risu 1.4.4 → 1.4.5

data/lib/risu/base/template_manager.rb

@@ -0,0 +1,106 @@
+module Risu
+	module Base
+		class TemplateManager
+			attr_accessor :registered_templates
+
+			#
+			#
+			def initialize (path)
+			  @registered_templates = Array.new
+				@templates = Array.new
+				
+				load_templates(path)
+			end
+
+			#
+			#
+			def load_templates(path)
+				begin
+					base_dir = __FILE__.gsub("risu/base/template_manager.rb", "")
+				  Dir["#{base_dir + path}/**/*.rb"].each do |x| 
+						begin
+							load x
+						rescue => e
+							next
+						end
+					end
+
+				  TemplateBase.possible_templates.each do |p|
+				    if validate(p) ==  true
+				      @registered_templates << p
+				    end
+				  end
+				rescue => e
+					puts "Bad plugin"
+				end
+			end
+
+			#
+			#
+			def validate(template)
+			  t = template.new
+
+			  if t == nil
+			    return false
+			  end
+
+			  if t.respond_to?(:render) == false
+			    return false
+			  end
+
+			  return true
+			end
+
+			#
+			#
+			def find_plugins(file_name)
+				Dir.new("#{file_name}").each do |file|
+					next if file.match(/^\.+/)
+					path = "#{file_name}/#{file}"
+
+					if  FileTest.directory?("#{path}")
+						list("#{path}")
+					else
+						self.register_template path
+					end
+				end
+			end
+
+			#
+			#
+			def register_template(plugin)
+			  load plugin
+
+			  @templates.push(plugin)
+			end
+			
+			#
+			#
+			def find_template_by_name(name)
+				@registered_templates.each do |template|
+					t = template.new
+					if t.template_info[:name] == name
+						return t
+					end
+				end
+				
+				return nil
+			end
+			
+			#
+			#
+			def display_templates
+				puts "Available Templates"
+			  @registered_templates.each do |x| 
+			      p = x.new
+			      puts "\t#{p.template_info[:name]} - #{p.template_info[:description]}\n", 
+			    end
+			end
+		end
+	end
+end
+
+
+
+
+

data/lib/risu/base/templater.rb

@@ -0,0 +1,37 @@
+module Risu
+	module Base
+		# Templater class for generating a report from a erb template
+		#
+		# @author Jacob Hammack
+		class Templater
+			attr_accessor :template, :template_manager, :findings, :output_file
+		
+			# Setups of the Templater class initalizing all of the variables
+			#
+			# @return [Templater] New Instance
+			def initialize(template, findings, output, template_manager)
+				@template = template
+				@findings = findings
+				@output_file = output			
+				@template_manager = template_manager
+			end
+		
+			# Generates a report based on the erb template
+			#
+			def generate
+				begin
+					template = @template
+					template_manager = @template_manager
+					
+					Prawn::Document.generate(@output_file, :margin => [75, 50, 75, 50]) do |output|						
+						output.font_size 12
+						t = template_manager.find_template_by_name(template)
+						t.render(output) unless t == nil
+					end
+				rescue => e
+					puts "Error: #{e.message} \n #{e.backtrace.join("\n\t")}\n"
+				end
+			end
+		end
+	end
+end

data/lib/risu/cli/application.rb

@@ -7,6 +7,7 @@ module Risu
 		#
 		# @author Jacob Hammack <jacob.hammack@hammackj.com>
 		class Application
+			include Risu::Base
 			attr_accessor :database
 
 			#
@@ -18,6 +19,9 @@ module Risu
 				@blacklist = {}
 
 				@options[:debug] = false
+				@options[:list_templates] = false
+				
+				@template_manager = Risu::Base::TemplateManager.new "risu/templates"
 			end
 
 			# Creates a blank config file
@@ -88,7 +92,7 @@ module Risu
 					end
 
 					ActiveRecord::Base.establish_connection(@database)
-					require 'risu/schema'
+					require 'risu/base/schema'
 					Schema.migrate(direction)
 
 					if direction == :up
@@ -193,13 +197,23 @@ module Risu
 						opt.separator('')
 						opt.separator("Reporting Options")
 
-						opt.on('-t','--template FILE','The filename of the template to use') do |option|
+						opt.on('-t', '--template FILE', 'The filename of the template to use') do |option|
 							@options[:template] = option
 						end
 
