406 lines
17 KiB
Python
406 lines
17 KiB
Python
|
# coding: utf-8
|
|||
|
|
# -------------------------------------------------------------------
|
|||
|
|
# YakPanel
|
|||
|
|
# -------------------------------------------------------------------
|
|||
|
|
# Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved.
|
|||
|
|
# -------------------------------------------------------------------
|
|||
|
|
# 首页安全风险，展示检测结果
|
|||
|
|
# ------------------------------
|
|||
|
|
import json
|
|||
|
|
import os
|
|||
|
|
import sys
|
|||
|
|
|
|||
|
|
|
|||
|
|
from safeModel.base import safeBase
|
|||
|
|
|
|||
|
|
os.chdir("/www/server/panel")
|
|||
|
|
sys.path.append("class/")
|
|||
|
|
import public, config, datetime
|
|||
|
|
|
|||
|
|
class main(safeBase):
|
|||
|
|
__path = '/www/server/panel/data/warning_report'
|
|||
|
|
__risk = __path + '/risk'
|
|||
|
|
__data = __path + '/data.json'
|
|||
|
|
new_result = "/www/server/panel/data/warning/resultresult.json"
|
|||
|
|
data = []
|
|||
|
|
final_obj = {}
|
|||
|
|
all_cve = 0
|
|||
|
|
cve_num = 0
|
|||
|
|
high_cve = 0
|
|||
|
|
mid_cve = 0
|
|||
|
|
low_cve = 0
|
|||
|
|
cve_list = []
|
|||
|
|
high_warn = 0
|
|||
|
|
mid_warn = 0
|
|||
|
|
low_warn = 0
|
|||
|
|
high_warn_list = []
|
|||
|
|
mid_warn_list = []
|
|||
|
|
low_warn_list = []
|
|||
|
|
auto_fix = [] # 自动修复列表
|
|||
|
|
|
|||
|
|
def __init__(self):
|
|||
|
|
self.configs = config.config()
|
|||
|
|
if not os.path.exists(self.__path):
|
|||
|
|
os.makedirs(self.__path, 384)
|
|||
|
|
|
|||
|
|
def get_report(self, get):
|
|||
|
|
'''
|
|||
|
|
将检测数据，填充到html，并展示检测报告数据
|
|||
|
|
'''
|
|||
|
|
public.set_module_logs("report", "get_report")
|
|||
|
|
self.cve_list = []
|
|||
|
|
self.high_warn_list = []
|
|||
|
|
self.mid_warn_list = []
|
|||
|
|
self.low_warn_list = []
|
|||
|
|
# if not os.path.exists(self.__data):
|
|||
|
|
# return public.returnMsg(False, '导出失败，未发现扫描结果')
|
|||
|
|
# data = json.loads(public.readFile(self.__data))
|
|||
|
|
# 获取最新的检测结果
|
|||
|
|
if not os.path.exists(self.new_result):
|
|||
|
|
return public.returnMsg(False, "No test results found, please perform a homepage security risk scan first")
|
|||
|
|
cve_result = json.loads(public.ReadFile(self.new_result))
|
|||
|
|
|
|||
|
|
first = {}
|
|||
|
|
first["date"] = cve_result["check_time"] # 带有时间的检测日期
|
|||
|
|
first["host"] = public.get_hostname() # 主机名
|
|||
|
|
first["ip"] = public.get_server_ip() # 外网IP
|
|||
|
|
first["local_ip"] = public.GetLocalIp() # 内网IP
