diff --git a/Dockerfile b/Dockerfile index 795e2164..8b568757 100644 --- a/Dockerfile +++ b/Dockerfile @@ -23,7 +23,7 @@ COPY --from=builder ./scb-scanprocesses/arachni-process/target/arachni-process-1 COPY --from=builder ./scb-scanprocesses/ssh-process/target/ssh-process-1.0-SNAPSHOT.jar /scb-engine/lib/ COPY --from=builder ./scb-scanprocesses/amass-process/target/amass-process-1.0-SNAPSHOT.jar /scb-engine/lib/ COPY --from=builder ./scb-scanprocesses/wordpress-process/target/wordpress-process-1.0-SNAPSHOT.jar /scb-engine/lib/ - +COPY --from=builder ./scb-scanprocesses/ncrack-process/target/ncrack-process-0.0.1-SNAPSHOT.jar /scb-engine/lib/ COPY --from=builder ./scb-persistenceproviders/elasticsearch-persistenceprovider/target/elasticsearch-persistenceprovider-0.0.1-SNAPSHOT-jar-with-dependencies.jar /scb-engine/lib/ COPY --from=builder ./scb-persistenceproviders/s3-persistenceprovider/target/s3-persistenceprovider-0.0.1-SNAPSHOT-jar-with-dependencies.jar /scb-engine/lib/ diff --git a/scb-engine/pom.xml b/scb-engine/pom.xml index cd04aae2..8c73aa6e 100644 --- a/scb-engine/pom.xml +++ b/scb-engine/pom.xml @@ -235,6 +235,12 @@ 1.0-SNAPSHOT runtime + + io.securecodebox.scanprocesses + ncrack-process + 0.0.1-SNAPSHOT + runtime + io.securecodebox.persistenceproviders elasticsearch-persistenceprovider diff --git a/scb-scanprocesses/ncrack-process/pom.xml b/scb-scanprocesses/ncrack-process/pom.xml new file mode 100644 index 00000000..460db104 --- /dev/null +++ b/scb-scanprocesses/ncrack-process/pom.xml @@ -0,0 +1,74 @@ + + + + + 4.0.0 + + + io.securecodebox.scanprocesses + default-process-collection + 0.0.1-SNAPSHOT + + + io.securecodebox.scanprocesses + ncrack-process + 0.0.1-SNAPSHOT + + + + + io.securecodebox.core + sdk + ${project.parent.version} + + + + + com.h2database + h2 + + + org.camunda.bpm.springboot + camunda-bpm-spring-boot-starter-test + test + + + org.camunda.bpm.extension.mockito + camunda-bpm-mockito + test + + + org.camunda.bpm.extension + camunda-bpm-assert-scenario + test + + + org.camunda.bpm.extension + camunda-bpm-process-test-coverage + test + + + org.camunda.bpm.extension + camunda-bpm-assert + + + + diff --git a/scb-scanprocesses/ncrack-process/src/main/java/io/securecodebox/scanprocess/ProcessInitConfiguration.java b/scb-scanprocesses/ncrack-process/src/main/java/io/securecodebox/scanprocess/ProcessInitConfiguration.java new file mode 100644 index 00000000..033a2baa --- /dev/null +++ b/scb-scanprocesses/ncrack-process/src/main/java/io/securecodebox/scanprocess/ProcessInitConfiguration.java @@ -0,0 +1,36 @@ +/* + * + * SecureCodeBox (SCB) + * Copyright 2015-2018 iteratec GmbH + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + * / + */ + +package io.securecodebox.scanprocess; + +import org.springframework.context.annotation.ComponentScan; +import org.springframework.context.annotation.Configuration; + +/** + * The secureCodeBox by default only scans for components in the package io.securecodebox.scanprocess. + *

