Fork: 0
0xRoM / DirtyScripts
Transfer to URL with SHA Find file
Newer
Older
DirtyScripts / ReportToolz / rep2.php
root on 28 Jan 2021 16 KB supports JSON summary tags
Raw Blame History 
  1. #!/usr/bin/php
  2. <?php
  3. //error_reporting(0);
  4.  
  5. /***
  6.  * Configuration options
  7.  */
  8. $sub1 = 5; // header no in doc e.g. "5 Discovered Vulnerabilities"
  9.  
  10. /***
  11.  * Main program - Don't edit below
  12.  */
  13. echo "_____ _____ _____ 2\n||_// ||==  ||_// \n|| \\  ||___ ||    \n\n";
  14.  
  15. foreach (glob("classes/*.php") as $filename)
  16.     include $filename;
  17.  
  18. $definitions = new \Clapp\CommandLineArgumentDefinition(
  19.     array(
  20.         "help|h"            => "Shows help message",
  21.         "doc|d=s"           => "/path/to/doc.odt to use",
  22.     )
  23. );
  24.  
  25. $filter = new \Clapp\CommandArgumentFilter($definitions, $argv);
  26.  
  27. if ($filter->getParam('h') === true || $argc < 2) {
  28.     fwrite(STDERR, $definitions->getUsage());
  29.     exit(0);
  30. } 
  31.  
  32. // see if doc exists 
  33. if ($filter->getParam("doc") == false)
  34. 	die("[-] no doc set\n");
  35.  
  36. echo "[!] doc: ".$filter->getParam("doc")."\n";
  37. if(!file_exists($filter->getParam("doc")))
  38. 	die("[-] no such file! \n");
  39.  
  40. // extract doc and get contents
  41. $rand = uniqid();
  42. mkdir("/tmp/$rand");
  43. if(unzipFolder($filter->getParam("doc"), "/tmp/$rand/")) {
  44.     $source = file_get_contents("/tmp/$rand/content.xml");
  45.     echo "[+] doc extracted\n";
  46. } else {
  47. 	die("[-] unable to extract doc\n");
  48. }
  49. 	
  50. // Parse Doc's XML
  51. $line = array();
  52. $reader = new XMLReader();
  53. if (!$reader->open("/tmp/$rand/content.xml")) die("[-] Failed to open 'content.xml'\n");
  54.  
  55. // font checker
  56. /***
  57.  * FUTURE FEATURE PERHAPS
  58.  */
  59. $fonts = array();
  60. while ($reader->read()){ 
  61. 	//print_r($reader->name);
  62.     if ($reader->nodeType == XMLREADER::ELEMENT && ($reader->name === 'style:font-face')) {  
  63.     	//if(!empty($reader->name)){
  64.     		//echo "here2\n";
  65.         	//$line[] = $reader->expand()->textContent; // Put the text into array in correct order...
  66.     		$fonts[] = $reader->getAttribute("style:name");
  67.         	//echo $font;echo "\n"; // DEBUG
  68.         //}
  69.     }
  70. }
  71. $reader->close();
  72. //die();
  73. echo "[=] fonts found: ".sizeof($fonts)."\n";
  74.  
  75. // get template version used
  76. $reader = new XMLReader();
  77. if (!$reader->open("/tmp/$rand/meta.xml")) die("[-] Failed to open 'meta.xml'\n");
  78. $templateVer = 0.0;
  79. while ($reader->read()) {
  80.   if($reader->name == "dc:version"){
  81.     $reader->read();
  82.     $templateVer = number_format(floatval($reader->value), 2);
  83.     break;
  84.   }
  85. }
  86.  
  87. // step through text:h and text:p elements to put them into an array
  88. $reader = new XMLReader();
  89. if (!$reader->open("/tmp/$rand/content.xml")) die("[-] Failed to open 'content.xml'\n");
  90. while ($reader->read()){ 
  91.     if ($reader->nodeType == XMLREADER::ELEMENT && ($reader->name === 'text:h' || $reader->name === 'text:p' || $reader->name === 'text:bookmark')) {  
  92.     	if(!empty($reader->expand()->textContent))
  93.         	$line[] = $reader->expand()->textContent; // Put the text into array in correct order...
