risu 1.4.4 → 1.4.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. data/NEWS.markdown +14 -1
  2. data/README.markdown +23 -41
  3. data/TODO.markdown +48 -39
  4. data/lib/risu.rb +4 -9
  5. data/lib/risu/base.rb +15 -0
  6. data/lib/risu/base/prawn_templater.rb +37 -0
  7. data/lib/risu/{schema.rb → base/schema.rb} +34 -15
  8. data/lib/risu/base/template_base.rb +23 -0
  9. data/lib/risu/base/template_manager.rb +106 -0
  10. data/lib/risu/base/templater.rb +37 -0
  11. data/lib/risu/cli/application.rb +28 -8
  12. data/lib/risu/models.rb +1 -2
  13. data/lib/risu/models/host.rb +147 -23
  14. data/lib/risu/models/item.rb +131 -43
  15. data/lib/risu/models/plugin.rb +1 -1
  16. data/lib/risu/models/report.rb +11 -1
  17. data/lib/risu/models/serverpreference.rb +0 -2
  18. data/lib/risu/models/servicedescription.rb +10 -0
  19. data/lib/risu/parsers.rb +2 -3
  20. data/lib/risu/parsers/nessus/nessus_document.rb +69 -0
  21. data/lib/risu/parsers/nessus/nessus_sax_listener.rb +278 -0
  22. data/lib/risu/templates/assets.rb +45 -18
  23. data/lib/risu/templates/cover_sheet.rb +70 -42
  24. data/lib/risu/templates/exec_summary.rb +64 -45
  25. data/lib/risu/templates/executive_summary.rb +185 -161
  26. data/lib/risu/templates/finding_statistics.rb +44 -17
  27. data/lib/risu/templates/findings_host.rb +70 -46
  28. data/lib/risu/templates/findings_summary.rb +78 -54
  29. data/lib/risu/templates/findings_summary_with_pluginid.rb +80 -54
  30. data/lib/risu/templates/graphs.rb +46 -19
  31. data/lib/risu/templates/host_summary.rb +62 -39
  32. data/lib/risu/templates/ms_patch_summary.rb +59 -35
  33. data/lib/risu/templates/ms_update_summary.rb +59 -35
  34. data/lib/risu/templates/pci_compliance.rb +88 -64
  35. data/lib/risu/templates/technical_findings.rb +132 -106
  36. data/lib/risu/templates/template.rb +24 -0
  37. metadata +12 -6
  38. data/lib/risu/listener.rb +0 -274
  39. data/lib/risu/nessusdocument.rb +0 -66
  40. data/lib/risu/prawn_templater.rb +0 -38
data/lib/risu/templates/finding_statistics.rb CHANGED
@@ -1,23 +1,50 @@
1
- text Report.classification, :align => :center
2
- text "\n"
1
+ module Risu
2
+ module Modules
3
+ class FindingStatistics < Risu::Base::TemplateBase
4
+
5
+ #
6
+ #
7
+ def initialize ()
8
+ @template_info =
9
+ {
10
+ :name => "finding_statistics",
11
+ :author => "hammackj",
12
+ :version => "0.0.1",
13
+ :description => "Generates report finding statistics"
14
+ }
15
+ end
16
+
17
+ #
18
+ #
19
+ def render(output)
20
+ output.text Report.classification, :align => :center
21
+ output.text "\n"
3
22
 
4
- font_size(22) { text Report.title, :align => :center }
5
- font_size(18) {
6
- text "Finding Statistics", :align => :center
7
- text "\n"
8
- text "This report was prepared by\n#{Report.author}", :align => :center
9
- }
23
+ output.font_size(22) { output.text Report.title, :align => :center }
24
+ output.font_size(18) {
25
+ output.text "Finding Statistics", :align => :center
26
+ output.text "\n"
27
+ output.text "This report was prepared by\n#{Report.author}", :align => :center
28
+ }
10
29
 
