def save_scan_vulns(scan_id, task_id):
task = Task.objects.filter(task_id=task_id).first()
while True:
res = Nessus.details(scan_id, task.task_scanner.id)
try:
res['info']['status']
except:
continue
if res['info']['status'] == 'canceled' or res['info'][
'status'] == 'completed':
#time.sleep(600)
nessus.get_scan_vuln(scan_id, task, task.task_scanner.id)
task.task_status = 4
task.save()
data = {
'notice_title': '任务进度通知',
'notice_body': '您对' + task.task_name + '的扫描任务已完成，请及时查看结果',
'notice_url': '/task/user/',
'notice_type': 'notice',
}
user = task.task_user
notice_add(user, data)
send_notice_mail(user.email, data)
break
else:
time.sleep(30)
def get_scan_status(scan_id, scanner_id):
res = Nessus.details(scan_id, scanner_id)
return res['info']['status']
def get_scan_vuln(scan_id, task, scanner_id):
res = Nessus.details(scan_id, scanner_id)
vuln_list = res.get('vulnerabilities')
asset_type = AssetType.objects.filter(name='服务器').first()
if vuln_list:
except_vuln, except_vuln_list = Get_except_vuln('Nessus')
for vuln in vuln_list:
for host in res['hosts']:
host_id = host['host_id']
hostname = host['hostname']
#asset = Asset.objects.filter(asset_key=hostname).first()
asset_get = Asset.objects.get_or_create(asset_key=hostname)
asset = asset_get[0]
if asset_get[1]:
asset_host = asset
try:
num_id = Asset.objects.latest('id').id
except:
num_id = 0
num_id += 1
asset_id = '01' + time.strftime(
'%Y%m%d', time.localtime(time.time())) + str(num_id)
asset_name = '服务器-' + asset_id
asset_host.asset_id = asset_id
asset_host.asset_name = asset_name
asset_host.asset_type = asset_type
asset_host.save()
else:
pass
try:
num = Vulnerability_scan.objects.latest('id').id
except Exception as e:
num = 0
vuln_id = '01' + str(
time.strftime('%Y%m%d%H', time.localtime(
time.time()))) + str(num)
vuln_type = 'Nessus'
vuln_name = vuln.get('plugin_name')
out_details = Nessus.get_plugin_output(scan_id, host_id,
vuln['plugin_id'],
scanner_id)
vuln_info = out_details.get('outputs')
if vuln_info:
if vuln_name in except_vuln:
vuln_gets = except_vuln_list.filter(
vuln_name=vuln_name).first()
leave = vuln_gets.leave
fix = vuln_gets.fix
else:
leave = vuln.get('severity')
fix = out_details['info']['plugindescription'][
'pluginattributes']['solution']
introduce = out_details['info']['plugindescription'][
'pluginattributes']['description']
scopen = hostname
vuln_list = Vulnerability_scan.objects.get_or_create(
vuln_name=vuln_name,
vuln_type=vuln_type,
leave=leave,
introduce=introduce,
vuln_info=vuln_info,
scopen=scopen,
fix=fix,
vuln_asset=asset)
vuln_get = vuln_list[0]
if vuln_get.vuln_id:
if vuln_get.fix_status == '1':
vuln_get.fix_status = '3'
else:
vuln_get.vuln_id = vuln_id
if leave == 0:
vuln_get.fix_status = '0'
elif leave == 1:
vuln_get.fix_status = '0'
else:
vuln_get.fix_status = '2'
vuln_get.task_id = task
vuln_get.save()
def stop_nessus_scan(scan_id, scanner_id):
scan_uuid = Nessus.stop(scan_id, scanner_id)
return scan_uuid
def resume_nessus_scan(scan_id, scanner_id):
scan_uuid = Nessus.resume(scan_id, scanner_id)
return scan_uuid
def pause_nessus_scan(scan_id, scanner_id):
scan_uuid = Nessus.pause(scan_id, scanner_id)
return scan_uuid
def launch_nessus_scan(scan_id, scanner_id):
scan_uuid = Nessus.launch(scan_id, scanner_id)
return scan_uuid
def add_nessus_scan(name, introduce, target, scanner_id, police):
policies = Nessus.get_policies(scanner_id)
pid = policies[police]
scan = Nessus.add(name, introduce, target, pid, scanner_id)
scan_id = scan['id']
return scan_id