risu 1.7.4 → 1.7.5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (71) hide show
  1. checksums.yaml +4 -4
  2. data/NEWS.markdown +35 -0
  3. data/README.markdown +1 -1
  4. data/lib/risu.rb +3 -3
  5. data/lib/risu/base/host_template_helper.rb +3 -2
  6. data/lib/risu/base/schema.rb +6 -0
  7. data/lib/risu/base/template_helper.rb +8 -7
  8. data/lib/risu/base/template_manager.rb +5 -4
  9. data/lib/risu/cli.rb +2 -2
  10. data/lib/risu/cli/application.rb +1 -3
  11. data/lib/risu/exceptions.rb +2 -2
  12. data/lib/risu/exceptions/invaliddocument.rb +2 -2
  13. data/lib/risu/models.rb +2 -2
  14. data/lib/risu/models/host.rb +7 -1
  15. data/lib/risu/models/item.rb +32 -15
  16. data/lib/risu/models/pluginspreference.rb +2 -2
  17. data/lib/risu/models/policy.rb +2 -2
  18. data/lib/risu/models/reference.rb +2 -2
  19. data/lib/risu/models/report.rb +2 -2
  20. data/lib/risu/models/serverpreference.rb +2 -2
  21. data/lib/risu/models/version.rb +2 -2
  22. data/lib/risu/parsers.rb +2 -2
  23. data/lib/risu/parsers/nessus/nessus_sax_listener.rb +5 -2
  24. data/lib/risu/parsers/nessus/postprocess/adobe_acrobat.rb +87 -0
  25. data/lib/risu/parsers/nessus/postprocess/adobe_air.rb +21 -3
  26. data/lib/risu/parsers/nessus/postprocess/adobe_reader.rb +10 -2
  27. data/lib/risu/parsers/nessus/postprocess/apache.rb +8 -4
  28. data/lib/risu/parsers/nessus/postprocess/apple_quicktime.rb +56 -0
  29. data/lib/risu/parsers/nessus/postprocess/blackberry_enterprise_server.rb +61 -0
  30. data/lib/risu/parsers/nessus/postprocess/db2.rb +4 -3
  31. data/lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb +79 -0
  32. data/lib/risu/parsers/nessus/postprocess/filezilla.rb +53 -0
  33. data/lib/risu/parsers/nessus/postprocess/firefox.rb +83 -0
  34. data/lib/risu/parsers/nessus/postprocess/flash_player.rb +63 -41
  35. data/lib/risu/parsers/nessus/postprocess/flexnet.rb +2 -2
  36. data/lib/risu/parsers/nessus/postprocess/foxit_reader.rb +58 -0
  37. data/lib/risu/parsers/nessus/postprocess/google_chrome.rb +30 -3
  38. data/lib/risu/parsers/nessus/postprocess/hp_system_mgt_homepage.rb +12 -2
  39. data/lib/risu/parsers/nessus/postprocess/java.rb +24 -9
  40. data/lib/risu/parsers/nessus/postprocess/openssh.rb +6 -4
  41. data/lib/risu/parsers/nessus/postprocess/openssl.rb +33 -3
  42. data/lib/risu/parsers/nessus/postprocess/oracle_database.rb +2 -2
  43. data/lib/risu/parsers/nessus/postprocess/php.rb +47 -1
  44. data/lib/risu/parsers/nessus/postprocess/post_process.rb +2 -2
  45. data/lib/risu/parsers/nessus/postprocess/root_cause.rb +35 -1
  46. data/lib/risu/parsers/nessus/postprocess/shockwave.rb +1 -0
  47. data/lib/risu/parsers/nessus/postprocess/sigplus_pro.rb +55 -0
  48. data/lib/risu/parsers/nessus/postprocess/symantec_pcanywhere.rb +56 -0
  49. data/lib/risu/parsers/nessus/postprocess/vlc.rb +58 -0
  50. data/lib/risu/parsers/nessus/postprocess/vmware_esxi.rb +9 -2
  51. data/lib/risu/parsers/nessus/postprocess/vmware_player.rb +51 -0
  52. data/lib/risu/parsers/nessus/postprocess/vmware_vcenter.rb +62 -0
  53. data/lib/risu/parsers/nessus/postprocess/vmware_vsphere_client.rb +53 -0
  54. data/lib/risu/parsers/nessus/postprocess/windows.rb +688 -0
  55. data/lib/risu/parsers/nessus/postprocess/winscp.rb +57 -0
  56. data/lib/risu/parsers/nessus/postprocess/wireshark.rb +13 -1
