run_arachni.php

<?php

/*
 * This file is part of security-bugtracker, a bugtracker for security
 *
 * @copyright 2017 Eric Therond. All rights reserved
 * @license MIT See LICENSE at the root of the project for more info
 */


include('common.php');
include('assets.api.php');

$CONF_COOKIES_TEST = "";

$credentials = array('login' => $CONF_WEBISSUES_ARACHNI_LOGIN, 'password' => $CONF_WEBISSUES_ARACHNI_PASSWORD);
$clientsoap = new SoapClient($CONF_WEBISSUES_WS_ENDPOINT."?wsdl", $credentials);
$clientsoap->__setLocation($CONF_WEBISSUES_WS_ENDPOINT);

add_assets_urls();

$addscan = new TypeAddscan();
$addscan->id_folder_scans = (int) $CONF_WEBISSUES_FOLDER_SCANS;
$addscan->name = "scan_".rand()."_arachni_".$CONF_WEBISSUES_FOLDER_SCANS;
$addscan->description = "scan_".rand()."_arachni_".$CONF_WEBISSUES_FOLDER_SCANS;
$addscan->tool = "arachni";
$addscan->filter = "medium";

$param = new SoapParam($addscan, 'tns:type_addscan');
$result = $clientsoap->__call('addscan', array('type_addscan'=>$param));

if ($result) {
    $id_scan = $result->result_addscan_details->id_scan;

    $geturls = new TypeGeturls();
    $geturls->id_folder_web = $CONF_WEBISSUES_FOLDER_WEB;
    $param = new SoapParam($geturls, 'tns:type_geturls');
    $results = $clientsoap->__call('geturls', array('type_geturls'=>$param));

    if ($results) {
        if (is_array($results->result_geturls_details) && count($results->result_geturls_details) > 1) {
            $results = $results->result_geturls_details;
        }

        foreach ($results as $resulturl) {
            $id_url = $resulturl->id_url;
            $name = $resulturl->name;
            $url = $resulturl->url;

            //echo "url arachni 1 = '$url'\n";
            $url = chop($url);
            //echo "url arachni 2 = '$url'\n";

            $cmd = "$CONF_ARACHNI_BIN $url --http-cookie-string=\"".$CONF_COOKIES_TEST."\"";
            $cmd .= " --report-save-path ./tmp/arachni.afr";
            echo "$cmd";
            $out = shell_exec("$cmd");
            $out = shell_exec("$CONF_ARACHNI_REPORT_BIN ./tmp/arachni.afr --report=xml:outfile=./tmp/arachni.xml");
            $outputxml = file_get_contents("./tmp/arachni.xml");
            //$out = shell_exec("rm /tmp/arachni.afr");
            //$out = shell_exec("rm /tmp/arachni.xml");

            if (!empty($outputxml)) {
                $report = new SimpleXMLElement($outputxml);
                if (isset($report->issues->issue)) {
                    foreach ($report->issues->issue as $issue) {
                        if (isset($issue->name)) {
                            if (isset($issue->severity)) {
                                $threat = 0;
                                switch ($issue->severity) {
                                    case 'informational':
                                        $threat = 1;
                                        break;
                                    case 'low':
                                        $threat = 1;
                                        break;
                                    case 'medium':
                                        $threat = 2;
                                        break;
                                    case 'high':
                                        $threat = 3;
                                        break;
                                    default:
                                        $threat = 1;
                                        break;
                                }

                                if ($threat >= $GLOBAL_SEVERITY) {
                                    $addissue = new TypeAddissue();
                                    $addissue->id_folder_bugs = $CONF_WEBISSUES_FOLDER_BUGS;
                                    $addissue->name = $issue->name;
                                    $addissue->description = $issue->description."\n\n".$issue->vector->url;
                                    $addissue->assigned = "";
                                    $addissue->state = "Actif";
                                    $addissue->severity = $threat;

                                    $param = new SoapParam($addissue, 'tns:addissue');
                                    $result = $clientsoap->__call('addissue', array('addissue'=>$param));
                                }
                            }
                        }
                    }
                }
            }
        }

        $finishscan = new TypeFinishscan();
        $finishscan->id_scan = $id_scan;

        $param = new SoapParam($finishscan, 'tns:finishscan');
        $result = $clientsoap->__call('finishscan', array('finishscan'=>$param));
    }
}