mucho fixo
1 parent 5aed53f commit 5dbd62d20f2c420c08cb5eb788d4cd99cd85b799
root authored on 3 Dec 2019
Showing 5 changed files
View
55
ReportToolz/repgen.php
 
/***
* Configuration options
*/
$template = "templates/odt/blank_template_v0.2.odt";
$template = "templates/odt/blank_template_v0.3.odt";
$CHECKtemplate = "templates/odt/blank_template_check_v0.2.odt";
$vulnTemplate = "templates/odt/vuln_template.xml";
 
/***
* Main program - Don't edit below
 
echo "[!] path: ".$filter->getParam("path")."\n";
if(!is_dir($filter->getParam("path")))
die("[-] no such folder! \n");
 
//get config file
$config = json_decode(file_get_contents($filter->getParam("path")."config.conf"));
if(isset($config->checkRef) && trim($config->checkRef) <> ""){
$template = $CHECKtemplate; // if checkRefset use CHECK template
echo "[+] using CHECK template\n";
}
 
// extract doc and get contents
$rand = uniqid();
mkdir("/tmp/$rand");
} else {
die("[-] unable to extract doc\n");
}
$config = json_decode(file_get_contents($filter->getParam("path")."config.conf"));
 
 
// add config into template
$source = file_get_contents("/tmp/$rand/content.xml");
foreach ($config as $key => $value) {
foreach ($vuln as $singlevuln) {
$templateSource = $templateOrig;
$togo = $singlevuln['risk'];
foreach ($singlevuln as $key => $value){
$value = str_replace("\n", "</text:p><text:p text:style-name=\"P173\">", $value);
$value = str_replace("\n", "</text:p><text:p text:style-name=\"Text_20_body\">", $value);
$templateSource = str_replace('{'.$key.'}', $value, $templateSource);
}
$$togo .= $templateSource;
echo "[+] added $togo: ".$singlevuln['title']."\n";
 
// squash vulns into one bbig xml
$value = "";
if(!empty($Serious)){
$value .= '<text:list xml:id="list215514604433265" text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P156" text:outline-level="2">Serious Risk Vulnerabilities</text:h>
$value .= '<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:outline-level="2">Serious Risk Vulnerabilities</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>';
$value .= $Serious;
}
 
if(!empty($High)){
$value .= '<text:list xml:id="list215514604433265" text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P156" text:outline-level="2">High Risk Vulnerabilities</text:h>
$value .= '<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:outline-level="2">High Risk Vulnerabilities</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>';
$value .= $High;
}
if(!empty($Medium)){
$value .= '<text:list xml:id="list215514604433265" text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P156" text:outline-level="2">Medium Risk Vulnerabilities</text:h>
$value .= '<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:outline-level="2">Medium Risk Vulnerabilities</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>';
$value .= $Medium;
}
if(!empty($Low)){
$value .= '<text:list xml:id="list215514604433265" text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P156" text:outline-level="2">Low Risk Vulnerabilities</text:h>
$value .= '<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:h text:outline-level="2">Low Risk Vulnerabilities</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>';
View
ReportToolz/templates/odt/blank_template_v0.1.odt 0 → 100755
Not supported
View
ReportToolz/templates/odt/blank_template_v0.2.odt 100644 → 100755
Not supported
View
ReportToolz/templates/odt/blank_template_v0.3.odt 0 → 100755
Not supported
View
50
ReportToolz/templates/odt/vuln_template.xml
<text:list xml:id="list213560360713376" text:continue-numbering="true" text:style-name="Outline">
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P158" text:outline-level="3"><text:span text:style-name="T68">{title}</text:span>
<text:h text:outline-level="3"><text:span>{title}</text:span>
</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P172">{description}</text:p>
<text:list xml:id="list213561795199098" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{description}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P160" text:outline-level="4">Description</text:h>
<text:h text:outline-level="4">Description</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P173">{tech_description}</text:p>
<text:list xml:id="list213560538834392" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{tech_description}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P163" text:outline-level="4">Potential Impact</text:h>
<text:h text:outline-level="4">Potential Impact</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P174">{impact}</text:p>
<text:list xml:id="list213561208498537" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{impact}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P163" text:outline-level="4">Solution</text:h>
<text:h text:outline-level="4">Solution</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P174">{solution}</text:p>
<text:list xml:id="list213559784479853" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{solution}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P168" text:outline-level="4">Remediation</text:h>
<text:h text:outline-level="4">Remediation</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P176">{remediation} </text:p>
<text:list xml:id="list213560383564909" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{remediation}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P166" text:outline-level="4">CVSS Base Score</text:h>
<text:h text:outline-level="4">CVSS Base Score</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P175">{cvss_score}</text:p>
<text:list xml:id="list213560394355852" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{cvss_score}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P168" text:outline-level="4">Risk Level</text:h>
<text:h text:outline-level="4">Risk Level</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P176">{risk}: {owasp}</text:p>
<text:list xml:id="list213560496396733" text:continue-numbering="true" text:style-name="Outline">
<text:p text:style-name="Text_20_body">{risk}: {owasp}</text:p>
<text:list text:continue-numbering="true" text:style-name="Outline">
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:list>
<text:list-item>
<text:h text:style-name="P168" text:outline-level="4">Vulnerabilities Exist On</text:h>
<text:h text:outline-level="4">Vulnerabilities Exist On</text:h>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
</text:list-item>
</text:list>
<text:p text:style-name="P171">host</text:p>
<text:p text:style-name="Text_20_body">host</text:p>
<text:p text:style-name="PageBreak"></text:p>
Buy Me A Coffee