  94.         	//echo $reader->expand()->textContent;echo "\n"; // DEBUG
  95.     }
  96. }
  97. $reader->close();
  98.  
  99. // find the content we want
  100. $start = 0; $end = 0;
  101. foreach($line as $key => $val){
  102. 	//if(strpos($val, "Discovered Vulnerabilities") === 0){ $start = $key; }
  103. 	if(preg_match('/Discovered *\w* Vulnerabilities/', $val, $matches) === true){ $start = $key; }
  104. 	//if(strpos($val, "This section provides a quick guide to plan your remediation for the vulnerabilities discovered during the test.") === 0){ $end = $key-2; }
  105. 	if(strpos($val, "Observed Hosts and Services") === 0){ $end = $key-2; }
  106. 	$line[$key] = trim($val);
  107. }
  108.  
  109. // add to sexy array's
  110. $vuln = array();
  111. $vulnPlace = 0;
  112. $switch = 0;
  113. $sub2 = 0;
  114. $sub3 = 1;
  115. if(number_format($templateVer, 2) >= number_format(1.0, 2)){
  116. 	echo "[=] Template $templateVer used\n";
  117. 	for ($i=$start; $i <= $end ; $i++) { 
  118. 		// change state (action to take)
  119. 		/***
  120. 		 * ~states~
  121. 		 * 0 = do nothing
  122. 		 * 1 = next is title
  123. 		 * 2 = next is description
  124. 		 * 3 = next is solution
  125. 		 * 4 = next is remediation
  126. 		 * 5 = next is cvss no
  127. 		 * 6 = next is risk level
  128. 		 * 7 = next is hosts
  129. 		 * 8 = next possibly title
  130. 		 */
  131. 		
  132. 		switch ($line[$i]) {
  133. 			case (preg_match('/Discovered *\w* Vulnerabilities/', $val, $matches) === true):
  134. 				$switch = 0;
  135. 				break;
  136. 			case 'Serious Risk Vulnerabilities':
  137. 				$sub2++; $sub3 = 1;
  138. 				$switch = 1;
  139. 				break;
  140. 			case 'High Risk Vulnerabilities':
  141. 				$sub2++; $sub3 = 1;
  142. 				$switch = 1;
  143. 				break;
  144. 			case 'Medium Risk Vulnerabilities':
  145. 				$sub2++; $sub3 = 1;
  146. 				$switch = 1;
  147. 				break;
  148. 			case 'Low Risk Vulnerabilities':
  149. 				$sub2++; $sub3 = 1;
  150. 				$switch = 1;
  151. 				break;
  152. 			case 'Informational Risk Vulnerabilities':
  153. 				$sub2++; $sub3 = 1;
  154. 				$switch = 1;
  155. 				break;
  156. 			case 'Description':
  157. 				$switch = 2;
  158. 				break;
  159. 			case 'Solution':
  160. 				$switch = 3;
  161. 				break;
  162. 			case 'Remediation':
  163. 				$switch = 4;
  164. 				break;
  165. 			case 'CVSS Base Score':
  166. 				$switch = 5;
  167. 				break;
  168. 			case 'Risk Analysis':
  169. 				$switch = 6;
  170. 				break;
  171. 			case 'Vulnerabilities Exist On':
  172. 				$switch = 7;
  173. 				break;
  174. 			case 'Potential Impact':
  175. 				$switch = 9;
  176. 				break;
  177. 			default:
  178. 				# code...
  179. 				break;
  180. 		}
  181.  
