Module: Msf::WebServices::VulnServlet

Defined in:
lib/msf/core/web_services/servlet/vuln_servlet.rb

Constant Summary collapse

JSON_INCLUDES = 
[:host, :refs, :module_refs]

Class Method Summary collapse

Class Method Details

.api_path ⇒ Object 



5
6
7
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 5

def self.api_path
  '/api/v1/vulns'
end

.api_path_with_id ⇒ Object 



9
10
11
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 9

def self.api_path_with_id
  "#{self.api_path}/?:id?"
end

.delete_vuln ⇒ Object 



73
74
75
76
77
78
79
80
81
82
83
84
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 73

def self.delete_vuln
  lambda {
    warden.authenticate!
    begin
      opts = parse_json_request(request, false)
      data = get_db.delete_vuln(opts)
      set_json_data_response(response: data, includes: JSON_INCLUDES)
    rescue => e
      print_error_and_create_response(error: e, message: 'There was an error deleting the vulns:', code: 500)
    end
  }
end

.get_vuln ⇒ Object 



25
26
27
28
29
30
31
32
33
34
35
36
37
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 25

def self.get_vuln
  lambda {
    warden.authenticate!
    begin
      sanitized_params = sanitize_params(params, env['rack.request.query_hash'])
      data = get_db.vulns(sanitized_params)
      data = data.first if is_single_object?(data, sanitized_params)
      set_json_data_response(response: data, includes: JSON_INCLUDES)
    rescue => e
      print_error_and_create_response(error: e, message: 'There was an error retrieving vulns:', code: 500)
    end
  }
end

.registered(app) ⇒ Object 



13
14
15
16
17
18
19
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 13

def self.registered(app)
  app.get self.api_path, &get_vuln
  app.get self.api_path_with_id, &get_vuln
  app.post self.api_path, &report_vuln
  app.put self.api_path_with_id, &update_vuln
  app.delete self.api_path, &delete_vuln
end

.report_vuln ⇒ Object 



39
40
41
42
43
44
45
46
47
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 39

def self.report_vuln
  lambda {
    warden.authenticate!
    job = lambda { |opts|
      get_db.report_vuln(opts)
    }
    exec_report_job(request, &job)
  }
end

.update_vuln ⇒ Object 



49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
 
# File 'lib/msf/core/web_services/servlet/vuln_servlet.rb', line 49

def self.update_vuln
  lambda {
    warden.authenticate!
    begin
      opts = parse_json_request(request, false)
      tmp_params = sanitize_params(params)
      opts[:id] = tmp_params[:id] if tmp_params[:id]
      # update_vuln requires refs to be of type Mdm::Ref
      # Find or create the Mdm::Ref object before moving on to the update
      if opts[:refs]
        refs = []
        opts[:refs].each do |r|
          refs << get_db.find_or_create_ref(r)
        end
        opts[:refs] = refs
      end
      data = get_db.update_vuln(opts)
      set_json_data_response(response: data, includes: JSON_INCLUDES)
    rescue => e
      print_error_and_create_response(error: e, message: 'There was an error updating the vuln:', code: 500)
    end
  }
end