mirror of https://github.com/CIRCL/AIL-framework
98 lines
3.0 KiB
Python
98 lines
3.0 KiB
Python
#!/usr/bin/env python3
|
|
# -*-coding:UTF-8 -*
|
|
|
|
'''
|
|
Blueprint Flask: crawler splash endpoints: dashboard, onion crawler ...
|
|
'''
|
|
|
|
import os
|
|
import sys
|
|
import json
|
|
|
|
from flask import Flask, render_template, jsonify, request, Blueprint, redirect, url_for, Response, abort, send_file
|
|
from flask_login import login_required, current_user
|
|
|
|
# Import Role_Manager
|
|
from Role_Manager import login_admin, login_analyst, login_read_only
|
|
|
|
sys.path.append(os.environ['AIL_BIN'])
|
|
##################################
|
|
# Import Project packages
|
|
##################################
|
|
from lib.objects import Cves
|
|
from packages import Date
|
|
|
|
# ============ BLUEPRINT ============
|
|
objects_cve = Blueprint('objects_cve', __name__, template_folder=os.path.join(os.environ['AIL_FLASK'], 'templates/objects/cve'))
|
|
|
|
# ============ VARIABLES ============
|
|
bootstrap_label = ['primary', 'success', 'danger', 'warning', 'info']
|
|
|
|
|
|
# ============ FUNCTIONS ============
|
|
@objects_cve.route("/objects/cve", methods=['GET'])
|
|
@login_required
|
|
@login_read_only
|
|
def objects_cves():
|
|
date_from = request.args.get('date_from')
|
|
date_to = request.args.get('date_to')
|
|
show_objects = request.args.get('show_objects')
|
|
date = Date.sanitise_date_range(date_from, date_to)
|
|
date_from = date['date_from']
|
|
date_to = date['date_to']
|
|
|
|
if show_objects:
|
|
dict_objects = Cves.api_get_cves_meta_by_daterange(date_from, date_to)
|
|
else:
|
|
dict_objects = {}
|
|
|
|
return render_template("CveDaterange.html", date_from=date_from, date_to=date_to,
|
|
dict_objects=dict_objects, show_objects=show_objects)
|
|
|
|
@objects_cve.route("/objects/cve/post", methods=['POST'])
|
|
@login_required
|
|
@login_read_only
|
|
def objects_cves_post():
|
|
date_from = request.form.get('date_from')
|
|
date_to = request.form.get('date_to')
|
|
show_objects = request.form.get('show_objects')
|
|
return redirect(url_for('objects_cve.objects_cves', date_from=date_from, date_to=date_to, show_objects=show_objects))
|
|
|
|
@objects_cve.route("/objects/cve/range/json", methods=['GET'])
|
|
@login_required
|
|
@login_read_only
|
|
def objects_cve_range_json():
|
|
date_from = request.args.get('date_from')
|
|
date_to = request.args.get('date_to')
|
|
date = Date.sanitise_date_range(date_from, date_to)
|
|
date_from = date['date_from']
|
|
date_to = date['date_to']
|
|
return jsonify(Cves.api_get_cves_range_by_daterange(date_from, date_to))
|
|
|
|
@objects_cve.route("/objects/cve/search", methods=['POST'])
|
|
@login_required
|
|
@login_read_only
|
|
def objects_cve_search():
|
|
to_search = request.form.get('object_id')
|
|
|
|
# TODO SANITIZE ID
|
|
# TODO Search all
|
|
cve = Cves.Cve(to_search)
|
|
if not cve.exists():
|
|
abort(404)
|
|
else:
|
|
return redirect(cve.get_link(flask_context=True))
|
|
|
|
@objects_cve.route("/objects/cve/graphline/json", methods=['GET'])
|
|
@login_required
|
|
@login_read_only
|
|
def objects_cve_graphline_json():
|
|
cve_id = request.args.get('id')
|
|
cve = Cves.Cve(cve_id)
|
|
if not cve.exists():
|
|
abort(404)
|
|
return jsonify(Cves.get_cve_graphline(cve_id))
|
|
|
|
# ============= ROUTES ==============
|
|
|