  182. 		//take action
  183. 		switch ($switch) {
  184. 			case 1:
  185. 				$i++;
  186. 				$vuln[$vulnPlace]['title'] = $line[$i];
  187. 				$vuln[$vulnPlace]['ref'] = "$sub1.$sub2.$sub3";
  188. 				$sub3++;
  189. 				$switch = 0;
  190. 				break;
  191. 			case 2:
  192. 				@$vuln[$vulnPlace]['desc'] .= $line[$i];
  193. 				break;
  194. 			case 3:
  195. 				@$vuln[$vulnPlace]['fix'] .= $line[$i];
  196. 				break;
  197. 			case 4:
  198. 				$i++;
  199. 				//$vuln[$vulnPlace]['rem'] = trim(strtok($line[$i], " "));
  200. 				$switch = 0;
  201. 				break;
  202. 			case 5:
  203. 				$i++;
  204. 				$vuln[$vulnPlace]['cvss'] = $line[$i];
  205. 				$switch = 0;
  206. 				break;
  207. 			case 6:
  208. 				$i++;
  209. 				$line[$i+3] = str_replace("Vulnerability Img", "", $line[$i+3]);
  210. 				$vuln[$vulnPlace]['risk'] = strstr(trim($line[$i+3]), ":", true);
  211. 				$vuln[$vulnPlace]['owasp'] = trim(substr($line[$i+3], strpos($line[$i+3], ":") + 1));  
  212. 				$vuln[$vulnPlace]['impact'] = trim(strtok($line[$i+4], " "));  
  213. 				$vuln[$vulnPlace]['rem'] = trim(strtok($line[$i+5], " ")); 
  214. 				$switch = 0;
  215. 				break;
  216. 			case 7:
  217. 				$i++;
  218. 				$vuln[$vulnPlace]['hosts'] = $line[$i];
  219. 				$switch = 8;
  220. 				$vulnPlace++;
  221. 				break;
  222. 			case 8:
  223. 				$vuln[$vulnPlace]['title'] = trim($line[$i]);
  224. 				$vuln[$vulnPlace]['ref'] = "$sub1.$sub2.$sub3";
  225. 				$sub3++;
  226. 				$switch = 0;
  227. 				break;
  228. 			case 9:
  229. 				@$vuln[$vulnPlace]['impact'] .= $line[$i];
  230. 				break;
  231. 			default:
  232. 				# code...
  233. 				break;
  234. 		}
  235.  
  236. 		//echo $line[$i]."\n"; // DEBUG
  237. 	}
  238. 	$first_desc = explode("Description", $vuln[0]['desc']);
  239.  
  240. 	$vuln[0]['desc'] = $first_desc[sizeof($first_desc)-1];
  241. }else{ // old template or Dave's format
  242. 	for ($i=$start; $i <= $end ; $i++) { 
  243. 		// change state (action to take)
  244. 		/***
  245. 		 * ~states~
  246. 		 * 0 = do nothing
  247. 		 * 1 = next is title
  248. 		 * 2 = next is description
  249. 		 * 3 = next is solution
  250. 		 * 4 = next is remediation
  251. 		 * 5 = next is cvss no
  252. 		 * 6 = next is risk level
  253. 		 * 7 = next is hosts
  254. 		 * 8 = next possibly title
  255. 		 */
  256. 		echo $line[$i]."\n";
  257. 		switch ($line[$i]) {
  258. 			case 'Discovered Vulnerabilities':
  259. 				$switch = 0;
  260. 				break;
  261. 			case 'Serious Risk Vulnerabilities':
  262. 				$sub2++; $sub3 = 1;
  263. 				$switch = 1;
  264. 				break;
  265. 			case 'High Risk Vulnerabilities':
  266. 				$sub2++; $sub3 = 1;
  267. 				$switch = 1;
  268. 				break;
  269. 			case 'Medium Risk Vulnerabilities':
  270. 				$sub2++; $sub3 = 1;
  271. 				$switch = 1;
  272. 				break;
  273. 			case 'Low Risk Vulnerabilities':
  274. 				$sub2++; $sub3 = 1;
  275. 				$switch = 1;
  276. 				break;
  277. 			case 'Informational Risk Vulnerabilities':
  278. 				$sub2++; $sub3 = 1;
  279. 				$switch = 1;
  280. 				break;
  281. 			case 'Description':
  282. 				$switch = 2;
  283. 				break;
  284. 			case 'Solution':
  285. 				$switch = 3;
  286. 				break;
  287. 			case 'Remediation':
  288. 				$switch = 4;
  289. 				break;
  290. 			case 'CVSS Base Score':
  291. 				$switch = 5;
  292. 				break;
  293. 			case 'Risk Level':
  294. 				$switch = 6;
  295. 				break;
  296. 			case 'Vulnerabilities Exist On':
  297. 				$switch = 7;
  298. 				break;
  299. 			case 'Potential Impact':
  300. 				$switch = 9;
  301. 				break;
  302. 			default:
  303. 				# code...
