Class: Mdm::Workspace

Inherits:
ActiveRecord::Base
  • Object
show all
Defined in:
app/models/mdm/workspace.rb

Constant Summary collapse

DEFAULT =

CONSTANTS

'default'

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.default ⇒ Object 



80
81
82
 
# File 'app/models/mdm/workspace.rb', line 80

def self.default
  find_or_create_by_name(DEFAULT)
end

Instance Method Details

#allow_actions_on?(ips) ⇒ Boolean

If limit_to_network is disabled, this will always return true. Otherwise, return true only if all of the given IPs are within the project boundaries.

Returns:

  • (Boolean) 


52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'app/models/mdm/workspace.rb', line 52

def allow_actions_on?(ips)
  return true unless limit_to_network
  return true unless boundary
  return true if boundary.empty?
  boundaries = Shellwords.split(boundary)
  return true if boundaries.empty? # It's okay if there is no boundary range after all
  given_range = Rex::Socket::RangeWalker.new(ips)
  return false unless given_range # Can't do things to nonexistant IPs
  allowed = false
  boundaries.each do |boundary_range|
    ok_range = Rex::Socket::RangeWalker.new(boundary)
    allowed = true if ok_range.include_range? given_range
  end
  return allowed
end

#boundary_must_be_ip_range ⇒ Object 



68
69
70
 
# File 'app/models/mdm/workspace.rb', line 68

def boundary_must_be_ip_range
  errors.add(:boundary, "must be a valid IP range") unless valid_ip_or_range?(boundary)
end

#creds ⇒ Object 



72
73
74
75
76
77
78
 
# File 'app/models/mdm/workspace.rb', line 72

def creds
  Mdm::Cred.find(
      :all,
      :include => {:service => :host},
      :conditions => ["hosts.workspace_id = ?", self.id]
  )
end

#default? ⇒ Boolean

Returns:

  • (Boolean) 


84
85
86
 
# File 'app/models/mdm/workspace.rb', line 84

def default?
  name == DEFAULT
end

#each_cred(&block) ⇒ Object

This method iterates the creds table calling the supplied block with the cred instance of each entry.



92
93
94
95
96
 
# File 'app/models/mdm/workspace.rb', line 92

def each_cred(&block)
  creds.each do |cred|
    block.call(cred)
  end
end

#each_host_tag(&block) ⇒ Object 



98
99
100
101
102
 
# File 'app/models/mdm/workspace.rb', line 98

def each_host_tag(&block)
  host_tags.each do |host_tag|
    block.call(host_tag)
  end
end

#host_tags ⇒ Object 



104
105
106
107
108
109
110
 
# File 'app/models/mdm/workspace.rb', line 104

def host_tags
  Mdm::Tag.find(
      :all,
      :include => :hosts,
      :conditions => ["hosts.workspace_id = ?", self.id]
  )
end

#unique_web_forms ⇒ Object 



159
160
161
162
163
164
165
166
167
168
169
 
# File 'app/models/mdm/workspace.rb', line 159

def unique_web_forms
  query = <<-EOQ
        SELECT DISTINCT web_forms.web_site_id, web_forms.path, web_forms.method, web_forms.query  
          FROM hosts, services, web_sites, web_forms  
          WHERE hosts.workspace_id = #{id} AND        
          services.host_id = hosts.id AND         
          web_sites.service_id = services.id AND  
          web_forms.web_site_id = web_sites.id
  EOQ
  Mdm::WebForm.find_by_sql(query)
end

#web_forms ⇒ Object 



112
113
114
115
116
117
118
119
120
121
122
 
# File 'app/models/mdm/workspace.rb', line 112

def web_forms
  query = <<-EOQ
        SELECT DISTINCT web_forms.*
        FROM hosts, services, web_sites, web_forms
        WHERE hosts.workspace_id = #{id} AND
          services.host_id = hosts.id AND
          web_sites.service_id = services.id AND
          web_forms.web_site_id = web_sites.id
  EOQ
  Mdm::WebForm.find_by_sql(query)
end

#web_pages ⇒ Object 



124
125
126
127
128
129
130
131
132
133
134
 
# File 'app/models/mdm/workspace.rb', line 124

def web_pages
  query = <<-EOQ
        SELECT DISTINCT web_pages.*
          FROM hosts, services, web_sites, web_pages
          WHERE hosts.workspace_id = #{id} AND
          services.host_id = hosts.id AND
          web_sites.service_id = services.id AND
          web_pages.web_site_id = web_sites.id
  EOQ
  Mdm::WebPage.find_by_sql(query)
end

#web_sites ⇒ Object 



136
137
138
139
140
141
142
143
144
145
 
# File 'app/models/mdm/workspace.rb', line 136

def web_sites
  query = <<-EOQ
        SELECT DISTINCT web_sites.*
          FROM hosts, services, web_sites
          WHERE hosts.workspace_id = #{id} AND
          services.host_id = hosts.id AND
          web_sites.service_id = services.id
  EOQ
  Mdm::WebSite.find_by_sql(query)
end

#web_unique_forms(addrs = nil) ⇒ Object 



171
172
173
174
175
176
177
 
# File 'app/models/mdm/workspace.rb', line 171

def web_unique_forms(addrs=nil)
  forms = unique_web_forms
  if addrs
    forms.reject!{|f| not addrs.include?( f.web_site.service.host.address ) }
  end
  forms
end

#web_vulns ⇒ Object 



147
148
149
150
151
152
153
154
155
156
157
 
# File 'app/models/mdm/workspace.rb', line 147

def web_vulns
  query = <<-EOQ
        SELECT DISTINCT web_vulns.*
        FROM hosts, services, web_sites, web_vulns
          WHERE hosts.workspace_id = #{id} AND
          services.host_id = hosts.id AND
          web_sites.service_id = services.id AND
          web_vulns.web_site_id = web_sites.id
  EOQ
  Mdm::WebVuln.find_by_sql(query)
end