@mitre/hdf-converters 2.5.1

package/lib/src/nessus-mapper.js

@@ -0,0 +1,303 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NessusMapper = exports.NessusResults = void 0;
+const fast_xml_parser_1 = __importDefault(require("fast-xml-parser"));
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+const path_1 = __importDefault(require("path"));
+const package_json_1 = require("../package.json");
+const base_converter_1 = require("./base-converter");
+const CciNistMapping_1 = require("./mappings/CciNistMapping");
+const NessusPluginsNistMapping_1 = require("./mappings/NessusPluginsNistMapping");
+const IMPACT_MAPPING = new Map([
+    ['4', 0.9],
+    ['3', 0.7],
+    ['i', 0.7],
+    ['2', 0.5],
+    ['ii', 0.5],
+    ['1', 0.3],
+    ['iii', 0.3],
+    ['0', 0.0]
+]);
+const COMPLIANCE_PATH = 'cm:compliance-reference';
+const NA_PLUGIN_OUTPUT = 'This Nessus Plugin does not provide output message.';
+const NESSUS_PLUGINS_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/nessus-plugins-nist-mapping.csv');
+const NESSUS_PLUGINS_NIST_MAPPING = new NessusPluginsNistMapping_1.NessusPluginsNistMapping(NESSUS_PLUGINS_NIST_MAPPING_FILE);
+const CCI_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/U_CCI_List.xml');
+const CCI_NIST_MAPPING = new CciNistMapping_1.CciNistMapping(CCI_NIST_MAPPING_FILE);
+const DEFAULT_NIST_TAG = ['unmapped'];
+function parseXml(xml) {
+    const options = {
+        attributeNamePrefix: '',
+        textNodeName: 'text',
+        ignoreAttributes: false
+    };
+    return fast_xml_parser_1.default.parse(xml, options);
+}
+let policyName;
+let version;
+function getPolicyName() {
+    return 'Nessus ' + policyName;
+}
+function getVersion() {
+    return version;
+}
+function getId(item) {
+    if (lodash_1.default.has(item, COMPLIANCE_PATH)) {
+        return parseRef(lodash_1.default.get(item, COMPLIANCE_PATH), 'Vuln-ID')[0];
+    }
+    else {
+        return lodash_1.default.get(item, 'pluginID');
+    }
+}
+function getTitle(item) {
+    if (lodash_1.default.has(item, 'cm:compliance-check-name')) {
+        return lodash_1.default.get(item, 'cm:compliance-check-name');
+    }
+    else {
+        return lodash_1.default.get(item, 'pluginName');
+    }
+}
+function getDesc(item) {
+    if (lodash_1.default.has(item, 'cm:compliance-info')) {
+        return (0, base_converter_1.parseHtml)(lodash_1.default.get(item, 'cm:compliance-info'));
+    }
+    else {
+        return (0, base_converter_1.parseHtml)(formatDesc(item));
+    }
+}
+function formatDesc(issue) {
+    const desc = [];
+    desc.push(`Plugin Family: ${lodash_1.default.get(issue, 'pluginFamily')}`);
+    desc.push(`Port: ${lodash_1.default.get(issue, 'port')}`);
+    desc.push(`Protocol: ${lodash_1.default.get(issue, 'protocol')}`);
+    return desc.join('; ') + ';';
+}
+function pluginNistTag(item) {
+    const family = lodash_1.default.get(item, 'pluginFamily');
+    const id = lodash_1.default.get(item, 'pluginID');
+    return NESSUS_PLUGINS_NIST_MAPPING.nistFilter(family, id, DEFAULT_NIST_TAG);
+}
+function cciNistTag(input) {
+    const identifiers = parseRef(input, 'CCI');
+    return CCI_NIST_MAPPING.nistFilter(identifiers, DEFAULT_NIST_TAG, false);
+}
+function parseRef(input, key) {
+    const matches = input.split(',').filter((element) => element.startsWith(key));
+    return matches.map((element) => element.split('|')[1]);
+}
+function getImpact(item) {
+    if (lodash_1.default.has(item, COMPLIANCE_PATH)) {
+        return (0, base_converter_1.impactMapping)(IMPACT_MAPPING)(parseRef(lodash_1.default.get(item, COMPLIANCE_PATH), 'CAT').join(''));
+    }
+    else {
+        return (0, base_converter_1.impactMapping)(IMPACT_MAPPING)(lodash_1.default.get(item, 'severity'));
+    }
+}
+function getCheck(item) {
+    if (lodash_1.default.has(item, 'cm:compliance-solution')) {
+        return (0, base_converter_1.parseHtml)(lodash_1.default.get(item, 'cm:compliance-solution'));
+    }
+    else {
+        return '';
+    }
+}
+function getNist(item) {
+    if (lodash_1.default.has(item, COMPLIANCE_PATH)) {
+        return cciNistTag(lodash_1.default.get(item, COMPLIANCE_PATH));
+    }
+    else {
+        return pluginNistTag(item);
+    }
+}
+function getCci(item) {
+    if (lodash_1.default.has(item, COMPLIANCE_PATH)) {
+        return parseRef(lodash_1.default.get(item, COMPLIANCE_PATH), 'CCI');
+    }
+    else {
+        return [];
+    }
+}
+function getRid(item) {
+    if (lodash_1.default.has(item, COMPLIANCE_PATH)) {
+        return parseRef(lodash_1.default.get(item, COMPLIANCE_PATH), 'Rule-ID').join(',');
+    }
+    else {
+        return lodash_1.default.get(item, 'pluginID');
+    }
+}
+function getStig(item) {
+    if (lodash_1.default.has(item, COMPLIANCE_PATH)) {
+        return parseRef(lodash_1.default.get(item, COMPLIANCE_PATH), 'STIG-ID').join(',');