  57. data/lib/risu/parsers/nexpose/nexpose_document.rb +2 -2
  58. data/lib/risu/parsers/nexpose/simple_nexpose.rb +2 -2
  59. data/lib/risu/renderers.rb +2 -2
  60. data/lib/risu/renderers/csvrenderer.rb +2 -2
  61. data/lib/risu/renderers/nilrenderer.rb +2 -2
  62. data/lib/risu/renderers/pdfrenderer.rb +2 -2
  63. data/lib/risu/templates/executive_summary_detailed.rb +2 -2
  64. data/lib/risu/templates/exploitablity_summary.rb +2 -2
  65. data/lib/risu/templates/finding_statistics.rb +2 -2
  66. data/lib/risu/templates/graphs.rb +2 -2
  67. data/lib/risu/templates/host_findings_csv.rb +3 -3
  68. data/lib/risu/templates/host_summary.rb +2 -2
  69. data/lib/risu/templates/ms_patch_summary.rb +2 -2
  70. data/lib/risu/templates/top_25.rb +2 -2
  71. metadata +16 -2
@@ -0,0 +1,83 @@
1
+ # Copyright (c) 2010-2015 Arxopia LLC.
2
+ # All rights reserved.
3
+ #
4
+ # Redistribution and use in source and binary forms, with or without
5
+ # modification, are permitted provided that the following conditions are met:
6
+ #
7
+ # * Redistributions of source code must retain the above copyright
8
+ # notice, this list of conditions and the following disclaimer.
9
+ # * Redistributions in binary form must reproduce the above copyright
10
+ # notice, this list of conditions and the following disclaimer in the
11
+ # documentation and/or other materials provided with the distribution.
12
+ # * Neither the name of the Arxopia LLC nor the names of its contributors
13
+ # may be used to endorse or promote products derived from this software
14
+ # without specific prior written permission.
15
+ #
16
+ # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
17
+ # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
18
+ # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
19
+ # DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
20
+ # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
21
+ # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
+ # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
+ # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
+
27
+ module Risu
28
+ module Parsers
29
+ module Nessus
30
+ module PostProcess
31
+ class FirefoxRollups < Risu::Base::PostProcessBase
32
+
33
+ #
34
+ def initialize
35
+ @info =
36
+ {
37
+ :description => "Firefox Patch Rollup",
38
+ :plugin_id => -99972,
39
+ :plugin_name => "Update to the latest Firefox",
40
+ :item_name => "Update to the latest Firefox",
41
+ :plugin_ids => [
42
+ 73099,
43
+ 73769,
44
+ 74440,
45
+ 76763,
46
+ 77500,
47
+ 77906,
48
+ 78473,
49
+ 79665,
50
+ 80523,
51
+ 81521,
52
+ 82040,
53
+ 82041,
54
+ 82503,
55
+ 82998,
56
+ 83439,
57
+ 84581,
58
+ 82583,
59
+ 85386,
60
+ 62998,
61
+ 63551,
62
+ 64723,
63
+ 65131,
64
+ 65806,
65
+ 66480,
66
+ 66993,
67
+ 69269,
68
+ 69993,
69
+ 70716,
70
+ 70949,
71
+ 71347,
72
+ 72331,
73
+ 85275,
74
+
75
+
76
+ ]
77
+ }
78
+ end
79
+ end
80
+ end
81
+ end
82
+ end
83
+ end
@@ -21,8 +21,8 @@
21
21
  # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
22
  # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
23
  # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
- #OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
- #OF THE POSSIBILITY OF SUCH DAMAGE.
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
26
 