11
- text "\n\n\n"
30
+ output.text "\n\n\n"
12
31
 
13
- text "Scan Date:", :style => :bold
14
- text "#{Report.scan_date}"
15
- text "\n"
32
+ output.text "Scan Date:", :style => :bold
33
+ output.text "#{Report.scan_date}"
34
+ output.text "\n"
16
35
 
17
- headers = ["Number of hosts","Number of risks","High Risks", "Medium Risks", "Low Risks", "Info Risks"]
18
- data = [Host.count, Item.risks.count, Item.high_risks.count, Item.medium_risks.count, Item.low_risks.count, Item.info_risks.count]
36
+ headers = ["Number of hosts","Number of risks","High Risks", "Medium Risks", "Low Risks", "Info Risks"]
37
+ data = [Host.count, Item.risks.count, Item.high_risks.count, Item.medium_risks.count, Item.low_risks.count, Item.info_risks.count]
19
38
 
20
- table([headers] + [data], :header => true, :width => bounds.width) do
21
- row(0).style(:font_style => :bold, :background_color => 'cccccc')
22
- cells.borders = [:top, :bottom, :left, :right]
39
+ output.table([headers] + [data], :header => true, :width => output.bounds.width) do
40
+ row(0).style(:font_style => :bold, :background_color => 'cccccc')
41
+ cells.borders = [:top, :bottom, :left, :right]
42
+ end
43
+
44
+ end
45
+ end
46
+ end
23
47
  end
48
+
49
+
50
+
data/lib/risu/templates/findings_host.rb CHANGED
@@ -1,49 +1,73 @@
1
- text Report.classification, :align => :center
2
- text "\n"
3
-
4
- font_size(22) { text Report.title, :align => :center }
5
- font_size(18) {
6
- text "Findings Summary Report", :align => :center
7
- text "\n"
8
- text "This report was prepared by\n#{Report.author}", :align => :center
9
- }
10
-
11
- text "\n\n\n"
12
-
13
- Host.sorted.each do |host|
14
- if host.items.high_risks_unique_sorted.all.size > 0 or host.items.medium_risks_unique_sorted.all.size > 0
15
- font_size(20) {
16
- text "#{host.ip} - #{host.fqdn}", :style => :bold
17
- }
18
- end
19
-
20
- if host.items.high_risks_unique_sorted.all.size > 0
21
- font_size(18) {
22
- fill_color "FF0000"
23
- text "High Findings", :style => :bold
24
- fill_color "000000"
25
- }
26
-
27
- host.items.high_risks_unique_sorted.each do |item|
28
- name = Plugin.find_by_id(item.plugin_id).plugin_name
29
- text "#{name}"
30
- end
31
- end
32
-
33
- if host.items.medium_risks_unique_sorted.all.size > 0
34
- font_size(18) {
35
- fill_color "FF8040"
36
- text "Medium Findings", :style => :bold
37
- fill_color "000000"
38
- }
39
-
40
- host.items.medium_risks_unique_sorted.each do |item|
41
- name = Plugin.find_by_id(item.plugin_id).plugin_name
42
- text "#{name}"
1
+ module Risu
2
+ module Modules
3
+ class FindingsHost < Risu::Base::TemplateBase
4
+
5
+ #
6
+ #
7
+ def initialize ()
8
+ @template_info =
9
+ {
10
+ :name => "findings_host",
11
+ :author => "hammackj",
12
+ :version => "0.0.1",
13
+ :description => "Generates a findings report by host"
14
+ }
15
+ end
16
+
17
+ #
18
+ #
19
+ def render(output)
20
+ output.text Report.classification, :align => :center
21
+ output.text "\n"
22
+
23
+ output.font_size(22) { output.text Report.title, :align => :center }
24
+ output.font_size(18) {
25
+ output.text "Findings Summary Report", :align => :center
26
+ output.text "\n"
27
+ output.text "This report was prepared by\n#{Report.author}", :align => :center
28
+ }
29
+
30
+ output.text "\n\n\n"
31
+
32
+ Host.sorted.each do |host|
33
+ if host.items.high_risks_unique_sorted.all.size > 0 or host.items.medium_risks_unique_sorted.all.size > 0
34
+ output.font_size(20) {
35
+ output.text "#{host.ip} - #{host.fqdn}", :style => :bold
36
+ }
37
+ end
38
+
39
+ if host.items.high_risks_unique_sorted.all.size > 0
40
+ output.font_size(18) {
41
+ output.fill_color "FF0000"
42
+ output.text "High Findings", :style => :bold
43
+ output.fill_color "000000"
44
+ }
45
+
46
+ host.items.high_risks_unique_sorted.each do |item|
47
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
48
+ output.text "#{name}"
49
+ end
50
+ end
51
+
52
+ if host.items.medium_risks_unique_sorted.all.size > 0
53
+ output.font_size(18) {
54
+ output.fill_color "FF8040"
55
+ output.text "Medium Findings", :style => :bold
56
+ output.fill_color "000000"
57
+ }
58
+
59
+ host.items.medium_risks_unique_sorted.each do |item|
60
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
61
+ output.text "#{name}"
62
+ end
63
+ end
64
+
65
+ if host.items.high_risks_unique_sorted.all.size > 0 or host.items.medium_risks_unique_sorted.all.size > 0
66
+ output.text "\n"
67
+ end
68
+ end
69
+
70
+ end
43
71
  end
44
72
  end
45
-
46
- if host.items.high_risks_unique_sorted.all.size > 0 or host.items.medium_risks_unique_sorted.all.size > 0
47
- text "\n"
48
- end
49
73
  end
data/lib/risu/templates/findings_summary.rb CHANGED
@@ -1,68 +1,92 @@
1
- text Report.classification, :align => :center
2
- text "\n"
1
+ module Risu
2
+ module Modules
3
+ class FindingsSummary < Risu::Base::TemplateBase
4
+
5
+ #
6
+ #
7
+ def initialize ()
8
+ @template_info =
9
+ {
10
+ :name => "findings_summary",
11
+ :author => "hammackj",
12
+ :version => "0.0.1",
13
+ :description => "Generates a findings summary report"
14
+ }
15
+ end
16
+
17
+ #
18
+ #
19
+ def render(output)
20
+ output.text Report.classification, :align => :center
21
+ output.text "\n"
3
22
 