+    }
+    else {
+        return '';
+    }
+}
+function getStatus(item) {
+    const result = lodash_1.default.get(item, 'cm:compliance-result');
+    switch (result) {
+        case 'PASSED':
+            return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
+        case 'WARNING':
+            return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
+        case 'ERROR':
+            return inspecjs_1.ExecJSON.ControlResultStatus.Error;
+        default:
+            return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
+    }
+}
+function formatCodeDesc(item) {
+    if (lodash_1.default.has(item, 'description')) {
+        return (0, base_converter_1.parseHtml)(lodash_1.default.get(item, 'description') || NA_PLUGIN_OUTPUT);
+    }
+    else {
+        return (0, base_converter_1.parseHtml)(lodash_1.default.get(item, 'plugin_output') || NA_PLUGIN_OUTPUT);
+    }
+}
+function getStartTime(tag) {
+    if (Array.isArray(tag)) {
+        return lodash_1.default.get(tag.find((element) => {
+            return lodash_1.default.get(element, 'name') === 'HOST_START';
+        }), 'text');
+    }
+    else {
+        return lodash_1.default.get(tag, 'text');
+    }
+}
+function cleanData(control) {
+    const filteredControl = control;
+    filteredControl.forEach((element) => {
+        if (element instanceof Object) {
+            if (lodash_1.default.get(element.tags, 'cci').length === 0) {
+                element.tags = lodash_1.default.omit(element.tags, 'cci');
+            }
+            if (lodash_1.default.get(element.tags, 'rid') === '') {
+                element.tags = lodash_1.default.omit(element.tags, 'rid');
+            }
+            if (lodash_1.default.get(element.tags, 'stig_id') === '') {
+                element.tags = lodash_1.default.omit(element.tags, 'stig_id');
+            }
+            if (element.descriptions !== undefined && element.descriptions !== null) {
+                if (lodash_1.default.get(element.descriptions[0], 'data') === '') {
+                    element.descriptions = [];
+                }
+            }
+        }
+    });
+    return filteredControl;
+}
+class NessusResults {
+    constructor(nessusXml) {
+        this.data = parseXml(nessusXml);
+    }
+    toHdf() {
+        const results = [];
+        policyName = lodash_1.default.get(this.data, 'NessusClientData_v2.Policy.policyName');
+        const preference = lodash_1.default.get(this.data, 'NessusClientData_v2.Policy.Preferences.ServerPreferences.preference');
+        if (Array.isArray(preference)) {
+            version =
+                lodash_1.default.get(preference.find((element) => {
+                    return lodash_1.default.get(element, 'name') === 'sc_version';
+                }), 'value') || '';
+        }
+        const reportHost = lodash_1.default.get(this.data, 'NessusClientData_v2.Report.ReportHost');
+        if (Array.isArray(reportHost)) {
+            reportHost.forEach((element) => {
+                const entry = new NessusMapper(element);
+                if (this.customMapping !== undefined) {
+                    entry.setMappings(this.customMapping);
+                }
+                results.push(entry.toHdf());
+            });
+            return results;
+        }
+        else {
+            const result = new NessusMapper(reportHost);
+            if (this.customMapping !== undefined) {
+                result.setMappings(this.customMapping);
+            }
+            return result.toHdf();
+        }
+    }
+    setMappings(customMapping) {
+        this.customMapping = customMapping;
+    }
+}
+exports.NessusResults = NessusResults;
+class NessusMapper extends base_converter_1.BaseConverter {
+    constructor(nessusJson) {
+        super(nessusJson);
+        this.mappings = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version,
+                target_id: { path: 'name' }
+            },
+            version: package_json_1.version,
+            statistics: {
+                duration: null
+            },
+            profiles: [
+                {
+                    name: { transformer: getPolicyName },
+                    version: { transformer: getVersion },
+                    title: { transformer: getPolicyName },
+                    maintainer: null,
+                    summary: { transformer: getPolicyName },
+                    license: null,
+                    copyright: null,
+                    copyright_email: null,
+                    supports: [],
+                    attributes: [],
+                    depends: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: [
+                        {
+                            arrayTransformer: cleanData,
+                            path: 'ReportItem',
