#!/usr/bin/php
<?php
//error_reporting(0);

/***
 * Main program - Don't edit below
 */
echo "            ______   _                  \n        _  (_____ \ (_)                 \n ____ _| |_  ____) ) _  ___  ___  ____  \n|  _ (_   _)/ ____/ | |/___)/ _ \|  _ \ \n| |_| || |_| (_____ | |___ | |_| | | | |\n|  __/  \__)_______)| (___/ \___/|_| |_|\n|_|               (__/                  \n\n";

foreach (glob("classes/*.php") as $filename)
    include $filename;

$definitions = new \Clapp\CommandLineArgumentDefinition(
    array(
        "help|h"            => "Shows help message",
        "doc|d=s"           => "/path/to/doc.ptreport to use",
        "no-save|n"           => "Output only - Don't save JSON files",
    )
);

$filter = new \Clapp\CommandArgumentFilter($definitions, $argv);

if ($filter->getParam('h') === true || $argc < 2) {
	echo "Convert ptreport reprep output file to JSON files for repgen.php\n\n";
    fwrite(STDERR, $definitions->getUsage());
    exit(0);
} 

// see if doc exists 
if ($filter->getParam("doc") == false)
	die("[-] no doc set\n");

echo "[!] doc: ".$filter->getParam("doc")."\n";
if(!file_exists($filter->getParam("doc")))
	die("[-] no such file! \n"); 


$xmlfile = file_get_contents($filter->getParam("doc"));
$ob= simplexml_load_string($xmlfile);
$json  = json_encode($ob);
$configData = json_decode($json, true);

//print_r($configData);
//file_put_contents('/mnt/hgfs/Pentest/pentests/2019/Remploy/test/array.x', print_r($configData, true));
$resultsFolder = substr($filter->getParam("doc"), 0, strrpos( $filter->getParam("doc"), '/') )."/";

foreach ($configData['report_sections']['section']['subsection'] as $key => $value) {
	# code...
	//echo $value['title']."\n";
	//print_r($value);
	foreach($value['finding'] as $key2 => $value2){
		if($filter->getParam('no-save') === true){
			echo "[+] issue: ".$value2['@attributes']['title']."\n";
		}else{
			echo "[+] creating json for: ".$value2['@attributes']['title']."\n";
		}
		$vulnFileName = preg_replace( '/[^a-z0-9]+/', '-', strtolower( $value2['@attributes']['title']) );

		if(isset($value2['cvss_vector']) && @strpos($value2['cvss_vector'], 'CVSS:3.0') === 0 ){
			$cvss3_score = $value2['cvss'];
			$cvss3_vector = $value2['cvss_vector'];
		}else{
			$cvss3_score = "";
			$cvss3_vector = "";
		}

		$techD = "";
		foreach ($value2['section'] as $key => $value) {
			# code...
			$techD .= @base64_decode($value)."\n";
		}
		$cvssS = (isset($value2['cvss']))? $value2['cvss'] : "";

		$sev = $value2['severity'];
		$sev = str_replace("serious", "Serious", $sev);
		$sev = str_replace("high", "High", $sev);
		$sev = str_replace("medium", "Medium", $sev);
		$sev = str_replace("low", "Low", $sev);
		$sev = str_replace("info", "Informational", $sev);

		$jsonFile = '{
		"title":'.json_encode($value2['@attributes']['title']).',
		"category":"",
		"remediation":'.json_encode(base64_decode($value2['remediation'])).',
		"cvss_score":'.json_encode($cvssS).',
		"risk":'.json_encode($sev).',
		"impact":"High/Medium/Low",
		"description":'.json_encode(base64_decode($value2['summary_description'])).',
		"tech_description":'.json_encode($techD).',
		"solution":'.json_encode(base64_decode($value2['summary_fix'])).',
		"cvss2_score":"",
		"cvss2_vector":"",
		"cvss3_score":'.json_encode($cvss3_score).',
		"cvss3_vector":'.json_encode($cvss3_vector).',
		"owasp":"",
		"tags":'.json_encode(base64_decode($value2['vuln_tags'])).',
		"to_check":"checked"}';

		if($filter->getParam('no-save') === false){
			file_put_contents($resultsFolder.$vulnFileName.".json", $jsonFile);
		}
	}
	
}