metasploit_data_models 0.7.0-java
Sign up to get free protection for your applications and to get access to all the features.
- data/.gitignore +24 -0
- data/.rspec +3 -0
- data/.simplecov +38 -0
- data/.travis.yml +6 -0
- data/.yardopts +4 -0
- data/Gemfile +27 -0
- data/LICENSE +27 -0
- data/README.md +72 -0
- data/Rakefile +53 -0
- data/app/models/mdm/api_key.rb +20 -0
- data/app/models/mdm/client.rb +9 -0
- data/app/models/mdm/cred.rb +93 -0
- data/app/models/mdm/event.rb +30 -0
- data/app/models/mdm/exploit_attempt.rb +14 -0
- data/app/models/mdm/exploited_host.rb +11 -0
- data/app/models/mdm/host.rb +134 -0
- data/app/models/mdm/host_detail.rb +15 -0
- data/app/models/mdm/host_tag.rb +13 -0
- data/app/models/mdm/imported_cred.rb +10 -0
- data/app/models/mdm/listener.rb +24 -0
- data/app/models/mdm/loot.rb +63 -0
- data/app/models/mdm/macro.rb +20 -0
- data/app/models/mdm/mod_ref.rb +3 -0
- data/app/models/mdm/module_action.rb +24 -0
- data/app/models/mdm/module_arch.rb +24 -0
- data/app/models/mdm/module_author.rb +25 -0
- data/app/models/mdm/module_detail.rb +59 -0
- data/app/models/mdm/module_mixin.rb +24 -0
- data/app/models/mdm/module_platform.rb +24 -0
- data/app/models/mdm/module_ref.rb +24 -0
- data/app/models/mdm/module_target.rb +26 -0
- data/app/models/mdm/nexpose_console.rb +20 -0
- data/app/models/mdm/note.rb +49 -0
- data/app/models/mdm/profile.rb +9 -0
- data/app/models/mdm/ref.rb +14 -0
- data/app/models/mdm/report.rb +50 -0
- data/app/models/mdm/report_template.rb +27 -0
- data/app/models/mdm/route.rb +9 -0
- data/app/models/mdm/service.rb +56 -0
- data/app/models/mdm/session.rb +48 -0
- data/app/models/mdm/session_event.rb +9 -0
- data/app/models/mdm/tag.rb +46 -0
- data/app/models/mdm/task.rb +41 -0
- data/app/models/mdm/user.rb +25 -0
- data/app/models/mdm/vuln.rb +60 -0
- data/app/models/mdm/vuln_attempt.rb +15 -0
- data/app/models/mdm/vuln_detail.rb +14 -0
- data/app/models/mdm/vuln_ref.rb +13 -0
- data/app/models/mdm/web_form.rb +16 -0
- data/app/models/mdm/web_page.rb +16 -0
- data/app/models/mdm/web_site.rb +47 -0
- data/app/models/mdm/web_vuln.rb +190 -0
- data/app/models/mdm/wmap_request.rb +3 -0
- data/app/models/mdm/wmap_target.rb +3 -0
- data/app/models/mdm/workspace.rb +196 -0
- data/bin/mdm_console +68 -0
- data/console_db.yml +9 -0
- data/db/migrate/000_create_tables.rb +79 -0
- data/db/migrate/001_add_wmap_tables.rb +35 -0
- data/db/migrate/002_add_workspaces.rb +36 -0
- data/db/migrate/003_move_notes.rb +20 -0
- data/db/migrate/004_add_events_table.rb +16 -0
- data/db/migrate/005_expand_info.rb +58 -0
- data/db/migrate/006_add_timestamps.rb +26 -0
