risu 1.7.6 → 1.7.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +0 -16
  3. data/README.markdown +1 -1
  4. data/Rakefile +10 -3
  5. data/{NEWS.markdown → docs/NEWS.markdown} +10 -0
  6. data/lib/risu/base.rb +1 -0
  7. data/lib/risu/base/graph_template_helper.rb +1 -1
  8. data/lib/risu/base/host_template_helper.rb +1 -1
  9. data/lib/risu/base/malware_template_helper.rb +62 -4
  10. data/lib/risu/base/post_process_manager.rb +1 -1
  11. data/lib/risu/base/scan_helper.rb +77 -0
  12. data/lib/risu/base/schema.rb +1 -3
  13. data/lib/risu/base/shares_template_helper.rb +47 -21
  14. data/lib/risu/base/template_helper.rb +3 -2
  15. data/lib/risu/base/template_manager.rb +3 -5
  16. data/lib/risu/cli/application.rb +2 -2
  17. data/lib/risu/cli/banner.rb +18 -0
  18. data/lib/risu/models/host.rb +58 -64
  19. data/lib/risu/models/item.rb +1 -0
  20. data/lib/risu/models/plugin.rb +7 -1
  21. data/lib/risu/models/report.rb +2 -2
  22. data/lib/risu/parsers/nessus/nessus_document.rb +1 -1
  23. data/lib/risu/parsers/nessus/nessus_sax_listener.rb +4 -2
  24. data/lib/risu/parsers/nessus/postprocess/adobe_acrobat.rb +4 -0
  25. data/lib/risu/parsers/nessus/postprocess/adobe_air.rb +10 -0
  26. data/lib/risu/parsers/nessus/postprocess/adobe_reader.rb +6 -1
  27. data/lib/risu/parsers/nessus/postprocess/apache_tomcat.rb +4 -0
  28. data/lib/risu/parsers/nessus/postprocess/apple_itunes.rb +58 -0
  29. data/lib/risu/parsers/nessus/postprocess/cisco_anyconnect.rb +63 -0
  30. data/lib/risu/parsers/nessus/postprocess/cisco_ios.rb +62 -0
  31. data/lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb +1 -0
  32. data/lib/risu/parsers/nessus/postprocess/firefox.rb +11 -0
  33. data/lib/risu/parsers/nessus/postprocess/flash_player.rb +16 -1
  34. data/lib/risu/parsers/nessus/postprocess/google_chrome.rb +58 -0
  35. data/lib/risu/parsers/nessus/postprocess/hp_system_mgt_homepage.rb +3 -0
  36. data/lib/risu/parsers/nessus/postprocess/irfanview.rb +51 -0
  37. data/lib/risu/parsers/nessus/postprocess/java.rb +7 -0
  38. data/lib/risu/parsers/nessus/postprocess/libreoffice.rb +57 -0
  39. data/lib/risu/parsers/nessus/postprocess/openoffice.rb +56 -0
  40. data/lib/risu/parsers/nessus/postprocess/openssh.rb +10 -0
  41. data/lib/risu/parsers/nessus/postprocess/openssl.rb +2 -0
  42. data/lib/risu/parsers/nessus/postprocess/oracle_database.rb +9 -3
  43. data/lib/risu/parsers/nessus/postprocess/php.rb +8 -0
  44. data/lib/risu/parsers/nessus/postprocess/post_process.rb +2 -2
  45. data/lib/risu/parsers/nessus/postprocess/root_cause.rb +7 -1
  46. data/lib/risu/parsers/nessus/postprocess/shockwave.rb +3 -0
  47. data/lib/risu/parsers/nessus/postprocess/timbuktu.rb +53 -0
  48. data/lib/risu/parsers/nessus/postprocess/vmware_esxi.rb +15 -0
  49. data/lib/risu/parsers/nessus/postprocess/vmware_player.rb +8 -1
  50. data/lib/risu/parsers/nessus/postprocess/vmware_vcenter.rb +11 -0
  51. data/lib/risu/parsers/nessus/postprocess/vmware_vsphere_client.rb +2 -0
  52. data/lib/risu/parsers/nessus/postprocess/windows.rb +140 -3
  53. data/lib/risu/parsers/nessus/postprocess/wireshark.rb +11 -0
  54. data/lib/risu/parsers/nexpose/nexpose_document.rb +1 -1
  55. data/lib/risu/parsers/nexpose/simple_nexpose.rb +0 -3
  56. data/lib/risu/renderers/csvrenderer.rb +2 -1
  57. data/lib/risu/templates/authentication_summary.rb +95 -0
  58. data/lib/risu/templates/findings_summary.rb +7 -3
  59. data/lib/risu/templates/findings_summary_with_pluginid.rb +12 -6
  60. data/lib/risu/templates/host_findings_csv.rb +14 -5
  61. data/lib/risu/templates/malicious_process_detection.rb +1 -5
  62. data/lib/risu/templates/notable_detailed.rb +4 -9
  63. data/lib/risu/templates/technical_findings.rb +3 -3
  64. data/lib/risu/templates/top_25.rb +5 -4
  65. data/lib/risu/version.rb +2 -2
  66. data/risu.gemspec +11 -11
  67. metadata +41 -33
@@ -0,0 +1,56 @@
1
+ # Copyright (c) 2010-2016 Arxopia LLC.
2
+ # All rights reserved.
3
+ #
4
+ # Redistribution and use in source and binary forms, with or without
5
+ # modification, are permitted provided that the following conditions are met:
6
+ #
7
+ # * Redistributions of source code must retain the above copyright
8
+ # notice, this list of conditions and the following disclaimer.
9
+ # * Redistributions in binary form must reproduce the above copyright
10
+ # notice, this list of conditions and the following disclaimer in the
11
+ # documentation and/or other materials provided with the distribution.
12
+ # * Neither the name of the Arxopia LLC nor the names of its contributors
13
+ # may be used to endorse or promote products derived from this software
14
+ # without specific prior written permission.
15
+ #
16
+ # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
17
+ # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
18
+ # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
19
+ # DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
20
+ # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
21
+ # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
+ # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
+ # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
+
27
+ module Risu
28
+ module Parsers
29
+ module Nessus
30
+ module PostProcess
31
+ class OpenOfficePatchRollup < Risu::Base::PostProcessBase
32
+
33
+ #
34
+ def initialize
35
+ @info =
36
+ {
37
+ :description => "OpenOffice Patch Rollup",
38
+ :plugin_id => -99963,
39
+ :plugin_name => "Update to the latest OpenOffice",
40
+ :item_name => "Update to the latest OpenOffice",
41
+ :plugin_ids => [
42
+ 25954,
43
+ 39563,
44
+ 77408,
45
+ 86904,
46
+
47
+
48
+
49
+ ]
50
+ }
51
+ end
52
+ end
53
+ end
54
+ end
55
+ end
56
+ end
@@ -56,9 +56,19 @@ module Risu
56
56
  44078,
57
57
  85382,
58
58
  86122,
59
+ 10883,
60
+ 11031,
61
+ 10771,
62
+ 10823,
63
+ 10954,
64
+ 11712,
65
+ 44072,
66
+ 10802,
59
67
 
