Merge branch 'feature/MSP-9640/cred_creation' into staging/electro-release
James Lee
commit
dcc4d25f15
791
db/schema.rb
791
db/schema.rb
|
|
@ -17,6 +17,85 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.text "token"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "name"
|
||||
end
|
||||
|
||||
create_table "app_categories", :force => true do |t|
|
||||
t.string "name"
|
||||
end
|
||||
|
||||
create_table "app_categories_apps", :force => true do |t|
|
||||
t.integer "app_id"
|
||||
t.integer "app_category_id"
|
||||
t.string "name"
|
||||
end
|
||||
|
||||
add_index "app_categories_apps", ["app_category_id"], :name => "index_app_categories_apps_on_app_category_id"
|
||||
add_index "app_categories_apps", ["app_id"], :name => "index_app_categories_apps_on_app_id"
|
||||
|
||||
create_table "app_runs", :force => true do |t|
|
||||
t.datetime "started_at"
|
||||
t.datetime "stopped_at"
|
||||
t.integer "app_id"
|
||||
t.text "config"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "state"
|
||||
t.integer "workspace_id"
|
||||
t.boolean "hidden", :default => false
|
||||
end
|
||||
|
||||
add_index "app_runs", ["app_id"], :name => "index_app_runs_on_app_id"
|
||||
add_index "app_runs", ["workspace_id"], :name => "index_app_runs_on_workspace_id"
|
||||
|
||||
create_table "apps", :force => true do |t|
|
||||
t.string "name"
|
||||
t.text "description"
|
||||
t.float "rating"
|
||||
t.string "symbol"
|
||||
t.boolean "hidden", :default => false
|
||||
end
|
||||
|
||||
create_table "automatic_exploitation_match_results", :force => true do |t|
|
||||
t.integer "match_id"
|
||||
t.integer "run_id"
|
||||
t.string "state", :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "automatic_exploitation_match_sets", :force => true do |t|
|
||||
t.integer "workspace_id"
|
||||
t.integer "user_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "automatic_exploitation_match_sets", ["user_id"], :name => "index_automatic_exploitation_match_sets_on_user_id"
|
||||
add_index "automatic_exploitation_match_sets", ["workspace_id"], :name => "index_automatic_exploitation_match_sets_on_workspace_id"
|
||||
|
||||
create_table "automatic_exploitation_matches", :force => true do |t|
|
||||
t.integer "vuln_id"
|
||||
t.integer "module_detail_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.integer "match_set_id"
|
||||
t.integer "nexpose_data_exploit_id"
|
||||
t.string "matchable_type"
|
||||
t.integer "matchable_id"
|
||||
end
|
||||
|
||||
add_index "automatic_exploitation_matches", ["module_detail_id"], :name => "index_automatic_exploitation_matches_on_ref_id"
|
||||
add_index "automatic_exploitation_matches", ["nexpose_data_exploit_id"], :name => "index_automatic_exploitation_matches_on_nexpose_data_exploit_id"
|
||||
add_index "automatic_exploitation_matches", ["vuln_id"], :name => "index_automatic_exploitation_matches_on_vuln_id"
|
||||
|
||||
create_table "automatic_exploitation_runs", :force => true do |t|
|
||||
t.integer "workspace_id"
|
||||
t.integer "user_id"
|
||||
t.integer "match_set_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "state"
|
||||
end
|
||||
|
||||
create_table "clients", :force => true do |t|
|
||||
|
|
@ -28,6 +107,17 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.datetime "updated_at"
|
||||
end
|
||||
|
||||
create_table "cred_files", :force => true do |t|
|
||||
t.integer "workspace_id", :default => 1, :null => false
|
||||
t.string "path", :limit => 1024
|
||||
t.string "ftype", :limit => 16
|
||||
t.string "created_by"
|
||||
t.string "name", :limit => 512
|
||||
t.string "desc", :limit => 1024
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "creds", :force => true do |t|
|
||||
t.integer "service_id", :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
|
|
@ -41,6 +131,32 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.string "source_type"
|
||||
end
|
||||
|
||||
create_table "delayed_jobs", :force => true do |t|
|
||||
t.integer "priority", :default => 0
|
||||
t.integer "attempts", :default => 0
|
||||
t.text "handler"
|
||||
t.text "last_error"
|
||||
t.datetime "run_at"
|
||||
t.datetime "locked_at"
|
||||
t.datetime "failed_at"
|
||||
t.string "locked_by"
|
||||
t.string "queue"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "delayed_jobs", ["priority", "run_at"], :name => "delayed_jobs_priority"
|
||||
|
||||
create_table "egadz_result_ranges", :force => true do |t|
|
||||
t.integer "task_id"
|
||||
t.string "target_host"
|
||||
t.integer "start_port"
|
||||
t.integer "end_port"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "state"
|
||||
end
|
||||
|
||||
create_table "events", :force => true do |t|
|
||||
t.integer "workspace_id"
|
||||
t.integer "host_id"
|
||||
|
|
@ -51,6 +167,8 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.boolean "seen"
|
||||
t.string "username"
|
||||
t.text "info"
|
||||
t.text "module_rhost"
|
||||
t.text "module_name"
|
||||
end
|
||||
|
||||
create_table "exploit_attempts", :force => true do |t|
|
||||
|
|
@ -79,6 +197,33 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "exports", :force => true do |t|
|
||||
t.integer "workspace_id", :null => false
|
||||
t.string "created_by"
|
||||
t.string "export_type"
|
||||
t.string "name"
|
||||
t.string "state"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "file_path", :limit => 1024
|
||||
t.boolean "mask_credentials", :default => false
|
||||
t.datetime "completed_at"
|
||||
t.text "included_addresses"
|
||||
t.text "excluded_addresses"
|
||||
t.datetime "started_at"
|
||||
end
|
||||
|
||||
create_table "generated_payloads", :force => true do |t|
|
||||
t.string "state"
|
||||
t.string "file"
|
||||
t.text "options"
|
||||
t.integer "workspace_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "generator_error"
|
||||
t.string "payload_class"
|
||||
end
|
||||
|
||||
create_table "host_details", :force => true do |t|
|
||||
t.integer "host_id"
|
||||
t.integer "nx_console_id"
|
||||
|
|
@ -115,6 +260,8 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.integer "host_detail_count", :default => 0
|
||||
t.integer "exploit_attempt_count", :default => 0
|
||||
t.integer "cred_count", :default => 0
|
||||
t.integer "nexpose_data_asset_id"
|
||||
t.integer "history_count", :default => 0
|
||||
end
|
||||
|
||||
add_index "hosts", ["name"], :name => "index_hosts_on_name"
|
||||
|
|
@ -129,6 +276,15 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.integer "tag_id"
|
||||
end
|
||||
|
||||
create_table "known_ports", :force => true do |t|
|
||||
t.integer "port", :null => false
|
||||
t.string "proto", :default => "tcp", :null => false
|
||||
t.string "name", :null => false
|
||||
t.text "info"
|
||||
end
|
||||
|
||||
add_index "known_ports", ["port"], :name => "index_known_ports_on_port"
|
||||
|
||||
create_table "listeners", :force => true do |t|
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
|
|
@ -355,6 +511,209 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.text "name"
|
||||
end
|
||||
|
||||
create_table "nexpose_data_assets", :force => true do |t|
|
||||
t.integer "nexpose_data_site_id", :null => false
|
||||
t.string "asset_id", :null => false
|
||||
t.string "url"
|
||||
t.text "host_names"
|
||||
t.string "os_name"
|
||||
t.text "mac_addresses"
|
||||
t.datetime "last_scan_date"
|
||||
t.datetime "next_scan_date"
|
||||
t.string "last_scan_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "nexpose_data_assets", ["asset_id"], :name => "index_nexpose_data_assets_on_asset_id"
|
||||
add_index "nexpose_data_assets", ["nexpose_data_site_id"], :name => "index_nexpose_data_assets_on_nexpose_data_site_id"
|
||||
|
||||
create_table "nexpose_data_exploits", :force => true do |t|
|
||||
t.integer "module_detail_id"
|
||||
t.string "nexpose_exploit_id"
|
||||
t.string "skill_level"
|
||||
t.text "description"
|
||||
t.string "source_key"
|
||||
t.string "source"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "nexpose_data_exploits", ["nexpose_exploit_id"], :name => "index_nexpose_data_exploits_on_nexpose_exploit_id", :unique => true
|
||||
add_index "nexpose_data_exploits", ["source", "source_key"], :name => "index_nexpose_data_exploits_on_source_and_source_key"
|
||||
|
||||
create_table "nexpose_data_exploits_vulnerability_definitions", :id => false, :force => true do |t|
|
||||
t.integer "exploit_id"
|