+                            key: 'id',
+                            tags: {
+                                nist: { transformer: getNist },
+                                cci: { transformer: getCci },
+                                rid: { transformer: getRid },
+                                stig_id: { transformer: getStig }
+                            },
+                            descriptions: [
+                                {
+                                    data: { transformer: getCheck },
+                                    label: 'check'
+                                }
+                            ],
+                            refs: [],
+                            source_location: {},
+                            id: { transformer: getId },
+                            title: { transformer: getTitle },
+                            desc: { transformer: getDesc },
+                            impact: { transformer: getImpact },
+                            code: '',
+                            results: [
+                                {
+                                    status: { transformer: getStatus },
+                                    code_desc: { transformer: formatCodeDesc },
+                                    run_time: 0,
+                                    start_time: {
+                                        path: '$.HostProperties.tag',
+                                        transformer: getStartTime
+                                    }
+                                }
+                            ]
+                        }
+                    ],
+                    sha256: ''
+                }
+            ]
+        };
+    }
+}
+exports.NessusMapper = NessusMapper;
+//# sourceMappingURL=nessus-mapper.js.map

package/lib/src/nessus-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nessus-mapper.js","sourceRoot":"","sources":["../../src/nessus-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,sEAAqC;AACrC,uCAAkC;AAClC,oDAAuB;AACvB,gDAAwB;AACxB,kDAAgE;AAChE,qDAM0B;AAC1B,8DAAyD;AACzD,kFAA6E;AAG7E,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,IAAI,EAAE,GAAG,CAAC;IACX,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,GAAG,EAAE,GAAG,CAAC;CACX,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,gBAAgB,GAAG,qDAAqD,CAAC;AAC/E,MAAM,gCAAgC,GAAG,cAAI,CAAC,OAAO,CACnD,SAAS,EACT,yCAAyC,CAC1C,CAAC;AACF,MAAM,2BAA2B,GAAG,IAAI,mDAAwB,CAC9D,gCAAgC,CACjC,CAAC;AACF,MAAM,qBAAqB,GAAG,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;AAChF,MAAM,gBAAgB,GAAG,IAAI,+BAAc,CAAC,qBAAqB,CAAC,CAAC;AACnE,MAAM,gBAAgB,GAAG,CAAC,UAAU,CAAC,CAAC;AAEtC,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,OAAO,GAAG;QACd,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,OAAO,yBAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,IAAI,UAAkB,CAAC;AACvB,IAAI,OAAe,CAAC;AAEpB,SAAS,aAAa;IACpB,OAAO,SAAS,GAAG,UAAU,CAAC;AAChC,CAAC;AACD,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,IAAa;IAC1B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QAChC,OAAO,QAAQ,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;KAC7D;SAAM;QACL,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;KAChC;AACH,CAAC;AACD,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE;QAC3C,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;KAChD;SAAM;QACL,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;KAClC;AACH,CAAC;AACD,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE;QACrC,OAAO,IAAA,0BAAS,EAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC;KACrD;SAAM;QACL,OAAO,IAAA,0BAAS,EAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;KACpC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;AAC/B,CAAC;AACD,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,2BAA2B,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,WAAW,GAAa,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AACD,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QAChC,OAAO,IAAA,8BAAa,EAAC,cAAc,CAAC,CAClC,QAAQ,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACvD,CAAC;KACH;SAAM;QACL,OAAO,IAAA,8BAAa,EAAC,cAAc,CAAC,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;KAC/D;AACH,CAAC;AACD,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE;QACzC,OAAO,IAAA,0BAAS,EAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;KACzD;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QAChC,OAAO,UAAU,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;KACjD;SAAM;QACL,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;KAC5B;AACH,CAAC;AACD,SAAS,MAAM,CAAC,IAAa;IAC3B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QAChC,OAAO,QAAQ,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;KACtD;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,MAAM,CAAC,IAAa;IAC3B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QAChC,OAAO,QAAQ,