search

hammackj / risu

Risu is Nessus parser, that converts the generated reports into a ActiveRecord database, this allows for easy report generation and vulnerability verification.
http://hammackj.github.io/risu
MIT License
63 stars 20 forks source link

multiple scans #9

Closed ebdavison closed 12 years ago

ebdavison commented 13 years ago

I do not see a way the tool works now to do multiple scans from the same database. Looks like I would need to create a new database for each scan I wanted to report on. Maybe this is by design. It would be very helpful to be able to use the same database for multiple scans.

As a feature there should be a way to specify which scan you wanted to report on or all from the database.

hammackj commented 13 years ago

You can import all the different scans into the same database. All data parsed will go into the same database. In the database each scan is linked via the Report object.

Using the basic templates included will take all the hosts in the specified database regardless of what report they are linked to. So by default all data parsed into the same database is kinda merged. The same host from different scans would exist and there would be N number of hosts for that ip all with different/same results but with a different report_id. This will facilitate scan diffing later on.

For example @hosts = Report.first.hosts would give you all the hosts from the first report. Every host has a report id on its record also, so you can do host.report.name and get the name of the Scan that host belongs to.

I am going to try and release 1.2 next week. It has a lot more named scope queries that make doing these types of things much simpler.

Does that help at all?

ebdavison commented 13 years ago

Yes, that would help if I had a way to specify which report I needed by id or name.

hammackj commented 13 years ago

In the template in you can change the queries to be Report.find_by_id(id of the report you want).hosts and .items and generate everything that way.

I do all my assessments with 1 database per assessment. It makes it easier to do diffs. I am still trying figure out an easy to make make this changeable.

hammackj commented 12 years ago

Added to internal todo list will get this in 1.5 or 1.6