||||
t.integer "vulnerability_definition_id"
|
||||
end
|
||||
|
||||
add_index "nexpose_data_exploits_vulnerability_definitions", ["exploit_id", "vulnerability_definition_id"], :name => "index_nx_data_exploits_vuln_defs_on_exploit_id_and_vuln_def_id"
|
||||
add_index "nexpose_data_exploits_vulnerability_definitions", ["vulnerability_definition_id", "exploit_id"], :name => "index_nx_data_exploits_vuln_defs_on_vuln_def_id_and_exploit_id"
|
||||
|
||||
create_table "nexpose_data_import_runs", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.integer "workspace_id"
|
||||
t.string "state"
|
||||
t.integer "nx_console_id"
|
||||
t.boolean "metasploitable_only", :default => true
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "import_state"
|
||||
end
|
||||
|
||||
add_index "nexpose_data_import_runs", ["nx_console_id"], :name => "index_nexpose_data_import_runs_on_nx_console_id"
|
||||
|
||||
create_table "nexpose_data_ip_addresses", :force => true do |t|
|
||||
t.integer "nexpose_data_asset_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "address", :limit => nil
|
||||
end
|
||||
|
||||
add_index "nexpose_data_ip_addresses", ["nexpose_data_asset_id"], :name => "index_nexpose_data_ip_addresses_on_nexpose_data_asset_id"
|
||||
|
||||
create_table "nexpose_data_scan_templates", :force => true do |t|
|
||||
t.integer "nx_console_id", :null => false
|
||||
t.string "scan_template_id", :null => false
|
||||
t.string "name"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "nexpose_data_scan_templates", ["nx_console_id"], :name => "index_nexpose_data_scan_templates_on_nx_console_id"
|
||||
add_index "nexpose_data_scan_templates", ["scan_template_id"], :name => "index_nexpose_data_scan_templates_on_scan_template_id"
|
||||
|
||||
create_table "nexpose_data_sites", :force => true do |t|
|
||||
t.integer "nexpose_data_import_run_id", :null => false
|
||||
t.string "site_id", :null => false
|
||||
t.string "name"
|
||||
t.text "description"
|
||||
t.string "importance"
|
||||
t.string "type"
|
||||
t.datetime "last_scan_date"
|
||||
t.datetime "next_scan_date"
|
||||
t.string "last_scan_id"
|
||||
t.text "summary"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "nexpose_data_sites", ["nexpose_data_import_run_id"], :name => "index_nexpose_data_sites_on_nexpose_data_import_run_id"
|
||||
add_index "nexpose_data_sites", ["site_id"], :name => "index_nexpose_data_sites_on_site_id"
|
||||
|
||||
create_table "nexpose_data_vulnerabilities", :force => true do |t|
|
||||
t.integer "nexpose_data_vulnerability_definition_id", :null => false
|
||||
t.string "vulnerability_id", :null => false
|
||||
t.string "title"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "nexpose_data_vulnerabilities", ["nexpose_data_vulnerability_definition_id"], :name => "index_nx_data_vuln_on_nexpose_data_vuln_def_id"
|
||||
add_index "nexpose_data_vulnerabilities", ["vulnerability_id"], :name => "index_nexpose_data_vulnerabilities_on_vulnerability_id", :unique => true
|
||||
|
||||
create_table "nexpose_data_vulnerability_definitions", :force => true do |t|
|
||||
t.string "vulnerability_definition_id"
|
||||
t.string "title"
|
||||
t.text "description"
|
||||
t.date "date_published"
|
||||
t.integer "severity_score"
|
||||
t.string "serverity"
|
||||
t.string "pci_severity_score"
|
||||
t.string "pci_status"
|
||||
t.decimal "riskscore"
|
||||
t.string "cvss_vector"
|
||||
t.string "cvss_access_vector_id"
|
||||
t.string "cvss_access_complexity_id"
|
||||
t.string "cvss_authentication_id"
|
||||
t.string "cvss_confidentiality_impact_id"
|
||||
t.string "cvss_integrity_impact_id"
|
||||
t.string "cvss_availability_impact_id"
|
||||
t.decimal "cvss_score"
|
||||
t.decimal "cvss_exploit_score"
|
||||
t.decimal "cvss_impact_score"
|
||||
t.boolean "denial_of_service"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
add_index "nexpose_data_vulnerability_definitions", ["vulnerability_definition_id"], :name => "index_nx_data_vuln_def_on_vulnerability_definition_id", :unique => true
|
||||
|
||||
create_table "nexpose_data_vulnerability_instances", :force => true do |t|
|
||||
t.string "vulnerability_id"
|
||||
t.string "asset_id"
|
||||
t.integer "nexpose_data_vulnerability_id"
|
||||
t.integer "nexpose_data_asset_id"
|
||||
t.string "scan_id"
|
||||
t.date "date"
|
||||
t.string "status"
|
||||
t.text "proof"
|
||||
t.string "key"
|
||||
t.string "service"
|
||||
t.integer "port"
|
||||
t.string "protocol"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "asset_ip_address", :limit => nil
|
||||
end
|
||||
|
||||
add_index "nexpose_data_vulnerability_instances", ["asset_id", "vulnerability_id"], :name => "index_nx_data_vuln_inst_on_asset_id_and_vulnerability_id"
|
||||
add_index "nexpose_data_vulnerability_instances", ["nexpose_data_asset_id"], :name => "index_nx_data_vuln_inst_on_nexpose_data_asset_id"
|
||||
add_index "nexpose_data_vulnerability_instances", ["nexpose_data_vulnerability_id"], :name => "index_nx_data_vuln_inst_on_nexpose_data_vulnerability_id"
|
||||
add_index "nexpose_data_vulnerability_instances", ["vulnerability_id", "asset_id"], :name => "index_nx_data_vuln_inst_on_vulnerability_id_and_asset_id"
|
||||
|
||||
create_table "nexpose_data_vulnerability_references", :force => true do |t|
|
||||
t.integer "nexpose_data_vulnerability_definition_id"
|
||||
t.string "vulnerability_reference_id"
|
||||
t.string "source"
|
||||
t.string "reference"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "nexpose_result_exceptions", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.string "nx_scope_type"
|
||||
t.integer "nx_scope_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.integer "automatic_exploitation_match_result_id"
|
||||
t.integer "nexpose_result_export_run_id"
|
||||
t.datetime "expiration_date"
|
||||
t.string "reason"
|
||||
t.text "comments"
|
||||
t.boolean "approve"
|
||||
t.boolean "sent_to_nexpose"
|
||||
t.datetime "sent_at"
|
||||
end
|
||||
|
||||
add_index "nexpose_result_exceptions", ["nexpose_result_export_run_id"], :name => "index_nexpose_result_exceptions_on_nexpose_result_export_run_id"
|
||||
add_index "nexpose_result_exceptions", ["nx_scope_type", "nx_scope_id"], :name => "index_nx_r_exceptions_on_nx_scope_type_and_nx_scope_id"
|
||||
add_index "nexpose_result_exceptions", ["user_id"], :name => "index_nexpose_result_exceptions_on_user_id"
|
||||
|
||||
create_table "nexpose_result_export_runs", :force => true do |t|
|
||||
t.string "state"
|
||||
t.integer "nx_console_id"
|
||||
t.integer "user_id"
|
||||
t.integer "workspace_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "nexpose_result_validations", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.integer "nexpose_data_asset_id"
|
||||
t.datetime "verified_at"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.integer "automatic_exploitation_match_result_id"
|
||||
t.integer "nexpose_result_export_run_id"
|
||||
t.boolean "sent_to_nexpose"
|
||||
t.datetime "sent_at"
|
||||
end
|
||||
|
||||
add_index "nexpose_result_validations", ["nexpose_result_export_run_id"], :name => "index_nx_result_validations_on_nx_result_export_run_id"
|
||||
|
||||
create_table "notes", :force => true do |t|
|
||||
t.datetime "created_at"
|
||||
t.string "ntype", :limit => 512
|
||||
|
|
@ -369,6 +728,32 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
|
||||
add_index "notes", ["ntype"], :name => "index_notes_on_ntype"
|
||||
|
||||
create_table "notification_messages", :force => true do |t|
|
||||
t.integer "workspace_id"
|
||||
t.integer "task_id"
|
||||
t.string "title"
|
||||
t.text "content"
|
||||
t.string "url"
|
||||
t.string "kind"
|
||||
t.datetime "created_at"
|
||||
end
|
||||
|
||||
create_table "notification_messages_users", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.integer "message_id"
|
||||
t.boolean "read", :default => false
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "pnd_pcap_files", :force => true do |t|
|
||||
t.integer "task_id"
|
||||
t.integer "loot_id"
|
||||
t.string "status"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "profiles", :force => true do |t|
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
|
|
@ -387,26 +772,47 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
|
||||
add_index "refs", ["name"], :name => "index_refs_on_name"
|
||||
|
||||