4
- font_size(22) { text Report.title, :align => :center }
5
- font_size(18) {
6
- text "Findings Summary Report", :align => :center
7
- text "\n"
8
- text "This report was prepared by\n#{Report.author}", :align => :center
9
- }
23
+ output.font_size(22) { output.text Report.title, :align => :center }
24
+ output.font_size(18) {
25
+ output.text "Findings Summary Report", :align => :center
26
+ output.text "\n"
27
+ output.text "This report was prepared by\n#{Report.author}", :align => :center
28
+ }
10
29
 
11
- text "\n\n\n"
30
+ output.text "\n\n\n"
12
31
 
13
- font_size(20) {
14
- fill_color "FF0000"
15
- text "High Findings", :style => :bold
16
- fill_color "000000"
17
- }
32
+ output.font_size(20) {
33
+ output.fill_color "FF0000"
34
+ output.text "High Findings", :style => :bold
35
+ output.fill_color "000000"
36
+ }
18
37
 
19
- Item.high_risks_unique_sorted.each do |item|
20
- name = Plugin.find_by_id(item.plugin_id).plugin_name
21
- count = Item.where(:plugin_id => item.plugin_id).count
38
+ Item.high_risks_unique_sorted.each do |item|
39
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
40
+ count = Item.where(:plugin_id => item.plugin_id).count
22
41
 
23
- text "#{count} - #{name}"
24
- end
42
+ output.text "#{count} - #{name}"
43
+ end
25
44
 
26
- start_new_page
45
+ output.start_new_page
27
46
 
28
- font_size(20) {
29
- fill_color "FF8040"
30
- text "Medium Findings", :style => :bold
31
- fill_color "000000"
32
- }
47
+ output.font_size(20) {
48
+ output.fill_color "FF8040"
49
+ output.text "Medium Findings", :style => :bold
50
+ output.fill_color "000000"
51
+ }
33
52
 