-						opt.on('-o','--output-file FILE','The filename to output the generated report to') do |option|
+						opt.on('-o', '--output-file FILE', 'The filename to output the generated report to') do |option|
 							@options[:output_file] = option
 						end
+						
+						opt.on('-l', '--list-templates', "Lists all of the templates available to #{APP_NAME}") do |option|
+							@options[:list_templates] = option
+						end
+
+						opt.on('--create-template NAME', "Creates a template file in the ~/.risu/templates directory") do |option|
+							if File.exists?(option) == true
+								puts "[!] Template "
+							end
+						end
 
 						opt.separator('')
 						opt.separator('Configuration Options')
@@ -287,6 +301,12 @@ module Risu
 			#
 			def run
 				parse_options
+				
+				if @options[:list_templates]
+					@template_manager.display_templates
+					
+					exit
+				end
 
 				if @options[:debug] == true
 					puts "[*] Enabling Debug Mode"
@@ -326,8 +346,8 @@ module Risu
 				end
 
 				if @options[:template] != nil and @options[:output_file] != nil
-					if File.exists?(@options[:template]) == false
-						puts "[!] Template \"#{@options[:template]}\" does not exist. Please check the filename"
+					if @template_manager.find_template_by_name(@options[:template]) == nil
+						puts "[!] Template \"#{@options[:template]}\" does not exist. Please check the name"
 						exit
 					end
 
@@ -337,8 +357,8 @@ module Risu
 					@findings.title = @report["title"]
 					@findings.company = @report["company"]
 					@findings.classification = @report["classification"]
-
-					template = PrawnTemplater.new(@options[:template], @findings, @options[:output_file])
+					
+					template = Templater.new(@options[:template], @findings, @options[:output_file], @template_manager)
 					template.generate
 				end
 
@@ -371,7 +391,7 @@ module Risu
 							raise Risu::Exceptions::InvalidDocument, "[!] Document does not exist - #{file}"
 						end
 
-						doc = NessusDocument.new file
+						doc = Risu::Parsers::Nessus::NessusDocument.new file
 						if doc.valid? == true
 							doc.parse
 

data/lib/risu/models.rb

@@ -1,5 +1,3 @@
-# encoding: utf-8
-
 module Risu
 	module Models
 	end
@@ -16,3 +14,4 @@ require 'risu/models/report'
 require 'risu/models/reference'
 require 'risu/models/policy'
 require 'risu/models/version'
+require 'risu/models/servicedescription'

data/lib/risu/models/host.rb

@@ -45,7 +45,7 @@ module Risu
 				def os_windows
 					where("os LIKE '%Windows%'")#.group(:os)
 				end
-				
+
 				# Negation query for all hosts with a Windows based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -59,21 +59,21 @@ module Risu
 				def os_windows_nt
 					where("os LIKE '%Windows NT%'")
 				end
-				
+
 				# Negation query for all hosts with a Windows NT based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
 				def not_os_windows_nt
 					where("os NOT LIKE '%Windows NT%'")
 				end
-				
+
 				# Queries for hosts with a Windows 2000 based Operating System
 				#
 				# @return [ActiveRecord::Relation] with the query results
 				def os_windows_2k
 					where("os LIKE '%Windows 2000%'")
 				end
-							
+
 				# Negation query for all hosts with a Windows 2000 based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -87,7 +87,7 @@ module Risu
 				def os_windows_xp
 					where("os LIKE '%Windows XP%'")
 				end
-				
+
 				# Negation query for all hosts with a Windows XP based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -101,7 +101,7 @@ module Risu
 				def os_windows_2k3
 					where("os LIKE '%Windows Server 2003%'")
 				end
-				
+
 				# Negation query for all hosts with a Windows Server 2003 based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -115,7 +115,7 @@ module Risu
 				def os_windows_vista
 					where("os LIKE '%Windows Vista%'")
 				end
-				
+
 				# Negation query for all hosts with a Windows Vista based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -129,7 +129,7 @@ module Risu
 				def os_windows_2k8
 					where("os LIKE '%Windows Server 2008%'")
 				end
-				
+
 				def not_os_windows_2k8
 					where("os NOT LIKE '%Windows Server 2008%'")
 				end
@@ -140,7 +140,7 @@ module Risu
 				def os_windows_7
 					where("os LIKE '%Windows 7%'")
 				end
-				
+
 				# Negation query for all hosts with a Windows 7 based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -155,14 +155,14 @@ module Risu
 				def os_windows_other
 					not_os_windows_7.not_os_windows_2k8.not_os_windows_vista.not_os_windows_2k3.not_os_windows_xp.not_os_windows_2k.not_os_windows_nt
 				end
-				
+
 				# Queries for all hosts with a Linux based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
 				def os_linux
 					where("os LIKE '%Linux%'")
 				end
-				
+
 				# Negation query for all hosts with a Linux based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -176,7 +176,7 @@ module Risu
 				def os_freebsd
 					where("os LIKE '%FreeBSD%'")
 				end
-				
+
 				# Negation query for all hosts with a FreeBSD based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -190,7 +190,7 @@ module Risu
 				def os_netbsd
 					where("os LIKE '%NetBsd%'")
 				end
-				
+
 				# Negation query for all hosts with a NETbsd based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -204,7 +204,7 @@ module Risu
 				def os_cisco
 					where("os LIKE '%CISCO%'")
 				end
-				
+
 				# Negation query for all hosts with a Cisco based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -218,7 +218,7 @@ module Risu
 				def os_vxworks
 					where("os LIKE '%VxWorks%'")
 				end
-				
+
 				# Negation query for all hosts with a VXWorks based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -232,21 +232,21 @@ module Risu
 				def os_vmware_esx
 					where("os LIKE '%VMware ESX%'")
 				end
-				
+
 				# Negation query for all hosts with a VMware ESX based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
 				def not_os_vmware_esx
 					where("os NOT LIKE '%VMware ESX%'")
 				end
-				
+
 				# Queries for all hosts with a Mac OSX based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
 				def os_osx
 					where("os LIKE '%Mac OS X%'")
 				end
-				
+
 				# Negation query for all hosts with a Mac OSX based Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
@@ -254,11 +254,19 @@ module Risu
 					where("os NOT LIKE '%Mac OS X%'")
 				end
 