create_table "report_templates", :force => true do |t|
|
||||
t.integer "workspace_id", :default => 1, :null => false
|
||||
create_table "report_artifacts", :force => true do |t|
|
||||
t.integer "report_id", :null => false
|
||||
t.string "file_path", :limit => 1024, :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.datetime "accessed_at"
|
||||
end
|
||||
|
||||
create_table "report_custom_resources", :force => true do |t|
|
||||
t.integer "workspace_id", :null => false
|
||||
t.string "created_by"
|
||||
t.string "path", :limit => 1024
|
||||
t.text "name"
|
||||
t.string "resource_type"
|
||||
t.string "name"
|
||||
t.string "file_path"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "reports", :force => true do |t|
|
||||
t.integer "workspace_id", :default => 1, :null => false
|
||||
t.integer "workspace_id", :null => false
|
||||
t.string "created_by"
|
||||
t.string "rtype"
|
||||
t.string "path", :limit => 1024
|
||||
t.text "options"
|
||||
t.string "report_type"
|
||||
t.string "name"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.datetime "downloaded_at"
|
||||
t.integer "task_id"
|
||||
t.string "name", :limit => 63
|
||||
t.string "file_formats"
|
||||
t.text "options"
|
||||
t.string "sections"
|
||||
t.string "report_template"
|
||||
t.text "included_addresses"
|
||||
t.string "state"
|
||||
t.datetime "started_at"
|
||||
t.datetime "completed_at"
|
||||
t.text "excluded_addresses"
|
||||
t.integer "se_campaign_id"
|
||||
t.integer "app_run_id"
|
||||
t.string "order_vulns_by"
|
||||
t.text "usernames_reported"
|
||||
t.boolean "skip_data_check", :default => false
|
||||
t.text "email_recipients"
|
||||
t.text "logo_path"
|
||||
end
|
||||
|
||||
create_table "routes", :force => true do |t|
|
||||
|
|
@ -415,6 +821,204 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.string "netmask"
|
||||
end
|
||||
|
||||
create_table "run_stats", :force => true do |t|
|
||||
t.string "name"
|
||||
t.float "data"
|
||||
t.integer "task_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "scheduled_tasks", :force => true do |t|
|
||||
t.string "kind"
|
||||
t.datetime "last_run_at"
|
||||
t.string "state"
|
||||
t.string "last_run_status"
|
||||
t.integer "task_chain_id"
|
||||
t.integer "position"
|
||||
t.text "config_hash"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.text "form_hash"
|
||||
t.text "report_hash"
|
||||
t.string "file_upload"
|
||||
end
|
||||
|
||||
create_table "se_campaign_files", :force => true do |t|
|
||||
t.integer "attachable_id"
|
||||
t.string "attachable_type"
|
||||
t.string "attachment"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "content_disposition"
|
||||
t.string "type"
|
||||
t.integer "workspace_id"
|
||||
t.integer "user_id"
|
||||
t.string "name"
|
||||
t.integer "file_size"
|
||||
end
|
||||
|
||||
create_table "se_campaigns", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.integer "workspace_id"
|
||||
t.string "name"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "state", :default => "unconfigured"
|
||||
t.text "prefs"
|
||||
t.integer "port"
|
||||
t.datetime "started_at"
|
||||
t.string "config_type"
|
||||
t.integer "started_by_user_id"
|
||||
t.boolean "notification_enabled"
|
||||
t.string "notification_email_address"
|
||||
t.text "notification_email_message"
|
||||
t.string "notification_email_subject"
|
||||
t.datetime "last_target_interaction_at"
|
||||
end
|
||||
|
||||
create_table "se_email_openings", :force => true do |t|
|
||||
t.integer "email_id"
|
||||
t.integer "human_target_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "address", :limit => nil
|
||||
end
|
||||
|
||||
create_table "se_email_sends", :force => true do |t|
|
||||
t.integer "email_id"
|
||||
t.integer "human_target_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.boolean "sent"
|
||||
t.string "status_message"
|
||||
end
|
||||
|
||||
create_table "se_email_templates", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.text "content"
|
||||
t.string "name"
|
||||
t.integer "workspace_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "se_emails", :force => true do |t|
|
||||
t.integer "user_id"
|
||||
t.text "content"
|
||||
t.string "name"
|
||||
t.string "subject"
|
||||
t.integer "campaign_id"
|
||||
t.integer "template_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "from_address"
|
||||
t.string "from_name"
|
||||
t.integer "target_list_id"
|
||||
t.integer "email_template_id"
|
||||
t.text "prefs"
|
||||
t.string "attack_type"
|
||||
t.string "status"
|
||||
t.datetime "sent_at"
|
||||
t.string "origin_type"
|
||||
t.string "editor_type"
|
||||
end
|
||||
|
||||
create_table "se_human_targets", :force => true do |t|
|
||||
t.string "first_name"
|
||||
t.string "last_name"
|
||||
t.string "email_address"
|
||||
t.integer "workspace_id"
|
||||
t.integer "user_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "se_phishing_results", :force => true do |t|
|
||||
t.integer "human_target_id"
|
||||
t.integer "web_page_id"
|
||||
t.text "data"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "address", :limit => nil
|
||||
t.text "raw_data"
|
||||
t.string "browser_name"
|
||||
t.string "browser_version"
|
||||
t.string "os_name"
|
||||
t.string "os_version"
|
||||
end
|
||||
|
||||
create_table "se_portable_files", :force => true do |t|
|
||||
t.integer "campaign_id"
|
||||
t.string "name"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.text "prefs"
|
||||
t.string "file_name"
|
||||
t.string "exploit_module_path"
|
||||
t.boolean "dynamic_stagers", :default => false
|
||||
end
|
||||
|
||||
create_table "se_target_list_human_targets", :force => true do |t|
|
||||
t.integer "target_list_id"
|
||||
t.integer "human_target_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "se_target_lists", :force => true do |t|
|
||||
t.string "name"
|
||||
t.string "file_name"
|
||||
t.integer "user_id"
|
||||
t.integer "workspace_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "se_tracking_links", :force => true do |t|
|
||||
t.string "external_destination_url"
|
||||
t.integer "email_id"
|
||||
t.integer "web_page_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "se_visits", :force => true do |t|
|
||||
t.integer "human_target_id"
|
||||
t.integer "web_page_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.integer "email_id"
|
||||
t.string "address", :limit => nil
|
||||
end
|
||||
|
||||
create_table "se_web_pages", :force => true do |t|
|
||||
t.integer "campaign_id"
|
||||
t.string "path"
|
||||
t.text "content"
|
||||
t.string "clone_url"
|
||||
t.boolean "online"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "name"
|
||||
t.text "prefs"
|
||||
t.integer "template_id"
|
||||
t.string "attack_type"
|
||||
t.string "origin_type"
|
||||
t.string "phishing_redirect_origin"
|
||||
end
|
||||
|
||||
create_table "se_web_templates", :force => true do |t|
|
||||
t.string "name"
|
||||
t.integer "workspace_id"
|
||||
t.integer "user_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.text "content"
|
||||
t.string "clone_url"
|
||||
t.string "origin_type"
|
||||
end
|
||||
|
||||
create_table "services", :force => true do |t|
|
||||
t.integer "host_id"
|
||||
t.datetime "created_at"
|
||||
|
|
@ -455,6 +1059,7 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.string "close_reason"
|
||||
t.integer "local_id"
|
||||
t.datetime "last_seen"
|
||||
t.integer "campaign_id"
|
||||
end
|
||||
|
||||
create_table "tags", :force => true do |t|
|
||||
|
|
@ -468,6 +1073,26 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "task_chains", :force => true do |t|
|
||||
t.text "schedule"
|
||||
t.string "name"
|
||||
t.datetime "last_run_at"
|
||||
t.datetime "next_run_at"
|
||||
t.integer "user_id"
|
||||
t.integer "workspace_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.string "state", :default => "ready"
|
||||
t.boolean "clear_workspace_before_run"
|
||||
t.boolean "legacy", :default => true
|
||||
t.integer "active_task_id"
|
||||
t.text "schedule_hash"
|
||||
t.integer "active_scheduled_task_id"
|
||||
t.integer "active_report_id"
|
||||
t.integer "last_run_task_id"
|
||||
t.integer "last_run_report_id"
|
||||
end
|
||||
|
||||
create_table "task_creds", :force => true do |t|
|
||||
t.integer "task_id", :null => false
|
||||
t.integer "cred_id", :null => false
|
||||
|
|
