mirror of
https://github.com/cloudflare/flan.git
synced 2026-10-16 21:12:47 +08:00
sw
82 lines
2.6 KiB
Python
82 lines
2.6 KiB
Python
import os
|
|
import sys
|
|
from typing import IO
|
|
|
|
from requests import Session
|
|
|
|
from contrib.descriptions import CveProjectProvider, VulnDescriptionProvider
|
|
from contrib.parsers import FlanXmlParser
|
|
from contrib.report_builders import ReportBuilder, LatexReportBuilder, MarkdownReportBuilder, JinjaHtmlReportBuilder, \
|
|
JsonReportBuilder
|
|
|
|
|
|
def create_report(parser: FlanXmlParser, builder: ReportBuilder, nmap_command: str, start_date: str, output_writer: IO,
|
|
ip_reader: IO):
|
|
|
|
builder.init_report(start_date, nmap_command)
|
|
|
|
if parser.vulnerable_services:
|
|
builder.add_vulnerable_section()
|
|
builder.initialize_section()
|
|
builder.add_vulnerable_services(parser.vulnerable_dict)
|
|
|
|
if parser.non_vuln_services:
|
|
builder.add_non_vulnerable_section()
|
|
builder.initialize_section()
|
|
builder.add_non_vulnerable_services(parser.non_vulnerable_dict)
|
|
|
|
builder.add_ips_section()
|
|
for ip in ip_reader:
|
|
builder.add_ip_address(ip.strip())
|
|
|
|
builder.finalize()
|
|
output_writer.write(builder.build())
|
|
|
|
|
|
def parse_nmap_command(raw_command: str) -> str:
|
|
nmap_split = raw_command.split()[:-1] # remove last element, ip address
|
|
nmap_split[3] = '<output-file>'
|
|
return ' '.join(nmap_split)
|
|
|
|
|
|
def create_default_provider() -> VulnDescriptionProvider:
|
|
return CveProjectProvider(Session())
|
|
|
|
|
|
def create_report_builder(report_type: str) -> ReportBuilder:
|
|
builder_map = {
|
|
'tex': lambda p: LatexReportBuilder(p),
|
|
'md': lambda p: MarkdownReportBuilder(p),
|
|
'html': lambda p: JinjaHtmlReportBuilder(p),
|
|
'json': lambda p: JsonReportBuilder(p)
|
|
}
|
|
|
|
if report_type not in builder_map:
|
|
raise NotImplementedError(report_type)
|
|
|
|
provider = create_default_provider()
|
|
return builder_map[report_type](provider)
|
|
|
|
|
|
def main(dirname: str, output_file: str, ip_file: str, report_type: str = 'tex'):
|
|
nmap_command = ''
|
|
start_date = ''
|
|
builder = create_report_builder(report_type)
|
|
parser = FlanXmlParser()
|
|
|
|
for entry in os.scandir(dirname): # type: os.DirEntry
|
|
if not (entry.is_file() and entry.name.endswith('.xml')):
|
|
continue
|
|
data = parser.read_xml_file(entry.path)
|
|
parser.parse(data)
|
|
nmap_command = parse_nmap_command(data['nmaprun']['@args'])
|
|
start_date = data['nmaprun']['@startstr']
|
|
|
|
with open(output_file, 'w+') as output, open(ip_file) as ip_source:
|
|
create_report(parser, builder, nmap_command, start_date, output, ip_source)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
report_format = os.getenv('format', 'tex')
|
|
main(*sys.argv[1:4], report_type=report_format)
|