- data/db/migrate/007_add_loots.rb +20 -0
- data/db/migrate/008_create_users.rb +16 -0
- data/db/migrate/009_add_loots_ctype.rb +10 -0
- data/db/migrate/010_add_alert_fields.rb +16 -0
- data/db/migrate/011_add_reports.rb +19 -0
- data/db/migrate/012_add_tasks.rb +24 -0
- data/db/migrate/013_add_tasks_result.rb +10 -0
- data/db/migrate/014_add_loots_fields.rb +12 -0
- data/db/migrate/015_rename_user.rb +16 -0
- data/db/migrate/016_add_host_purpose.rb +10 -0
- data/db/migrate/017_expand_info2.rb +58 -0
- data/db/migrate/018_add_workspace_user_info.rb +29 -0
- data/db/migrate/019_add_workspace_desc.rb +23 -0
- data/db/migrate/020_add_user_preferences.rb +11 -0
- data/db/migrate/021_standardize_info_and_data.rb +18 -0
- data/db/migrate/022_enlarge_event_info.rb +10 -0
- data/db/migrate/023_add_report_downloaded_at.rb +10 -0
- data/db/migrate/024_convert_service_info_to_text.rb +12 -0
- data/db/migrate/025_add_user_admin.rb +19 -0
- data/db/migrate/026_add_creds_table.rb +19 -0
- data/db/migrate/20100819123300_migrate_cred_data.rb +154 -0
- data/db/migrate/20100824151500_add_exploited_table.rb +16 -0
- data/db/migrate/20100908001428_add_owner_to_workspaces.rb +9 -0
- data/db/migrate/20100911122000_add_report_templates.rb +18 -0
- data/db/migrate/20100916151530_require_admin_flag.rb +15 -0
- data/db/migrate/20100916175000_add_campaigns_and_templates.rb +61 -0
- data/db/migrate/20100920012100_add_generate_exe_column.rb +8 -0
- data/db/migrate/20100926214000_add_template_prefs.rb +11 -0
- data/db/migrate/20101001000000_add_web_tables.rb +57 -0
- data/db/migrate/20101002000000_add_query.rb +10 -0
- data/db/migrate/20101007000000_add_vuln_info.rb +15 -0
- data/db/migrate/20101008111800_add_clients_to_campaigns.rb +10 -0
- data/db/migrate/20101009023300_add_campaign_attachments.rb +15 -0
- data/db/migrate/20101104135100_add_imported_creds.rb +17 -0
- data/db/migrate/20101203000000_fix_web_tables.rb +34 -0
- data/db/migrate/20101203000001_expand_host_comment.rb +12 -0
- data/db/migrate/20101206212033_add_limit_to_network_to_workspaces.rb +9 -0
- data/db/migrate/20110112154300_add_module_uuid_to_tasks.rb +9 -0
- data/db/migrate/20110204112800_add_host_tags.rb +28 -0
- data/db/migrate/20110317144932_add_session_table.rb +110 -0
- data/db/migrate/20110414180600_add_local_id_to_session_table.rb +11 -0
- data/db/migrate/20110415175705_add_routes_table.rb +18 -0
- data/db/migrate/20110422000000_convert_binary.rb +73 -0
- data/db/migrate/20110425095900_add_last_seen_to_sessions.rb +8 -0
- data/db/migrate/20110513143900_track_successful_exploits.rb +31 -0
- data/db/migrate/20110517160800_rename_and_prune_nessus_vulns.rb +26 -0