@ -512,6 +1137,7 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.text "result"
|
||||
t.string "module_uuid", :limit => 8
|
||||
t.binary "settings"
|
||||
t.integer "app_run_id"
|
||||
end
|
||||
|
||||
create_table "users", :force => true do |t|
|
||||
|
|
@ -527,6 +1153,7 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.string "company"
|
||||
t.string "prefs", :limit => 524288
|
||||
t.boolean "admin", :default => true, :null => false
|
||||
t.integer "notification_center_count", :default => 0
|
||||
end
|
||||
|
||||
create_table "vuln_attempts", :force => true do |t|
|
||||
|
|
@ -576,15 +1203,47 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.datetime "exploited_at"
|
||||
t.integer "vuln_detail_count", :default => 0
|
||||
t.integer "vuln_attempt_count", :default => 0
|
||||
t.integer "nexpose_data_vuln_def_id"
|
||||
end
|
||||
|
||||
add_index "vulns", ["name"], :name => "index_vulns_on_name"
|
||||
add_index "vulns", ["nexpose_data_vuln_def_id"], :name => "index_vulns_on_nexpose_data_vuln_def_id"
|
||||
|
||||
create_table "vulns_refs", :force => true do |t|
|
||||
t.integer "ref_id"
|
||||
t.integer "vuln_id"
|
||||
end
|
||||
|
||||
create_table "web_attack_cross_site_scriptings", :force => true do |t|
|
||||
t.string "encloser_type", :null => false
|
||||
t.string "escaper_type", :null => false
|
||||
t.string "evader_type", :null => false
|
||||
t.string "executor_type", :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "web_cookies", :force => true do |t|
|
||||
t.string "name", :null => false
|
||||
t.string "value", :null => false
|
||||
t.integer "request_group_id", :null => false
|
||||
t.string "domain", :null => false
|
||||
t.string "path"
|
||||
t.boolean "secure", :default => false, :null => false
|
||||
t.boolean "http_only", :default => false, :null => false
|
||||
t.integer "version"
|
||||
t.string "commnet"
|
||||
t.string "comment_url"
|
||||
t.boolean "discard", :default => false, :null => false
|
||||
t.text "ports"
|
||||
t.integer "max_age"
|
||||
t.datetime "expires_at"
|
||||
t.datetime "created_at"
|
||||
t.datetime "updated_at"
|
||||
end
|
||||
|
||||
add_index "web_cookies", ["request_group_id", "name"], :name => "index_web_cookies_on_request_group_id_and_name"
|
||||
|
||||
create_table "web_forms", :force => true do |t|
|
||||
t.integer "web_site_id", :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
|
|
@ -597,6 +1256,14 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
|
||||
add_index "web_forms", ["path"], :name => "index_web_forms_on_path"
|
||||
|
||||
create_table "web_headers", :force => true do |t|
|
||||
t.boolean "attack_vector", :null => false
|
||||
t.string "name", :null => false
|
||||
t.string "value", :null => false
|
||||
t.integer "position", :null => false
|
||||
t.integer "request_group_id", :null => false
|
||||
end
|
||||
|
||||
create_table "web_pages", :force => true do |t|
|
||||
t.integer "web_site_id", :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
|
|
@ -617,6 +1284,41 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
add_index "web_pages", ["path"], :name => "index_web_pages_on_path"
|
||||
add_index "web_pages", ["query"], :name => "index_web_pages_on_query"
|
||||
|
||||
create_table "web_parameters", :force => true do |t|
|
||||
t.boolean "attack_vector", :null => false
|
||||
t.string "name", :null => false
|
||||
t.string "value", :null => false
|
||||
t.integer "request_id", :null => false
|
||||
t.integer "position", :null => false
|
||||
end
|
||||
|
||||
create_table "web_proofs", :force => true do |t|
|
||||
t.string "image"
|
||||
t.text "text"
|
||||
t.integer "vuln_id", :null => false
|
||||
end
|
||||
|
||||
create_table "web_request_groups", :force => true do |t|
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.integer "user_id", :null => false
|
||||
t.integer "workspace_id", :null => false
|
||||
end
|
||||
|
||||
create_table "web_requests", :force => true do |t|
|
||||
t.string "method", :null => false
|
||||
t.integer "virtual_host_id", :null => false
|
||||
t.string "path", :null => false
|
||||
t.boolean "attack", :default => true
|
||||
t.boolean "requested"
|
||||
t.boolean "attack_vector"
|
||||
t.integer "request_group_id"
|
||||
t.integer "cross_site_scripting_id"
|
||||
end
|
||||
|
||||
add_index "web_requests", ["cross_site_scripting_id"], :name => "index_web_requests_on_cross_site_scripting_id"
|
||||
add_index "web_requests", ["request_group_id"], :name => "index_web_requests_on_request_group_id"
|
||||
|
||||
create_table "web_sites", :force => true do |t|
|
||||
t.integer "service_id", :null => false
|
||||
t.datetime "created_at", :null => false
|
||||
|
|
@ -630,8 +1332,59 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
add_index "web_sites", ["options"], :name => "index_web_sites_on_options"
|
||||
add_index "web_sites", ["vhost"], :name => "index_web_sites_on_vhost"
|
||||
|
||||
create_table "web_transmitted_cookies", :force => true do |t|
|
||||
t.boolean "transmitted"
|
||||
t.integer "request_id"
|
||||
t.integer "cookie_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "web_transmitted_headers", :force => true do |t|
|
||||
t.boolean "transmitted"
|
||||
t.integer "request_id"
|
||||
t.integer "header_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
end
|
||||
|
||||
create_table "web_virtual_hosts", :force => true do |t|
|
||||
t.string "name", :null => false
|
||||
t.integer "service_id", :null => false
|
||||
end
|
||||
|
||||
add_index "web_virtual_hosts", ["service_id", "name"], :name => "index_web_virtual_hosts_on_service_id_and_name", :unique => true
|
||||
|
||||
create_table "web_vuln_category_metasploits", :force => true do |t|
|
||||
t.string "name", :null => false
|
||||
t.string "summary", :null => false
|
||||
end
|
||||
|
||||
add_index "web_vuln_category_metasploits", ["name"], :name => "index_web_vuln_category_metasploits_on_name", :unique => true
|
||||
|
||||
create_table "web_vuln_category_owasps", :force => true do |t|
|
||||
t.string "detectability", :null => false
|
||||
t.string "exploitability", :null => false
|
||||
t.string "impact", :null => false
|
||||
t.string "name", :null => false
|
||||
t.string "prevalence", :null => false
|
||||
t.integer "rank", :null => false
|
||||
t.string "summary", :null => false
|
||||
t.string "target", :null => false
|
||||
t.string "version", :null => false
|
||||
end
|
||||
|
||||
add_index "web_vuln_category_owasps", ["target", "version", "rank"], :name => "index_web_vuln_category_owasps_on_target_and_version_and_rank", :unique => true
|
||||
|
||||
create_table "web_vuln_category_projection_metasploit_owasps", :force => true do |t|
|
||||
t.integer "metasploit_id", :null => false
|
||||
t.integer "owasp_id", :null => false
|
||||
end
|
||||
|
||||
add_index "web_vuln_category_projection_metasploit_owasps", ["metasploit_id", "owasp_id"], :name => "index_web_vuln_category_project_metasploit_id_and_owasp_id", :unique => true
|
||||
|
||||
create_table "web_vulns", :force => true do |t|
|
||||
t.integer "web_site_id", :null => false
|
||||
t.integer "web_site_id"
|
||||
t.datetime "created_at", :null => false
|
||||
t.datetime "updated_at", :null => false
|
||||
t.text "path", :null => false
|
||||
|
|
@ -641,20 +1394,30 @@ ActiveRecord::Schema.define(:version => 20140417140933) do
|
|||
t.integer "risk", :null => false
|
||||
t.string "name", :limit => 1024, :null => false
|
||||
t.text "query"
|
||||
t.text "category", :null => false
|
||||
t.text "legacy_category"
|
||||
t.integer "confidence", :null => false
|
||||
t.text "description"
|
||||
t.text "blame"
|
||||
t.binary "request"
|
||||
t.binary "proof", :null => false
|
||||
t.string "owner"
|
||||
t.text "payload"
|
||||
t.integer "request_id"
|
||||
t.integer "category_id"
|
||||
end
|
||||
|
||||
add_index "web_vulns", ["method"], :name => "index_web_vulns_on_method"
|
||||
add_index "web_vulns", ["name"], :name => "index_web_vulns_on_name"
|
||||
add_index "web_vulns", ["path"], :name => "index_web_vulns_on_path"
|
||||
|
||||
create_table "wizard_procedures", :force => true do |t|
|
||||
t.text "config_hash"
|
||||
t.string "state"
|
||||
t.integer "task_chain_id"
|
||||
t.string "type"
|
||||
t.integer "workspace_id"
|
||||
t.integer "user_id"
|
||||
end
|
||||
|
||||
create_table "wmap_requests", :force => true do |t|
|
||||
t.string "host"
