize :actions, MetasploitDataModels::Base64Serializer.new
+  serialize :prefs, MetasploitDataModels::Base64Serializer.new
+  serialized_prefs_attr_accessor :max_time
+
+  #
+  # Validations
+  #
+
+  validates :name, :presence => true, :format => /^[^'|"]+$/
+
+  ActiveSupport.run_load_hooks(:mdm_macro, self)
+end
+

data/app/models/mdm/mod_ref.rb

@@ -0,0 +1,3 @@
+class Mdm::ModRef < ActiveRecord::Base
+  ActiveSupport.run_load_hooks(:mdm_mod_ref, self)
+end

data/app/models/mdm/module_action.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleAction < ActiveRecord::Base
+  self.table_name = 'module_actions'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_action, self)
+end

data/app/models/mdm/module_arch.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleArch < ActiveRecord::Base
+  self.table_name = 'module_archs'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_arch, self)
+end

data/app/models/mdm/module_author.rb

@@ -0,0 +1,25 @@
+class Mdm::ModuleAuthor < ActiveRecord::Base
+  self.table_name = 'module_authors'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :email
+  attr_accessible :name
+
+  #
+  # Validations
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_author, self)
+end

data/app/models/mdm/module_detail.rb

@@ -0,0 +1,59 @@
+class Mdm::ModuleDetail < ActiveRecord::Base
+  self.table_name = 'module_details'
+
+  #
+  # Associations
+  #
+
+  has_many :actions,   :class_name => 'Mdm::ModuleAction',   :dependent => :destroy, :source => :module_action
+  has_many :archs,     :class_name => 'Mdm::ModuleArch',     :dependent => :destroy, :source => :module_arch
+  has_many :authors,   :class_name => 'Mdm::ModuleAuthor',   :dependent => :destroy, :source => :module_author
+  has_many :mixins,    :class_name => 'Mdm::ModuleMixin',    :dependent => :destroy, :source => :module_mixin
+  has_many :platforms, :class_name => 'Mdm::ModulePlatform', :dependent => :destroy, :source => :module_platform
+  has_many :refs,      :class_name => 'Mdm::ModuleRef',      :dependent => :destroy, :source => :module_ref
+  has_many :targets,   :class_name => 'Mdm::ModuleTarget',   :dependent => :destroy, :source => :module_target
+
+  #
+  # Validations
+  #
+
+  validates :refname,   :presence => true
+
+  validates_associated :actions
+  validates_associated :archs
+  validates_associated :authors
+  validates_associated :mixins
+  validates_associated :platforms
+  validates_associated :refs
+  validates_associated :targets
+
+  def add_action(name)
+    self.actions.build(:name => name).save
+  end
+
+  def add_arch(name)
+    self.archs.build(:name => name).save
+  end
+
+  def add_author(name, email=nil)
+    self.authors.build(:name => name, :email => email).save
+  end
+
+  def add_mixin(name)
+    self.mixins.build(:name => name).save
+  end
+
+  def add_platform(name)
+    self.platforms.build(:name => name).save
+  end
+
+  def add_ref(name)
+    self.refs.build(:name => name).save
+  end
+
+  def add_target(index, name)
+    self.targets.build(:index => index, :name => name).save
+  end
+
+  ActiveSupport.run_load_hooks(:mdm_module_detail, self)
+end

data/app/models/mdm/module_mixin.rb

@@ -0,0 +1,24 @@
+class Mdm::ModuleMixin < ActiveRecord::Base
+  self.table_name = 'module_mixins'
+
+  #
+  # Associations
+  #
+
+  belongs_to :module_detail, :class_name => 'Mdm::ModuleDetail'
+
+  #
+  # Mass Assignment Security
+  #
+
+  attr_accessible :name
+
+  #
+  # Validation
+  #
+
+  validates :module_detail, :presence => true
+  validates :name, :presence => true
+
+  ActiveSupport.run_load_hooks(:mdm_module_mixin, self)
+end