fuel-qa/fuelweb_test/helpers/nessus.py

import json
import os

from devops.helpers.helpers import wait
from proboscis import asserts
import requests
# pylint: disable=import-error
from six.moves import urllib
# pylint: enable=import-error

from fuelweb_test import logger
from fuelweb_test.helpers.decorators import token


class NessusClient(object):
    def __init__(self, hostname, port, username, password, ssl_verify=False):
        self.nessus_auth_token = None
        self.nessus_base_url = 'https://{0}:{1}'.format(hostname, port)
        self.nessus_username = username
        self.nessus_password = password
        self.ssl_verify = ssl_verify
        self.login()

    @staticmethod
    def log_request(url, method, request_headers, request_body,
                    status_code, response_headers, response_body):
        log_fmt = ("Request {method} {url}\n"
                   "Request - Headers: {request_headers}\n"
                   "          Body: {request_body}\n"
                   "Response status code: {status_code}\n"
                   "Response - Headers: {response_headers}\n"
                   "           Body: {response_body}\n")

        logger.info(log_fmt.format(url=url,
                                   method=method,
                                   request_headers=request_headers,
                                   request_body=request_body,
                                   status_code=status_code,
                                   response_headers=response_headers,
                                   response_body=response_body))

    @token
    def request(self, method, url, body=None, **kwargs):
        headers = {'X-Cookie': 'token={0}'.format(self.nessus_auth_token),
                   'Content-Type': 'application/json'}
        url = urllib.parse.urljoin(self.nessus_base_url, url)

        response = requests.request(
            method, url, data=body, headers=headers,
            verify=self.ssl_verify, **kwargs)

        self.log_request(url, method, headers, body,
                         response.status_code, response.headers,
                         response.content[:1024])

        asserts.assert_equal(
            response.status_code, 200,
            "Request failed: {0}\n{1}".format(response.status_code,
                                              response.content))

        return response

    def get(self, url, body=None):
        return self.request("GET", url, json.dumps(body)).json()

    def get_raw(self, url, body=None):
        return self.request("GET", url, json.dumps(body)).content

    def post(self, url, body=None):
        return self.request("POST", url, json.dumps(body)).json()

    def login(self):
        creds = {'username': self.nessus_username,
                 'password': self.nessus_password}

        self.nessus_auth_token = self.post('/session', creds)['token']

    def add_policy(self, policy_def):
        return self.post('/policies', policy_def)

    def list_policy_templates(self):
        return self.get('/editor/policy/templates')['templates']

    def add_cpa_policy(self, name, description, pid):
        policy_def = \
            {
                "uuid": pid,
                "settings": {
                    "name": name,
                    "description": description
                },
                "credentials": {
                    "add": {
                        "Host": {
                            "SSH": [
                                {
                                    "auth_method": "password",
                                    "username": "root",
                                    "password": "r00tme",
                                    "elevate_privileges_with": "Nothing"
                                }
                            ]
                        }
                    }
                }
            }

        return self.add_policy(policy_def)['policy_id']

    def add_wat_policy(self, name, desc, pid):
        policy_def = \
            {
                "uuid": pid,
                "settings": {
                    "name": name,
                    "description": desc,
                    "discovery_mode": "Port scan (all ports)",
                    "assessment_mode": "Scan for all web vulnerabilities "
                                       "(complex)",

                }
            }

        return self.add_policy(policy_def)['policy_id']

    def create_scan(self, name, description, target_ip,
                    policy_id, policy_template_id):
        scan_def = \
            {
                "uuid": policy_template_id,
                "settings": {
                    "name": name,
                    "description": description,
                    "scanner_id": "1",
                    "policy_id": policy_id,
                    "text_targets": target_ip,
                    "launch": "ONETIME",
                    "enabled": False,
                    "launch_now": False
                }
            }

        return self.post('/scans', scan_def)['scan']['id']

    def launch_scan(self, scan_id):
        return self.post('/scans/{0}/launch'.format(scan_id))['scan_uuid']

    def get_scan_history(self, scan_id, history_id):
        return self.get('/scans/{0}'.format(scan_id),
                        {'history_id': history_id})['info']

    def get_scan_status(self, scan_id, history_id):
        return self.get_scan_history(scan_id, history_id)['status']

    def list_scan_history_ids(self, scan_id):
        data = self.get('/scans/{0}'.format(scan_id))
        return dict((h['uuid'], h['history_id']) for h in data['history'])

    def check_scan_export_status(self, scan_id, file_id):
        return self.get('/scans/{0}/export/{1}/status'
                        .format(scan_id, file_id))['status'] == 'ready'

    def export_scan(self, scan_id, history_id, save_format):
        export_def = {'history_id': history_id,
                      'format': save_format,
                      'chapters': 'vuln_hosts_summary'}
        file_id = self.post('/scans/{0}/export'.format(scan_id),
                            body=export_def)['file']
        wait(lambda: self.check_scan_export_status(scan_id, file_id),
             interval=10, timeout=600,
             timeout_msg='Nessus export scan status != "ready" for '
                         ' scan_id={} file_id={}'.format(scan_id, file_id))
        return file_id

    def download_scan_result(
            self, scan_id, file_id, scan_type, save_format, file_path):
        report = self.get_raw('/scans/{0}/export/{1}/download'
                              .format(scan_id, file_id))

        filename = 'nessus_report_scan_{0}_{1}.{2}'\
            .format(scan_id, scan_type, save_format)
        file_with_path = os.path.join(file_path, filename)
        logger.info("Saving Nessus scan report: {0}".format(file_with_path))
        with open(file_with_path, 'w') as report_file:
            report_file.write(report)