|
||||
t.string "address", :limit => nil
|
||||
|
|
|
|||
|
|
@ -9,11 +9,345 @@ module Msf
|
|||
|
||||
module Auxiliary::Report
|
||||
|
||||
# This method is responsible for creation {Metasploit::Credential::Core} objects
|
||||
# and all sub-objects that it is dependent upon.
|
||||
#
|
||||
# @option opts [Symbol] :origin_type The Origin type we are trying to create
|
||||
# @option opts [String] :address The address of the {Mdm::Host} to link this Origin to
|
||||
# @option opts [Fixnum] :port The port number of the {Mdm::Service} to link this Origin to
|
||||
# @option opts [String] :service_name The service name to use for the {Mdm::Service}
|
||||
# @option opts [String] :protocol The protocol type of the {Mdm::Service} to link this Origin to
|
||||
# @option opts [String] :module_fullname The fullname of the Metasploit Module to link this Origin to
|
||||
# @option opts [Fixnum] :workspace_id The ID of the {Mdm::Workspace} to use for the {Mdm::Host}
|
||||
# @option opts [Fixnum] :task_id The ID of the {Mdm::Task} to link this Origin to
|
||||
# @option opts [String] :filename The filename of the file that was imported
|
||||
# @option opts [Fixnum] :user_id The ID of the {Mdm::User} to link this Origin to
|
||||
# @option opts [Fixnum] :session_id The ID of the {Mdm::Session} to link this Origin to
|
||||
# @option opts [String] :post_reference_name The reference name of the Metasploit Post module to link the origin to
|
||||
# @option opts [String] :private_data The actual data for the private (e.g. password, hash, key etc)
|
||||
# @option opts [Symbol] :private_type The type of {Metasploit::Credential::Private} to create
|
||||
# @option opts [String] :username The username to use for the {Metasploit::Credential::Public}
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @raise [ArgumentError] if an invalid :private_type is specified
|
||||
# @raise [ArgumentError] if an invalid :origin_type is specified
|
||||
# @return [NilClass] if there is no active database connection
|
||||
# @return [Metasploit::Credential::Core]
|
||||
# @example Reporting a Bruteforced Credential
|
||||
# create_credential(
|
||||
# origin_type: :service,
|
||||
# address: '192.168.1.100',
|
||||
# port: 445,
|
||||
# service_name: 'smb',
|
||||
# protocol: 'tcp',
|
||||
# module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
# workspace_id: myworkspace.id,
|
||||
# private_data: 'password1',
|
||||
# private_type: :password,
|
||||
# username: 'Administrator'
|
||||
# )
|
||||
def create_credential(opts={})
|
||||
return nil unless framework.db.active
|
||||
origin = create_credential_origin(opts)
|
||||
|
||||
def initialize(info = {})
|
||||
super
|
||||
core_opts = {
|
||||
origin: origin,
|
||||
workspace_id: opts.fetch(:workspace_id)
|
||||
}
|
||||
|
||||
if opts.has_key?(:realm_key) && opts.has_key?(:realm_value)
|
||||
core_opts[:realm] = create_credential_realm(opts)
|
||||
end
|
||||
|
||||
if opts.has_key?(:private_type) && opts.has_key?(:private_data)
|
||||
core_opts[:private] = create_credential_private(opts)
|
||||
end
|
||||
|
||||
if opts.has_key?(:username)
|
||||
core_opts[:public] = create_credential_public(opts)
|
||||
end
|
||||
|
||||
create_credential_core(core_opts)
|
||||
end
|
||||
|
||||
# This method is responsible for creating {Metasploit::Credential::Core} objects.
|
||||
#
|
||||
# @option opts [Metasploit::Credential::Origin] :origin The origin object to tie the core to
|
||||
# @option opts [Metasploit::Credential::Public] :public The {Metasploit::Credential::Public} component
|
||||
# @option opts [Metasploit::Credential::Private] :private The {Metasploit::Credential::Private} component
|
||||
# @option opts [Fixnum] :workspace_id The ID of the {Mdm::Workspace} to tie the Core to
|
||||
# @return [NilClass] if there is no active database connection
|
||||
# @return [Metasploit::Credential::Core]
|
||||
def create_credential_core(opts={})
|
||||
return nil unless framework.db.active
|
||||
origin = opts.fetch(:origin)
|
||||
workspace_id = opts.fetch(:workspace_id)
|
||||
|
||||
if opts[:private]
|
||||
private_id = opts[:private].id
|
||||
else
|
||||
private_id = nil
|
||||
end
|
||||
|
||||
if opts[:public]
|
||||
public_id = opts[:public].id
|
||||
else
|
||||
public_id = nil
|
||||
end
|
||||
|
||||
if opts[:realm]
|
||||
realm_id = opts[:realm].id
|
||||
else
|
||||
realm_id = nil
|
||||
end
|
||||
|
||||
core = Metasploit::Credential::Core.where(private_id: private_id, public_id: public_id, realm_id: realm_id, workspace_id: workspace_id).first_or_create
|
||||
if core.origin_id.nil?
|
||||
core.origin = origin
|
||||
end
|
||||
core.save!
|
||||
core
|
||||
end
|
||||
|
||||
# This method is responsible for creating a {Metasploit::Credential::Login} object
|
||||
# which ties a {Metasploit::Credential::Core} to the {Mdm::Service} it is a valid
|
||||
# credential for.
|
||||
#
|
||||
# @option opts [String] :access_level The access level to assign to this login if we know it
|
||||
# @option opts [String] :address The address of the {Mdm::Host} to link this Login to
|
||||
# @option opts [DateTime] :last_attempted_at The last time this Login was attempted
|
||||
# @option opts [Metasploit::Credential::Core] :core The {Metasploit::Credential::Core} to link this login to
|
||||
# @option opts [Fixnum] :port The port number of the {Mdm::Service} to link this Login to
|
||||
# @option opts [String] :service_name The service name to use for the {Mdm::Service}
|
||||
# @option opts [String] :status The status for the Login object
|
||||
# @option opts [String] :protocol The protocol type of the {Mdm::Service} to link this Login to
|
||||
# @option opts [Fixnum] :workspace_id The ID of the {Mdm::Workspace} to use for the {Mdm::Host}
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no active database connection
|
||||
# @return [Metasploit::Credential::Login]
|
||||
def create_credential_login(opts)
|
||||
return nil unless framework.db.active
|
||||
access_level = opts.fetch(:access_level, nil)
|
||||
core = opts.fetch(:core)
|
||||
last_attempted_at = opts.fetch(:last_attempted_at, nil)
|
||||
status = opts.fetch(:status)
|
||||
|
||||
service_object = create_credential_service(opts)
|
||||
login_object = Metasploit::Credential::Login.where(core_id: core.id, service_id: service_object.id).first_or_create
|
||||
|
||||
login_object.access_level = access_level if access_level
|
||||
login_object.last_attempted_at = last_attempted_at if last_attempted_at
|
||||
login_object.status = status
|
||||
login_object.save!