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACpE;SAAM;QACL,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;KAChC;AACH,CAAC;AACD,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QAChC,OAAO,QAAQ,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACpE;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,SAAS,CAAC,IAAa;IAC9B,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACnD,QAAQ,MAAM,EAAE;QACd,KAAK,QAAQ;YACX,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,SAAS;YACZ,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9C,KAAK,OAAO;YACV,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC;QAC5C;YACE,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;KAC9C;AACH,CAAC;AACD,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;QAC9B,OAAO,IAAA,0BAAS,EAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,gBAAgB,CAAC,CAAC;KAClE;SAAM;QACL,OAAO,IAAA,0BAAS,EAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,gBAAgB,CAAC,CAAC;KACpE;AACH,CAAC;AACD,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACtB,OAAO,gBAAC,CAAC,GAAG,CACV,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACnB,OAAO,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,YAAY,CAAC;QACjD,CAAC,CAAC,EACF,MAAM,CACP,CAAC;KACH;SAAM;QACL,OAAO,gBAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;KAC3B;AACH,CAAC;AACD,SAAS,SAAS,CAAC,OAAkB;IACnC,MAAM,eAAe,GAAG,OAA6B,CAAC;IACtD,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,OAAO,YAAY,MAAM,EAAE;YAC7B,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;gBAC3C,OAAO,CAAC,IAAI,GAAG,gBAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aAC5C;YACD,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE;gBACrC,OAAO,CAAC,IAAI,GAAG,gBAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aAC5C;YACD,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE;gBACzC,OAAO,CAAC,IAAI,GAAG,gBAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;aAChD;YACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE;gBACvE,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;oBACjD,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC;iBAC3B;aACF;SACF;IACH,CAAC,CAAC,CAAC;IACH,OAAO,eAAe,CAAC;AACzB,CAAC;AACD,MAAa,aAAa;IAGxB,YAAY,SAAiB;QAC3B,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,KAAK;QACH,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,UAAU,GAAG,gBAAC,CAAC,GAAG,CAChB,IAAI,CAAC,IAAI,EACT,uCAAuC,CAC9B,CAAC;QACZ,MAAM,UAAU,GAAG,gBAAC,CAAC,GAAG,CACtB,IAAI,CAAC,IAAI,EACT,qEAAqE,CACtE,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YAC7B,OAAO;gBACL,gBAAC,CAAC,GAAG,CACH,UAAU,CAAC,IAAI,CAAC,CAAC,OAAgC,EAAE,EAAE;oBACnD,OAAO,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,YAAY,CAAC;gBACjD,CAAC,CAAC,EACF,OAAO,CACR,IAAI,EAAE,CAAC;SACX;QACD,MAAM,UAAU,GAAG,gBAAC,CAAC,GAAG,CACtB,IAAI,CAAC,IAAI,EACT,uCAAuC,CACxC,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YAC7B,UAAU,CAAC,OAAO,CAAC,CAAC,OAAgC,EAAE,EAAE;gBACtD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;oBACpC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;iBACvC;gBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;SAChB;aAAM;YACL,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,UAAqC,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;gBACpC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;aACxC;YACD,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;SACvB;IACH,CAAC;IACD,WAAW,CACT,aAA+D;QAE/D,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AApDD,sCAoDC;AAED,MAAa,YAAa,SAAQ,8BAAa;IAmE7C,YAAY,UAAmC;QAC7C,KAAK,CAAC,UAAU,CAAC,CAAC;QAnEpB,aAAQ,GAAqD;YAC3D,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;aAC1B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;oBAClC,OAAO,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;oBAClC,KAAK,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;oBACnC,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;oBACrC,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,gBAAgB,EAAE,SAAS;4BAC3B,IAAI,EAAE,YAAY;4BAClB,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,EAAC;gCAC5B,GAAG,EAAE,EAAC,WAAW,EAAE,MAAM,EAAC;gCAC1B,GAAG,EAAE,EAAC,WAAW,EAAE,MAAM,EAAC;gCAC1B,OAAO,EAAE,EAAC,WAAW,EAAE,OAAO,EAAC;6BAChC;4BACD,YAAY,EAAE;gCACZ;oCACE,IAAI,EAAE,EAAC,WAAW,EAAE,QAAQ,EAAC;oCAC7B,KAAK,EAAE,OAAO;iCACf;6BACF;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,EAAE,EAAE,EAAC,WAAW,EAAE,KAAK,EAAC;4BACxB,KAAK,EAAE,EAAC,WAAW,EAAE,QAAQ,EAAC;4BAC9B,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,EAAC;4BAC5B,MAAM,EAAE,EAAC,WAAW,EAAE,SAAS,EAAC;4BAChC,IAAI,EAAE,EAAE;4BACR,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,EAAC,WAAW,EAAE,SAAS,EAAC;oCAChC,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;oCACxC,QAAQ,EAAE,CAAC;oCACX,UAAU,EAAE;wCACV,IAAI,EAAE,sBAAsB;wCAC5B,WAAW,EAAE,YAAY;qCAC1B;iCACF;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;IAGF,CAAC;CACF;AAtED,oCAsEC"}