  304. 				break;
  305. 		}
  306.  
  307. 		//take action
  308. 		switch ($switch) {
  309. 			case 1:
  310. 				$i++;
  311. 				$vuln[$vulnPlace]['title'] = $line[$i];
  312. 				$vuln[$vulnPlace]['ref'] = "$sub1.$sub2.$sub3";
  313. 				$sub3++;
  314. 				$switch = 0;
  315. 				break;
  316. 			case 2:
  317. 				@$vuln[$vulnPlace]['desc'] .= $line[$i];
  318. 				break;
  319. 			case 3:
  320. 				@$vuln[$vulnPlace]['fix'] .= $line[$i];
  321. 				break;
  322. 			case 4:
  323. 				$i++;
  324. 				$vuln[$vulnPlace]['rem'] = trim(strtok($line[$i], " "));
  325. 				$switch = 0;
  326. 				break;
  327. 			case 5:
  328. 				$i++;
  329. 				$vuln[$vulnPlace]['cvss'] = $line[$i];
  330. 				$switch = 0;
  331. 				break;
  332. 			case 6:
  333. 				$i++;
  334. 				$vuln[$vulnPlace]['risk'] = trim(strtok($line[$i], " "));
  335. 				$vuln[$vulnPlace]['owasp'] = trim(substr($line[$i], strpos($line[$i], ":") + 1));    
  336. 				$switch = 0;
  337. 				break;
  338. 			case 7:
  339. 				$i++;
  340. 				$vuln[$vulnPlace]['hosts'] = $line[$i];
  341. 				$switch = 8;
  342. 				$vulnPlace++;
  343. 				break;
  344. 			case 8:
  345. 				$vuln[$vulnPlace]['title'] = trim($line[$i]);
  346. 				$vuln[$vulnPlace]['ref'] = "$sub1.$sub2.$sub3";
  347. 				$sub3++;
  348. 				$switch = 0;
  349. 				break;
  350. 			case 9:
  351. 				@$vuln[$vulnPlace]['impact'] .= $line[$i];
  352. 				break;
  353. 			default:
  354. 				# code...
  355. 				break;
  356. 		}
  357.  
  358. 		//echo $line[$i]."\n"; // DEBUG
  359. 	}
  360. }
  361.  
  362. // get all vulns.json if there are any
  363. $currentPath = dirname($filter->getParam("doc"));
  364. $jsonVuln = array();
  365. $jsonFiles = glob($currentPath."/*.json");
  366. foreach($jsonFiles as $finding){
  367.     $placeholder = json_decode(file_get_contents($finding), true);
  368.     if(isset($placeholder['title'])) // is a vuln and not config file
  369.     	$jsonVuln[] = $placeholder;
  370. }
  371.  
  372. // minor tidying of arrays
  373. for ($i=0; $i < sizeof($vuln) ; $i++) { 
  374. 	if (strpos($vuln[$i]['desc'], "Description") === 0) $vuln[$i]['desc'] = substr($vuln[$i]['desc'], strlen("Description"));
  375. 	if (strpos($vuln[$i]['fix'], "Solution") === 0) $vuln[$i]['fix'] = substr($vuln[$i]['fix'], strlen("Solution"));
  376. 	$vuln[$i]['risk'] = rtrim($vuln[$i]['risk'], ":");
  377. 	// remove html encoding
  378. 	foreach($vuln[$i] as $key => $val){
  379. 		$vuln[$i][$key] = mb_convert_encoding($val, "UTF-8", 'UTF-8');
  380. 	}
  381.  