- data/db/migrate/20110527000000_add_task_id_to_reports_table.rb +11 -0
- data/db/migrate/20110527000001_add_api_keys_table.rb +12 -0
- data/db/migrate/20110606000001_add_macros_table.rb +16 -0
- data/db/migrate/20110622000000_add_settings_to_tasks_table.rb +12 -0
- data/db/migrate/20110624000001_add_listeners_table.rb +19 -0
- data/db/migrate/20110625000001_add_macro_to_listeners_table.rb +12 -0
- data/db/migrate/20110630000001_add_nexpose_consoles_table.rb +21 -0
- data/db/migrate/20110630000002_add_name_to_nexpose_consoles_table.rb +12 -0
- data/db/migrate/20110717000001_add_profiles_table.rb +15 -0
- data/db/migrate/20110727163801_expand_cred_ptype_column.rb +9 -0
- data/db/migrate/20110730000001_add_initial_indexes.rb +85 -0
- data/db/migrate/20110812000001_prune_indexes.rb +23 -0
- data/db/migrate/20110922000000_expand_notes.rb +9 -0
- data/db/migrate/20110928101300_add_mod_ref_table.rb +17 -0
- data/db/migrate/20111011110000_add_display_name_to_reports_table.rb +24 -0
- data/db/migrate/20111203000000_inet_columns.rb +13 -0
- data/db/migrate/20111204000000_more_inet_columns.rb +17 -0
- data/db/migrate/20111210000000_add_scope_to_hosts.rb +9 -0
- data/db/migrate/20120126110000_add_virtual_host_to_hosts.rb +9 -0
- data/db/migrate/20120411173220_rename_workspace_members.rb +9 -0
- data/db/migrate/20120601152442_add_counter_caches_to_hosts.rb +21 -0
- data/db/migrate/20120625000000_add_vuln_details.rb +34 -0
- data/db/migrate/20120625000001_add_host_details.rb +16 -0
- data/db/migrate/20120625000002_expand_details.rb +16 -0
- data/db/migrate/20120625000003_expand_details2.rb +24 -0
- data/db/migrate/20120625000004_add_vuln_attempts.rb +19 -0
- data/db/migrate/20120625000005_add_vuln_and_host_counter_caches.rb +14 -0
- data/db/migrate/20120625000006_add_module_details.rb +118 -0
- data/db/migrate/20120625000007_add_exploit_attempts.rb +26 -0
- data/db/migrate/20120625000008_add_fail_message.rb +12 -0
- data/db/migrate/20120718202805_add_owner_and_payload_to_web_vulns.rb +13 -0
- data/db/migrate/20130228214900_change_required_columns_to_null_false_in_web_vulns.rb +35 -0
- data/db/migrate/20130423211152_add_creds_counter_cache.rb +24 -0
- data/lib/mdm.rb +12 -0
- data/lib/mdm/host/operating_system_normalization.rb +984 -0
- data/lib/metasploit_data_models.rb +60 -0
- data/lib/metasploit_data_models/base64_serializer.rb +103 -0
- data/lib/metasploit_data_models/engine.rb +23 -0
- data/lib/metasploit_data_models/serialized_prefs.rb +23 -0
- data/lib/metasploit_data_models/validators/ip_format_validator.rb +13 -0
- data/lib/metasploit_data_models/validators/password_is_strong_validator.rb +70 -0