|
|||
|
|
# if os.path.exists("/www/server/panel/data/warning/result.json"):
|
|||
|
|
# with open("/www/server/panel/data/warning/result.json") as f:
|
|||
|
|
# cve_result = json.load(f)
|
|||
|
|
# public.print_log(cve_result)
|
|||
|
|
# self.cve_list = cve_result["risk"]
|
|||
|
|
# self.high_cve = cve_result["count"]["serious"]
|
|||
|
|
# self.mid_cve = cve_result["count"]["high_risk"]
|
|||
|
|
# self.low_cve = cve_result["count"]["moderate_risk"]
|
|||
|
|
# self.all_cve = cve_result["vul_count"]
|
|||
|
|
|
|||
|
|
if "risk" not in cve_result:
|
|||
|
|
return public.returnMsg(False, "Risk field not found")
|
|||
|
|
# 获取可自动修复列表
|
|||
|
|
if "is_autofix" in cve_result:
|
|||
|
|
self.auto_fix = cve_result["is_autofix"]
|
|||
|
|
for risk in cve_result["risk"]:
|
|||
|
|
# 若为漏洞
|
|||
|
|
if risk["title"].startswith("CVE") or risk["title"].startswith("RH"):
|
|||
|
|
self.cve_list.append(risk)
|
|||
|
|
self.cve_num += 1
|
|||
|
|
if risk["level"] == 3:
|
|||
|
|
self.high_cve += 1
|
|||
|
|
elif risk["level"] == 2:
|
|||
|
|
self.mid_cve += 1
|
|||
|
|
elif risk["level"] == 1:
|
|||
|
|
self.low_cve += 1
|
|||
|
|
else:
|
|||
|
|
self.cve_num -= 1
|
|||
|
|
continue
|
|||
|
|
# 其余为风险
|
|||
|
|
else:
|
|||
|
|
if risk["level"] == 3:
|
|||
|
|
self.high_warn += 1
|
|||
|
|
self.high_warn_list.append(risk)
|
|||
|
|
elif risk["level"] == 2:
|
|||
|
|
self.mid_warn += 1
|
|||
|
|
self.mid_warn_list.append(risk)
|
|||
|
|
elif risk["level"] == 1:
|
|||
|
|
self.low_warn += 1
|
|||
|
|
self.low_warn_list.append(risk)
|
|||
|
|
else:
|
|||
|
|
continue
|
|||
|
|
# for d in data["risk"]:
|
|||
|
|
# if "title" in d:
|
|||
|
|
# if d["level"] == 3:
|
|||
|
|
# self.high_warn += 1
|
|||
|
|
# self.high_warn_list.append(d)
|
|||
|
|
# elif d["level"] == 2:
|
|||
|
|
# self.mid_warn += 1
|
|||
|
|
# self.mid_warn_list.append(d)
|
|||
|
|
# else:
|
|||
|
|
# self.low_warn += 1.
|
|||
|
|
# self.low_warn_list.append(d)
|
|||
|
|
|
|||
|
|
if self.high_warn + self.high_cve > 1:
|
|||
|
|
total_level = 'High'
|
|||
|
|
level_color = 'High'
|
|||
|
|
elif self.mid_warn + self.mid_cve > 10 or self.high_warn + self.high_cve == 1:
|
|||
|
|
total_level = 'Medium'
|
|||
|
|
level_color = 'Medium'
|
|||
|
|
else:
|
|||
|
|
total_level = 'Low'
|
|||
|
|
level_color = 'Low'
|
|||
|
|
# self.cve_num = self.high_cve + self.mid_cve + self.low_cve
|
|||
|
|
level_reason = "The server has not identified any significant security risks and continues to maintain them!"