+ * This configuration ensures that your defined package io.securecodebox.scanprocesses also gets scanned, please don't move or remove this configuration. + * + * @author Rüdiger Heins - iteratec GmbH + * @since 09.05.18 + */ +@ComponentScan("io.securecodebox.scanprocesses") +@Configuration +public class ProcessInitConfiguration { +} diff --git a/scb-scanprocesses/ncrack-process/src/main/resources/META-INF/processes.xml b/scb-scanprocesses/ncrack-process/src/main/resources/META-INF/processes.xml new file mode 100644 index 00000000..e69de29b diff --git a/scb-scanprocesses/ncrack-process/src/main/resources/bpmn/ncrack_process.bpmn b/scb-scanprocesses/ncrack-process/src/main/resources/bpmn/ncrack_process.bpmn new file mode 100644 index 00000000..5e619486 --- /dev/null +++ b/scb-scanprocesses/ncrack-process/src/main/resources/bpmn/ncrack_process.bpmn @@ -0,0 +1,197 @@ + + + + + + + + + + + + + + SequenceFlow_TargetConfigured + + + + SequenceFlow_SummaryCreated + + + + + + + + SequenceFlow_ManualFinish + SequenceFlow_ResultReviewed + + + SequenceFlow_ResultReviewed + SequenceFlow_ResultApproved + SequenceFlow_ResultRejected + + + ${PROCESS_RESULT_APPROVED == 'approved'} + + + SequenceFlow_ScanFinished + SequenceFlow_ManualFinish + SequenceFlow_AutomatedFinish + + + ${PROCESS_AUTOMATED == false} + + + ${PROCESS_AUTOMATED == true} + + + + SequenceFlow_TargetConfigured + SequenceFlow_ScanFinished + + + + + SequenceFlow_ResultApproved + SequenceFlow_1i44eck + SequenceFlow_AutomatedFinish + SequenceFlow_SummaryCreated + + + + + ${PROCESS_RESULT_APPROVED == 'disapproved'} + + + SequenceFlow_ResultRejected + SequenceFlow_1i44eck + + + + results in a generic format + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/scb-scanprocesses/ncrack-process/src/main/resources/forms/ncrack/approve-results.html b/scb-scanprocesses/ncrack-process/src/main/resources/forms/ncrack/approve-results.html new file mode 100644 index 00000000..ee80be0e --- /dev/null +++ b/scb-scanprocesses/ncrack-process/src/main/resources/forms/ncrack/approve-results.html @@ -0,0 +1,124 @@ + + +

+ + +
+

Ncrack Scan Results for "{{ target.name }}"

+ +
+
+
{{ scannerId }}
+
+
+
+
{{ target.location }}
+
+
+
+
{{ context }}
+
+
+
+ +
+ + + + + + + + + + + + + + + + + +
Host:Service:Name:Severity:Username:Password:
{{ result.location }}{{ result.attributes.service }}{{ result.name }} +
+ + + {{ result.severity }} + + + + + {{ result.severity }} + + + + + {{ result.severity }} + + + + + {{ result.severity }} + +
+ + 		{{ result.attributes.username }} {{ result.attributes.password }}
+
+
+ +
+
+

Approve Result

+ +
+ +
+ + +
+
+
diff --git a/scb-scanprocesses/ncrack-process/src/main/resources/forms/ncrack/configure-target.html b/scb-scanprocesses/ncrack-process/src/main/resources/forms/ncrack/configure-target.html new file mode 100644 index 00000000..29fced82 --- /dev/null +++ b/scb-scanprocesses/ncrack-process/src/main/resources/forms/ncrack/configure-target.html @@ -0,0 +1,118 @@ + + +

Please configure the Scan

+ +
+ + + +
+ +
+

Ncrack Target

+ + +
+
+
+ + +
+
+ + +
+
+ + +
+
+ +
+ + +
+ +
+ +
+
+ +
+
+
diff --git a/scb-scanprocesses/ncrack-process/src/test/resources/camunda.cfg.xml b/scb-scanprocesses/ncrack-process/src/test/resources/camunda.cfg.xml new file mode 100644 index 00000000..d5e7d6f9 --- /dev/null +++ b/scb-scanprocesses/ncrack-process/src/test/resources/camunda.cfg.xml @@ -0,0 +1,14 @@ + + + + + + + + + + + \ No newline at end of file diff --git a/scb-scanprocesses/ncrack-process/src/test/resources/logback-test.xml b/scb-scanprocesses/ncrack-process/src/test/resources/logback-test.xml new file mode 100644 index 00000000..81dcdbcd --- /dev/null +++ b/scb-scanprocesses/ncrack-process/src/test/resources/logback-test.xml @@ -0,0 +1,27 @@ + + + + + + + + + + diff --git a/scb-scanprocesses/pom.xml b/scb-scanprocesses/pom.xml index bedac331..8254fb8c 100644 --- a/scb-scanprocesses/pom.xml +++ b/scb-scanprocesses/pom.xml @@ -1,4 +1,4 @@ - + 4.0.0 @@ -26,6 +26,7 @@ amass-process ssh-process wordpress-process + ncrack-process - \ No newline at end of file +