#!/usr/bin/php
<?php
//error_reporting(0);
 
/***
 * Main program - Don't edit below
 */
echo " _          ______   _\n| |        (_____ \ (_)\n| | _  ____  ____) ) _  ___  ___  ____\n| || \|  _ \/_____/ | |/___)/ _ \|  _ \ \n| |_) ) | | |______ | |___ | |_| | | | |\n|____/| ||_(_______)| (___/ \___/|_| |_|\n      |_|         (__/             \n\n";
 
foreach (glob("classes/*.php") as $filename)
    include $filename;
 
$definitions = new \Clapp\CommandLineArgumentDefinition(
    array(
        "help|h"            => "Shows help message",
        "doc|d=s"           => "/path/to/burp.xml to use",
        "no-save|n"           => "Output only - Don't save JSON files",
    )
);
 
$filter = new \Clapp\CommandArgumentFilter($definitions, $argv);
 
if ($filter->getParam('h') === true || $argc < 2) {
	echo "Convert burp \"report issues\" XML output file to JSON files for repgen.php\n\n";
    fwrite(STDERR, $definitions->getUsage());
    exit(0);
} 
 
// see if doc exists 
if ($filter->getParam("doc") == false)
	die("[-] no doc set\n");
 
echo "[!] doc: ".$filter->getParam("doc")."\n";
if(!file_exists($filter->getParam("doc")))
	die("[-] no such file! \n"); 
 
 
//$xmlfile = file_get_contents($filter->getParam("doc"));
$burp= simplexml_load_file($filter->getParam("doc"));
 
$resultsFolder = substr($filter->getParam("doc"), 0, strrpos( $filter->getParam("doc"), '/') )."/";
$vulnarray = array();
 
foreach($burp as $issue => $details){
    $issue = (string)$details->name;
    if(!in_array($issue, $vulnarray)){
        array_push($vulnarray, $issue);
    }
}
 
echo "[=] ".count($vulnarray)." vulnerabilities identified\n";
 
foreach($vulnarray as $issue){
    $newfilename = preg_replace( '/[^a-z0-9]+/', '-', strtolower( $issue) );
    if($filter->getParam('no-save') === true){
        echo "[+] issue: ".$issue."\n";
    }else{
        echo "[+] creating file: ".$resultsFolder.$newfilename.".json\n";
        touch($resultsFolder.$newfilename.".json");
    }
}
 
if($filter->getParam('no-save') !== true)
    echo "[!] These are empty JSON files, remember to floss!\n";
 
 
?>