|
||||
login_object
|
||||
end
|
||||
|
||||
# This method is responsible for the creation of {Metasploit::Credential::Private} objects.
|
||||
# It will create the correct subclass based on the type.
|
||||
#
|
||||
# @option opts [String] :private_data The actual data for the private (e.g. password, hash, key etc)
|
||||
# @option opts [Symbol] :private_type The type of {Metasploit::Credential::Private} to create
|
||||
# @raise [ArgumentError] if a valid type is not supplied
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no active database connection
|
||||
# @return [Metasploit::Credential::Password] if the private_type was :password
|
||||
# @return [Metasploit::Credential::SSHKey] if the private_type was :ssh_key
|
||||
# @return [Metasploit::Credential::NTLMHash] if the private_type was :ntlm_hash
|
||||
# @return [Metasploit::Credential::NonreplayableHash] if the private_type was :nonreplayable_hash
|
||||
def create_credential_private(opts={})
|
||||
return nil unless framework.db.active
|
||||
private_data = opts.fetch(:private_data)
|
||||
private_type = opts.fetch(:private_type)
|
||||
|
||||
case private_type
|
||||
when :password
|
||||
private_object = Metasploit::Credential::Password.where(data: private_data).first_or_create
|
||||
when :ssh_key
|
||||
private_object = Metasploit::Credential::SSHKey.where(data: private_data).first_or_create
|
||||
when :ntlm_hash
|
||||
private_object = Metasploit::Credential::NTLMHash.where(data: private_data).first_or_create
|
||||
when :nonreplayable_hash
|
||||
private_object = Metasploit::Credential::NonreplayableHash.where(data: private_data).first_or_create
|
||||
else
|
||||
raise ArgumentError, "Invalid Private type: #{private_type}"
|
||||
end
|
||||
private_object.save!
|
||||
private_object
|
||||
end
|
||||
|
||||
# This method is responsible for the creation of {Metasploit::Credential::Public} objects.
|
||||
#
|
||||
# @option opts [String] :username The username to use for the {Metasploit::Credential::Public}
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no active database connection
|
||||
# @return [Metasploit::Credential::Public]
|
||||
def create_credential_public(opts={})
|
||||
return nil unless framework.db.active
|
||||
username = opts.fetch(:username)
|
||||
|
||||
public_object = Metasploit::Credential::Public.where(username: username).first_or_create
|
||||
public_object.save!
|
||||
public_object
|
||||
end
|
||||
|
||||
# This method is responsible for creating the {Metasploit::Credential::Realm} objects
|
||||
# that may be required.
|
||||
#
|
||||
# @option opts [String] :realm_key The type of Realm this is (e.g. 'Active Directory Domain')
|
||||
# @option opts [String] :realm_value The actual Realm name (e.g. contosso)
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no active database connection
|
||||
# @return [Metasploit::Credential::Realm] if it successfully creates or finds the object
|
||||
def create_credential_realm(opts={})
|
||||
return nil unless framework.db.active
|
||||
realm_key = opts.fetch(:realm_key)
|
||||
realm_value = opts.fetch(:realm_value)
|
||||
|
||||
realm_object = Metasploit::Credential::Realm.where(key: realm_key, value: realm_value).first_or_create
|
||||
realm_object.save!
|
||||
realm_object
|
||||
end
|
||||
|
||||
# This method is responsible for creating the various Credential::Origin objects.
|
||||
# It takes a key for the Origin type and delegates to the correct sub-method.
|
||||
#
|
||||
# @option opts [Symbol] :origin_type The Origin type we are trying to create
|
||||
# @option opts [String] :address The address of the {Mdm::Host} to link this Origin to
|
||||
# @option opts [Fixnum] :port The port number of the {Mdm::Service} to link this Origin to
|
||||
# @option opts [String] :service_name The service name to use for the {Mdm::Service}
|
||||
# @option opts [String] :protocol The protocol type of the {Mdm::Service} to link this Origin to
|
||||
# @option opts [String] :module_fullname The fullname of the Metasploit Module to link this Origin to
|
||||
# @option opts [Fixnum] :workspace_id The ID of the {Mdm::Workspace} to use for the {Mdm::Host}
|
||||
# @option opts [Fixnum] :task_id The ID of the {Mdm::Task} to link this Origin to
|
||||
# @option opts [String] :filename The filename of the file that was imported
|
||||
# @option opts [Fixnum] :user_id The ID of the {Mdm::User} to link this Origin to
|
||||
# @option opts [Fixnum] :session_id The ID of the {Mdm::Session} to link this Origin to
|
||||
# @option opts [String] :post_reference_name The reference name of the Metasploit Post module to link the origin to
|
||||
# @raise [ArgumentError] if an invalid origin_type was provided
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no connected database
|
||||
# @return [Metasploit::Credential::Origin::Manual] if :origin_type was :manual
|
||||
# @return [Metasploit::Credential::Origin::Import] if :origin_type was :import
|
||||
# @return [Metasploit::Credential::Origin::Service] if :origin_type was :service
|
||||
# @return [Metasploit::Credential::Origin::Session] if :origin_type was :session
|
||||
def create_credential_origin(opts={})
|
||||
return nil unless framework.db.active
|
||||
case opts[:origin_type]
|
||||
when :import
|
||||
create_credential_origin_import(opts)
|
||||
when :manual
|
||||
create_credential_origin_manual(opts)
|
||||
when :service
|
||||
create_credential_origin_service(opts)
|
||||
when :session
|
||||
create_credential_origin_session(opts)
|
||||
else
|
||||
raise ArgumentError, "Unknown Origin Type #{opts[:origin_type]}"
|
||||
end
|
||||
end
|
||||
|
||||
# This method is responsible for creating {Metasploit::Credential::Origin::Import} objects.
|
||||
#
|
||||
# @option opts [Fixnum] :task_id The ID of the {Mdm::Task} to link this Origin to
|
||||
# @option opts [String] :filename The filename of the file that was imported
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no connected database
|
||||
# @return [Metasploit::Credential::Origin::Manual] The created {Metasploit::Credential::Origin::Import} object
|
||||
def create_credential_origin_import(opts={})
|
||||
return nil unless framework.db.active
|
||||
task_id = opts.fetch(:task_id)
|
||||
filename = opts.fetch(:filename)
|
||||
|
||||
origin_object = Metasploit::Credential::Origin::Import.where(filename: filename, task_id: task_id).first_or_create
|
||||
origin_object.save!
|
||||
origin_object
|
||||
end
|
||||
|
||||
# This method is responsible for creating {Metasploit::Credential::Origin::Manual} objects.
|
||||
#
|
||||
# @option opts [Fixnum] :user_id The ID of the {Mdm::User} to link this Origin to
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no connected database
|
||||
# @return [Metasploit::Credential::Origin::Manual] The created {Metasploit::Credential::Origin::Manual} object
|
||||
def create_credential_origin_manual(opts={})
|
||||
return nil unless framework.db.active
|
||||
user_id = opts.fetch(:user_id)
|
||||
|
||||
origin_object = Metasploit::Credential::Origin::Manual.where(user_id: user_id).first_or_create
|
||||
origin_object.save!
|
||||
origin_object
|
||||
end
|
||||
|
||||
# This method is responsible for creating {Metasploit::Credential::Origin::Service} objects.
|
||||
# If there is not a matching {Mdm::Host} it will create it. If there is not a matching
|
||||
# {Mdm::Service} it will create that too.
|
||||
#
|
||||
# @option opts [String] :address The address of the {Mdm::Host} to link this Origin to
|
||||
# @option opts [Fixnum] :port The port number of the {Mdm::Service} to link this Origin to
|
||||
# @option opts [String] :service_name The service name to use for the {Mdm::Service}
|
||||
# @option opts [String] :protocol The protocol type of the {Mdm::Service} to link this Origin to
|
||||
# @option opts [String] :module_fullname The fullname of the Metasploit Module to link this Origin to
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no connected database
|
||||
# @return [Metasploit::Credential::Origin::Service] The created {Metasploit::Credential::Origin::Service} object
|
||||
def create_credential_origin_service(opts={})
|
||||
return nil unless framework.db.active
|
||||
module_fullname = opts.fetch(:module_fullname)
|
||||
|
||||
service_object = create_credential_service(opts)
|
||||
|
||||
origin_object = Metasploit::Credential::Origin::Service.where(service_id: service_object.id, module_full_name: module_fullname).first_or_create
|
||||
origin_object.save!
