risu 1.7.9 → 1.8.0

data/lib/risu/models/host.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -600,18 +600,18 @@ module Risu
 					"found on the #{Report.title} network.\n\n"
 
 					# @TODO this should be a table sorted by %
-					text << "#{nt_percent.round.to_i}% of the network is Windows NT. " if nt_percent >= 1
-					text << "#{w2k_percent.round.to_i}% of the network is Windows 2000. " if w2k_percent >= 1
-					text << "#{xp_percent.round.to_i}% of the network is Windows XP. " if xp_percent >= 1
-					text << "#{w2k3_percent.round.to_i}% of the network is Windows Server 2003. " if w2k3_percent >= 1
-					text << "#{vista_percent.round.to_i}% of the network is Windows Vista. " if vista_percent >= 1
-					text << "#{w2k8_percent.round.to_i}% of the network is Windows Server 2008. " if w2k8_percent >= 1
-					text << "#{w7_percent.round.to_i}% of the network is Windows 7. " if w7_percent >= 1
-					text << "#{w8_percent.round.to_i}% of the network is Windows 8. " if w8_percent >= 1
-					text << "#{w10_percent.round.to_i}% of the network is Windows 10. " if w10_percent >= 1
-					text << "#{w2k12_percent.round.to_i}% of the network is Windows Server 20012. " if w2k12_percent >= 1
-
-					text << "\n\n" << unsupported_os_windows if nt > 0 or w2k > 0
+					text << "#{nt_percent.round.to_i}% (#{nt}) of the network is Windows NT.\n" if nt_percent >= 1
+					text << "#{w2k_percent.round.to_i}% (#{w2k}) of the network is Windows 2000.\n" if w2k_percent >= 1
+					text << "#{xp_percent.round.to_i}% (#{xp}) of the network is Windows XP.\n" if xp_percent >= 1
+					text << "#{w2k3_percent.round.to_i}% (#{w2k3}) of the network is Windows Server 2003.\n" if w2k3_percent >= 1
+					text << "#{vista_percent.round.to_i}% (#{vista}) of the network is Windows Vista.\n" if vista_percent >= 1
+					text << "#{w2k8_percent.round.to_i}% (#{w2k8}) of the network is Windows Server 2008.\n" if w2k8_percent >= 1
+					text << "#{w7_percent.round.to_i}% (#{w7}) of the network is Windows 7.\n" if w7_percent >= 1
+					text << "#{w8_percent.round.to_i}% (#{w8}) of the network is Windows 8.\n" if w8_percent >= 1
+					text << "#{w10_percent.round.to_i}% (#{w10}) of the network is Windows 10.\n" if w10_percent >= 1
+					text << "#{w2k12_percent.round.to_i}% (#{w2k12}) of the network is Windows Server 20012.\n" if w2k12_percent >= 1
+
+					text << "\n\n" << unsupported_os_windows if nt > 0 or w2k > 0 or xp > 0
 
 					return text
 				end

data/lib/risu/models/hostproperty.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/individualpluginselection.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/item.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -502,7 +502,7 @@ module Risu
 				# Scrubs a plugin_name to remove all pointless data
 				#
 				# @return [String] Scrubbed plugin name
-				def scrub_plugin_name (name)
+				def scrub_plugin_name name
 					return name.gsub("(remote check)", "").gsub("(uncredentialed check)", "").gsub(/(\(\d.*\))/, "")
 				end
 
@@ -604,11 +604,11 @@ module Risu
 
 						name = scrub_plugin_name(plugin.plugin_name)
 						total = Item.where(:plugin_id => item.plugin_id).count
-						core = if plugin.exploit_framework_core == "true" then "Yes" else nil end
-						metasploit = if plugin.exploit_framework_metasploit == "true" then "Yes" else nil end
-						canvas = if plugin.exploit_framework_canvas == "true" then "Yes" else nil end
-						exploithub = if plugin.exploit_framework_exploithub == "true" then "Yes" else nil end
-						d2elliot = if plugin.exploit_framework_d2_elliot == "true" then "Yes" else nil end
+						core = plugin.exploit_framework_core? ? "Yes" : nil
+						metasploit = plugin.exploit_framework_metasploit? ? "Yes" : nil
+						canvas = plugin.exploit_framework_canvas? ? "Yes" : nil
+						exploithub = plugin.exploit_framework_exploithub? ? "Yes" : nil
+						d2elliot = plugin.exploit_framework_d2_elliot? ? "Yes" : nil
 
 						results.push [name, total, core, metasploit, canvas, exploithub, d2elliot]
 					end

data/lib/risu/models/patch.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/plugin.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/pluginspreference.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/policy.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/reference.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/report.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -29,7 +29,7 @@ module Risu
 
 			class << self
 
-				attr_accessor :title, :author, :company, :classification, :extra
+				attr_accessor :title, :author, :company, :classification, :network, :owner, :location, :extra
 
 				#
 				#@scan_date = Host.where("start is not null").first[:start].to_s

data/lib/risu/models/serverpreference.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/servicedescription.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/models/version.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/nessus_document.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/nessus_sax_listener.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/7zip.rb

