#!/usr/bin/php
<?php
//error_reporting(0);
/***
* Main program - Don't edit below
*/
echo " _ ______ _\n| | (_____ \ (_)\n| | _ ____ ____) ) _ ___ ___ ____\n| || \| _ \/_____/ | |/___)/ _ \| _ \ \n| |_) ) | | |______ | |___ | |_| | | | |\n|____/| ||_(_______)| (___/ \___/|_| |_|\n |_| (__/ \n\n";
foreach (glob("classes/*.php") as $filename)
include $filename;
$definitions = new \Clapp\CommandLineArgumentDefinition(
array(
"help|h" => "Shows help message",
"doc|d=s" => "/path/to/burp.xml to use",
"no-save|n" => "Output only - Don't save JSON files",
)
);
$filter = new \Clapp\CommandArgumentFilter($definitions, $argv);
if ($filter->getParam('h') === true || $argc < 2) {
echo "Convert burp \"report issues\" XML output file to JSON files for repgen.php\n\n";
fwrite(STDERR, $definitions->getUsage());
exit(0);
}
// see if doc exists
if ($filter->getParam("doc") == false)
die("[-] no doc set\n");
echo "[!] doc: ".$filter->getParam("doc")."\n";
if(!file_exists($filter->getParam("doc")))
die("[-] no such file! \n");
//$xmlfile = file_get_contents($filter->getParam("doc"));
$burp= simplexml_load_file($filter->getParam("doc"));
$resultsFolder = substr($filter->getParam("doc"), 0, strrpos( $filter->getParam("doc"), '/') )."/";
$vulnarray = array();
foreach($burp as $issue => $details){
$issue = (string)$details->name;
if(!in_array($issue, $vulnarray)){
array_push($vulnarray, $issue);
}
}
echo "[=] ".count($vulnarray)." vulnerabilities identified\n";
foreach($vulnarray as $issue){
$newfilename = preg_replace( '/[^a-z0-9]+/', '-', strtolower( $issue) );
if($filter->getParam('no-save') === true){
echo "[+] issue: ".$issue."\n";
}else{
echo "[+] creating file: ".$resultsFolder.$newfilename.".json\n";
touch($resultsFolder.$newfilename.".json");
}
}
if($filter->getParam('no-save') !== true)
echo "[!] These are empty JSON files, remember to floss!\n";
?>