|
|||
|
|
if total_level == "High":
|
|||
|
|
level_reason = "There are high-risk security risks or system vulnerabilities on the server, which may lead to hacker intrusion,<span style=\"" \
|
|||
|
|
"font-size: 1.1em;font-weight: 700;color: red;\">Please fix as soon as possible！</span>"
|
|||
|
|
if total_level == "High":
|
|||
|
|
level_reason = "The server has identified potential security risks，<span style=\"" \
|
|||
|
|
"font-size: 1.1em;font-weight: 700;color: red;\">Suggest repairing as soon as possible！</span>"
|
|||
|
|
warn_level = 'Low'
|
|||
|
|
if self.high_warn > 0:
|
|||
|
|
warn_level = 'High'
|
|||
|
|
first_warn = "Identify {} high-risk safety risks".format(self.high_warn)
|
|||
|
|
elif self.mid_warn > 5:
|
|||
|
|
warn_level = 'Medium'
|
|||
|
|
first_warn = "Discovering numerous security risks with moderate threats"
|
|||
|
|
else:
|
|||
|
|
first_warn = "No significant security risks were identified"
|
|||
|
|
cve_level = 'Low'
|
|||
|
|
if self.cve_num > 1:
|
|||
|
|
cve_level = 'High'
|
|||
|
|
first_cve = "Discovered {} system vulnerabilities".format(self.cve_num)
|
|||
|
|
elif self.cve_num == 1:
|
|||
|
|
cve_level = 'Medium'
|
|||
|
|
first_cve = "Discovered a small number of system vulnerabilities"
|
|||
|
|
else:
|
|||
|
|
first_cve = "No system vulnerabilities found"
|
|||
|
|
second = {}
|
|||
|
|
long_date = cve_result["check_time"] # 带有时间的检测日期
|
|||
|
|
date_obj = datetime.datetime.strptime(long_date, "%Y/%m/%d %H:%M:%S")
|
|||
|
|
second["date"] = date_obj.strftime("%Y/%m/%d")
|
|||
|
|
second["last_date"] = cve_result.get('check_time', '')
|
|||
|
|
second["level_color"] = level_color
|
|||
|
|
second["total_level"] = total_level
|
|||
|
|
second["level_reason"] = level_reason
|
|||
|
|
second["warn_level"] = warn_level
|
|||
|
|
second["first_warn"] = first_warn
|
|||
|
|
second["cve_level"] = cve_level
|
|||
|
|
second["first_cve"] = first_cve
|
|||
|
|
third = {}
|
|||
|
|
# 获取扫描记录
|
|||
|
|
warn_times = 0
|
|||
|
|
repair_times = 0
|
|||
|
|
record_file = self.__path + "/record.json"
|
|||
|
|
if os.path.exists(record_file):
|
|||
|
|
record = json.loads(public.ReadFile(record_file))
|
|||
|
|
for r in record["scan"]:
|
|||
|
|
warn_times += r["times"]
|
|||
|
|
for r in record["repair"]:
|
|||
|
|
repair_times += r["times"]
|
|||
|
|
# with open(self.__path+"/record.json", "r") as f:
|
|||
|
|
# record = json.load(f)
|
|||
|
|
# for r in record["scan"]:
|
|||
|
|
# warn_times += r["times"]
|
|||
|
|
# for r in record["repair"]:
|
|||
|
|
# repair_times += r["times"]
|
|||
|
|
third["warn_times"] = warn_times
|
|||
|
|
third["cve_times"] = warn_times
|
|||
|
|
third["repair_times"] = repair_times
|
|||
|
|
third["last_month"] = (date_obj - datetime.timedelta(days=6)).strftime("%m")
|
|||
|
|
third["last_day"] = (date_obj - datetime.timedelta(days=6)).strftime("%d")
|
|||
|
|
third["month"] = date_obj.strftime("%m")
|
|||
|
|
third["day"] = date_obj.strftime("%d")
|
|||
|
|
third["second_warn"] = "Daily login panel and routine server security risk detection."
|
|||
|
|
if self.cve_num > 0:
|
|||
|
|
third["second_cve"] = "Perform vulnerability scans on system kernel versions and popular applications to identify potential vulnerability risks."
|
|||
|
|
else:
|
|||
|
|
third["second_cve"] = "Vulnerability scanning was conducted on the system kernel version and popular applications, and no vulnerability risks were found."
|
|||
|
|
third["repair"] = "Perform one click repair to solve security issues."