@@ -0,0 +1,46 @@
+# Copyright (c) 2010-2017 Jacob Hammack.
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+
+module Risu
+	module Parsers
+		module Nessus
+			module PostProcess
+				class SevenZipPatchRollup < Risu::Base::PostProcessBase
+
+					#
+					def initialize
+						@info =
+						{
+							:description => "7-Zip Patch Rollup",
+							:plugin_id => -99954,
+							:plugin_name => "Update to the latest 7-Zip",
+							:item_name => "Update to the latest 7-Zip",
+							:plugin_ids => [
+								91230,
+								
+							]
+						}
+					end
+				end
+			end
+		end
+	end
+end

data/lib/risu/parsers/nessus/postprocess/adobe_acrobat.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -72,6 +72,13 @@ module Risu
 								91096,
 								87917,
 								89830,
+								92034,
+								40802,
+								40801,
+								40800,
+								48323,
+								49260,
+								51062,
 								
 
 

data/lib/risu/parsers/nessus/postprocess/adobe_air.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/adobe_reader.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -80,8 +80,10 @@ module Risu
 								87918,
 								89831,
 								70343,
-								91097
-
+								91097,
+								92035,
+								94072,
+								
 
 
 							]

data/lib/risu/parsers/nessus/postprocess/apache.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/apache_tomcat.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/apple_itunes.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -39,6 +39,7 @@ module Risu
 								86602,
 								91347,
 								87371,
+								92410,
 								
 
 

data/lib/risu/parsers/nessus/postprocess/apple_quicktime.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -38,9 +38,32 @@ module Risu
 								72706,
 								78678,
 								62890,
+								87848,
+								85662,
+								84505,
+								59113,
+								56667,
+								55764,
+								21556,
+								22336,
+								24761,
+								25123,
+								25347,
+								25703,
+								26916,
+								29698,
+								29982,
+								31735,
+								33130,
+								34119,
+								34460,
+								35437,
+								38988,
+								40929,
+								45388,
+								27626,
+								30204,
 								
-
-
 							]
 						}
 					end

data/lib/risu/parsers/nessus/postprocess/blackberry_enterprise_server.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/ca_brightstor_arcserve.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/cisco_anyconnect.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -45,6 +45,10 @@ module Risu
 								85541,
 								87894,
 								88100,
+								54954,
+								59820,
+								93382,
+								71464,
 								
 
 

data/lib/risu/parsers/nessus/postprocess/cisco_ios.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/core_ftp.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/db2.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -43,7 +43,8 @@ module Risu
 							41028 => 0, #SNMP Agent Default Community Name (public) - 41028
               10264 => 0, #SNMP Agent Default Community Names - 10264
 							10081 => 0, #FTP Privileged Port Bounce Scan - 10081
-							#42411 => 0, #Microsoft Windows SMB Shares Unprivileged Access
+							42411 => 0, #Microsoft Windows SMB Shares Unprivileged Access
+							66349 => 0, #X Server Unauthenticated Access: Screenshot 
 
 						}
 					end

data/lib/risu/parsers/nessus/postprocess/filezilla.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nessus/postprocess/firefox.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -76,6 +76,8 @@ module Risu
 								90793,
 								91547,
 								88754,
+								92755,
+								93662,
 								
 
 

data/lib/risu/parsers/nessus/postprocess/flash_player.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2016 Arxopia LLC.
+# Copyright (c) 2010-2017 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -34,6 +34,20 @@ module Risu
 							:plugin_name => "Update to the latest Flash Player",
 							:item_name => "Update to the latest Flash Player",
 							:plugin_ids => [
+								11323,
+								11952,
+								20158,
+								21079,
+								22056,
+								23869,
+								25694,
+								29741,
+								31799,
+								34741,
+								35742,
+								40434,
+								43068,
+								44596,
 								46859,
 								48300,
 								49307,
@@ -53,6 +67,7 @@ module Risu
 								58994,
 								59196,
 								59426,
+								61550,
 								61622,
 								62480,
 								62836,
@@ -71,24 +86,13 @@ module Risu
 								71351,
 								71951,
 								72284,
-								74431,
-								73994,
-								73740,
-								73433,
 								72606,
-								76413,
-								34741,
-								35742,
-								40434,
-								43068,
-								25694,
 								72937,
-								22056,
-								44596,
-								23869,
-								20158,
-								29741,
-								21079,
+								73433,
+								73740,
+								73994,
+								74431,
+								76413,
 								77172,
 								77577,
 								78441,
@@ -96,18 +100,16 @@ module Risu
 								79442,
 								79835,
 								80484,
+								80946,
 								80998,
 								81127,
 								81819,
-								80946,
-								83365,
 								82781,
-								61550,
+								83365,
 								84048,
 								84365,
 								84642,
 								84730,
-								31799,
 								85326,
 								86060,
 								86369,
@@ -116,16 +118,17 @@ module Risu
 								87244,
 								87657,
 								88639,
-								88639,
-								11323,
 								89834,
 								90425,
 								91163,
+								91670,
+								92012,
+								93461,
+								93960,
+								94334,
+								94628,
 								
 
-
-
-
 							]
 						}
 					end