- data/lib/metasploit_data_models/version.rb +8 -0
- data/lib/tasks/yard.rake +26 -0
- data/metasploit_data_models.gemspec +54 -0
- data/script/rails +8 -0
- data/spec/app/models/mdm/module_action_spec.rb +38 -0
- data/spec/app/models/mdm/module_arch_spec.rb +38 -0
- data/spec/app/models/mdm/module_author_spec.rb +50 -0
- data/spec/app/models/mdm/module_detail_spec.rb +291 -0
- data/spec/app/models/mdm/module_mixin_spec.rb +38 -0
- data/spec/app/models/mdm/module_platform_spec.rb +38 -0
- data/spec/app/models/mdm/module_ref_spec.rb +38 -0
- data/spec/app/models/mdm/module_target_spec.rb +41 -0
- data/spec/app/models/mdm/web_vuln_spec.rb +126 -0
- data/spec/dummy/Rakefile +7 -0
- data/spec/dummy/app/assets/javascripts/application.js +15 -0
- data/spec/dummy/app/assets/stylesheets/application.css +13 -0
- data/spec/dummy/app/controllers/application_controller.rb +3 -0
- data/spec/dummy/app/helpers/application_helper.rb +2 -0
- data/spec/dummy/app/mailers/.gitkeep +0 -0
- data/spec/dummy/app/models/.gitkeep +0 -0
- data/spec/dummy/app/views/layouts/application.html.erb +14 -0
- data/spec/dummy/config.ru +4 -0
- data/spec/dummy/config/application.rb +61 -0
- data/spec/dummy/config/boot.rb +10 -0
- data/spec/dummy/config/database.yml.example +22 -0
- data/spec/dummy/config/database.yml.travis +22 -0
- data/spec/dummy/config/environment.rb +5 -0
- data/spec/dummy/config/environments/development.rb +37 -0
- data/spec/dummy/config/environments/production.rb +67 -0
- data/spec/dummy/config/environments/test.rb +37 -0
- data/spec/dummy/config/initializers/backtrace_silencers.rb +7 -0
- data/spec/dummy/config/initializers/inflections.rb +15 -0
- data/spec/dummy/config/initializers/mime_types.rb +5 -0
- data/spec/dummy/config/initializers/secret_token.rb +7 -0
- data/spec/dummy/config/initializers/session_store.rb +8 -0
- data/spec/dummy/config/initializers/wrap_parameters.rb +14 -0
- data/spec/dummy/config/routes.rb +2 -0
- data/spec/dummy/db/schema.rb +639 -0
- data/spec/dummy/lib/assets/.gitkeep +0 -0
- data/spec/dummy/log/.gitkeep +0 -0
- data/spec/dummy/public/404.html +26 -0
- data/spec/dummy/public/422.html +26 -0
- data/spec/dummy/public/500.html +25 -0
- data/spec/dummy/public/favicon.ico +0 -0
- data/spec/dummy/script/rails +6 -0
- data/spec/factories/mdm/addresses.rb +7 -0
- data/spec/factories/mdm/hosts.rb +18 -0
- data/spec/factories/mdm/module_actions.rb +14 -0
- data/spec/factories/mdm/module_archs.rb +14 -0
- data/spec/factories/mdm/module_authors.rb +22 -0
- data/spec/factories/mdm/module_details.rb +9 -0
- data/spec/factories/mdm/module_mixins.rb +14 -0
- data/spec/factories/mdm/module_platforms.rb +14 -0
- data/spec/factories/mdm/module_refs.rb +14 -0
- data/spec/factories/mdm/module_targets.rb +19 -0
- data/spec/factories/mdm/services.rb +35 -0
- data/spec/factories/mdm/users.rb +22 -0
- data/spec/factories/mdm/web_sites.rb +8 -0
- data/spec/factories/mdm/web_vulns.rb +64 -0
- data/spec/factories/mdm/workspaces.rb +23 -0
- data/spec/lib/base64_serializer_spec.rb +174 -0