+				def os_aix
+					where("os LIKE '%AIX%'")
+				end
+
+				def not_os_aix
+					where("os NOT LIKE '%AIX%'")
+				end
+
 				# Queries for all hosts with a Unknown Operating system
 				#
 				# @return [ActiveRecord::Relation] with the query results
 				def os_other
-					not_os_osx.not_os_linux.not_os_netbsd.not_os_freebsd.not_os_cisco.not_os_vxworks.not_os_vmware_esx.not_os_windows
+					not_os_osx.not_os_linux.not_os_netbsd.not_os_freebsd.not_os_cisco.not_os_vxworks.not_os_vmware_esx.not_os_windows.not_os_aix
 				end
 
 				# Generates a graph of the high and medium findings count per host
@@ -269,7 +277,7 @@ module Risu
 					g.title = sprintf "Top %d High/Medium Finding Count Per Host ", Item.risks_by_host(limit).all.count
 					g.sort = false
 					g.theme = {
-						:colors => %w(red green blue orange yellow purple black grey brown pink),
+						:colors => %w(red orange yellow blue green purple black grey brown pink),
 						:background_colors => %w(white white)
 					}
 
@@ -291,7 +299,7 @@ module Risu
 					g.title = "Other Operating Systems Percentage"
 					g.sort = false
 					g.theme = {
-						:colors => %w(red green blue orange yellow purple black grey brown pink),
+						:colors => %w(red orange yellow blue green purple black grey brown pink),
 						:background_colors => %w(white white)
 					}
 
@@ -302,6 +310,7 @@ module Risu
 					cisco = Host.os_cisco.all.count
 					vxworks = Host.os_vxworks.all.count
 					esx = Host.os_vmware_esx.all.count
+					aix = Host.os_aix.all.count
 					other = Host.os_other.all.count
 
 					g.data("Linux", linux) unless linux == 0
@@ -311,11 +320,12 @@ module Risu
 					g.data("Cisco ISO", cisco) unless cisco == 0
 					g.data("VxWorks", vxworks) unless vxworks == 0
 					g.data("VMware", esx) unless esx == 0
+					g.data("AIX", aix) unless aix == 0
 					g.data("Other", other) unless other == 0
 
 					#Creates very odd graphs
 					#Host.os_other.each do |host|
-					#	g.data(host.os, Host.where(:os => host.os).count) unless host.os == nil
+					# g.data(host.os, Host.where(:os => host.os).count) unless host.os == nil
 					#end
 
 					StringIO.new(g.to_blob)
@@ -329,7 +339,7 @@ module Risu
 					g.title = "Windows Operating Systems By Percentage"
 					g.sort = false
 					g.theme = {
-						:colors => %w(red green blue orange yellow purple black grey brown pink),
+						:colors => %w(red orange yellow blue green purple black grey brown pink),
 						:background_colors => %w(white white)
 					}
 
