risu 1.5.0 → 1.5.1

data/lib/risu/templates/findings_host.rb

@@ -1,29 +1,55 @@
+# Copyright (c) 2010-2012 Arxopia LLC.
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above copyright
+#       notice, this list of conditions and the following disclaimer in the
+#       documentation and/or other materials provided with the distribution.
+#     * Neither the name of the Arxopia LLC nor the names of its contributors
+#     	may be used to endorse or promote products derived from this software
+#     	without specific prior written permission.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
+# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+#OF THE POSSIBILITY OF SUCH DAMAGE.
+
 module Risu
 	module Templates
 		class FindingsHost < Risu::Base::TemplateBase
-			
+
 			#
 			#
 			def initialize ()
-				@template_info = 
-				{ 
-					:name => "findings_host", 
-					:author => "hammackj", 
-					:version => "0.0.2", 
+				@template_info =
+				{
+					:name => "findings_host",
+					:author => "hammackj",
+					:version => "0.0.2",
 					:description => "Generates a findings report by host"
 				}
 			end
-			
+
 			#
 			#
 			def render(output)
 				output.font_size 10
-				
+
 				output.text Report.classification.upcase, :align => :center
 				output.text "\n"
 
 				output.font_size(22) { output.text Report.title, :align => :center }
-				output.font_size(18) { 
+				output.font_size(18) {
 					output.text "Findings Summary by Host Report", :align => :center
 					output.text "\n"
 					output.text "This report was prepared by\n#{Report.author}", :align => :center
@@ -34,18 +60,18 @@ module Risu
 				Host.sorted.each do |host|
 					if host.items.high_risks_unique_sorted.all.size > 0 or host.items.medium_risks_unique_sorted.all.size > 0
 						output.font_size(16) do
-							
+
 							host_string = "#{host.ip}"
 							host_string << " (#{host.fqdn})" if host.fqdn != nil
-							
-							output.text "#{host_string}", :style => :bold 
+
+							output.text "#{host_string}", :style => :bold
 						end
 					end
 
 					if host.items.critical_risks_unique_sorted.all.size > 0
-						output.font_size(12) do 
+						output.font_size(12) do
 							output.fill_color "551A8B"
-							output.text "Critical Findings", :style => :bold 
+							output.text "Critical Findings", :style => :bold
 							output.fill_color "000000"
 						end
 
@@ -56,9 +82,9 @@ module Risu
 					end
 
 					if host.items.high_risks_unique_sorted.all.size > 0
-						output.font_size(12) { 
+						output.font_size(12) {
 							output.fill_color "FF0000"
-							output.text "High Findings", :style => :bold 
+							output.text "High Findings", :style => :bold
 							output.fill_color "000000"
 						}
 
@@ -69,9 +95,9 @@ module Risu
 					end
 
 					if host.items.medium_risks_unique_sorted.all.size > 0
-						output.font_size(12) { 
+						output.font_size(12) {
 							output.fill_color "FF8040"
-							output.text "Medium Findings", :style => :bold 
+							output.text "Medium Findings", :style => :bold
 							output.fill_color "000000"
 						}
 

data/lib/risu/templates/findings_summary.rb

@@ -1,29 +1,55 @@
+# Copyright (c) 2010-2012 Arxopia LLC.
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above copyright
+#       notice, this list of conditions and the following disclaimer in the
+#       documentation and/or other materials provided with the distribution.
+#     * Neither the name of the Arxopia LLC nor the names of its contributors
+#     	may be used to endorse or promote products derived from this software
+#     	without specific prior written permission.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
+# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+#OF THE POSSIBILITY OF SUCH DAMAGE.
+
 module Risu
 	module Templates
 		class FindingsSummary < Risu::Base::TemplateBase
-			
+
 			#
 			#
 			def initialize ()
-				@template_info = 
-				{ 
-					:name => "findings_summary", 
-					:author => "hammackj", 
-					:version => "0.0.1", 
+				@template_info =
+				{
+					:name => "findings_summary",
+					:author => "hammackj",
+					:version => "0.0.1",
 					:description => "Generates a findings summary report"
 				}
 			end
-			
+
 			#
 			#
 			def render(output)
 				output.text Report.classification.upcase, :align => :center
 				output.text "\n"
 