|
|||
|
|
fourth = {}
|
|||
|
|
|
|||
|
|
fourth["warn_num"] = len(self.high_warn_list)
|
|||
|
|
fourth["cve_num"] = self.cve_num
|
|||
|
|
fourth["web_num"] = 41
|
|||
|
|
fourth["sys_num"] = 29
|
|||
|
|
fourth["cve_num"] = 5599
|
|||
|
|
fourth["kernel_num"] = 5
|
|||
|
|
fourth["high_cve"] = str(self.high_cve)
|
|||
|
|
if self.high_cve == 0:
|
|||
|
|
fourth["high_cve"] = "0"
|
|||
|
|
fourth["mid_cve"] = str(self.mid_cve)
|
|||
|
|
if self.mid_cve == 0:
|
|||
|
|
fourth["mid_cve"] = "0"
|
|||
|
|
fourth["low_cve"] = str(self.low_cve)
|
|||
|
|
if self.low_cve == 0:
|
|||
|
|
fourth["low_cve"] = "0"
|
|||
|
|
fourth["high_warn"] = str(self.high_warn)
|
|||
|
|
if self.high_warn == 0:
|
|||
|
|
fourth["high_warn"] = "0"
|
|||
|
|
fourth["mid_warn"] = str(self.mid_warn)
|
|||
|
|
if self.mid_warn == 0:
|
|||
|
|
fourth["mid_warn"] = "0"
|
|||
|
|
fourth["low_warn"] = str(int(self.low_warn))
|
|||
|
|
if self.low_warn == 0:
|
|||
|
|
fourth["low_warn"] = "0"
|
|||
|
|
fifth = {}
|
|||
|
|
num = 1 # 序号
|
|||
|
|
focus_high_list = []
|
|||
|
|
for hwl in self.high_warn_list:
|
|||
|
|
focus_high_list.append(
|
|||
|
|
{
|
|||
|
|
"num": str(num),
|
|||
|
|
"name": str(hwl["msg"]),
|
|||
|
|
"level": "High Risk",
|
|||
|
|
"ps": str(hwl["ps"]),
|
|||
|
|
"tips": '\n'.join(hwl["tips"]),
|
|||
|
|
"auto": self.is_autofix1(hwl["m_name"])
|
|||
|
|
}
|
|||
|
|
)
|
|||
|
|
num += 1
|
|||
|
|
fifth["focus_high_list"] = focus_high_list
|
|||
|
|
focus_mid_list = []
|
|||
|
|
for mwl in self.mid_warn_list:
|
|||
|
|
focus_mid_list.append(
|
|||
|
|
{
|
|||
|
|
"num": num,
|
|||
|
|
"name": mwl["msg"],
|
|||
|
|
"level": "Medium Risk",
|
|||
|
|
"ps": mwl["ps"],
|
|||
|
|
"tips": '\n'.join(mwl["tips"]),
|
|||
|
|
"auto": self.is_autofix1(mwl["m_name"])
|
|||
|
|
}
|
|||
|
|
)
|
|||
|
|
num += 1
|
|||
|
|
fifth["focus_mid_list"] = focus_mid_list
|
|||
|
|
focus_cve_list = []
|
|||
|
|
for cl in self.cve_list:
|
|||
|
|
tmp_cve = {
|
|||
|
|
"num": num,
|
|||
|
|
"name": cl["m_name"],
|
|||
|
|
"level": "High Risk",
|
|||
|
|
"ps": cl["ps"],
|
|||
|
|
"tips": '\n'.join(cl["tips"]),
|
|||
|
|
"auto": "Support"
|
|||
|
|
}
|
|||
|
|
if cl["level"] == 2:
|
|||
|
|
tmp_cve["name"] = cl["m_name"]
|
|||
|
|
tmp_cve["level"] = "Medium Risk"
|
|||
|
|
elif cl["level"] == 1:
|
|||
|
|
tmp_cve["name"] = cl["m_name"]
|
|||
|
|
tmp_cve["level"] = "Low Risk"
|
|||
|
|
focus_cve_list.append(tmp_cve)
|
|||
|
|
num += 1
|
|||
|
|
fifth["focus_cve_list"] = focus_cve_list
|
|||
|
|
sixth = {}
|
|||
|
|
num = 1 # 序号
|
|||
|
|
low_warn_list = []
|
|||
|
|
