First commit

parsing/__init__.py

@@ -0,0 +1 @@
+#!/usr/bin/env python3

parsing/base.py

@@ -0,0 +1,21 @@
+import re
+from json import dumps
+
+class ParsingBase:
+    def __init__(self, objects, audit):
+        pass
+
+    def runParsing(self):
+        pass
+   
+    def _parseFile(self, fdata):
+        pass
+
+    def _parsingFile(self, line, item) -> dict:
+        """
+            This function parse the line and try to find the item in it
+        """
+        pass
+
+    def getResults(self) -> dict:
+        pass

parsing/sysctl.py

@@ -0,0 +1,97 @@
+import re
+from json import dumps
+from parsing.base import ParsingBase
+
+class Parsing(ParsingBase):
+    def __init__(self, objects, audit):
+        self._parsing = dict()
+        self._results = dict()
+        self._objects = objects
+        self._audit = audit
+
+    def runParsing(self):
+        for audit in self._audit:
+            if audit['audit'] == 'file':
+                with open(audit['value'], 'rb') as fdata:
+                    self._parseFile(fdata)
+            if audit['audit'] == 'process':
+                pass
+   
+    def _parseFile(self, fdata):
+        data = fdata.read()
+        lines = data.splitlines()
+        numLines = 1
+
+        self._constructResults(filename='/etc/sysctl.conf')
+
+        for line in lines:
+            line = line.decode("utf-8")
+
+            for obj in self._objects['sysctl']:
+                result = self._parsingFile(line, obj)
+                if len(result) == 0:
+                    pass
+                # If the flag is found
+                else:
+                    # And if the current value is not setted corectly for the vulnerability
+                    print(result)
+                    
+                    self._results[obj['flag']].append({
+                        'lineNumber': numLines,
+                        'value': obj['value'],
+                        'audit': 'failed' # Or success
+                    })
+                    
+                    if result['value'] != result['current_value']:
+                        print(f"You must change the value to {obj['value']} for fixing the vulnerabilities")
+
+            numLines += 1
+        print(self._results)
+
+    def _parsingFile(self, line, obj) -> dict:
+        """
+            This function parse the line and try to find the item in it
+        """
+        result = dict()
+
+        groupLine = re.search(obj['flag'], line)
+        if groupLine:
+            # Avoid the comment
+            if not line.startswith('#'):
+                sLine = line.split('=')
+                flag = sLine[0]
+                value = int(sLine[1].strip(''))
+                #print(sLine)
+
+                result['found'] = flag
+                result['current_value'] = value
+                result['value'] = obj['value']
+
+                if value != obj['value']:
+                    print("Need to change the value")
+                    print(sLine)
+
+        return result
+
+    def _constructResults(self, filename):
+        """
+            Construct dictionary for result of the tests
+            Each entry contains:
+            Key:
+              - filename: filename of the test
+              - line: line of the test
+              - parse: Display the line where the vulnerabilites has been found
+              - description: description of the vulnerabilities
+              - level: high, medium or low
+        """
+        self._results['filename'] = filename
+
+        for sysctl in self._objects['sysctl']:
+            self._results[sysctl['flag']] = list()
+        print(self._results)
+        print("")
+
+    def getResults(self) -> dict:
+        result = dict()
+
+        return result