|
1
|
|
|
# -*- coding: utf-8 -*- |
|
2
|
|
|
# Copyright (C) 2021 Greenbone Networks GmbH |
|
3
|
|
|
# |
|
4
|
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later |
|
5
|
|
|
# |
|
6
|
|
|
# This program is free software: you can redistribute it and/or modify |
|
7
|
|
|
# it under the terms of the GNU Affero General Public License as |
|
8
|
|
|
# published by the Free Software Foundation, either version 3 of the |
|
9
|
|
|
# License, or (at your option) any later version. |
|
10
|
|
|
# |
|
11
|
|
|
# This program is distributed in the hope that it will be useful, |
|
12
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
13
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
14
|
|
|
# GNU Affero General Public License for more details. |
|
15
|
|
|
# |
|
16
|
|
|
# You should have received a copy of the GNU Affero General Public License |
|
17
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|
18
|
|
|
|
|
19
|
|
|
|
|
20
|
|
|
# pylint: disable=too-many-lines |
|
21
|
|
|
|
|
22
|
|
|
""" Methods for dry run """ |
|
23
|
|
|
|
|
24
|
|
|
import logging |
|
25
|
|
|
import time |
|
26
|
|
|
|
|
27
|
|
|
from random import uniform, choice |
|
28
|
|
|
|
|
29
|
|
|
from ospd.scan import ScanProgress, ScanStatus |
|
30
|
|
|
from ospd.network import target_str_to_list, ports_as_list |
|
31
|
|
|
from ospd.resultlist import ResultList |
|
32
|
|
|
from ospd_openvas.vthelper import VtHelper |
|
33
|
|
|
|
|
34
|
|
|
logger = logging.getLogger(__name__) |
|
35
|
|
|
|
|
36
|
|
|
|
|
37
|
|
|
class DryRun: |
|
38
|
|
|
def __init__(self, daemon): |
|
39
|
|
|
self._daemon = daemon |
|
40
|
|
|
|
|
41
|
|
|
def exec_dry_run_scan(self, scan_id, nvti, ospd_params): |
|
42
|
|
|
options = self._daemon.scan_collection.get_options(scan_id) |
|
43
|
|
|
results_per_host = None |
|
44
|
|
|
if "results_per_host" in options: |
|
45
|
|
|
results_per_host = options.get("results_per_host") |
|
46
|
|
|
|
|
47
|
|
|
if not results_per_host or not isinstance(results_per_host, int): |
|
48
|
|
|
logger.debug("Using default value for results_per_host options") |
|
49
|
|
|
results_per_host = ospd_params["results_per_host"].get("default") |
|
50
|
|
|
|
|
51
|
|
|
# Get the host list |
|
52
|
|
|
target = self._daemon.scan_collection.get_host_list(scan_id) |
|
53
|
|
|
logger.info("The target list %s", target) |
|
54
|
|
|
host_list = target_str_to_list(target) |
|
55
|
|
|
|
|
56
|
|
|
# Get the port list |
|
57
|
|
|
ports = self._daemon.scan_collection.get_ports(scan_id) |
|
58
|
|
|
logger.info("The port list %s", ports) |
|
59
|
|
|
tcp, _ = ports_as_list(ports) |
|
60
|
|
|
# Get exclude hosts list. It must not be scanned |
|
61
|
|
|
exclude_hosts = self._daemon.scan_collection.get_exclude_hosts(scan_id) |
|
62
|
|
|
logger.info("The exclude hosts list %s", exclude_hosts) |
|
63
|
|
|
|
|
64
|
|
|
self._daemon.set_scan_total_hosts( |
|
65
|
|
|
scan_id, |
|
66
|
|
|
count_total=len(host_list), |
|
67
|
|
|
) |
|
68
|
|
|
self._daemon.scan_collection.set_amount_dead_hosts( |
|
69
|
|
|
scan_id, total_dead=0 |
|
70
|
|
|
) |
|
71
|
|
|
|
|
72
|
|
|
# Get list of VTS. Ignore script params |
|
73
|
|
|
vts = list(self._daemon.scan_collection.get_vts(scan_id)) |
|
74
|
|
|
if "vt_groups" in vts: |
|
75
|
|
|
vts.remove("vt_groups") |
|
76
|
|
|
vthelper = VtHelper(nvti) |
|
77
|
|
|
|
|
78
|
|
|
# Run the scan. |
|
79
|
|
|
# Scan simulation for each single host. |
|
80
|
|
|
# Run the scan against the host, and generates results. |
|
81
|
|
|
while host_list: |
|
82
|
|
|
# Get a host from the list |
|
83
|
|
|
current_host = host_list.pop() |
|
84
|
|
|
|
|
85
|
|
|
# Check if the scan was stopped. |
|
86
|
|
|
status = self._daemon.get_scan_status(scan_id) |
|
87
|
|
|