@@ -353,6 +363,120 @@ module Risu
 
 					StringIO.new(g.to_blob)
 				end
+				
+				#
+				#
+				def windows_os_graph_text
+					nt = Host.os_windows_nt.all.count
+					w2k = Host.os_windows_2k.all.count
+					xp = Host.os_windows_xp.all.count
+					w2k3 = Host.os_windows_2k3.all.count
+					vista = Host.os_windows_vista.all.count
+					w2k8 = Host.os_windows_2k8.all.count
+					w7 = Host.os_windows_7.all.count
+					other = (Host.os_windows.os_windows_other).all.count
+					
+					windows_os_count = nt + w2k + xp + w2k3 + vista + w7 + w2k8
+					
+					nt_percent = (nt.to_f / windows_os_count.to_f) * 100
+					w2k_percent = (w2k.to_f / windows_os_count.to_f) * 100
+					xp_percent = (xp.to_f / windows_os_count.to_f) * 100
+					w2k3_percent = (w2k3.to_f / windows_os_count.to_f) * 100
+					vista_percent = (vista.to_f / windows_os_count.to_f) * 100
+					w2k8_percent = (w2k8.to_f / windows_os_count.to_f) * 100
+					w7_percent = (w7.to_f / windows_os_count.to_f) * 100
+					
+					text = "This graph shows the percentage of the different Microsoft Windows based operating systems " +
+					"found on the #{Report.title} network.\n\n"
+					
+					text << "#{nt_percent.round.to_i}% of the network is Windows NT. " if nt > 0
+					text << "#{w2k_percent.round.to_i}% of the network is Windows 2000. " if w2k > 0
+					text << "#{xp_percent.round.to_i}% of the network is Windows XP. " if xp > 0
+					text << "#{w2k3_percent.round.to_i}% of the network is Windows Server 2003. " if w2k3 > 0
+					text << "#{vista_percent.round.to_i}% of the network is Windows Vista. " if vista > 0
+					text << "#{w2k8_percent.round.to_i}% of the network is Windows Server 2008. " if w2k8 > 0
+					text << "#{w7_percent.round.to_i}% of the network is Windows 7. " if w7 > 0
+					
+					text << "\n\n" << unsupported_os_windows if nt > 0 or w2k > 0
+					
+					return text					
+				end
+
+				# @todo add plural check
+				#
+				def unsupported_os_text
+					aix_text = unsupported_os_aix
+					win_text = unsupported_os_windows
+
+					unsupported_os_text = "Several unsupported operating systems were also discovered on the network. " +
+					"These operating systems are no longer updated by the specific vendor. These operating systems should be " +
+					"updated and replaced as soon as possible.\n\n"
+
+					unsupported_os_text << "#{win_text}" if win_text != ""
+					unsupported_os_text << "#{aix_text}" if aix_text != ""
+
+					return unsupported_os_text
+				end
+
+				def unsupported_os_windows
+					win_nt_text = ""
+					win_2000_text = ""
+					win_nt = Host.os_windows_nt
+					win_2000 = Host.os_windows_2k
+
+					#Host.os_windows.not_os_windows_7.not_os_windows_2008.not_os_windows_vista.not_os_windows_2003.not_os_windows_xp
+
+					win_nt_text = "Windows NT is an unsupported sperating system since Microsoft has stopped support as of June 2004. " +
+					"Please see http://windows.microsoft.com/en-us/windows/products/lifecycle for more information.\n\n" if win_nt.count >= 1
+
+					win_2000_text = "Windows 2000 is an unsupported operating system since Microsoft has stopped support as of June 2004. " +
+					"Please see http://windows.microsoft.com/en-us/windows/products/lifecycle for more information.\n\n" if win_2000.count >= 1
+
+					return "#{win_nt_text}#{win_2000_text}"
+
+				end
+
+				#
+				#
+				def unsupported_os_aix
+					text = ""
+					aix = Host.os_aix.where("OS LIKE 'AIX 5.%'")
+
+					text = "AIX 5.x is an unsupported operating system since IBM has stopped support as of April 2011. " +
+					"Please see http://www-03.ibm.com/systems/power/software/aix/ for more information " +
+					"about obtaining a newer supported version.\n\n" if aix.count >= 1
+
+					return text
+				end
+
+				def other_os_graph_text
+					text = "This graph shows the percentage of the different Non-Windows based operating systems " +
+					"found on the #{Report.title} network.\n\n"
+
+					linux = Host.os_linux.all.count
+					osx = Host.os_osx.all.count
+					freebsd = Host.os_freebsd.all.count
+					netbsd = Host.os_netbsd.all.count
+					cisco = Host.os_cisco.all.count
+					vxworks = Host.os_vxworks.all.count
+					esx = Host.os_vmware_esx.all.count
+					aix = Host.os_aix.all.count
+					other = Host.os_other.all.count
+
+					other_os_count = linux + osx + freebsd + netbsd + cisco + vxworks + esx + aix + other
+
+					linux_percent = (linux.to_f / other_os_count.to_f) * 100
+					aix_percent = (aix.to_f / other_os_count.to_f) * 100
+					
+					#todo add other os's here
+					
+
+					text << "#{linux_percent.to_i}% of the network is running Linux based operating systems. " if linux > 0
+					text << "#{aix_percent.to_i}% of the network is running AIX based operating systems. " if aix > 0
+					text << "\n\n"<< unsupported_os_aix if aix > 0
+
+					return text
+				end
 			end
 		end
 	end