60
68
 
61
69
 
70
+
71
+
62
72
  ]
63
73
  }
64
74
  end
@@ -71,6 +71,8 @@ module Risu
71
71
  82032,
72
72
  84153,
73
73
  51892,
74
+ 17766,
75
+ 17767,
74
76
 
75
77
 
76
78
 
@@ -33,7 +33,7 @@ module Risu
33
33
  #
34
34
  def initialize
35
35
  @info =
36
- {
36
+ {
37
37
  :description => "Oracle Database Patch Rollup",
38
38
  :plugin_id => -99993,
39
39
  :plugin_name => "Update to the latest Oracle Database",
@@ -71,9 +71,15 @@ module Risu
71
71
  11224,
72
72
  11226,
73
73
  10852,
74
- 55786
75
-
74
+ 55786,
75
+ 84822,
76
+ 82903,
77
+ 80906,
78
+ 78540,
79
+ 72982,
76
80
 
81
+
82
+
77
83
  ]
78
84
  }
79
85
  end
@@ -95,9 +95,17 @@ module Risu
95
95
  51139,
96
96
  51439,
97
97
  73289,
98
+ 60085,
99
+ 48245,
100
+ 51140,
101
+ 52717,
102
+ 55925,
103
+ 59056,
104
+ 59529,
98
105
 
99
106
 
100
107
 
108
+
101
109
  ]
102
110
  }
103
111
  end
@@ -61,7 +61,7 @@ module Risu
61
61
  return newest_plugin
62
62
  end
63
63
 