- data/spec/spec_helper.rb +36 -0
- metadata +472 -0
@@ -0,0 +1,16 @@
|
|
1
|
+
class AddExploitedTable < ActiveRecord::Migration
|
2
|
+
def self.up
|
3
|
+
create_table :exploited_hosts do |t|
|
4
|
+
t.integer :host_id, :null => false
|
5
|
+
t.integer :service_id
|
6
|
+
t.string :session_uuid, :limit => 8
|
7
|
+
t.string :name, :limit => 2048
|
8
|
+
t.string :payload, :limit => 2048
|
9
|
+
t.timestamps
|
10
|
+
end
|
11
|
+
end
|
12
|
+
def self.down
|
13
|
+
drop_table :exploited_hosts
|
14
|
+
end
|
15
|
+
end
|
16
|
+
|
@@ -0,0 +1,18 @@
|
|
1
|
+
class AddReportTemplates < ActiveRecord::Migration
|
2
|
+
|
3
|
+
def self.up
|
4
|
+
create_table :report_templates do |t|
|
5
|
+
t.integer :workspace_id, :null => false, :default => 1
|
6
|
+
t.string :created_by
|
7
|
+
t.string :path, :limit => 1024
|
8
|
+
t.text :name
|
9
|
+
t.timestamps
|
10
|
+
end
|
11
|
+
end
|
12
|
+
|
13
|
+
def self.down
|
14
|
+
drop_table :reports
|
15
|
+
end
|
16
|
+
|
17
|
+
end
|
18
|
+
|
@@ -0,0 +1,15 @@
|
|
1
|
+
class RequireAdminFlag < ActiveRecord::Migration
|
2
|
+
|
3
|
+
# Make the admin flag required.
|
4
|
+
def self.up
|
5
|
+
# update any existing records
|
6
|
+
Mdm::User.update_all({:admin => true}, {:admin => nil})
|
7
|
+
|
8
|
+
change_column :users, :admin, :boolean, :null => false, :default => true
|
9
|
+
end
|
10
|
+
|
11
|
+
def self.down
|
12
|
+
change_column :users, :admin, :boolean, :default => true
|
13
|
+
end
|
14
|
+
|
15
|
+
end
|
@@ -0,0 +1,61 @@
|
|
1
|
+
|
2
|
+
class AddCampaignsAndTemplates < ActiveRecord::Migration
|
3
|
+
|
4
|
+
def self.up
|
5
|
+
create_table :campaigns do |t|
|
6
|
+
t.integer :workspace_id, :null => false
|
7
|
+
t.string :name, :limit => 512
|
8
|
+
# Serialized, stores SMTP/other protocol config options etc.
|
9
|
+
t.text :prefs
|
10
|
+
t.integer :status, :default => 0
|
11
|
+
t.timestamp :started_at
|
12
|
+
t.timestamps
|
13
|
+
end
|
14
|
+
|
15
|
+
create_table :email_templates do |t|
|
16
|
+
t.string :name, :limit => 512
|
17
|
+
t.string :subject, :limit => 1024
|
18
|
+
t.text :body
|
19
|
+
t.integer :parent_id
|
20
|
+
t.integer :campaign_id
|
21
|
+
end
|
22
|
+
create_table :attachments do |t|
|
23
|
+
t.string :name, :limit => 512
|
24
|
+
t.binary :data
|
25
|
+
t.string :content_type, :limit => 512
|
26
|
+
t.boolean :inline, :null => false, :default => true
|
27
|
+
t.boolean :zip, :null => false, :default => false
|
28
|
+
end
|
29
|
+
create_table :attachments_email_templates, :id => false do |t|
|
30
|
+
t.integer :attachment_id
|
31
|
+
t.integer :email_template_id
|
32
|
+
end
|
33
|
+
|
34
|
+
create_table :email_addresses do |t|
|
35
|
+
t.integer :campaign_id, :null => false
|
36
|
+
t.string :first_name, :limit => 512
|
37
|
+
t.string :last_name, :limit => 512
|
38
|
+
t.string :address, :limit => 512
|
39
|
+
t.boolean :sent, :null => false, :default => false
|
40
|
+
t.timestamp :clicked_at
|
41
|
+
end
|
42
|
+
|
43
|
+
create_table :web_templates do |t|
|
44
|
+
t.string :name, :limit => 512