|
||||
origin_object
|
||||
end
|
||||
|
||||
# This method is responsible for creating {Metasploit::Credential::Origin::Session} objects.
|
||||
#
|
||||
# @option opts [Fixnum] :session_id The ID of the {Mdm::Session} to link this Origin to
|
||||
# @option opts [String] :post_reference_name The reference name of the Metasploit Post module to link the origin to
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no connected database
|
||||
# @return [Metasploit::Credential::Origin::Session] The created {Metasploit::Credential::Origin::Session} object
|
||||
def create_credential_origin_session(opts={})
|
||||
return nil unless framework.db.active
|
||||
session_id = opts.fetch(:session_id)
|
||||
post_reference_name = opts.fetch(:post_reference_name)
|
||||
|
||||
origin_object = Metasploit::Credential::Origin::Session.where(session_id: session_id, post_reference_name: post_reference_name).first_or_create
|
||||
origin_object.save!
|
||||
origin_object
|
||||
end
|
||||
|
||||
# This method is responsible for creating a barebones {Mdm::Service} object
|
||||
# for use by Credential object creation.
|
||||
#
|
||||
# @option opts [String] :address The address of the {Mdm::Host}
|
||||
# @option opts [Fixnum] :port The port number of the {Mdm::Service}
|
||||
# @option opts [String] :service_name The service name to use for the {Mdm::Service}
|
||||
# @option opts [String] :protocol The protocol type of the {Mdm::Service}
|
||||
# @option opts [Fixnum] :workspace_id The ID of the {Mdm::Workspace} to use for the {Mdm::Host}
|
||||
# @raise [KeyError] if a required option is missing
|
||||
# @return [NilClass] if there is no connected database
|
||||
# @return [Mdm::Service]
|
||||
def create_credential_service(opts={})
|
||||
return nil unless framework.db.active
|
||||
address = opts.fetch(:address)
|
||||
port = opts.fetch(:port)
|
||||
service_name = opts.fetch(:service_name)
|
||||
protocol = opts.fetch(:protocol)
|
||||
workspace_id = opts.fetch(:workspace_id)
|
||||
|
||||
# Find or create the host object we need
|
||||
host_object = Mdm::Host.where(address: address, workspace_id: workspace_id).first_or_create
|
||||
host_object.save!
|
||||
|
||||
# Next we find or create the Service object we need
|
||||
service_object = Mdm::Service.where(host_id: host_object.id, port: port, proto: protocol).first_or_create
|
||||
service_object.name = service_name
|
||||
service_object.save!
|
||||
service_object
|
||||
end
|
||||
|
||||
|
||||
# Shortcut method for detecting when the DB is active
|
||||
def db
|
||||
framework.db.active
|
||||
|
|
@ -387,6 +721,9 @@ module Auxiliary::Report
|
|||
print_status "Collecting #{cred_opts[:user]}:#{cred_opts[:pass]}"
|
||||
framework.db.report_auth_info(cred_opts)
|
||||
end
|
||||
|
||||
|
||||
|
||||
end
|
||||
end
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,420 @@
|
|||
require 'spec_helper'
|
||||
require 'msf/core/auxiliary/report'
|
||||
|
||||
describe Msf::Auxiliary::Report do
|
||||
include_context 'Msf::DBManager'
|
||||
let(:dummy_class) {
|
||||
Class.new do
|
||||
include Msf::Auxiliary::Report
|
||||
|
||||
attr_accessor :framework
|
||||
def initialize(framework_instance)
|
||||
@framework = framework_instance
|
||||
end
|
||||
end
|
||||
}
|
||||
|
||||
let(:session) { FactoryGirl.create(:mdm_session) }
|
||||
|
||||
let(:task) { FactoryGirl.create(:mdm_task)}
|
||||
|
||||
let(:user) { FactoryGirl.create(:mdm_user)}
|
||||
|
||||
subject(:test_object) { dummy_class.new(framework) }
|
||||
|
||||
context '#create_credential_origin_import' do
|
||||
it 'creates a Metasploit::Credential::Origin object' do
|
||||
opts = {
|
||||
filename: "test_import.xml",
|
||||
task_id: task.id
|
||||
}
|
||||
expect { test_object.create_credential_origin_import(opts)}.to change{Metasploit::Credential::Origin::Import.count}.by(1)
|
||||
end
|
||||
|
||||
it 'should return nil if there is no database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_origin_import).to be_nil
|
||||
end
|
||||
|
||||
context 'when called twice with the same options' do
|
||||
it 'does not create duplicate objects' do
|
||||
opts = {
|
||||
filename: "test_import.xml",
|
||||
task_id: task.id
|
||||
}
|
||||
test_object.create_credential_origin_import(opts)
|
||||
expect { test_object.create_credential_origin_import(opts)}.to_not change{Metasploit::Credential::Origin::Import.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when missing an option' do
|
||||
it 'throws a KeyError' do
|
||||
opts = {
|
||||
filename: "test_import.xml"
|
||||
}
|
||||
expect{ test_object.create_credential_origin_import(opts)}.to raise_error KeyError
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
end
|
||||
|
||||
context '#create_credential_origin_manual' do
|
||||
it 'creates a Metasploit::Credential::Origin object' do
|
||||
opts = {
|
||||
user_id: user.id
|
||||
}
|
||||
expect { test_object.create_credential_origin_manual(opts)}.to change{Metasploit::Credential::Origin::Manual.count}.by(1)
|
||||
end
|
||||
|
||||
it 'should return nil if there is no database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_origin_manual).to be_nil
|
||||
end
|
||||
|
||||
context 'when called twice with the same options' do
|
||||
it 'does not create duplicate objects' do
|
||||
opts = {
|
||||
user_id: user.id
|
||||
}
|
||||
test_object.create_credential_origin_manual(opts)
|
||||
expect { test_object.create_credential_origin_manual(opts)}.to_not change{Metasploit::Credential::Origin::Manual.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when missing an option' do
|
||||
it 'throws a KeyError' do
|
||||
opts = {}
|
||||
expect{ test_object.create_credential_origin_manual(opts)}.to raise_error KeyError
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
context '#create_credential_origin_service' do
|
||||
it 'creates a Metasploit::Credential::Origin object' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
expect { test_object.create_credential_origin_service(opts)}.to change{Metasploit::Credential::Origin::Service.count}.by(1)
|
||||
end
|
||||
|
||||
it 'should return nil if there is no database connection' do
|
||||
my_module = test_object
|
||||
expect(my_module.framework.db).to receive(:active).and_return(false)
|
||||
expect(my_module.create_credential_origin_service).to be_nil
|
||||
end
|
||||
|
||||
context 'when there is a matching host record' do
|
||||
it 'uses the existing host record' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
FactoryGirl.create(:mdm_host, address: opts[:address], workspace_id: opts[:workspace_id])
|
||||
expect { test_object.create_credential_origin_service(opts)}.to_not change{Mdm::Host.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when there is not a matching host record' do
|
||||
it 'create a new host record' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
expect { test_object.create_credential_origin_service(opts)}.to change{Mdm::Host.count}.by(1)
|
||||
end
|
||||
end
|
||||
|
||||
context 'when there is a matching service record' do
|
||||
it 'uses the existing service record' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
host = FactoryGirl.create(:mdm_host, address: opts[:address], workspace_id: opts[:workspace_id])
|
||||
FactoryGirl.create(:mdm_service, host_id: host.id, port: opts[:port], proto: opts[:protocol])
|
||||
expect { test_object.create_credential_origin_service(opts)}.to_not change{Mdm::Service.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when there is no matching service record' do
|
||||
it 'creates a new service record' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
expect { test_object.create_credential_origin_service(opts)}.to change{Mdm::Service.count}.by(1)
|
||||
end
|
||||
end
|
||||
|
||||
context 'when called twice with the same options' do
|
||||
it 'does not create duplicate objects' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
test_object.create_credential_origin_service(opts)
|
||||
expect { test_object.create_credential_origin_service(opts)}.to_not change{Metasploit::Credential::Origin::Service.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when missing an option' do