27
27
  module Risu
28
28
  module Parsers
@@ -32,50 +32,50 @@ module Risu
32
32
 
33
33
  #
34
34
  def initialize
35
- @info =
35
+ @info =
36
36
  {
37
37
  :description => "Flash Player Patch Rollup",
38
38
  :plugin_id => -99997,
39
39
  :plugin_name => "Update to the latest Flash Player",
40
40
  :item_name => "Update to the latest Flash Player",
41
41
  :plugin_ids => [
42
- 46859,
43
- 48300,
44
- 49307,
45
- 50493,
46
- 51926,
47
- 52673,
48
- 53472,
49
- 54299,
50
- 54972,
51
- 55140,
52
- 55803,
53
- 56259,
54
- 56874,
55
- 58001,
56
- 58207,
57
- 58538,
58
- 58994,
59
- 59196,
60
- 59426,
61
- 61622,
62
- 62480,
63
- 62836,
64
- 63242,
65
- 63450,
66
- 64506,
67
- 64584,
68
- 64916,
69
- 65219,
70
- 65910,
71
- 66445,
72
- 66872,
73
- 67225,
74
- 69866,
75
- 70858,
76
- 71351,
77
- 71951,
78
- 72284,
42
+ 46859,
43
+ 48300,
44
+ 49307,
45
+ 50493,
46
+ 51926,
47
+ 52673,
48
+ 53472,
49
+ 54299,
50
+ 54972,
51
+ 55140,
52
+ 55803,
53
+ 56259,
54
+ 56874,
55
+ 58001,
56
+ 58207,
57
+ 58538,
58
+ 58994,
59
+ 59196,
60
+ 59426,
61
+ 61622,
62
+ 62480,
63
+ 62836,
64
+ 63242,
65
+ 63450,
66
+ 64506,
67
+ 64584,
68
+ 64916,
69
+ 65219,
70
+ 65910,
71
+ 66445,
72
+ 66872,
73
+ 67225,
74
+ 69866,
75
+ 70858,
76
+ 71351,
77
+ 71951,
78
+ 72284,
79
79
  74431,
80
80
  73994,
81
81
  73740,
@@ -93,7 +93,29 @@ module Risu
93
93
  23869,
94
94
  20158,
95
95
  29741,
96
- 21079
96
+ 21079,
97
+ 77172,
98
+ 77577,
99
+ 78441,
100
+ 79140,
101
+ 79442,
102
+ 79835,
103
+ 80484,
104
+ 80998,
105
+ 81127,
106
+ 81819,
107
+ 80946,
108
+ 83365,
109
+ 82781,
110
+ 61550,
111
+ 84048,
112
+ 84365,
113
+ 84642,
114
+ 84730,
115
+ 31799,
116
+ 85326
117
+
118
+
97
119
  ]
98
120
  }
99
121
  end
@@ -21,8 +21,8 @@
21
21
  # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
22
  # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
23
  # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
- #OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
- #OF THE POSSIBILITY OF SUCH DAMAGE.
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
26
 
27
27
  module Risu
28
28
  module Parsers
@@ -0,0 +1,58 @@
1
+ # Copyright (c) 2010-2015 Arxopia LLC.
2
+ # All rights reserved.
3
+ #
4
+ # Redistribution and use in source and binary forms, with or without
5
+ # modification, are permitted provided that the following conditions are met:
6
+ #
7
+ # * Redistributions of source code must retain the above copyright
8
+ # notice, this list of conditions and the following disclaimer.
9
+ # * Redistributions in binary form must reproduce the above copyright
10
+ # notice, this list of conditions and the following disclaimer in the
11
+ # documentation and/or other materials provided with the distribution.
12
+ # * Neither the name of the Arxopia LLC nor the names of its contributors
13
+ # may be used to endorse or promote products derived from this software
14
+ # without specific prior written permission.
15
+ #
16
+ # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
17
+ # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
18
+ # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
19
+ # DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
20
+ # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
21
+ # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
+ # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
+ # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
+
27
+ module Risu
28
+ module Parsers
29
+ module Nessus
30
+ module PostProcess
31
+ class FoxitReaderRollups < Risu::Base::PostProcessBase
32
+
33
+ #
34
+ def initialize
35
+ @info =
36
+ {
37
+ :description => "Foxit Reader Patch Rollup",
38
+ :plugin_id => -99969,
39
+ :plugin_name => "Update to the latest Foxit Reader",
40
+ :item_name => "Update to the latest Foxit Reader",
41
+ :plugin_ids => [
42
+ 52458,
43
+ 55671,
44
+ 57050,
45
+ 62063,
46
+ 62384,
47
+ 72723,
48
+ 62064,
49
+
50
+
51
+ ]
52
+ }
53
+ end
54
+ end
55
+ end
56
+ end
57
+ end
58
+ end
@@ -21,8 +21,8 @@
21
21
  # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
22
  # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
23
  # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
- #OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
- #OF THE POSSIBILITY OF SUCH DAMAGE.
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
26
 