|
45
|
+
t.string :title, :limit => 512
|
46
|
+
t.string :body, :limit => 524288
|
47
|
+
t.integer :campaign_id
|
48
|
+
end
|
49
|
+
end
|
50
|
+
|
51
|
+
def self.down
|
52
|
+
drop_table :campaigns
|
53
|
+
drop_table :email_templates
|
54
|
+
drop_table :attachments
|
55
|
+
drop_table :attachments_email_templates
|
56
|
+
drop_table :email_addresses
|
57
|
+
drop_table :web_templates
|
58
|
+
end
|
59
|
+
|
60
|
+
end
|
61
|
+
|
@@ -0,0 +1,11 @@
|
|
1
|
+
class AddTemplatePrefs < ActiveRecord::Migration
|
2
|
+
def self.up
|
3
|
+
remove_column :email_templates, :generate_exe
|
4
|
+
add_column :email_templates, :prefs, :text
|
5
|
+
add_column :web_templates, :prefs, :text
|
6
|
+
end
|
7
|
+
def self.down
|
8
|
+
remove_column :email_templates, :prefs
|
9
|
+
remove_column :web_templates, :prefs
|
10
|
+
end
|
11
|
+
end
|
@@ -0,0 +1,57 @@
|
|
1
|
+
class AddWebTables < ActiveRecord::Migration
|
2
|
+
|
3
|
+
def self.up
|
4
|
+
create_table :web_sites do |t|
|
5
|
+
t.integer :service_id, :null => false
|
6
|
+
t.timestamps
|
7
|
+
t.string :vhost, :limit => 2048
|
8
|
+
t.text :comments
|
9
|
+
t.text :options
|
10
|
+
end
|
11
|
+
|
12
|
+
create_table :web_pages do |t|
|
13
|
+
t.integer :web_site_id, :null => false
|
14
|
+
t.timestamps
|
15
|
+
t.text :path
|
16
|
+
t.text :query
|
17
|
+
t.integer :code, :null => false
|
18
|
+
t.text :cookie
|
19
|
+
t.text :auth
|
20
|
+
t.text :ctype
|
21
|
+
t.timestamp :mtime
|
22
|
+
t.text :location
|
23
|
+
t.text :body
|
24
|
+
t.text :headers
|
25
|
+
end
|
26
|
+
|
27
|
+
create_table :web_forms do |t|
|
28
|
+
t.integer :web_site_id, :null => false
|
29
|
+
t.timestamps
|
30
|
+
t.text :path
|
31
|
+
t.string :method, :limit => 1024
|
32
|
+
t.text :params
|
33
|
+
end
|
34
|
+
|
35
|
+
create_table :web_vulns do |t|
|
36
|
+
t.integer :web_site_id, :null => false
|
37
|
+
t.timestamps
|
38
|
+
t.text :path
|
39
|
+
t.string :method, :limit => 1024
|
40
|
+
t.text :params
|
41
|
+
t.text :pname
|
42
|
+
t.text :proof
|
43
|
+
t.integer :risk
|
44
|
+
t.string :name, :limit => 1024
|
45
|
+
end
|
46
|
+
|
47
|
+
end
|
48
|
+
|
49
|
+
def self.down
|
50
|
+
drop_table :web_sites
|
51
|
+
drop_table :web_pages
|
52
|
+
drop_table :web_forms
|
53
|
+
drop_table :web_vulns
|
54
|
+
end
|
55
|
+
end
|
56
|
+
|
57
|
+
|
@@ -0,0 +1,15 @@
|
|
1
|
+
class AddVulnInfo < ActiveRecord::Migration
|
2
|
+
def self.up
|
3
|
+
add_column :web_vulns, :category, :text
|
4
|
+
add_column :web_vulns, :confidence, :text
|
5
|
+
add_column :web_vulns, :description, :text
|
6
|
+
add_column :web_vulns, :blame, :text
|
7
|
+
end
|
8
|
+
def self.down
|
9
|
+
remove_column :web_forms, :category
|
10
|
+
remove_column :web_vulns, :confidence
|
11
|
+
remove_column :web_vulns, :description
|
12
|
+
remove_column :web_vulns, :blame
|
13
|
+
end
|
14
|
+
end
|
15
|
+
|
@@ -0,0 +1,17 @@
|
|
1
|
+
class AddImportedCreds < ActiveRecord::Migration
|
2
|
+
|
3
|
+
def self.up
|
4
|
+
create_table :imported_creds do |t|
|
5
|
+
