class Risu::Parsers::Nessus::PostProcess::DowngradePlugins

Public Class Methods

new() click to toggle source
# File lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb, line 29
                            def initialize
                                    @info =
                                    {
                                            :description => "Downgrades the Severity of Certain Plugins",
                                            :plugin_id => 0
                                    }

#0 - informational
#1 - low
#2 - medium
#3 - high
#4 - critical

                                    # TODO read from "extra" section

                                    @plugins_to_severity = {
                                            41028 => 0, # SNMP Agent Default Community Name (public) - 41028
                            10264 => 0, # SNMP Agent Default Community Names - 10264
                                            10081 => 0, # FTP Privileged Port Bounce Scan - 10081
                                            42411 => 0, # Microsoft Windows SMB Shares Unprivileged Access
                                            66349 => 0, # X Server Unauthenticated Access: Screenshot
                                            26925 => 0, # VNC Server Unauthenticated Access
                                            66174 => 0, # VNC Server Unauthenticated Access: Screenshot
                                            10205 => 0, # rlogin Service Detection
                                            20007 => 2, # SSL Version 2 and 3 Protocol Detection
                                            80101 => 2, # IPMI v2.0 Password Hash Disclosure
                                    }
                            end

Public Instance Methods

run() click to toggle source
# File lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb, line 59
                          def run
                                  @plugins_to_severity.each do |k, v|
                                          items = Item.where(:plugin_id => k)

                                          if items == nil
                                                  next
                                          end

items.each do |item|
  if item == nil
    next
  end

  item.severity = v
              item.save
end

                                  end
                          end