security_tools/tools/microsoft/microsoft_cvrf_client.rb

71 lines
1.6 KiB
Ruby
Executable file

require 'openapi_client'
require 'date'
require 'json'
require 'pry'
MONTHS = %w[
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
]
BEGIN_YEAR = 2016
CURRENT_YEAR = Date.today.year
YEAR_RANGE = (BEGIN_YEAR..CURRENT_YEAR).to_a
class MicrosoftCvrfClient
attr_accessor :ids, :api_instance, :api_version, :api_key
def initialize(api_instance = OpenapiClient::DefaultApi.new, api_version = 'api_version_example', api_key = 'api_key_example')
@ids = YEAR_RANGE.map { |y| MONTHS.map { |m| "#{y}-#{m}" } }.flatten
@api_instance = api_instance
@api_version = api_version
@api_key = api_key
end
def get_id(id)
api_instance.cvrf_id_get(api_version, api_key, id)
rescue OpenapiClient::ApiError => e
puts "Exception when calling DefaultApi->cvrf_id_get: #{e}"
end
# THREAT STRING SPECIFIC METHODS
# response from get_id()
def cves_threat_strs(response)
response.vulnerability.map do |vuln|
threat_str = get_threat_str_for_vuln(vuln)
split_t_str_arr = split_threat_str(threat_str)
hashed_t_str = threat_str_arr_to_hash(split_t_str_arr)
{ vuln.cve => hashed_t_str }
end
end
def get_threat_str_for_vuln(vuln)
vuln.threats.select { |t| t.type == 1 }.first.description.value
end
def split_threat_str(threat_str)
threat_str.split(";")
end
def threat_str_arr_to_hash(split_threat_str_arr)
arr_of_hash = split_threat_str_arr.map do |e|
spl_str = e.split(":")
k = spl_str[0]
v = spl_str[1]
{ k => v }
end
arr_of_hash.reduce Hash.new, :merge
end
end