for lwl in self.low_warn_list:
|
|||
|
|
low_warn_list.append(
|
|||
|
|
{
|
|||
|
|
"num": str(num),
|
|||
|
|
"name": str(lwl["msg"]),
|
|||
|
|
"level": "Low Risk",
|
|||
|
|
"ps": str(lwl["ps"]),
|
|||
|
|
"tips": '\n'.join(lwl["tips"]),
|
|||
|
|
"auto": self.is_autofix1(lwl["m_name"])
|
|||
|
|
}
|
|||
|
|
)
|
|||
|
|
num += 1
|
|||
|
|
sixth["low_warn_list"] = low_warn_list
|
|||
|
|
ignore_list = []
|
|||
|
|
for ig in cve_result["ignore"]:
|
|||
|
|
if "title" in ig:
|
|||
|
|
ignore_list.append(
|
|||
|
|
{
|
|||
|
|
"num": num,
|
|||
|
|
"name": ig["msg"],
|
|||
|
|
"level": "Ignore items",
|
|||
|
|
"ps": ig["ps"],
|
|||
|
|
"tips": '\n'.join(ig["tips"]),
|
|||
|
|
"auto": self.is_autofix(ig)
|
|||
|
|
}
|
|||
|
|
)
|
|||
|
|
elif "cve_id" in ig:
|
|||
|
|
ignore_list.append(
|
|||
|
|
{
|
|||
|
|
"num": num,
|
|||
|
|
"name": ig["cve_id"],
|
|||
|
|
"level": "Ignore items",
|
|||
|
|
"ps": ig["vuln_name"],
|
|||
|
|
"tips": "Upgrade the 【{}】 version to {} or a higher version.".format('、'.join(ig["soft_name"]), ig["vuln_version"]),
|
|||
|
|
"auto": self.is_autofix(ig)
|
|||
|
|
}
|
|||
|
|
)
|
|||
|
|
num += 1
|
|||
|
|
sixth["ignore_list"] = ignore_list
|
|||
|
|
self.final_obj = {"first": first, "second": second, "third": third, "fourth": fourth, "fifth": fifth, "sixth": sixth}
|
|||
|
|
|
|||
|
|
# 添加恶意文件扫描数据
|
|||
|
|
# from projectModelV2 import safecloudModel,scanningModel,safe_detectModel
|
|||
|
|
from projectModelV2.safecloudModel import main as safecloud_Model
|
|||
|
|
from projectModelV2.scanningModel import main as scanning_Model
|
|||
|
|
from projectModelV2.safe_detectModel import main as safe_detect_Model
|
|||
|
|
|
|||
|
|
|
|||
|
|
safecloud = safecloud_Model() # 只获取前1000条恶意文件
|
|||
|
|
malicious_files = safecloud.get_webshell_result({'p': 1, 'limit': 1000})
|
|||
|
|
if malicious_files.get('status',0) == 0:
|
|||
|
|
self.final_obj['malicious_files'] = malicious_files.get('message', {})
|
|||
|
|
else:
|
|||
|
|
self.final_obj['malicious_files'] = {'status': False, 'msg': 'Failed to retrieve malicious files'}
|
|||
|
|
|
|||
|
|
# 启动网站漏洞扫描
|
|||
|
|
website_vulnerabilities = scanning_Model().startScan(' ')
|
|||
|
|
if website_vulnerabilities.get('status', 0) == 0:
|
|||
|
|
self.final_obj['website_vulnerabilities'] = website_vulnerabilities.get('message', {})
|
|||
|
|
self.final_obj['website_vulnerabilities']['status'] = True
|
|||
|
|
else:
|
|||
|
|
self.final_obj['website_vulnerabilities'] = {'status': False, 'msg': 'Failed to retrieve website vulnerabilities'}
|
|||
|
|
|
|||
|
|
# 服务器漏洞检测
|