64
- # Creates a rollup plugin
64
+ # Creates a rollup plugin
65
65
  #
66
66
  def create_plugin
67
67
  plugin = Plugin.find_by_id(@plugin_id)
@@ -134,7 +134,7 @@ module Risu
134
134
 
135
135
  #
136
136
  def calculate_severity current_severity, severity
137
- if severity >= current_severity
137
+ if severity > current_severity
138
138
  return severity
139
139
  else
140
140
  return current_severity
@@ -291,6 +291,9 @@ module Risu
291
291
  79865 => "Vendor Patch",
292
292
  83186 => "Vendor Patch",
293
293
  86255 => "Vendor Patch",
294
+ 90510 => "Vendor Patch",
295
+ 87311 => "Vendor Patch",
296
+ -99980 => "Vendor Patch",
294
297
 
295
298
 
296
299
 
@@ -323,6 +326,7 @@ module Risu
323
326
  73598 => "Vendor Support",
324
327
  84729 => "Vendor Support",
325
328
  58991 => "Vendor Support",
329
+ 69552 => "Vendor Support",
326
330
 
327
331
 
328
332
 
@@ -406,7 +410,9 @@ module Risu
406
410
  83738 => "Configuration",
407
411
  83875 => "Configuration",
408
412
  42256 => "Configuration",
409
-
413
+ 15984 => "Configuration",
414
+ 66349 => "Configuration",
415
+ 10483 => "Configuration",
410
416
 
411
417
  }
412
418
  end
@@ -63,7 +63,10 @@ module Risu
63
63
  67233,
64
64
  69844,
65
65
  84765,
66
+ 85882,
67
+ 86633,
66
68
 
69
+
67
70
  ]
68
71
  }
69
72
  end
@@ -0,0 +1,53 @@
1
+ # Copyright (c) 2010-2016 Arxopia LLC.
2
+ # All rights reserved.
3
+ #
4
+ # Redistribution and use in source and binary forms, with or without
5
+ # modification, are permitted provided that the following conditions are met:
6
+ #
7
+ # * Redistributions of source code must retain the above copyright
8
+ # notice, this list of conditions and the following disclaimer.
9
+ # * Redistributions in binary form must reproduce the above copyright
10
+ # notice, this list of conditions and the following disclaimer in the
11
+ # documentation and/or other materials provided with the distribution.
12
+ # * Neither the name of the Arxopia LLC nor the names of its contributors
13
+ # may be used to endorse or promote products derived from this software
14
+ # without specific prior written permission.
15
+ #
16
+ # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
17
+ # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
18
+ # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
19
+ # DISCLAIMED. IN NO EVENT SHALL ARXOPIA LLC BE LIABLE FOR ANY DIRECT, INDIRECT,
20
+ # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
21
+ # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
22
+ # OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
23
+ # LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
24
+ # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25
+ # OF THE POSSIBILITY OF SUCH DAMAGE.
26
+
27
+ module Risu
28
+ module Parsers
29
+ module Nessus
30
+ module PostProcess
31
+ class TimbuktuProPatchRollup < Risu::Base::PostProcessBase
32
+
33
+ #
34
+ def initialize
35
+ @info =
36
+ {
37
+ :description => "Timbuktu Pro Patch Rollup",
38
+ :plugin_id => -99964,
39
+ :plugin_name => "Update to the latest Timbuktu Pro",
40
+ :item_name => "Update to the latest Timbuktu Pro",
41
+ :plugin_ids => [
42
+ 25954,
43
+ 39563
44
+
45
+
46
+ ]
47
+ }
48
+ end
49
+ end
50
+ end
51
+ end
52
+ end
53
+ end
@@ -65,8 +65,23 @@ module Risu
65
65
  80037,
66
66
  81084,
67
67
  83781,
68
+ 86947,
69
+ 86946,
70
+ 86945,
71
+ 87676,
72
+ 81083,
73
+ 87940,
74
+ 89035,
75
+ 89036,
76
+ 89037,
77
+ 89038,
78
+ 87673,
79
+ 87674,
80
+ 87677,
81
+ 87678,
68
82
 