  382. 	// fixing summary tables
  383. 	$descExpl = explode(".", $vuln[$i]['desc']);
  384. 	$fixExpl = explode(".", $vuln[$i]['fix']);
  385. 	$vuln[$i]['desc'] = $descExpl[0];
  386. 	$vuln[$i]['fix'] = $fixExpl[0];
  387. 	foreach($jsonVuln as $id => $jsonIssue){	
  388. 		if($jsonIssue['title'] == $vuln[$i]['title']){
  389. 			
  390. 			if(isset($jsonIssue['summary_issue']) || isset($jsonIssue['summary_solution'])){
  391. 				echo "[+] summary found for: ".$vuln[$i]['title']."\n";
  392. 				$vuln[$i]['desc'] = $jsonIssue['summary_issue'];
  393. 				$vuln[$i]['fix'] = $jsonIssue['summary_solution'];
  394. 			}
  395. 		}
  396. 	}
  397.  
  398. 	
  399. }
  400.  
  401. //print_r($vuln); // DEBUG
  402. echo "[+] vulnerabilities identified\n";
  403.  
  404. delTree("/tmp/$rand");
  405. echo "[+] temp files removed\n";
  406.  
  407. $resultsFolder = substr($filter->getParam("doc"), 0, strrpos( $filter->getParam("doc"), '/') )."/rep2";
  408. if(!file_exists($resultsFolder."/")){
  409. 	mkdir($resultsFolder."/");
  410. 	echo "[+] created directory $resultsFolder/\n";
  411. }else{
  412. 	$i = 1;
  413. 	while (file_exists($resultsFolder."_$i/"))
  414. 		$i++;
  415. 	mkdir($resultsFolder."_$i/");
  416. 	$resultsFolder .= "_$i";
  417. 	echo "[+] created directory $resultsFolder/\n";
  418. }
  419.  
  420. if(writeIssueTable($vuln, "Serious", $resultsFolder."/findings_serious.csv"))
  421. 	echo "[+] serious issues: $resultsFolder/findings_serious.csv\n";
  422. if(writeIssueTable($vuln, "High", $resultsFolder."/findings_high.csv"))
  423. 	echo "[+] high issues: $resultsFolder/findings_high.csv\n";
  424. if(writeIssueTable($vuln, "Medium", $resultsFolder."/findings_medium.csv"))
  425. 	echo "[+] medium issues: $resultsFolder/findings_medium.csv\n";
  426. if(writeIssueTable($vuln, "Low", $resultsFolder."/findings_low.csv"))
  427. 	echo "[+] low issues: $resultsFolder/findings_low.csv\n";
  428. if(writeIssueTable($vuln, "Info", $resultsFolder."/findings_info.csv"))
  429. 	echo "[+] info issues: $resultsFolder/findings_info.csv\n";
  430.  
  431. $order = array('title', 'ref', 'desc', 'fix','rem','cvss','risk','impact','owasp','hosts');
  432. $orderedArray = array();
  433. foreach($vuln as $vn_no =>$vn){
  434. 	foreach ($order as $key) {
  435. 		//echo $key."\n";
  436. 	    $orderedArray[$vn_no][$key] = $vuln[$vn_no][$key];
  437. 	}
  438. }
  439. if(writeAllTable($orderedArray, $resultsFolder."/findings_all.csv"))
  440. 	echo "[+] all issues: $resultsFolder/findings_all.csv\n";
  441.  
  442. if(writeRemediationTable($vuln, $resultsFolder."/remediation.csv"))
  443. 	echo "[+] remediation table: $resultsFolder/remediation.csv\n";
  444.  
  445. if(writeOWASPTable($vuln, $resultsFolder."/owasp.csv"))
  446. 	echo "[+] OWASP table: $resultsFolder/owasp.csv\n";
  447.  
  448. viewVulns($vuln);
  449.  