-				output.font_size(22) do 
-					output.text Report.title, :align => :center 
+				output.font_size(22) do
+					output.text Report.title, :align => :center
 				end
-				
+
 				output.font_size(18) do
 					output.text "Findings Summary Report", :align => :center
 					output.text "\n"
@@ -34,7 +60,7 @@ module Risu
 
 				output.font_size(20) do
 					output.fill_color "551A8B"
-					output.text "Critical Findings", :style => :bold 
+					output.text "Critical Findings", :style => :bold
 					output.fill_color "000000"
 				end
 
@@ -47,7 +73,7 @@ module Risu
 
 				output.font_size(20) do
 					output.fill_color "FF0000"
-					output.text "High Findings", :style => :bold 
+					output.text "High Findings", :style => :bold
 					output.fill_color "000000"
 				end
 
@@ -62,7 +88,7 @@ module Risu
 
 				output.font_size(20) do
 					output.fill_color "FF8040"
-					output.text "Medium Findings", :style => :bold 
+					output.text "Medium Findings", :style => :bold
 					output.fill_color "000000"
 				end
 
@@ -75,9 +101,9 @@ module Risu
 
 				output.start_new_page
 
-				output.font_size(20) { 
+				output.font_size(20) {
 					output.fill_color "0000FF"
-					output.text "Low Findings", :style => :bold 
+					output.text "Low Findings", :style => :bold
 					output.fill_color "000000"
 				}
 
@@ -89,9 +115,9 @@ module Risu
 				end
 
 				#Provides nothing
-				#output.font_size(20) { 
+				#output.font_size(20) {
 				#	output.fill_color "008000"
-				#	output.text "Low Findings", :style => :bold 
+				#	output.text "Low Findings", :style => :bold
 				#	output.fill_color "000000"
 				#}
 				#

data/lib/risu/templates/findings_summary_with_pluginid.rb

@@ -1,19 +1,45 @@
+# Copyright (c) 2010-2012 Arxopia LLC.
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above copyright
+#       notice, this list of conditions and the following disclaimer in the
+#       documentation and/or other materials provided with the distribution.
+#     * Neither the name of the Arxopia LLC nor the names of its contributors
+#     	may be used to endorse or promote products derived from this software
+#     	without specific prior written permission.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
+# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+#OF THE POSSIBILITY OF SUCH DAMAGE.
+
 module Risu
 	module Templates
 		class FindingsSummaryWithPluginID < Risu::Base::TemplateBase
-			
+
 			#
 			#
 			def initialize ()
-				@template_info = 
-				{ 
-					:name => "findings_summary_with_pluginid", 
-					:author => "hammackj", 
-					:version => "0.0.1", 
-					:description => "Geneates a Findings Summary with Nessus Plugin ID"
+				@template_info =
+				{
+					:name => "findings_summary_with_pluginid",
+					:author => "hammackj",
+					:version => "0.0.2",
+					:description => "Generates a Findings Summary with Nessus Plugin ID"
 				}
 			end
-			
+
 			#
 			#
 			def render(output)
@@ -23,7 +49,7 @@ module Risu
 				output.font_size(22) do
 					output.text Report.title, :align => :center
 				end
-				
+
 				output.font_size(18) do
 					output.text "Findings Summary Report", :align => :center
 					output.text "\n"
@@ -32,12 +58,28 @@ module Risu
 
 				output.text "\n\n\n"
 
-				output.font_size(20) { 
-					output.fill_color "FF0000"
-					output.text "High Findings", :style => :bold 
+				output.font_size(20) {
+					output.fill_color "9B30FF"
+					output.text "Critical Findings", :style => :bold
 					output.fill_color "000000"
 				}
 