package/lib/src/netsparker-mapper.d.ts

@@ -0,0 +1,7 @@
+import { ExecJSON } from 'inspecjs';
+import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
+export declare class NetsparkerMapper extends BaseConverter {
+    mappings: MappedTransform<ExecJSON.Execution, ILookupPath>;
+    constructor(netsparkerXml: string);
+    setMappings(customMappings: MappedTransform<ExecJSON.Execution, ILookupPath>): void;
+}

package/lib/src/netsparker-mapper.js

@@ -0,0 +1,221 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetsparkerMapper = void 0;
+const fast_xml_parser_1 = __importDefault(require("fast-xml-parser"));
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+const path_1 = __importDefault(require("path"));
+const package_json_1 = require("../package.json");
+const base_converter_1 = require("./base-converter");
+const CweNistMapping_1 = require("./mappings/CweNistMapping");
+const OwaspNistMapping_1 = require("./mappings/OwaspNistMapping");
+const IMPACT_MAPPING = new Map([
+    ['critical', 1.0],
+    ['high', 0.7],
+    ['medium', 0.5],
+    ['low', 0.3],
+    ['best_practice', 0.0],
+    ['information', 0.0]
+]);
+const CWE_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/cwe-nist-mapping.csv');
+const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping(CWE_NIST_MAPPING_FILE);
+const OWASP_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/owasp-nist-mapping.csv');
+const OWASP_NIST_MAPPING = new OwaspNistMapping_1.OwaspNistMapping(OWASP_NIST_MAPPING_FILE);
+const DEFAULT_NIST_TAG = ['SA-11', 'RA-5'];
+function parseXml(xml) {
+    const options = {
+        attributeNamePrefix: '',
+        textNodeName: 'text',
+        ignoreAttributes: false
+    };
+    return fast_xml_parser_1.default.parse(xml, options);
+}
+function nistTag(classification) {
+    let cweTag = lodash_1.default.get(classification, 'cwe');
+    if (!Array.isArray(cweTag)) {
+        cweTag = [cweTag];
+    }
+    let owaspTag = lodash_1.default.get(classification, 'owasp');
+    if (!Array.isArray(owaspTag)) {
+        owaspTag = [owaspTag];
+    }
+    const cwe = CWE_NIST_MAPPING.nistFilter(cweTag);
+    const owasp = OWASP_NIST_MAPPING.nistFilterNoDefault(owaspTag);
+    const result = cwe.concat(owasp);
+    if (result.length !== 0) {
+        return result;
+    }
+    else {
+        return DEFAULT_NIST_TAG;
+    }
+}
+function formatControlDesc(vulnerability) {
+    const text = [];
+    const description = lodash_1.default.get(vulnerability, 'description');
+    if (description) {
+        text.push(description);
+    }
+    const exploitationSkills = lodash_1.default.get(vulnerability, 'exploitation-skills');
+    if (exploitationSkills) {
+        text.push(`Exploitation-skills: ${exploitationSkills}`);
+    }
+    const extraInformation = lodash_1.default.get(vulnerability, 'extra-information');
+    if (extraInformation) {
+        text.push(`Extra-information: ${JSON.stringify(extraInformation).replace(/:/gi, '=>')}`);
+    }
+    const classification = lodash_1.default.get(vulnerability, 'classification');
+    if (classification) {
+        text.push(`Classification: ${JSON.stringify(classification).replace(/:/gi, '=>')}`);
+    }
+    const impact = lodash_1.default.get(vulnerability, 'impact');
+    if (impact) {
+        text.push(`Impact: ${impact}`);
+    }
+    const firstSeenDate = lodash_1.default.get(vulnerability, 'FirstSeenDate');
+    if (firstSeenDate) {
+        text.push(`FirstSeenDate: ${firstSeenDate}`);
+    }
+    const lastSeenDate = lodash_1.default.get(vulnerability, 'LastSeenDate');
+    if (lastSeenDate) {
+        text.push(`LastSeenDate: ${lastSeenDate}`);
+    }
+    const certainty = lodash_1.default.get(vulnerability, 'certainty');
+    if (certainty) {
+        text.push(`Certainty: ${certainty}`);
+    }
+    const type = lodash_1.default.get(vulnerability, 'type');
+    if (type) {
+        text.push(`Type: ${type}`);
+    }
+    const confirmed = lodash_1.default.get(vulnerability, 'confirmed');
+    if (confirmed) {
+        text.push(`Confirmed: ${confirmed}`);
+    }
+    return text.join('<br>');
+}
+function formatCheck(vulnerability) {
+    const text = [];
+    const exploitationSkills = lodash_1.default.get(vulnerability, 'exploitation-skills');
+    if (exploitationSkills) {
+        text.push(`Exploitation-skills: ${exploitationSkills}`);
+    }
+    const proofOfConcept = lodash_1.default.get(vulnerability, 'proof-of-concept');
+    if (proofOfConcept) {
+        text.push(`Proof-of-concept: ${proofOfConcept}`);
+    }
+    return (0, base_converter_1.parseHtml)(text.join('<br>'));
+}
+function formatFix(vulnerability) {
+    const text = [];
+    const remedialActions = lodash_1.default.get(vulnerability, 'remedial-actions');
+    if (remedialActions) {
+        text.push(`Remedial-actions: ${remedialActions}`);