  450. function unzipFolder($zipInputFile, $outputFolder) {
  451.     $zip = new ZipArchive;
  452.     $res = $zip->open($zipInputFile);
  453.     if ($res === true) {
  454.         $zip->extractTo($outputFolder);
  455.         $zip->close();
  456.         return true;
  457.     }
  458.     else {
  459.         return false;
  460.     }
  461. }
  462.  
  463. function XML2Array(SimpleXMLElement $parent){
  464.     $array = array();
  465.  
  466.     foreach ($parent as $name => $element) {
  467.         ($node = & $array[$name])
  468.             && (1 === count($node) ? $node = array($node) : 1)
  469.             && $node = & $node[];
  470.  
  471.         $node = $element->count() ? XML2Array($element) : trim($element);
  472.     }
  473.  
  474.     return $array;
  475. }
  476.  
  477. function delTree($dir){ 
  478.     $files = array_diff(scandir($dir), array('.', '..')); 
  479.  
  480.     foreach ($files as $file) { 
  481.         (is_dir("$dir/$file")) ? delTree("$dir/$file") : unlink("$dir/$file"); 
  482.     }
  483.  
  484.     return rmdir($dir); 
  485. } 
  486.  
  487. function viewVulns($vuln){
  488. 	$s = $h = $m = $l = $i = 0 ;
  489. 	for ($j=0; $j < sizeof($vuln) ; $j++) { 
  490. 		switch ($vuln[$j]['risk']) {
  491. 			case 'Serious':
  492. 				$s++;
  493. 				break;
  494. 			case 'High':
  495. 				$h++;
  496. 				break;
  497. 			case 'Medium':
  498. 				$m++;
  499. 				break;
  500. 			case 'Low':
  501. 				$l++;
  502. 				break;
  503. 			case 'Info':
  504. 				$i++;
  505. 				break;
  506. 		}
  507. 	}
  508. 	echo "[=] Serious = $s, High = $h, Medium = $m, Low = $l, Info = $i\n";
  509.  
  510. echo"
  511. Ref    | Title                             |  Risk  |  CVSS  |  Remediation  |  OWASP
  512. -------|-----------------------------------|--------|--------|---------------|------------------------------\n";
  513. for ($i=0; $i < sizeof($vuln) ; $i++) { 
  514. 	$ref = str_pad($vuln[$i]['ref'], 7);
  515. 	$title = str_pad($vuln[$i]['title'], 35);
  516. 	$risk = str_pad($vuln[$i]['risk'], 8);
  517. 		$cvs1 = explode("-", $vuln[$i]['cvss']);
  518. 	$cvss = str_pad($cvs1[0], 8);
  519. 	$rem = str_pad($vuln[$i]['rem'], 15);
  520. 	$owasp = str_pad($vuln[$i]['owasp'], 30);
  521.  
  522. 	echo substr($ref, 0, 7); echo "|";
  523. 	echo substr($title, 0, 35); echo "|";
  524. 	echo substr($risk, 0, 8); echo "|";
  525. 	echo substr($cvss, 0, 8); echo "|";
  526. 	echo substr($rem, 0, 15); echo "|";
  527. 	echo substr($owasp, 0, 30); echo "\n";
  528. }
  529. }
  530.  
  531. function writeIssueTable($vuln, $issue, $path){
  532. 	$towrite = array();
  533. 	for ($i=0; $i < sizeof($vuln) ; $i++) { 
  534. 		if($vuln[$i]['risk'] == $issue){
  535. 			$towrite[$i]['desc'] = $vuln[$i]['title']." - ".$vuln[$i]['desc'];
  536. 			$towrite[$i]['fix'] = $vuln[$i]['fix'];
  537. 			$towrite[$i]['ref'] = $vuln[$i]['ref'];
  538. 			$towrite[$i]['hosts'] = $vuln[$i]['hosts'];
  539. 		}
  540. 	}
  541. 	if(sizeof($towrite) > 0){
  542. 		$fp = fopen($path, 'w');
  543. 		fprintf($fp, chr(0xEF).chr(0xBB).chr(0xBF));
  544. 		foreach ($towrite as $fields) {
  545. 	    	fputcsv($fp, $fields);
  546. 		}
  547. 		fclose($fp);
  548. 		return true;
  549. 	}else{
  550. 		return false;
  551. 	} 
  552. }
  553.  