|
||||
it 'throws a KeyError' do
|
||||
opts = {}
|
||||
expect{ test_object.create_credential_origin_service(opts)}.to raise_error KeyError
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
context '#create_credential_origin_session' do
|
||||
it 'creates a Metasploit::Credential::Origin object' do
|
||||
opts = {
|
||||
post_reference_name: 'windows/gather/hashdump',
|
||||
session_id: session.id
|
||||
}
|
||||
expect { test_object.create_credential_origin_session(opts)}.to change{Metasploit::Credential::Origin::Session.count}.by(1)
|
||||
end
|
||||
|
||||
it 'should return nil if there is no database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_origin_session).to be_nil
|
||||
end
|
||||
|
||||
context 'when called twice with the same options' do
|
||||
it 'does not create duplicate objects' do
|
||||
opts = {
|
||||
post_reference_name: 'windows/gather/hashdump',
|
||||
session_id: session.id
|
||||
}
|
||||
test_object.create_credential_origin_session(opts)
|
||||
expect { test_object.create_credential_origin_session(opts)}.to_not change{Metasploit::Credential::Origin::Session.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when missing an option' do
|
||||
it 'throws a KeyError' do
|
||||
opts = {}
|
||||
expect{ test_object.create_credential_origin_session(opts) }.to raise_error KeyError
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
context '#create_credential_origin' do
|
||||
it 'should return nil if there is no database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_origin).to be_nil
|
||||
end
|
||||
|
||||
it 'calls the correct method to create Origin::Import records' do
|
||||
opts = {
|
||||
filename: "test_import.xml",
|
||||
origin_type: :import,
|
||||
task_id: task.id
|
||||
}
|
||||
my_module = test_object
|
||||
expect(my_module).to receive(:create_credential_origin_import)
|
||||
my_module.create_credential_origin(opts)
|
||||
end
|
||||
|
||||
it 'calls the correct method to create Origin::Manual records' do
|
||||
opts = {
|
||||
origin_type: :manual,
|
||||
user_id: user.id
|
||||
}
|
||||
my_module = test_object
|
||||
expect(my_module).to receive(:create_credential_origin_manual)
|
||||
my_module.create_credential_origin(opts)
|
||||
end
|
||||
|
||||
it 'calls the correct method to create Origin::Service records' do
|
||||
opts = {
|
||||
address: '192.168.172.3',
|
||||
port: 445,
|
||||
service_name: 'smb',
|
||||
protocol: 'tcp',
|
||||
module_fullname: 'auxiliary/scanner/smb/smb_login',
|
||||
workspace_id: framework.db.workspace.id,
|
||||
origin_type: :service
|
||||
}
|
||||
expect(test_object).to receive(:create_credential_origin_service)
|
||||
test_object.create_credential_origin(opts)
|
||||
end
|
||||
|
||||
it 'calls the correct method to create Origin::Session records' do
|
||||
opts = {
|
||||
origin_type: :session,
|
||||
post_reference_name: 'windows/gather/hashdump',
|
||||
session_id: session.id
|
||||
}
|
||||
my_module = test_object
|
||||
expect(my_module).to receive(:create_credential_origin_session)
|
||||
my_module.create_credential_origin(opts)
|
||||
end
|
||||
|
||||
it 'raises an exception if there is no origin type' do
|
||||
opts = {
|
||||
post_reference_name: 'windows/gather/hashdump',
|
||||
session_id: session.id
|
||||
}
|
||||
expect{test_object.create_credential_origin(opts)}.to raise_error ArgumentError, "Unknown Origin Type "
|
||||
end
|
||||
|
||||
it 'raises an exception if given an invalid origin type' do
|
||||
opts = {
|
||||
origin_type: 'aaaaa',
|
||||
post_reference_name: 'windows/gather/hashdump',
|
||||
session_id: session.id
|
||||
}
|
||||
expect{test_object.create_credential_origin(opts)}.to raise_error ArgumentError, "Unknown Origin Type aaaaa"
|
||||
end
|
||||
end
|
||||
|
||||
context '#create_credential_realm' do
|
||||
it 'creates a Metasploit::Credential::Realm object' do
|
||||
opts = {
|
||||
realm_key: 'Active Directory Domain',
|
||||
realm_value: 'contosso'
|
||||
}
|
||||
expect { test_object.create_credential_realm(opts)}.to change{Metasploit::Credential::Realm.count}.by(1)
|
||||
end
|
||||
|
||||
it 'should return nil if there is no database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_realm).to be_nil
|
||||
end
|
||||
|
||||
context 'when called twice with the same options' do
|
||||
it 'does not create duplicate objects' do
|
||||
opts = {
|
||||
realm_key: 'Active Directory Domain',
|
||||
realm_value: 'contosso'
|
||||
}
|
||||
test_object.create_credential_realm(opts)
|
||||
expect { test_object.create_credential_realm(opts)}.to_not change{Metasploit::Credential::Realm.count}
|
||||
end
|
||||
end
|
||||
|
||||
context 'when missing an option' do
|
||||
it 'throws a KeyError' do
|
||||
opts = {}
|
||||
expect{ test_object.create_credential_origin_manual(opts)}.to raise_error KeyError
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
context '#create_credential_private' do
|
||||
it 'should return nil if there is no database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_private).to be_nil
|
||||
end
|
||||
|
||||
context 'when missing an option' do
|
||||
it 'throws a KeyError' do
|
||||
opts = {}
|
||||
expect{ test_object.create_credential_private(opts)}.to raise_error KeyError
|
||||
end
|
||||
end
|
||||
|
||||
context 'when :private_type is password' do
|
||||
it 'creates a Metasploit::Credential::Password' do
|
||||
opts = {
|
||||
private_data: 'password1',
|
||||
private_type: :password
|
||||
}
|
||||
expect{ test_object.create_credential_private(opts) }.to change{Metasploit::Credential::Password.count}.by(1)
|
||||
end
|
||||
end
|
||||
|
||||
context 'when :private_type is sshkey' do
|
||||
it 'creates a Metasploit::Credential::SSHKey' do
|
||||
opts = {
|
||||
private_data: OpenSSL::PKey::RSA.generate(2048).to_s,
|
||||
private_type: :ssh_key
|
||||
}
|
||||
expect{ test_object.create_credential_private(opts) }.to change{Metasploit::Credential::SSHKey.count}.by(1)
|
||||
end
|
||||
end
|
||||
|
||||
context 'when :private_type is ntlmhash' do
|
||||
it 'creates a Metasploit::Credential::NTLMHash' do
|
||||
opts = {
|
||||
private_data: Metasploit::Credential::NTLMHash.data_from_password_data('password1'),
|
||||
private_type: :ntlm_hash
|
||||
}
|
||||
expect{ test_object.create_credential_private(opts) }.to change{Metasploit::Credential::NTLMHash.count}.by(1)
|
||||
end
|
||||
end
|
||||
|
||||
context 'when :private_type is nonreplayable_hash' do
|
||||
it 'creates a Metasploit::Credential::NonreplayableHash' do
|
||||
opts = {
|
||||
private_data: '10b222970537b97919db36ec757370d2',
|
||||
private_type: :nonreplayable_hash
|
||||
}
|
||||
expect{ test_object.create_credential_private(opts) }.to change{Metasploit::Credential::NonreplayableHash.count}.by(1)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
context '#create_credential_core' do
|
||||
let(:origin) { FactoryGirl.create(:metasploit_credential_origin_service) }
|
||||
let(:public) { FactoryGirl.create(:metasploit_credential_public)}
|
||||
let(:private) { FactoryGirl.create(:metasploit_credential_password)}
|
||||
let(:realm) { FactoryGirl.create(:metasploit_credential_realm)}
|
||||
|
||||
it 'raises a KeyError if any required option is missing' do
|
||||
opts = {}
|
||||
expect{ test_object.create_credential_core(opts)}.to raise_error KeyError
|
||||
end
|
||||
|
||||
it 'returns nil if there is no active database connection' do
|
||||
expect(test_object.framework.db).to receive(:active).and_return(false)
|
||||
expect(test_object.create_credential_core).to be_nil
|
||||
end
|
||||
|
||||
it 'creates a Metasploit::Credential::Core' do
|
||||
opts = {
|
||||
origin: origin,
|
||||
public: public,
|
||||
private: private,
|
||||
realm: realm,
|
||||
workspace_id: origin.service.host.workspace_id
|
||||
}
|
||||
expect{test_object.create_credential_core(opts)}.to change{Metasploit::Credential::Core.count}.by(1)
|
||||
end
|
||||
|
||||
|
||||
end
|
||||
|
||||
end
|
||||
Loading…
Reference in New Issue