t.integer :workspace_id, :null => false, :default => 1
|
6
|
+
t.string :user, :limit => 512
|
7
|
+
t.string :pass, :limit => 512
|
8
|
+
t.string :ptype, :limit => 16, :default => "password"
|
9
|
+
end
|
10
|
+
end
|
11
|
+
|
12
|
+
def self.down
|
13
|
+
drop_table :imported_creds
|
14
|
+
end
|
15
|
+
|
16
|
+
end
|
17
|
+
|
@@ -0,0 +1,34 @@
|
|
1
|
+
class FixWebTables < ActiveRecord::Migration
|
2
|
+
|
3
|
+
def self.up
|
4
|
+
change_column :web_pages, :path, :text
|
5
|
+
change_column :web_pages, :query, :text
|
6
|
+
change_column :web_pages, :cookie, :text
|
7
|
+
change_column :web_pages, :auth, :text
|
8
|
+
change_column :web_pages, :ctype, :text
|
9
|
+
change_column :web_pages, :location, :text
|
10
|
+
change_column :web_pages, :path, :text
|
11
|
+
change_column :web_vulns, :path, :text
|
12
|
+
change_column :web_vulns, :pname, :text
|
13
|
+
|
14
|
+
add_column :web_pages, :request, :text
|
15
|
+
add_column :web_vulns, :request, :text
|
16
|
+
end
|
17
|
+
|
18
|
+
def self.down
|
19
|
+
change_column :web_pages, :path, :text
|
20
|
+
change_column :web_pages, :query, :text
|
21
|
+
change_column :web_pages, :cookie, :text
|
22
|
+
change_column :web_pages, :auth, :text
|
23
|
+
change_column :web_pages, :ctype, :text
|
24
|
+
change_column :web_pages, :location, :text
|
25
|
+
change_column :web_pages, :path, :text
|
26
|
+
change_column :web_vulns, :path, :text
|
27
|
+
change_column :web_vulns, :pname, :text
|
28
|
+
|
29
|
+
remove_column :web_pages, :request
|
30
|
+
remove_column :web_vulns, :request
|
31
|
+
end
|
32
|
+
end
|
33
|
+
|
34
|
+
|
@@ -0,0 +1,28 @@
|
|
1
|
+
class AddHostTags < ActiveRecord::Migration
|
2
|
+
|
3
|
+
def self.up
|
4
|
+
|
5
|
+
create_table :tags do |t|
|
6
|
+
t.integer :user_id
|
7
|
+
t.string :name, :limit => 1024
|
8
|
+
t.text :desc
|
9
|
+
t.boolean :report_summary, :null => false, :default => false
|
10
|
+
t.boolean :report_detail, :null => false, :default => false
|
11
|
+
t.boolean :critical, :null => false, :default => false
|
12
|
+
t.timestamps
|
13
|
+
end
|
14
|
+
|
15
|
+
create_table :hosts_tags, :id => false do |t|
|
16
|
+
t.integer :host_id
|
17
|
+
t.integer :tag_id
|
18
|
+
end
|
19
|
+
|
20
|
+
end
|
21
|
+
|
22
|
+
def self.down
|
23
|
+
drop_table :hosts_tags
|
24
|
+
drop_table :tags
|
25
|
+
end
|
26
|
+
|
27
|
+
end
|
28
|
+
|
@@ -0,0 +1,110 @@
|
|
1
|
+
class AddSessionTable < ActiveRecord::Migration
|
2
|
+
|
3
|
+
class Event < ActiveRecord::Base
|
4
|
+
serialize :info
|
5
|
+
end
|
6
|
+
|
7
|
+
class SessionEvent < ActiveRecord::Base
|
8
|
+
belongs_to :session
|
9
|
+
end
|
10
|
+
|
11
|
+
class Session < ActiveRecord::Base
|
12
|
+
has_many :events, :class_name => 'AddSessionTable::SessionEvent'
|
13
|
+
serialize :datastore
|
14
|
+
end
|
15
|
+
|
16
|
+
def self.up
|
17
|
+
|
18
|
+
create_table :sessions do |t|
|
19
|
+
t.integer :host_id
|
20
|
+
|
21
|
+
t.string :stype # session type: meterpreter, shell, etc
|
22
|
+
t.string :via_exploit # module name
|
23
|
+
t.string :via_payload # payload name
|