+    }
+    const remedialProcedure = lodash_1.default.get(vulnerability, 'remedial-procedure');
+    if (remedialProcedure) {
+        text.push(`Remedial-procedure: ${remedialProcedure}`);
+    }
+    const remedyReferences = lodash_1.default.get(vulnerability, 'remedy-references');
+    if (remedyReferences) {
+        text.push(`Remedy-references: ${remedyReferences}`);
+    }
+    return text.join('<br>');
+}
+function formatCodeDesc(request) {
+    const text = [];
+    text.push(`http-request : ${lodash_1.default.get(request, 'content')}`);
+    text.push(`method : ${lodash_1.default.get(request, 'method')}`);
+    return text.join('\n');
+}
+function formatMessage(response) {
+    const text = [];
+    text.push(`http-response : ${lodash_1.default.get(response, 'content')}`);
+    text.push(`duration : ${lodash_1.default.get(response, 'duration')}`);
+    text.push(`status-code  : ${lodash_1.default.get(response, 'status-code')}`);
+    return text.join('\n');
+}
+class NetsparkerMapper extends base_converter_1.BaseConverter {
+    constructor(netsparkerXml) {
+        super(parseXml(netsparkerXml));
+        this.mappings = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version,
+                target_id: { path: 'netsparker-enterprise.target.url' }
+            },
+            version: package_json_1.version,
+            statistics: {
+                duration: null
+            },
+            profiles: [
+                {
+                    name: 'Netsparker Enterprise Scan',
+                    version: '',
+                    title: {
+                        path: 'netsparker-enterprise.target',
+                        transformer: (input) => {
+                            return `Netsparker Enterprise Scan ID: ${lodash_1.default.get(input, 'scan-id')} URL: ${lodash_1.default.get(input, 'url')}`;
+                        }
+                    },
+                    maintainer: null,
+                    summary: 'Netsparker Enterprise Scan',
+                    license: null,
+                    copyright: null,
+                    copyright_email: null,
+                    supports: [],
+                    attributes: [],
+                    depends: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: [
+                        {
+                            path: 'netsparker-enterprise.vulnerabilities.vulnerability',
+                            key: 'id',
+                            id: { path: 'LookupId' },
+                            title: { path: 'name' },
+                            desc: { transformer: formatControlDesc },
+                            impact: {
+                                path: 'severity',
+                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
+                            },
+                            tags: {
+                                nist: { path: 'classification', transformer: nistTag }
+                            },
+                            descriptions: [
+                                {
+                                    data: { transformer: formatCheck },
+                                    label: 'check'
+                                },
+                                {
+                                    data: { transformer: formatFix },
+                                    label: 'fix'
+                                }
+                            ],
+                            refs: [],
+                            source_location: {},
+                            code: '',
+                            results: [
+                                {
+                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
+                                    code_desc: { path: 'http-request', transformer: formatCodeDesc },
+                                    message: { path: 'http-response', transformer: formatMessage },
+                                    run_time: 0,
+                                    start_time: { path: '$.netsparker-enterprise.target.initiated' }
+                                }
+                            ]
+                        }
+                    ],
+                    sha256: ''
+                }
+            ]
+        };
+    }
+    setMappings(customMappings) {
+        super.setMappings(customMappings);
+    }
+}
+exports.NetsparkerMapper = NetsparkerMapper;
+//# sourceMappingURL=netsparker-mapper.js.map