34
- Item.medium_risks_unique_sorted.each do |item|
35
- name = Plugin.find_by_id(item.plugin_id).plugin_name
36
- count = Item.where(:plugin_id => item.plugin_id).count
53
+ Item.medium_risks_unique_sorted.each do |item|
54
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
55
+ count = Item.where(:plugin_id => item.plugin_id).count
37
56
 
38
- text "#{count} - #{name}"
39
- end
57
+ output.text "#{count} - #{name}"
58
+ end
40
59
 
41
- start_new_page
60
+ output.start_new_page
42
61
 
43
- font_size(20) {
44
- fill_color "0000FF"
45
- text "Low Findings", :style => :bold
46
- fill_color "000000"
47
- }
62
+ output.font_size(20) {
63
+ output.fill_color "0000FF"
64
+ output.text "Low Findings", :style => :bold
65
+ output.fill_color "000000"
66
+ }
48
67
 
49
- Item.low_risks_unique_sorted.each do |item|
50
- name = Plugin.find_by_id(item.plugin_id).plugin_name
51
- count = Item.where(:plugin_id => item.plugin_id).count
68
+ Item.low_risks_unique_sorted.each do |item|
69
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
70
+ count = Item.where(:plugin_id => item.plugin_id).count
52
71
 
53
- text "#{count} - #{name}"
54
- end
72
+ output.text "#{count} - #{name}"
73
+ end
55
74
 
56
- #Provides nothing
57
- #font_size(20) {
58
- # fill_color "008000"
59
- # text "Low Findings", :style => :bold
60
- # fill_color "000000"
61
- #}
62
- #
63
- #Item.low_risks_unique_sorted.each do |item|
64
- # name = Plugin.find_by_id(item.plugin_id).plugin_name
65
- # count = Item.where(:plugin_id => item.plugin_id).count
66
- #
67
- # text "#{count} - #{name}"
68
- #end
75
+ #Provides nothing
76
+ #output.font_size(20) {
77
+ # output.fill_color "008000"
78
+ # output.text "Low Findings", :style => :bold
79
+ # output.fill_color "000000"
80
+ #}
81
+ #
82
+ #Item.low_risks_unique_sorted.each do |item|
83
+ # name = Plugin.find_by_id(item.plugin_id).plugin_name
84
+ # count = Item.where(:plugin_id => item.plugin_id).count
85
+ #
86
+ # output.text "#{count} - #{name}"
87
+ #end
88
+
89
+ end
90
+ end
91
+ end
92
+ end
data/lib/risu/templates/findings_summary_with_pluginid.rb CHANGED
@@ -1,68 +1,94 @@
1
- text Report.classification, :align => :center
2
- text "\n"
1
+ module Risu
2
+ module Modules
3
+ class FindingsSummaryWithPluginID < Risu::Base::TemplateBase
4
+
5
+ #
6
+ #
7
+ def initialize ()
8
+ @template_info =
9
+ {
10
+ :name => "findings_summary_with_pluginid",
11
+ :author => "hammackj",
12
+ :version => "0.0.1",
13
+ :description => "Geneates a Findings Summary with Nessus Plugin ID"
14
+ }
15
+ end
16
+
17
+ #
18
+ #
19
+ def render(output)
20
+ output.text Report.classification, :align => :center
21
+ output.text "\n"
3
22
 
4
- font_size(22) { text Report.title, :align => :center }
5
- font_size(18) {
6
- text "Findings Summary Report", :align => :center
7
- text "\n"
8
- text "This report was prepared by\n#{Report.author}", :align => :center
9
- }
23
+ output.font_size(22) do
24
+ output.text Report.title, :align => :center
25
+ end
26
+
27
+ output.font_size(18) do
28
+ output.text "Findings Summary Report", :align => :center
29
+ output.text "\n"
30
+ output.text "This report was prepared by\n#{Report.author}", :align => :center
31
+ end
10
32
 
