-
Notifications
You must be signed in to change notification settings - Fork 915
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
38 changed files
with
628 additions
and
130 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| 2.5.0 | ||
| 2.6.0 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| ''' | ||
| Faraday Penetration Test IDE | ||
| Copyright (C) 2013 Infobyte LLC (http://www.infobytesec.com/) | ||
| See the file 'doc/LICENSE' for the license information | ||
| ''' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,158 @@ | ||
| #!/usr/bin/env python | ||
| # -*- coding: utf-8 -*- | ||
|
|
||
| ''' | ||
| Faraday Penetration Test IDE | ||
| Copyright (C) 2013 Infobyte LLC (http://www.infobytesec.com/) | ||
| See the file 'doc/LICENSE' for the license information | ||
| ''' | ||
| from __future__ import with_statement | ||
| from plugins import core | ||
| from model import api | ||
| import re | ||
| import os | ||
| import pprint | ||
| import sys | ||
| from lxml import etree | ||
|
|
||
| try: | ||
| import xml.etree.cElementTree as ET | ||
| import xml.etree.ElementTree as ET_ORIG | ||
| ETREE_VERSION = ET_ORIG.VERSION | ||
| except ImportError: | ||
| import xml.etree.ElementTree as ET | ||
| ETREE_VERSION = ET.VERSION | ||
|
|
||
| ETREE_VERSION = [int(i) for i in ETREE_VERSION.split(".")] | ||
|
|
||
| current_path = os.path.abspath(os.getcwd()) | ||
|
|
||
| __author__ = "Thierry Beauquier" | ||
| __license__ = "" | ||
| __version__ = "1.0.0" | ||
| __maintainer__ = "Thierry Beauquier" | ||
| __email__ = "[email protected]" | ||
| __status__ = "Development" | ||
|
|
||
| ''' | ||
| This plugin has been designed to be used with python-unittest2/paramiko script to perform security compliancy verification. It enables to have displayed both security scans results (nmap, | ||
| nessus, ..) and security verification compliancy (CIS-CAT, compagny's product security requirement) by Faraday-IPE | ||
| This plugin requires that a element "host" is added to <testcase/> (sed -i 's/<testcase/<testcase host=\"192.168.1.1\"/' junit.xml) | ||
| <testsuite errors="0" failures="1" name="AccountsWithSuperuserPrivilegesShallBeDisabledByDefault-20170118090010" skipped="0" tests="1" time="0.144"> | ||
| <testcase host="192.168.1.1" classname="AccountsWithSuperuserPrivilegesShallBeDisabledByDefault" name="test_sshdRootLogin" time="0.144"> | ||
| <failure message="SSH for root account is not disabled: '' matches '' in ''" type="AssertionError"> | ||
| <![CDATA[Traceback (most recent call last): | ||
| File "bsr-ci.py", line 514, in test_sshdRootLogin | ||
| self.assertNotRegexpMatches(_ssh('cat /etc/ssh/sshd_config | egrep "^PermitRootLogin" | awk \'{print $2}\' | egrep "no|No|NO"',host),'', 'SSH for root account is not disabled') | ||
| AssertionError: SSH for root account is not disabled: '' matches '' in '' | ||
| ]]> </failure> | ||
| </testcase> | ||
| <system-out> | ||
| <![CDATA[]]> </system-out> | ||
| <system-err> | ||
| <![CDATA[]]> </system-err> | ||
| </testsuite> | ||
| ''' | ||
|
|
||
| class JunitXmlParser(object): | ||
| """ | ||
| The objective of this class is to parse an xml file generated by the junit. | ||
| @param junit_xml_filepath A proper xml generated by junit | ||
| """ | ||
|
|
||
| def __init__(self, xml_output): | ||
|
|
||
| tree = self.parse_xml(xml_output) | ||
| if tree: | ||
| self.items = [data for data in self.get_items(tree)] | ||
| else: | ||
| self.items = [] | ||
|
|
||
| def parse_xml(self, xml_output): | ||
| """ | ||
| Open and parse an xml file. | ||
| @return xml_tree An xml tree instance. None if error. | ||
| """ | ||
| try: | ||
| # return ET.fromstring(xml_output) | ||
| tree = etree.fromstring(xml_output) | ||
| except SyntaxError, err: | ||
| print "SyntaxError: %s. %s" % (err, xml_output) | ||
| return None | ||
| return tree | ||
|
|
||
| def get_items(self, tree): | ||
| """ | ||
| @return items A list of Failure instances | ||
| """ | ||
|
|
||
| for node in tree.findall('testsuite/testcase/failure'): | ||
| yield Testsuite(node) | ||
|
|
||
|
|
||
| class Testsuite(object): | ||
|
|
||
| def __init__(self, testsuite_node): | ||
| self.node = testsuite_node | ||
|
|
||
| self.parent = self.node.getparent() | ||
| self.name = self.parent.get('name') | ||
| self.host = self.parent.get('host') | ||
| if self.host is None: | ||
| print 'host element is missing' | ||
| self.host = '' | ||
|
|
||
| self.message = self.get_text_from_subnode('message') | ||
|
|
||
| def get_text_from_subnode(self, subnode_xpath_expr): | ||
| """ | ||
| Finds a subnode in the host node and the retrieves a value from it. | ||
| @return An attribute value | ||
| """ | ||
| sub_node = self.node.get(subnode_xpath_expr) | ||
| if sub_node is not None: | ||
| return sub_node | ||
|
|
||
| return None | ||
|
|
||
| class JunitPlugin(core.PluginBase): | ||
| """ | ||
| Example plugin to parse junit output. | ||
| """ | ||
|
|
||
| def __init__(self): | ||
| core.PluginBase.__init__(self) | ||
| self.id = "Junit" | ||
| self.name = "Junit XML Output Plugin" | ||
| self.plugin_version = "0.0.1" | ||
| self.version = "" | ||
| self.framework_version = "1.0.0" | ||
| self.options = None | ||
| self._current_output = None | ||
| self._command_regex = None | ||
|
|
||
| def parseOutputString(self, output, debug=False): | ||
|
|
||
| parser = JunitXmlParser(output) | ||
| for item in parser.items: | ||
| h_id = self.createAndAddHost(item.host, os="Linux") | ||
| i_id = self.createAndAddInterface(h_id, item.host, ipv4_address=item.host) | ||
| self.createAndAddVulnToHost(h_id, name=item.name, desc=item.message, ref=[], severity="High") | ||
| del parser | ||
|
|
||
| def createPlugin(): | ||
| return JunitPlugin() | ||
|
|
||
| if __name__ == '__main__': | ||
| parser = JunitXmlParser(sys.argv[1]) | ||
| for item in parser.items: | ||
| if item.status == 'up': | ||
| print item |
Oops, something went wrong.