if status == ScanStatus.STOPPED or status == ScanStatus.FINISHED: |
|
88
|
|
|
logger.debug( |
|
89
|
|
|
'Task %s stopped or finished.', |
|
90
|
|
|
scan_id, |
|
91
|
|
|
) |
|
92
|
|
|
return |
|
93
|
|
|
|
|
94
|
|
|
res_list = ResultList() |
|
95
|
|
|
|
|
96
|
|
|
res_list.add_scan_log_to_list( |
|
97
|
|
|
host=current_host, |
|
98
|
|
|
name="HOST_START", |
|
99
|
|
|
value=str(int(time.time())), |
|
100
|
|
|
) |
|
101
|
|
|
|
|
102
|
|
|
# Generate N results per host. Default 10 results |
|
103
|
|
|
res_count = 0 |
|
104
|
|
|
while res_count < results_per_host: |
|
105
|
|
|
res_count += 1 |
|
106
|
|
|
oid = choice(vts) |
|
107
|
|
|
port = choice(tcp) |
|
108
|
|
|
vt = vthelper.get_single_vt(oid) |
|
109
|
|
|
if vt: |
|
110
|
|
|
if vt.get('qod_type'): |
|
111
|
|
|
qod_t = vt.get('qod_type') |
|
112
|
|
|
rqod = nvti.QOD_TYPES[qod_t] |
|
113
|
|
|
elif vt.get('qod'): |
|
114
|
|
|
rqod = vt.get('qod') |
|
115
|
|
|
|
|
116
|
|
|
rname = vt.get('name') |
|
117
|
|
|
else: |
|
118
|
|
|
logger.debug("oid %s not found", oid) |
|
119
|
|
|
|
|
120
|
|
|
res_type = int(uniform(1, 5)) |
|
121
|
|
|
# Error |
|
122
|
|
|
if res_type == 1: |
|
123
|
|
|
res_list.add_scan_error_to_list( |
|
124
|
|
|
host=current_host, |
|
125
|
|
|
hostname=current_host + ".hostname.net", |
|
126
|
|
|
name=rname, |
|
|
|
|
|
|
127
|
|
|
value="error running the script " + oid, |
|
128
|
|
|
port=port, |
|
129
|
|
|
test_id=oid, |
|
130
|
|
|
uri="No location", |
|
131
|
|
|
) |
|
132
|
|
|
# Log |
|
133
|
|
|
elif res_type == 2: |
|
134
|
|
|
res_list.add_scan_log_to_list( |
|
135
|
|
|
host=current_host, |
|
136
|
|
|
hostname=current_host + ".hostname.net", |
|
137
|
|
|
name=rname, |
|
138
|
|
|
value="Log generate from a dry run scan for the script " |
|
139
|
|
|
+ oid, |
|
140
|
|
|
port=port, |
|
141
|
|
|
qod=rqod, |
|
|
|
|
|
|
142
|
|
|
test_id=oid, |
|
143
|
|
|
uri="No location", |
|
144
|
|
|
) |
|
145
|
|
|
# Alarm |
|
146
|
|
|
else: |
|
147
|
|
|
r_severity = vthelper.get_severity_score(vt) |
|
148
|
|
|
res_list.add_scan_alarm_to_list( |
|
149
|
|
|
host=current_host, |
|
150
|
|
|
hostname=current_host + ".hostname.net", |
|
151
|
|
|
name=rname, |
|
152
|
|
|
value="Log generate from a dry run scan for the script " |
|
153
|
|
|
+ oid, |
|
154
|
|
|
port=port, |
|
155
|
|
|
test_id=oid, |
|
156
|
|
|
severity=r_severity, |
|
157
|
|
|
qod=rqod, |
|
158
|
|
|
uri="No location", |
|
159
|
|
|
) |
|
160
|
|
|
|
|
161
|
|
|
res_list.add_scan_log_to_list( |
|
162
|
|
|
host=current_host, |
|
163
|
|
|
name="HOST_END", |
|
164
|
|
|
value=str(int(time.time())), |
|
165
|
|
|
) |
|
166
|
|
|
|
|
167
|
|
|
# Add the result to the scan collection |
|
168
|
|
|
if len(res_list): |
|
169
|
|
|
logger.debug( |
|
170
|
|
|
'%s: Inserting %d results into scan ' |
|
171
|
|
|
'scan collection table', |
|
172
|
|
|
scan_id, |
|
173
|
|
|
len(res_list), |
|
174
|
|
|
) |
|
175
|
|
|
self._daemon.scan_collection.add_result_list(scan_id, res_list) |
|
176
|
|
|
|
|
177
|
|
|
# Set the host scan progress as finished |
|
178
|
|
|
host_progress = dict() |
|
179
|
|
|
host_progress[current_host] = ScanProgress.FINISHED |
|
180
|
|
|
self._daemon.set_scan_progress_batch( |
|
181
|
|
|
scan_id, host_progress=host_progress |
|
182
|
|
|
) |
|
183
|
|
|
|
|
184
|
|
|
# Update the host status, Finished host. So ospd can |
|
185
|
|
|
# calculate the scan progress. |
|
186
|
|
|
# This is quite importan, since the final scan status depends on |
|
187
|
|
|
# the progress calculation. |
|
188
|
|
|
finished_host = list() |
|
189
|
|
|
finished_host.append(current_host) |
|
190
|
|
|
self._daemon.sort_host_finished(scan_id, finished_host) |
|
191
|
|
|
|
|
192
|
|
|
time.sleep(1) |
|
193
|
|
|
logger.debug('%s: End task', scan_id) |
|
194
|
|
|
|