|||
|
|
try:
|
|||
|
|
server_security_list = self.read_log_file()
|
|||
|
|
server_security = safe_detect_Model().get_safe_count('')
|
|||
|
|
|
|||
|
|
if server_security['status'] == 0:
|
|||
|
|
server_security_count = server_security.get('message', {})
|
|||
|
|
else:
|
|||
|
|
server_security_count = {}
|
|||
|
|
|
|||
|
|
self.final_obj['server_security'] = {'status': True, 'server_security_list': server_security_list, 'server_security_count':server_security_count}
|
|||
|
|
except Exception as e:
|
|||
|
|
self.final_obj['server_security'] = {'status': False, 'server_security_list': [], 'server_security_count': {}}
|
|||
|
|
|
|||
|
|
# 添加总评分
|
|||
|
|
total_score = safecloud.get_safe_overview(' ')
|
|||
|
|
if total_score.get('status', 0) == 0:
|
|||
|
|
self.final_obj['second']['level'] = total_score.get('message', {})['level']
|
|||
|
|
|
|||
|
|
# 合并cve与漏洞风险项
|
|||
|
|
self.final_obj['fourth']['high_warn'] = str(int(self.final_obj['fourth']['high_warn']) + int(self.final_obj['fourth']['high_cve']))
|
|||
|
|
self.final_obj['fourth']['mid_warn'] = str(int(self.final_obj['fourth']['mid_warn']) + int(self.final_obj['fourth']['mid_cve']))
|
|||
|
|
self.final_obj['fourth']['low_warn'] = str(int(self.final_obj['fourth']['low_warn']) + int(self.final_obj['fourth']['low_cve']))
|
|||
|
|
|
|||
|
|
return public.return_message(0,0, self.final_obj)
|
|||
|
|
|
|||
|
|
def read_log_file(self):
|
|||
|
|
import ast
|
|||
|
|
result_list = []
|
|||
|
|
try:
|
|||
|
|
with open("/www/server/panel/data/safe_detect_dict.log", 'r') as file:
|
|||
|
|
for line in file:
|
|||
|
|
# 去除行尾的换行符
|
|||
|
|
line = line.strip()
|
|||
|
|
if line: # 跳过空行
|
|||
|
|
try:
|
|||
|
|
# 将字符串转换为字典
|
|||
|
|
data_dict = ast.literal_eval(line)
|
|||
|
|
result_list.append(data_dict)
|
|||
|
|
except Exception as e:
|
|||
|
|
continue
|
|||
|
|
return result_list
|
|||
|
|
except Exception as e:
|
|||
|
|
return []
|
|||
|
|
|
|||
|
|
def is_autofix(self, warn):
|
|||
|
|
data = json.loads(public.readFile(self.__data))
|
|||
|
|
if "title" in warn:
|
|||
|
|
if warn["m_name"] in data["is_autofix"]:
|
|||
|
|
return "Support"
|
|||
|
|
else:
|
|||
|
|
return "Not Support"
|
|||
|
|
if "cve_id" in warn:
|
|||
|
|
if list(warn["soft_name"].keys())[0] == "kernel":
|
|||
|
|
return "Not Support"
|
|||
|
|
else:
|
|||
|
|
return "Support"
|
|||
|
|
|
|||
|
|
def is_autofix1(self, name):
|
|||
|
|
"""
|
|||
|
|
@name 判断是否可以自动修复
|
|||
|
|
"""
|
|||
|
|
if name in self.auto_fix:
|
|||
|
|
return "Support"
|
|||
|
|
else:
|
|||
|
|
return "Not Support"
|