27
27
  module Risu
28
28
  module Parsers
@@ -32,7 +32,7 @@ module Risu
32
32
 
33
33
  #
34
34
  def initialize
35
- @info =
35
+ @info =
36
36
  {
37
37
  :description => "Google Chrome Patch Rollup",
38
38
  :plugin_id => -99990,
@@ -41,6 +41,33 @@ module Risu
41
41
  :plugin_ids => [
42
42
  74434,
43
43
  76581,
44
+ 80485,
45
+ 80951,
46
+ 81020,
47
+ 81207,
48
+ 81647,
49
+ 82534,
50
+ 82825,
51
+ 83136,
52
+ 83366,
53
+ 83745,
54
+ 84049,
55
+ 84667,
56
+ 84731,
57
+ 84921,
58
+ 77409,
59
+ 77581,
60
+ 77861,
61
+ 78080,
62
+ 78475,
63
+ 79141,
64
+ 79336,
65
+ 79578,
66
+ 79836,
67
+ 84342,
68
+ 77184,
69
+ 85567,
70
+
44
71
 
45
72
  ]
46
73
  }
@@ -21,8 +21,8 @@
21
21
  # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
22
  # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
23
  # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
- #OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
- #OF THE POSSIBILITY OF SUCH DAMAGE.
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
26
 
27
27
  module Risu
28
28
  module Parsers
@@ -48,6 +48,16 @@ module Risu
48
48
  76345,
49
49
  49272,
50
50
  72959,
51
+ 46015,
52
+ 46677,
53
+ 78090,
54
+ 33548,
55
+ 34694,
56
+ 38832,
57
+ 85181,
58
+ 84923,
59
+ 73639,
60
+
51
61
 
52
62
 
53
63
  ]
@@ -40,19 +40,19 @@ module Risu
40
40
  :item_name => "Update to the latest Java",
41
41
  :plugin_ids => [
42
42
  66932,
43
- 65995,
44
- 56959,
45
- 59462,
46
- 62593,
43
+ 65995,
44
+ 56959,
45
+ 59462,
46
+ 62593,
47
47
  45544,
48
- 45379,
49
- 65050,
48
+ 45379,
49
+ 65050,
50
50
  63521,
51
51
  65052,
52
52
  49996,
53
53
  52002,
54
54
  54997,
55
- 55958,
55
+ 55958,
56
56
  56566,
57
57
  57290,
58
58
  57959,
@@ -73,9 +73,24 @@ module Risu
73
73
  35030,
74
74
  31356,
75
75
  65048,
76
+ 33488,
77
+ 78481,
78
+ 80908,
79
+ 82820,
80
+ 25124,
81
+ 25627,
82
+ 25903,
83
+ 31344,
84
+ 33487,
85
+ 25693,
86
+ 30148,
87
+ 61681,
88
+ 84824,
89
+ 33486,
90
+ 25709,
76
91
 
77
-
78
- ]
92
+
93
+ ]
79
94
  }
80
95
  end
81
96
  end
@@ -21,8 +21,8 @@
21
21
  # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
22
  # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
23
  # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
- #OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
- #OF THE POSSIBILITY OF SUCH DAMAGE.
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
26
 
27
27
  module Risu
28
28
  module Parsers
@@ -32,7 +32,7 @@ module Risu
32
32
 
33
33
  #
34
34
  def initialize
35
- @info =
35
+ @info =
36
36
  {
37
37
  :description => "OpenSSH Patch Rollup",
38
38
  :plugin_id => -99995,
@@ -54,7 +54,9 @@ module Risu
54
54
  44080,
55
55
  44077,
56
56
  44078,
57
-
57
+ 85382,
58
+
59
+
58
60
  ]
59
61
  }
60
62
  end