|
| 1 | +// SPDX-FileCopyrightText: 2026 Greenbone AG |
| 2 | +// |
| 3 | +// SPDX-License-Identifier: GPL-2.0-or-later WITH x11vnc-openssl-exception |
| 4 | + |
| 5 | +use std::{ |
| 6 | + collections::HashMap, |
| 7 | + io::{Read, Write}, |
| 8 | + net::{SocketAddr, TcpStream}, |
| 9 | +}; |
| 10 | + |
| 11 | +use greenbone_scanner_framework::models::FixedVersion; |
| 12 | +use nasl_function_proc_macro::nasl_function; |
| 13 | +use serde::{Deserialize, Serialize}; |
| 14 | +use serde_json; |
| 15 | + |
| 16 | +use crate::{ |
| 17 | + function_set, |
| 18 | + nasl::{ |
| 19 | + ArgumentError, FnError, NaslValue, ScanCtx, builtin::http::HttpError, |
| 20 | + utils::scan_ctx::NotusCtx, |
| 21 | + }, |
| 22 | + notus::{HashsumProductLoader, Notus}, |
| 23 | +}; |
| 24 | + |
| 25 | +#[nasl_function] |
| 26 | +fn notus_type() -> i64 { |
| 27 | + 1 |
| 28 | +} |
| 29 | + |
| 30 | +#[derive(Serialize, Deserialize, Debug)] |
| 31 | +struct NotusResult { |
| 32 | + oid: String, |
| 33 | + message: String, |
| 34 | +} |
| 35 | + |
| 36 | +impl NaslNotus { |
| 37 | + fn notus_self( |
| 38 | + &self, |
| 39 | + notus: &mut Notus<HashsumProductLoader>, |
| 40 | + pkg_list: &[String], |
| 41 | + product: &str, |
| 42 | + ) -> Result<NaslValue, FnError> { |
| 43 | + let res = notus.scan(product, pkg_list)?; |
| 44 | + |
| 45 | + let mut ret = HashMap::new(); |
| 46 | + for (oid, vuls) in res { |
| 47 | + let message = vuls.into_iter().map(|vul| match vul.fixed_version { |
| 48 | + FixedVersion::Single { version, specifier } => format!("Vulnerable package: {}\nInstalled version: {}\nFixed version: {:2}{}", vul.name, vul.installed_version, specifier.to_string(), version), |
| 49 | + FixedVersion::Range { start, end } => format!("Vulnerable package: {}\nInstalled version: {}\nFixed version: < {}\nFixed version: >={}", vul.name, vul.installed_version, start, end), |
| 50 | + }).collect::<Vec<String>>().join("\n\n"); |
| 51 | + ret.insert(oid, NaslValue::String(message)); |
| 52 | + } |
| 53 | + |
| 54 | + Ok(NaslValue::Dict(ret)) |
| 55 | + } |
| 56 | + |
| 57 | + fn notus_extern( |
| 58 | + &self, |
| 59 | + addr: &SocketAddr, |
| 60 | + pkg_list: &[String], |
| 61 | + product: &str, |
| 62 | + ) -> Result<NaslValue, FnError> { |
| 63 | + let mut sock = TcpStream::connect(addr).map_err(|e| HttpError::IO(e.kind()))?; |
| 64 | + let pkg_json = serde_json::to_string(pkg_list).unwrap(); |
| 65 | + |
| 66 | + let request = format!( |
| 67 | + "POST /notus/{} HTTP/1.1\r\nContent-Length: {}\r\n\r\n{}", |
| 68 | + product, |
| 69 | + pkg_json.len(), |
| 70 | + pkg_json |
| 71 | + ); |
| 72 | + sock.write_all(request.as_bytes()) |
| 73 | + .map_err(|e| HttpError::IO(e.kind()))?; |
| 74 | + let mut response = Vec::new(); |
| 75 | + sock.read_to_end(&mut response) |
| 76 | + .map_err(|e| HttpError::IO(e.kind()))?; |
| 77 | + let response_str = String::from_utf8(response).unwrap(); |
| 78 | + |
| 79 | + // Split headers and body |
| 80 | + let parts: Vec<&str> = response_str.split("\r\n\r\n").collect(); |
| 81 | + let body = if parts.len() > 1 { |
| 82 | + parts[1] |
| 83 | + } else { |
| 84 | + &response_str |
| 85 | + }; |
| 86 | + |
| 87 | + // Parse JSON array of results |
| 88 | + let results: Vec<NotusResult> = serde_json::from_str(body).unwrap(); |
| 89 | + |
| 90 | + // Convert to NaslValue (Dict mapping oid -> message) |
| 91 | + let mut ret = HashMap::new(); |
| 92 | + for result in results { |
| 93 | + ret.insert(result.oid, NaslValue::String(result.message)); |
| 94 | + } |
| 95 | + |
| 96 | + Ok(NaslValue::Dict(ret)) |
| 97 | + } |
| 98 | + |
| 99 | + #[nasl_function] |
| 100 | + fn notus_error(&self) -> Option<String> { |
| 101 | + self.last_error.clone() |
| 102 | + } |
| 103 | + |
| 104 | + #[nasl_function(named(pkg_list, product))] |
| 105 | + fn notus( |
| 106 | + &mut self, |
| 107 | + context: &ScanCtx, |
| 108 | + pkg_list: NaslValue, |
| 109 | + product: &str, |
| 110 | + ) -> Result<NaslValue, FnError> { |
| 111 | + let notus = if let Some(notus) = &context.notus { |
| 112 | + notus |
| 113 | + } else { |
| 114 | + self.last_error = Some("Configuration Error: Notus context not found".to_string()); |
| 115 | + return Ok(NaslValue::Null); |
| 116 | + }; |
| 117 | + let pkg_list: Vec<String> = match pkg_list { |
| 118 | + NaslValue::String(s) => s.split(',').map(|s| s.trim().to_string()).collect(), |
| 119 | + NaslValue::Array(arr) => arr.iter().map(|v| v.to_string()).collect(), |
| 120 | + x => { |
| 121 | + return Err(ArgumentError::wrong_argument( |
| 122 | + "pkg_list", |
| 123 | + "String as Comma Separated List or Array of Strings", |
| 124 | + &format!("{:?}", x), |
| 125 | + ) |
| 126 | + .into()); |
| 127 | + } |
| 128 | + }; |
| 129 | + let ret = match notus { |
| 130 | + NotusCtx::Direct(notus) => { |
| 131 | + self.notus_self(&mut notus.lock().unwrap(), &pkg_list, product) |
| 132 | + } |
| 133 | + NotusCtx::Address(addr) => self.notus_extern(addr, &pkg_list, product), |
| 134 | + }; |
| 135 | + match ret { |
| 136 | + Err(e) => { |
| 137 | + self.last_error = Some(e.to_string()); |
| 138 | + Ok(NaslValue::Null) |
| 139 | + } |
| 140 | + Ok(ret) => { |
| 141 | + self.last_error = None; |
| 142 | + Ok(ret) |
| 143 | + } |
| 144 | + } |
| 145 | + } |
| 146 | +} |
| 147 | + |
| 148 | +#[derive(Default)] |
| 149 | +pub struct NaslNotus { |
| 150 | + last_error: Option<String>, |
| 151 | +} |
| 152 | + |
| 153 | +function_set! { |
| 154 | + NaslNotus, |
| 155 | + ( |
| 156 | + NaslNotus::notus_error, |
| 157 | + NaslNotus::notus, |
| 158 | + ) |
| 159 | +} |
0 commit comments