144 lines
5.4 KiB
Python
144 lines
5.4 KiB
Python
#!/usr/bin/env python
|
||
# -*- coding: utf-8 -*-
|
||
# @Time : 2017/12/28 13:41
|
||
# @Author : 852782749@qq.com
|
||
# @File : nsfocus_bug_excel.py
|
||
# @Software: PyCharm
|
||
|
||
'''将文件放在要处理的绿盟科技漏洞扫描综合报表内，自动识别index.html文件，会生成三个文件
|
||
在当前目录下执行python nsfocus_bug_excel.py
|
||
需要导入第三方库xlwt库、BeautifulSoup库、lxml库
|
||
'''
|
||
import time
|
||
'''time.strftime('%Y-%m-%d.xls')'''
|
||
import xlwt
|
||
import sys
|
||
reload(sys)
|
||
sys.setdefaultencoding('utf-8')
|
||
try:
|
||
from bs4 import BeautifulSoup
|
||
except ImportError:
|
||
raise SystemExit('\n[!]python html库——BeautifulSoup导入错误;请执行 pip install BeautifulSoup安装!')
|
||
import re
|
||
import lxml
|
||
'''
|
||
脚本是用来获取绿盟漏洞扫描设备的html版本报告的漏洞信息的，包括主机，漏洞名称，漏洞描述，修复建议，CVE编号
|
||
#buglv = ['high','middle','low']分别对应高中低三种类型的漏洞。
|
||
'''
|
||
soup = BeautifulSoup(open('index.html'),"lxml")
|
||
#print soup.contents
|
||
data = str(soup.find_all("div",{"class":'report_content'})).decode('unicode_escape')
|
||
#删除空格、换行等特殊字符
|
||
data = filter(lambda x:x not in ['\n','\r',' ','\t'],data)
|
||
#print data
|
||
#共有8个此处DIV，每处对应一章节
|
||
#使用split分出每一章节
|
||
data_list=data.split("report_content")
|
||
#print data_list[4]
|
||
data_bug_list = data_list[4]
|
||
#print data_bug_list
|
||
buglv = ['high','middle','low']
|
||
#buglv = ['high']
|
||
|
||
def bug_level(bug_lv):
|
||
#定义获取漏洞list(漏洞名称,详细信息,解决方案,CVE编号等,)
|
||
# 正则bug_lv为风险等级分为high,middle,low分别对应风险等级高中低;
|
||
# data_bug_list为全局变量，值是漏洞数据;
|
||
#返回bug_r_list为匹配到的漏洞数据list
|
||
bug_r = r'<trclass="\w*?vuln_'+bug_lv+'".*?</td></tr></table></td></tr>'
|
||
bug_r_re = re.compile(bug_r)
|
||
bug_r_list = re.findall(bug_r_re, data_bug_list)
|
||
return bug_r_list
|
||
def vnln_hosts(bug_hosts):
|
||
# 匹配受影响主机
|
||
#data_host实参是漏洞信息中受影响主机
|
||
# bug_host_r_list是返回的受影响主机
|
||
bug_host_r = r'host/(.*?).html'
|
||
bug_host_r_re = re.compile(bug_host_r)
|
||
bug_host_r_list = re.findall(bug_host_r_re, bug_hosts)
|
||
return bug_host_r_list
|
||
def bug_main(bug_bug):
|
||
index =1
|
||
'''time.strftime('%Y-%m-%d-%h-%s.xls')'''
|
||
file = xlwt.Workbook()
|
||
# excel 第一行数据
|
||
excel_headDatas = [u'受影响主机', u'漏洞等级', u'漏洞名称', u'漏洞描述', u'修复建议', u'CVE编号']
|
||
table = file.add_sheet(u'漏洞数据', cell_overwrite_ok=True)
|
||
fist = 0
|
||
for data in excel_headDatas:
|
||
table.write(0, fist, data)
|
||
fist += 1
|
||
for i in range(len(bug_bug)):
|
||
# for i in range(1):
|
||
#print u'当前进行第%s个' %(i+1)
|
||
bug_n_r = r'trclass=".*?vuln_(.*?)"onclick.*?<spanstyle="color:.*?">(.*?)</span><!--<span'
|
||
bug_n_re = re.compile(bug_n_r)
|
||
bug_n_list = re.findall(bug_n_re, bug_bug[i])
|
||
|
||
bug_x_r = u'<!--<span.*?<th>详细描述</th><td>(.*?)</td></tr>'
|
||
bug_x_re = re.compile(bug_x_r)
|
||
bug_x_list = re.findall(bug_x_re,bug_bug[i])
|
||
|
||
bug_j_r = u'解决办法</th><td>(.*?)</td></tr>'
|
||
bug_j_re = re.compile(bug_j_r)
|
||
bug_j_list = re.findall(bug_j_re,bug_bug[i])
|
||
|
||
bug_c_r = r'target="_blank">(CVE.*?)</a></td></tr>'
|
||
bug_c_re = re.compile(bug_c_r)
|
||
bug_c_list = re.findall(bug_c_re,bug_bug[i])
|
||
for hs in range(len(vnln_hosts(bug_bug[i]))):
|
||
if len(bug_n_list)!=0:
|
||
bug_lv = bug_n_list[0][0]
|
||
bug_name = bug_n_list[0][1]
|
||
else:
|
||
bug_lv = ''
|
||
bug_name = ''
|
||
if len(bug_x_list)!=0:
|
||
bug_xin = bug_x_list[0]
|
||
else:
|
||
bug_xin = u'无'
|
||
if len(bug_j_list)!=0:
|
||
bug_jie = bug_j_list[0]
|
||
else:
|
||
bug_jie = u'无'
|
||
if len(bug_c_list)!=0:
|
||
#print bug_c_list
|
||
if 'blank' in bug_c_list[0]:
|
||
#print bug_c_list
|
||
cvem = '>'+bug_c_list[0]+'</a>'
|
||
#print cvem
|
||
bug_cve_r = r'>(CVE.*?)</a>'
|
||
bug_cve_re = re.compile(bug_cve_r)
|
||
bug_cve_list = re.findall(bug_cve_re,cvem)
|
||
#print bug_cve_list
|
||
#print len(bug_cve_list)
|
||
bug_cve = ','.join(bug_cve_list)
|
||
#print bug_cve
|
||
else:
|
||
#print bug_c_list
|
||
bug_cve = bug_c_list[0]
|
||
else:
|
||
bug_cve = u'无'
|
||
#print vnln_hosts(bug_bug[i])[hs]+'Analogy'+bug_lv+bug_name+'Analogy'+bug_xin+'Analogy'+bug_jie+'Analogy'+bug_cve
|
||
#print(vnln_hosts(bug_bug[i])[hs]+bug_lv+bug_name+bug_xin+bug_jie+bug_cve+'\n')
|
||
test_list = []
|
||
test_list.append(vnln_hosts(bug_bug[i])[hs])
|
||
test_list.append(bug_lv)
|
||
test_list.append(bug_name)
|
||
test_list.append(bug_xin)
|
||
test_list.append(bug_jie)
|
||
test_list.append(bug_cve)
|
||
#print test_list
|
||
for j in range(len(test_list)):
|
||
table.write(index,j,test_list[j])
|
||
print index
|
||
index +=1
|
||
file.save(time.strftime('%Y-%m-%d-%H-%S.xls'))
|
||
time.sleep(2)
|
||
|
||
def main():
|
||
for bug in range(len(buglv)):
|
||
bug_main(bug_level(buglv[bug]))
|
||
if __name__ == '__main__':
|
||
main()
|