Contents

module Dradis::Plugins::Acunetix::Formats
  module Acunetix360

    private

    def process_acunetix360
      process_target_node
      process_acunetix360_vulnerabilities
    end

    def process_target_node
      target_xml = xml.at_xpath('//acunetix-360/target')
      @scan_node = content_service.create_node(
        label: target_xml.at_xpath('url').text,
        type: :host
      )

      logger.info { "Creating target node: #{scan_node.label}" }

      if scan_node.respond_to?(:properties)
        scan_node.set_property(:scan_id, target_xml.at_xpath('scan-id').text)
        scan_node.set_property(:initiated, target_xml.at_xpath('initiated').text)
        scan_node.set_property(:duration, target_xml.at_xpath('duration').text)
      end
    end

    def process_acunetix360_vulnerabilities
      logger.info { 'Creating issues from Acunetix360 vulnerabilities.' }

      xml.xpath('//acunetix-360/vulnerabilities/vulnerability').each do |vuln_xml|
        issue_text = mapping_service.apply_mapping(
          source: 'vulnerability_360',
          data: vuln_xml
        )

        type = vuln_xml.at_xpath('type').text

        logger.info { "\t\t => Creating new issue: #{type}" }
        issue = content_service.create_issue(text: issue_text, id: type)

        evidence_text = mapping_service.apply_mapping(
          source: 'evidence_360',
          data: vuln_xml
        )

        logger.info { "\t\t => Creating new evidence" }
        content_service.create_evidence(issue: issue, node: scan_node, content: evidence_text)
      end
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
dradis-acunetix-4.13.0	lib/dradis/plugins/acunetix/formats/acunetix360.rb