  554. function writeAllTable($vuln, $path){
  555. 	if(sizeof($vuln) > 0){
  556. 		$fp = fopen($path, 'w');
  557. 		fprintf($fp, chr(0xEF).chr(0xBB).chr(0xBF));
  558. 		fputcsv($fp, array("Title", "Ref", "Description", "Solution", "Remediation", "CVSS", "Risk","Impact", "OWASP", "Affected"));
  559.  
  560. 		//print_r($orderedArray);
  561. 		foreach ($vuln as $fields) {
  562. 	    	fputcsv($fp, $fields);
  563. 		}
  564. 		fclose($fp);
  565. 		return true;
  566. 	}else{
  567. 		return false;
  568. 	} 
  569. }
  570.  
  571. function writeRemediationTable($vuln, $path){
  572. 	$towrite = array();
  573. 	for ($i=0; $i < sizeof($vuln) ; $i++) { 
  574. 		$towrite[$i]['hosts'] = $vuln[$i]['hosts'];
  575. 		$towrite[$i]['ref'] = $vuln[$i]['ref'];
  576. 		$towrite[$i]['p'] = " ";	
  577. 		$towrite[$i]['c'] = " ";	
  578. 		$towrite[$i]['d'] = " ";	
  579. 		$towrite[$i]['u'] = " ";	
  580. 		switch ($vuln[$i]['rem']) {
  581. 			case 'Patch':
  582. 				$towrite[$i]['p'] = $vuln[$i]['risk'][0];
  583. 				break;
  584. 			case 'Configuration':
  585. 				$towrite[$i]['c'] = $vuln[$i]['risk'][0];
  586. 				break;
  587. 			case 'Development':
  588. 				$towrite[$i]['d'] = $vuln[$i]['risk'][0];
  589. 				break;
  590. 			case 'Upgrade':
  591. 				$towrite[$i]['u'] = $vuln[$i]['risk'][0];
  592. 				break;
  593. 		}	
  594. 	}
  595. 	if(sizeof($towrite) > 0){
  596. 		$fp = fopen($path, 'w');
  597. 		fprintf($fp, chr(0xEF).chr(0xBB).chr(0xBF));
  598. 		fputcsv($fp, array("Host", "Ref", "P", "C", "D", "U"));
  599. 		foreach ($towrite as $fields) {
  600. 	    	fputcsv($fp, $fields);
  601. 		}
  602. 		fclose($fp);
  603. 		return true;
  604. 	}else{
  605. 		return false;
  606. 	} 
  607. }
  608.  
  609. function writeOWASPTable($vuln, $path){
  610. 	$towrite = array();
  611. 	for ($i=0; $i < sizeof($vuln) ; $i++) { 
  612. 		if(in_array($vuln[$i]['owasp'], array_column($towrite, 'owaspId'))){
  613. 			$towrite[$vuln[$i]['owasp']]['no']++;
  614. 		}else{
  615. 			$towrite[$vuln[$i]['owasp']]['owaspId'] = $vuln[$i]['owasp'];
  616. 			$towrite[$vuln[$i]['owasp']]['no'] = 1;
  617. 		}
  618. 	}
  619. 	if(sizeof($towrite) > 0){
  620. 		$fp = fopen($path, 'w');
  621. 		fprintf($fp, chr(0xEF).chr(0xBB).chr(0xBF));
  622. 		foreach ($towrite as $fields) {
  623. 	    	fputcsv($fp, $fields);
  624. 		}
  625. 		fclose($fp);
  626. 		return true;
  627. 	}else{
  628. 		return false;
  629. 	} 
  630. }
  631.  
  632. ?>
Buy Me A Coffee