69
83
 
84
+
70
85
  ]
71
86
  }
72
87
  end
@@ -40,7 +40,14 @@ module Risu
40
40
  :item_name => "Update to the latest VMware Player",
41
41
  :plugin_ids => [
42
42
  71231,
43
- 76454
43
+ 76454,
44
+ 73672,
45
+ 74265,
46
+ 84219,
47
+ 84805,
48
+ 81185,
49
+
50
+
44
51
  ]
45
52
  }
46
53
  end
@@ -49,9 +49,20 @@ module Risu
49
49
  76457,
50
50
  83186,
51
51
  81146,
52
+ 79147,
53
+ 86255,
54
+ 66812,
55
+ 87763,
56
+ 90710,
57
+ 91322,
58
+ 87592,
52
59
 
53
60
 
54
61
 
62
+
63
+
64
+
65
+
55
66
  ]
56
67
  }
57
68
  end
@@ -43,6 +43,8 @@ module Risu
43
43
  73595,
44
44
  51057,
45
45
  76355,
46
+ 87675,
47
+
46
48
  ]
47
49
  }
48
50
  end
@@ -745,14 +745,151 @@ module Risu
745
745
  56738,
746
746
  58331,
747
747
  69838,
748
+ 87256,
749
+ 85844,
750
+ 85845,
751
+ 85847,
752
+ 85877,
753
+ 86366,
754
+ 86367,
755
+ 86373,
756
+ 86819,
757
+ 86822,
758
+ 86824,
759
+ 86826,
760
+ 86828,
761
+ 87253,
762
+ 87257,
763
+ 87259,
764
+ 87261,
765
+ 87262,
766
+ 87264,
767
+ 85350,
768
+ 85879,
769
+ 86823,
770
+ 87260,
771
+ 85876,
772
+ 85884,
773
+ 86374,
774
+ 86821,
775
+ 87258,
776
+ 87263,
777
+ 86825,
778
+ 86827,
779
+ 85846,
780
+ 55797,
781
+ 73982,
782
+ 12054,
783
+ 87880,
784
+ 87882,
785
+ 55286,
786
+ 51904,
787
+ 49962,
788
+ 51164,
789
+ 51167,
790
+ 51172,
791
+ 55121,
792
+ 55128,
793
+ 55794,
794
+ 55798,
795
+ 56737,
796
+ 87877,
797
+ 87881,
798
+ 87890,
799
+ 87892,
800
+ 88642,
801
+ 88646,
802
+ 88650,
803
+ 88651,
804
+ 47711,
805
+ 48295,
806
+ 48296,
807
+ 56824,
808
+ 88644,
809
+ 90438,
810
+ 89749,
811
+ 89753,
812
+ 89755,
813
+ 89756,
814
+ 89779,
815
+ 90433,
816
+ 90434,
817
+ 90437,
818
+ 88647,
819
+ 88649,
820
+ 89746,
821
+ 89748,
822
+ 89751,
823
+ 89752,
824
+ 89754,
825
+ 90431,
826
+ 90436,
827
+ 90441,
828
+ 89750,
829
+ 31046,
830
+ 88645,
831
+ 88648,
832
+ 14724,
833
+ 35073,
834
+ 42441,
835
+ 44414,
836
+ 48293,
837
+ 48294,
838
+ 49221,
839
+ 50528,
840
+ 55125,
841
+ 56450,
842
+ 57282,
843
+ 57949,
844
+ 59039,
845
+ 88654,
846
+ 89835,
847
+ 90443,
848
+ 85329,
849
+ 86065,
850
+ 86371,
851
+ 86469,
852
+ 86820,
853
+ 90442,
854
+ 90439,
855
+ 90432,
856
+ 88643,
857
+ 87878,
858
+ 87254,
859
+ 87249,
860
+ 55569,
861
+ 56177,
862
+ 22334,
863
+ 87875,
864
+ 89757,
865
+ 89747,
866
+ 87671,
867
+ 86856,
868
+ 87893,
869
+ 90440,
870
+ 90510,
871
+ 91015,
872
+ 91001,
873
+ 91005,
874
+ 91006,
875
+ 91010,
876
+ 91011,
877
+ 91012,
878
+ 91002,
879
+ 91007,
880
+ 91009,
881
+ 91004,
882
+ 91013,
883
+ 91014,
884
+ 85323,
885
+ 86149,
886
+ 88653,
887
+ 73987,
748
888
 
749
889
 
750
890
 
751
891
 
752
892
 
753
-
754
-
755
-
756
893
  ]
757
894
  }
758
895
  end