Beispiel #1
0
def burp_setting(request):
    """
    Load Burp Settings.
    :param request:
    :return:
    """
    burp_url = None
    burp_port = None
    all_burp_setting = burp_setting_db.objects.all()

    for data in all_burp_setting:
        burp_url = data.burp_url
        burp_port = data.burp_port

    if request.method == 'POST':
        burphost = request.POST.get("burpath")
        burport = request.POST.get("burport")
        save_burp_settings = burp_setting_db(burp_url=burphost,
                                             burp_port=burport)
        save_burp_settings.save()

        return HttpResponseRedirect('/webscanners/setting/')

    return render(request, 'burp_setting_form.html', {
        'burp_url': burp_url,
        'burp_port': burp_port
    })
Beispiel #2
0
    def save_burp_settings(self, burphost, burport):
        """
        Save Burp Settings into setting file.
        :param burphost:
        :param burport:
        :return:
        """

        all_burp = burp_setting_db.objects.all()
        all_burp.delete()

        save_burpsettings = burp_setting_db(burp_url=burphost,
                                            burp_port=burport
                                            )
        save_burpsettings.save()
        try:
            with open(self.setting_file, 'r+') as f:
                data = json.load(f)
                data['burp_path'] = burphost
                data['burp_port'] = burport
                f.seek(0)
                json.dump(data, f, indent=4)
                f.truncate()
        except Exception as e:
            return e
        return f.close()
Beispiel #3
0
    def save_burp_settings(self, burphost, burport, burpapikey):
        """
        Save Burp Settings into setting file.
        :param burphost:
        :param burport:
        :return:
        """

        all_burp = burp_setting_db.objects.all()
        all_burp.delete()

        save_burpsettings = burp_setting_db(burp_url=burphost,
                                            burp_port=burport,
                                            burp_api_key=burpapikey)
        save_burpsettings.save()
Beispiel #4
0
def burp_setting(request):
    """
    Load Burp Settings.
    :param request:
    :return:
    """
    user = request.user

    all_burp_setting = burp_setting_db.objects.all()

    for data in all_burp_setting:
        global burp_url, burp_port, burp_api_key, \
            remediation, issue_type_id, description, \
            name, references, \
            vulnerability_classifications
        burp_url = data.burp_url
        burp_port = data.burp_port
        burp_api_key = data.burp_api_key

    if request.method == 'POST':
        burphost = request.POST.get("burpath")
        burport = request.POST.get("burport")
        burpapikey = request.POST.get("burpapikey")
        save_burp_settings = burp_setting_db(burp_url=burphost, burp_port=burport, burp_api_key=burpapikey)
        save_burp_settings.save()

        host = 'http://' + burphost + ':' + burport + '/'

        bi = burpscanner.BurpApi(host, burpapikey)

        issue_list = bi.issue_definitions()

        json_issue_data = json.dumps(issue_list.data)
        issues = json.loads(json_issue_data)

        all_data = burp_issue_definitions.objects.all()
        all_data.delete()

        try:
            for issue_dat in issues:
                for key, values in issue_dat.items():
                    if key == 'remediation':
                        remediation = values
                    if key == 'issue_type_id':
                        issue_type_id = values
                    if key == 'description':
                        description = values
                    if key == 'name':
                        name = values
                    if key == 'references':
                        references = values
                    if key == 'vulnerability_classifications':
                        vulnerability_classifications = values

                data_dump = burp_issue_definitions(remediation=remediation,
                                                   issue_type_id=issue_type_id,
                                                   description=description,
                                                   reference=references,
                                                   vulnerability_classifications=vulnerability_classifications,
                                                   name=name
                                                   )
                data_dump.save()
        except Exception as e:
            print(e)
            notify.send(user, recipient=user, verb='Burp Connection Not Found')

        return HttpResponseRedirect('/webscanners/setting/')

    return render(request, 'burpscanner/burp_setting_form.html',
                  {'burp_url': burp_url,
                   'burp_port': burp_port,
                   'burp_api_key': burp_api_key
                   })