func vulns(w http.ResponseWriter, r *http.Request) {
vulns := db.GetVulnerabilities("0", "0")
data, err := json.Marshal(vulns)
w.Header().Set("Content-Type", "application/json")
w.Write(data)
checkErr(err)
}
func index(w http.ResponseWriter, r *http.Request) {
vulns := db.GetVulnerabilities("0", "0")
tpl := template.Must(template.ParseFiles("templates/index.html"))
err := tpl.ExecuteTemplate(w, "index.html", vulns)
//err := tpl.ExecuteTemplate(w, "vuln.html", vulns)
checkErr(err)
}
func exportScanResult(w http.ResponseWriter, r *http.Request) {
m := parseQueryString(r.RequestURI)
_, ok := m["scan"]
if !ok {
return
}
// create a new buffer
b := &bytes.Buffer{}
wr := csv.NewWriter(b)
scan := db.GetScanData(m["scan"])
// insert some format stuff to make the cvs looking better
wr.Write([]string{" "})
wr.Write([]string{" ", "Project:", scan["name"]})
wr.Write([]string{" ", "Scan:", scan["date"]})
wr.Write([]string{" "})
wr.Write([]string{" ", "Findings in this scan", " ", " ", " ", " States: 0 new / 1 false-positiv / 2 solved"})
wr.Write([]string{" "})
wr.Write([]string{" "})
wr.Write([]string{" ", "CATEGORY", "PLUGIN", "SEVERITY", "STATE", "URL", "COMMENT", "DESCRIPTION"})
// first run get results by scan
vulns := db.GetVulnerabilities(m["scan"], "0")
// second run get results by project
//vulns := db.GetVulnerabilities("0", scan["id"])
// TODO build external function
//generateScanResult(vulns)
//generateScanResult(vulns)
categories := db.GetCategories()
plugins := db.GetPlugins()
severities := db.GetSeveritiesById()
for _, catRow := range categories {
wr.Write([]string{" ", catRow["name"]})
for _, pluginRow := range plugins {
if pluginRow["cat"] == catRow["id"] {
wr.Write([]string{" ", " ", pluginRow["name"], " "})
for _, vulnRow := range vulns {
if vulnRow["plugin"] == pluginRow["id"] {
wr.Write([]string{" ", " ", pluginRow["name"], severities[vulnRow["sev"]], vulnRow["state"], vulnRow["url"], vulnRow["comment"], vulnRow["desc"]})
}
}
}
}
}
wr.Flush()
w.Header().Set("Content-Type", "text/csv")
w.Header().Set("Content-Disposition", "attachment;filename=report.csv")
w.Write(b.Bytes())
}
