odle-m 0.0.1 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 800485a35d15ab752e25eb7674789d55d5088b426b81d8ade19e9208d9ad5f96
-  data.tar.gz: 5a6c62f31f4b151915d0956664af7266d8f027ed52343b26109936f3f449013d
+  metadata.gz: a7e86213bf7d8acd6a1975b7f9a6cad94a85d163b84b7afa2868a71a634f5a6a
+  data.tar.gz: 9f0651e828cd3079c0026d97348867abb42b2b455f6e5effada3e6b36ec68574
 SHA512:
-  metadata.gz: bdd83324fd4da125739552100bcb71711aec892ac7aef948d8a3817075090eaea9921adb7fccf3db38efd0761d7c6b4dc554dd294bc59e2c593555ca5339cd1d
-  data.tar.gz: 63fd19799c46cc92643b877454104cf2e1eb21b509bc7bc3a4820bf2db00165c6ca8bc337baf115b54a32dcf4e597a3ea666b57bce1299ff8f2cd47ab48d78e7
+  metadata.gz: 1615fca488b0050b9eec145da4a1542e8359ce0065eb33df54e01d0940a86ff8a36ffc91dd1ef3993ee356230370449bfb36d1e493dc7eaa1ca2dd5b192a3b01
+  data.tar.gz: 896e598e3a122ba82ad4aa798387d0fa16674088ca5c506cf382f73aea698de6c7ed1afd2f1b6b28a23648eb0e964398bc1b27dc19a489e5066506ebdae5c95f

data/bin/odle-m

@@ -2,7 +2,7 @@
 require 'odle-m'
 
 def list_types()
-	return ["","--burp","--burp2","--nessus","--msf","--nmap"].join("\n")
+	return ["","--burp","--burp2","--nessus","--msf","--nmap","--prowler"].join("\n")
 end
 
 # data flags are required
@@ -29,6 +29,8 @@ elsif type.downcase == "burp2"
 	puts Burp2.new().parse(ARGF.read,"0")
 elsif type.downcase == "nessus"
 	puts Nessus.new().parse(ARGF.read,"0")
+elsif type.downcase == "prowler"
+	puts Prowler.new().parse(ARGF.read,"0")
 elsif type.downcase == "msf"
 	puts Metasploit.new().parse(ARGF.read,"0")
 elsif type.downcase == "nmap"

data/lib/parsers/burp.rb

@@ -13,7 +13,6 @@ require 'json'
         # create a temporary finding object
         finding = Finding.new()
         finding.title = issue.css('name').text.to_s()
-        puts "#{finding.title}"
         finding.overview = issue.css('issueBackground').text.to_s()+issue.css('issueDetail').text.to_s()
         finding.remediation = issue.css('remediationBackground').text.to_s() + issue.css('remediationDetail').text.to_s()
         finding.references=issue.css('references').text.to_s() + issue.css('vulnerabilityClassifications').text.to_s()

data/lib/parsers/prowler.rb

@@ -0,0 +1,58 @@
+require 'json'
+
+class Prowler
+  def parse(file,threshold) 
+    grouped_data = {}
+    data = JSON.parse(file)
+
+    data.each do |item|
+      title = item['CheckTitle']
+
+      if grouped_data[title].nil?
+        grouped_data[title] = []
+      end
+
+      grouped_data[title] << item
+    end
+
+    merged_data = {}
+
+    grouped_data.each do |title, items|
+      fail_items = items.select { |item| item['Status'] == 'FAIL' }
+
+      if fail_items.length > 0
+        merged_data[title] = {
+          'AccountId' =>fail_items[0]['AccountId'],          
+          'ServiceName' => fail_items[0]['ServiceName'],
+          'SubServiceName' =>fail_items[0]['SubServiceName'],
+          'StatusExtended' => fail_items.map { |item| item['StatusExtended'] }.join("\r\n"),
+          'Severity' => fail_items[0]['Severity'],
+          'Risk' => fail_items[0]['Risk'],
+          'Region' => fail_items.map { |item| item['Region'] }.join("\r\n"),
+          'ResourceId' => fail_items.map { |item| item['ResourceId'] }.join("\r\n"),
+          'Remediation' => fail_items[0]['Remediation']['Code'],
+          'Recommendation' => fail_items[0]['Remediation']['Recommendation'],
+          'Scale' => if fail_items[0]['Severity'] == 'critical'
+                       10.to_i
+                     elsif fail_items[0]['Severity'] == 'high'
+                       8.to_i
+                     elsif fail_items[0]['Severity'] == 'medium'
+                       6.to_i
+                     elsif fail_items[0]['Severity'] == 'low'          
+                       3.to_i
+                     end
+        }
+      end
+    end
+
+    merged_data.transform_values! do |value|
+      value['ServiceName'] = value['ServiceName'].upcase if value['ServiceName']
+      value['Severity'] = value['Severity'].upcase if value['Severity']
+      value
+    end
+
+    data = merged_data.sort_by { |_, value| value["Scale"] }
+
+    return data.to_json
+  end
+end

metadata

@@ -1,17 +1,18 @@
 --- !ruby/object:Gem::Specification
 name: odle-m
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.3
 platform: ruby
 authors:
 - Shyam Ganesh
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-11-05 00:00:00.000000000 Z
+date: 2023-03-25 00:00:00.000000000 Z
 dependencies: []
 description: An easy to use security data parsing tool. Takes in data from different
-  tools and outputs standardized JSON with extra parsing
+  tools and outputs standardized JSON with extra parsing, modified from original gem
+  odle
 email: ''
 executables:
 - odle-m
@@ -26,6 +27,7 @@ files:
 - lib/parsers/msfv5.rb
 - lib/parsers/nessus.rb
 - lib/parsers/nmap.rb
+- lib/parsers/prowler.rb
 homepage: http://rubygems.org/gems/odle
 licenses:
 - BSD-3-Clause-Attribution
@@ -50,5 +52,6 @@ requirements: []
 rubygems_version: 3.1.6
 signing_key:
 specification_version: 4
-summary: odle-m
+summary: Take in nessus, burp, nmap output xml, prowler outpu and convert them into
+  json
 test_files: []