package/lib/src/netsparker-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"netsparker-mapper.js","sourceRoot":"","sources":["../../src/netsparker-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,sEAAqC;AACrC,uCAAkC;AAClC,oDAAuB;AACvB,gDAAwB;AACxB,kDAAgE;AAChE,qDAM0B;AAC1B,8DAAyD;AACzD,kEAA6D;AAE7D,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,eAAe,EAAE,GAAG,CAAC;IACtB,CAAC,aAAa,EAAE,GAAG,CAAC;CACrB,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAG,cAAI,CAAC,OAAO,CACxC,SAAS,EACT,8BAA8B,CAC/B,CAAC;AACF,MAAM,gBAAgB,GAAG,IAAI,+BAAc,CAAC,qBAAqB,CAAC,CAAC;AACnE,MAAM,uBAAuB,GAAG,cAAI,CAAC,OAAO,CAC1C,SAAS,EACT,gCAAgC,CACjC,CAAC;AACF,MAAM,kBAAkB,GAAG,IAAI,mCAAgB,CAAC,uBAAuB,CAAC,CAAC;AACzE,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAE3C,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,OAAO,GAAG;QACd,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,OAAO,yBAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,OAAO,CAAC,cAAuC;IACtD,IAAI,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QAC1B,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;KACnB;IACD,IAAI,QAAQ,GAAG,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QAC5B,QAAQ,GAAG,CAAC,QAAQ,CAAC,CAAC;KACvB;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAkB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,QAAoB,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;QACvB,OAAO,MAAM,CAAC;KACf;SAAM;QACL,OAAO,gBAAgB,CAAC;KACzB;AACH,CAAC;AACD,SAAS,iBAAiB,CAAC,aAAsB;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,WAAW,EAAE;QACf,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACxB;IACD,MAAM,kBAAkB,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACvE,IAAI,kBAAkB,EAAE;QACtB,IAAI,CAAC,IAAI,CAAC,wBAAwB,kBAAkB,EAAE,CAAC,CAAC;KACzD;IACD,MAAM,gBAAgB,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACnE,IAAI,gBAAgB,EAAE;QACpB,IAAI,CAAC,IAAI,CACP,sBAAsB,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAC5D,KAAK,EACL,IAAI,CACL,EAAE,CACJ,CAAC;KACH;IACD,MAAM,cAAc,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC9D,IAAI,cAAc,EAAE;QAClB,IAAI,CAAC,IAAI,CACP,mBAAmB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CACzE,CAAC;KACH;IACD,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,EAAE;QACV,IAAI,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;KAChC;IACD,MAAM,aAAa,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC5D,IAAI,aAAa,EAAE;QACjB,IAAI,CAAC,IAAI,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;KAC9C;IACD,MAAM,YAAY,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,YAAY,EAAE;QAChB,IAAI,CAAC,IAAI,CAAC,iBAAiB,YAAY,EAAE,CAAC,CAAC;KAC5C;IACD,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,SAAS,EAAE;QACb,IAAI,CAAC,IAAI,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;KACtC;IACD,MAAM,IAAI,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,EAAE;QACR,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;KAC5B;IACD,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,SAAS,EAAE;QACb,IAAI,CAAC,IAAI,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;KACtC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,WAAW,CAAC,aAAsB;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,kBAAkB,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACvE,IAAI,kBAAkB,EAAE;QACtB,IAAI,CAAC,IAAI,CAAC,wBAAwB,kBAAkB,EAAE,CAAC,CAAC;KACzD;IACD,MAAM,cAAc,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAChE,IAAI,cAAc,EAAE;QAClB,IAAI,CAAC,IAAI,CAAC,qBAAqB,cAAc,EAAE,CAAC,CAAC;KAClD;IACD,OAAO,IAAA,0BAAS,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACtC,CAAC;AACD,SAAS,SAAS,CAAC,aAAsB;IACvC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAI,eAAe,EAAE;QACnB,IAAI,CAAC,IAAI,CAAC,qBAAqB,eAAe,EAAE,CAAC,CAAC;KACnD;IACD,MAAM,iBAAiB,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACrE,IAAI,iBAAiB,EAAE;QACrB,IAAI,CAAC,IAAI,CAAC,uBAAuB,iBAAiB,EAAE,CAAC,CAAC;KACvD;IACD,MAAM,gBAAgB,GAAG,gBAAC,CAAC,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACnE,IAAI,gBAAgB,EAAE;QACpB,IAAI,CAAC,IAAI,CAAC,sBAAsB,gBAAgB,EAAE,CAAC,CAAC;KACrD;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,kBAAkB,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,YAAY,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,aAAa,CAAC,QAAiB;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,mBAAmB,gBAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,cAAc,gBAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,kBAAkB,gBAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,MAAa,gBAAiB,SAAQ,8BAAa;IA4EjD,YAAY,aAAqB;QAC/B,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QA5EjC,aAAQ,GAAqD;YAC3D,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAC,IAAI,EAAE,kCAAkC,EAAC;aACtD;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE;wBACL,IAAI,EAAE,8BAA8B;wBACpC,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;4BACtC,OAAO,kCAAkC,gBAAC,CAAC,GAAG,CAC5C,KAAK,EACL,SAAS,CACV,SAAS,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;wBAClC,CAAC;qBACF;oBACD,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,4BAA4B;oBACrC,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,qDAAqD;4BAC3D,GAAG,EAAE,IAAI;4BACT,EAAE,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;4BACtB,KAAK,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