24
|
+
t.string :desc # session description
|
25
|
+
t.integer :port
|
26
|
+
t.string :platform # platform type of the remote system
|
27
|
+
t.string :routes
|
28
|
+
|
29
|
+
t.text :datastore # module's datastore
|
30
|
+
|
31
|
+
t.timestamp :opened_at, :null => false
|
32
|
+
t.timestamp :closed_at
|
33
|
+
|
34
|
+
t.string :close_reason
|
35
|
+
end
|
36
|
+
|
37
|
+
create_table :session_events do |t|
|
38
|
+
t.integer :session_id
|
39
|
+
|
40
|
+
t.string :etype # event type: command, output, upload, download, filedelete
|
41
|
+
t.binary :command
|
42
|
+
t.binary :output
|
43
|
+
t.string :remote_path
|
44
|
+
t.string :local_path
|
45
|
+
|
46
|
+
t.timestamp :created_at
|
47
|
+
end
|
48
|
+
|
49
|
+
#
|
50
|
+
# Migrate session data from events table
|
51
|
+
#
|
52
|
+
|
53
|
+
close_events = Event.find_all_by_name("session_close")
|
54
|
+
open_events = Event.find_all_by_name("session_open")
|
55
|
+
|
56
|
+
command_events = Event.find_all_by_name("session_command")
|
57
|
+
output_events = Event.find_all_by_name("session_output")
|
58
|
+
upload_events = Event.find_all_by_name("session_upload")
|
59
|
+
download_events = Event.find_all_by_name("session_download")
|
60
|
+
|
61
|
+
open_events.each do |o|
|
62
|
+
c = close_events.find { |e| e.info[:session_uuid] == o.info[:session_uuid] }
|
63
|
+
|
64
|
+
s = Session.new(
|
65
|
+
:host_id => o.host_id,
|
66
|
+
:stype => o.info[:session_type],
|
67
|
+
:via_exploit => o.info[:via_exploit],
|
68
|
+
:via_payload => o.info[:via_payload],
|
69
|
+
:datastore => o.info[:datastore],
|
70
|
+
:opened_at => o.created_at
|
71
|
+
)
|
72
|
+
|
73
|
+
if c
|
74
|
+
s.closed_at = c.created_at
|
75
|
+
s.desc = c.info[:session_info]
|
76
|
+
else
|
77
|
+
# couldn't find the corresponding close event
|
78
|
+
s.closed_at = s.opened_at
|
79
|
+
s.desc = "?"
|
80
|
+
end
|
81
|
+
|
82
|
+
uuid = o.info[:session_uuid]
|
83
|
+
|
84
|
+
command_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
|
85
|
+
s.events.build(:created_at => e.created_at, :etype => "command", :command => e.info[:command] )
|
86
|
+
end
|
87
|
+
|
88
|
+
output_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
|
89
|
+
s.events.build(:created_at => e.created_at, :etype => "output", :output => e.info[:output] )
|
90
|
+
end
|
91
|
+
|
92
|
+
upload_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
|
93
|
+
s.events.build(:created_at => e.created_at, :etype => "upload", :local_path => e.info[:local_path], :remote_path => e.info[:remote_path] )
|
94
|
+
end
|
95
|
+
|
96
|
+
download_events.select { |e| e.info[:session_uuid] == uuid }.each do |e|
|
97
|
+
s.events.build(:created_at => e.created_at, :etype => "download", :local_path => e.info[:local_path], :remote_path => e.info[:remote_path] )
|
98
|
+
end
|
99
|
+
|
100
|
+
s.events.sort_by(&:created_at)
|
101
|
+
|
102
|
+
s.save!
|
103
|
+
end
|
104
|
+
end
|
105
|
+
|
106
|
+
def self.down
|
107
|
+
drop_table :sessions
|
108
|
+
drop_table :session_events
|
109
|
+
end
|
110
|
+
end
|