+				Item.critical_risks_unique_sorted.each do |item|
+					name = Plugin.find_by_id(item.plugin_id).plugin_name
+					count = Item.where(:plugin_id => item.plugin_id).count
+
+					output.text "#{count} - #{name} - #{item.plugin_id}"
+				end
+
+				output.start_new_page
+
+
+				output.font_size(20) do
+					output.fill_color "FF0000"
+					output.text "High Findings", :style => :bold
+					output.fill_color "000000"
+				end
+
 				Item.high_risks_unique_sorted.each do |item|
 					name = Plugin.find_by_id(item.plugin_id).plugin_name
 					count = Item.where(:plugin_id => item.plugin_id).count
@@ -47,9 +89,9 @@ module Risu
 
 				output.start_new_page
 
-				output.font_size(20) { 
+				output.font_size(20) {
 					output.fill_color "FF8040"
-					output.text "Medium Findings", :style => :bold 
+					output.text "Medium Findings", :style => :bold
 					output.fill_color "000000"
 				}
 
@@ -62,9 +104,9 @@ module Risu
 
 				output.start_new_page
 
-				output.font_size(20) { 
+				output.font_size(20) {
 					output.fill_color "0000FF"
-					output.text "Low Findings", :style => :bold 
+					output.text "Low Findings", :style => :bold
 					output.fill_color "000000"
 				}
 
@@ -76,9 +118,9 @@ module Risu
 				end
 
 				#Provides nothing
-				#output.font_size(20) { 
+				#output.font_size(20) {
 				#	output.fill_color "008000"
-				#	output.text "Low Findings", :style => :bold 
+				#	output.text "Low Findings", :style => :bold
 				#	output.fill_color "000000"
 				#}
 				#

data/lib/risu/templates/graphs.rb

@@ -1,3 +1,29 @@
+# Copyright (c) 2010-2012 Arxopia LLC.
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above copyright
+#       notice, this list of conditions and the following disclaimer in the
+#       documentation and/or other materials provided with the distribution.
+#     * Neither the name of the Arxopia LLC nor the names of its contributors
+#     	may be used to endorse or promote products derived from this software
+#     	without specific prior written permission.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
+# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+#OF THE POSSIBILITY OF SUCH DAMAGE.
+
 module Risu
 	module Templates
 		class Graphs < Risu::Base::TemplateBase
@@ -34,10 +60,12 @@ module Risu
 				output.start_new_page
 
 				output.image Item.risks_by_severity_graph, :width => 500, :height => 375, :position => :center
+				output.text Item.risks_by_severity_graph_text
 
 				output.start_new_page
 
 				output.image Item.risks_by_service_graph(10), :width => 500, :height => 375, :position => :center
+				output.text Item.risks_by_service_graph_text
 
 				output.start_new_page
 
@@ -50,10 +78,12 @@ module Risu
 				output.start_new_page
 
 				output.image Host.other_os_graph, :width => 500, :height => 375, :position => :center
+				output.text Host.other_os_graph_text
 
 				output.start_new_page
 
 				output.image Host.windows_os_graph, :width => 500, :height => 375, :position => :center
+				output.text Host.windows_os_graph_text
 
 				output.start_new_page
 

data/lib/risu/templates/host_summary.rb

@@ -1,19 +1,45 @@
+# Copyright (c) 2010-2012 Arxopia LLC.
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above copyright
+#       notice, this list of conditions and the following disclaimer in the
+#       documentation and/or other materials provided with the distribution.
+#     * Neither the name of the Arxopia LLC nor the names of its contributors
+#     	may be used to endorse or promote products derived from this software
+#     	without specific prior written permission.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
+# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+#OF THE POSSIBILITY OF SUCH DAMAGE.
+
 module Risu
 	module Templates
 		class HostSummary < Risu::Base::TemplateBase
-			
+
 			#
 			#
 			def initialize ()
-				@template_info = 
-				{ 
-					:name => "host_summary", 
-					:author => "hammackj", 
-					:version => "0.0.2", 
+				@template_info =
+				{
+					:name => "host_summary",
+					:author => "hammackj",
+					:version => "0.0.2",
 					:description => "Generates a Host Summary Report"
 				}
 			end
-			
+
 			#
 			#
 			def render(output)
@@ -59,7 +85,7 @@ module Risu
 					row(0).style(:font_style => :bold, :background_color => 'D0D0D0')
 					cells.borders = [:top, :bottom, :left, :right]
 				end
-				
+
 				output.number_pages "<page> of <total>", :at => [output.bounds.right - 75, 0], :width => 150, :page_filter => :all
 			end
 		end