;4BACrB,IAAI,EAAE,EAAC,WAAW,EAAE,iBAAiB,EAAC;4BACtC,MAAM,EAAE;gCACN,IAAI,EAAE,UAAU;gCAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAC;6BACrD;4BACD,YAAY,EAAE;gCACZ;oCACE,IAAI,EAAE,EAAC,WAAW,EAAE,WAAW,EAAC;oCAChC,KAAK,EAAE,OAAO;iCACf;gCACD;oCACE,IAAI,EAAE,EAAC,WAAW,EAAE,SAAS,EAAC;oCAC9B,KAAK,EAAE,KAAK;iCACb;6BACF;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,IAAI,EAAE,EAAE;4BACR,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE,EAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAC;oCAC9D,OAAO,EAAE,EAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAC;oCAC5D,QAAQ,EAAE,CAAC;oCACX,UAAU,EAAE,EAAC,IAAI,EAAE,0CAA0C,EAAC;iCAC/D;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;IAGF,CAAC;IACD,WAAW,CACT,cAAgE;QAEhE,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC;CACF;AApFD,4CAoFC"}

package/lib/src/nikto-mapper.d.ts

@@ -0,0 +1,7 @@
+import { ExecJSON } from 'inspecjs';
+import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
+export declare class NiktoMapper extends BaseConverter {
+    mappings: MappedTransform<ExecJSON.Execution, ILookupPath>;
+    constructor(niktoJson: string);
+    setMappings(customMappings: MappedTransform<ExecJSON.Execution, ILookupPath>): void;
+}

package/lib/src/nikto-mapper.js

@@ -0,0 +1,96 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NiktoMapper = void 0;
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+const path_1 = __importDefault(require("path"));
+const package_json_1 = require("../package.json");
+const base_converter_1 = require("./base-converter");
+const NiktoNistMapping_1 = require("./mappings/NiktoNistMapping");
+const NIKTO_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/nikto-nist-mapping.csv');
+const NIKTO_NIST_MAPPING = new NiktoNistMapping_1.NiktoNistMapping(NIKTO_NIST_MAPPING_FILE);
+function formatTitle(file) {
+    return `Nikto Target: ${projectName(file)}`;
+}
+function projectName(file) {
+    return `Host: ${lodash_1.default.get(file, 'host')} Port: ${lodash_1.default.get(file, 'port')}`;
+}
+function formatCodeDesc(vulnerability) {
+    return `URL : ${lodash_1.default.get(vulnerability, 'url')} Method: ${lodash_1.default.get(vulnerability, 'method')}`;
+}
+function nistTag(id) {
+    return NIKTO_NIST_MAPPING.nistTag(id);
+}
+class NiktoMapper extends base_converter_1.BaseConverter {
+    constructor(niktoJson) {
+        super(JSON.parse(niktoJson));
+        this.mappings = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version,
+                target_id: { transformer: projectName }
+            },
+            version: package_json_1.version,
+            statistics: {
+                duration: null
+            },
+            profiles: [
+                {
+                    name: 'Nikto Website Scanner',
+                    version: '',
+                    title: { transformer: formatTitle },
+                    maintainer: null,
+                    summary: {
+                        path: 'banner',
+                        transformer: (input) => {
+                            return `Banner: ${input}`;
+                        }
+                    },
+                    license: null,
+                    copyright: null,
+                    copyright_email: null,
+                    supports: [],
+                    attributes: [],
+                    depends: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: [
+                        {
+                            path: 'vulnerabilities',
+                            key: 'id',
+                            tags: {
+                                nist: { path: 'id', transformer: nistTag },
+                                ösvdb: { path: 'OSVDB' }
+                            },
+                            descriptions: [],
+                            refs: [],
+                            source_location: {},
+                            title: { path: 'msg' },
+                            id: { path: 'id' },
+                            desc: { path: 'msg' },
+                            impact: 0.5,
+                            code: '',
+                            results: [
+                                {
+                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
+                                    code_desc: { transformer: formatCodeDesc },
+                                    run_time: 0,
+                                    start_time: ''
+                                }
+                            ]
+                        }
+                    ],
+                    sha256: ''
+                }
+            ]
+        };
+    }
+    setMappings(customMappings) {
+        super.setMappings(customMappings);
+    }
+}
+exports.NiktoMapper = NiktoMapper;
+//# sourceMappingURL=nikto-mapper.js.map