11
- text "\n\n\n"
33
+ output.text "\n\n\n"
12
34
 
13
- font_size(20) {
14
- fill_color "FF0000"
15
- text "High Findings", :style => :bold
16
- fill_color "000000"
17
- }
35
+ output.font_size(20) {
36
+ output.fill_color "FF0000"
37
+ output.text "High Findings", :style => :bold
38
+ output.fill_color "000000"
39
+ }
18
40
 
19
- Item.high_risks_unique_sorted.each do |item|
20
- name = Plugin.find_by_id(item.plugin_id).plugin_name
21
- count = Item.where(:plugin_id => item.plugin_id).count
41
+ Item.high_risks_unique_sorted.each do |item|
42
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
43
+ count = Item.where(:plugin_id => item.plugin_id).count
22
44
 
23
- text "#{count} - #{name} - #{item.plugin_id}"
24
- end
45
+ output.text "#{count} - #{name} - #{item.plugin_id}"
46
+ end
25
47
 
26
- start_new_page
48
+ output.start_new_page
27
49
 
28
- font_size(20) {
29
- fill_color "FF8040"
30
- text "Medium Findings", :style => :bold
31
- fill_color "000000"
32
- }
50
+ output.font_size(20) {
51
+ output.fill_color "FF8040"
52
+ output.text "Medium Findings", :style => :bold
53
+ output.fill_color "000000"
54
+ }
33
55
 
34
- Item.medium_risks_unique_sorted.each do |item|
35
- name = Plugin.find_by_id(item.plugin_id).plugin_name
36
- count = Item.where(:plugin_id => item.plugin_id).count
56
+ Item.medium_risks_unique_sorted.each do |item|
57
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
58
+ count = Item.where(:plugin_id => item.plugin_id).count
37
59
 
38
- text "#{count} - #{name} - #{item.plugin_id}"
39
- end
60
+ output.text "#{count} - #{name} - #{item.plugin_id}"
61
+ end
40
62
 
41
- start_new_page
63
+ output.start_new_page
42
64
 
43
- font_size(20) {
44
- fill_color "0000FF"
45
- text "Low Findings", :style => :bold
46
- fill_color "000000"
47
- }
65
+ output.font_size(20) {
66
+ output.fill_color "0000FF"
67
+ output.text "Low Findings", :style => :bold
68
+ output.fill_color "000000"
69
+ }
48
70
 
49
- Item.low_risks_unique_sorted.each do |item|
50
- name = Plugin.find_by_id(item.plugin_id).plugin_name
51
- count = Item.where(:plugin_id => item.plugin_id).count
71
+ Item.low_risks_unique_sorted.each do |item|
72
+ name = Plugin.find_by_id(item.plugin_id).plugin_name
73
+ count = Item.where(:plugin_id => item.plugin_id).count
52
74
 
53
- text "#{count} - #{name} - #{item.plugin_id}"
54
- end
75
+ output.text "#{count} - #{name} - #{item.plugin_id}"
76
+ end
55
77
 
56
- #Provides nothing
57
- #font_size(20) {
58
- # fill_color "008000"
59
- # text "Low Findings", :style => :bold
60
- # fill_color "000000"
61
- #}
62
- #
63
- #Item.low_risks_unique_sorted.each do |item|
64
- # name = Plugin.find_by_id(item.plugin_id).plugin_name
65
- # count = Item.where(:plugin_id => item.plugin_id).count
66
- #
67
- # text "#{count} - #{name}"
68
- #end
78
+ #Provides nothing
79
+ #output.font_size(20) {
80
+ # output.fill_color "008000"
81
+ # output.text "Low Findings", :style => :bold
82
+ # output.fill_color "000000"
83
+ #}
84
+ #
85
+ #Item.low_risks_unique_sorted.each do |item|
86
+ # name = Plugin.find_by_id(item.plugin_id).plugin_name
87
+ # count = Item.where(:plugin_id => item.plugin_id).count
88
+ #
89
+ # output.text "#{count} - #{name}"
90
+ #end
91
+ end
92
+ end
93
+ end
94
+ end