SecurtyMod.psm1


function New-IPRange ($start, $end) {
    # created by Dr. Tobias Weltner, MVP PowerShell
    $ip1 = ([System.Net.IPAddress]$start).GetAddressBytes()
    [Array]::Reverse($ip1)
    $ip1 = ([System.Net.IPAddress]($ip1 -join '.')).Address

    $ip2 = ([System.Net.IPAddress]$end).GetAddressBytes()
    [Array]::Reverse($ip2)
    $ip2 = ([System.Net.IPAddress]($ip2 -join '.')).Address

    for ($x=$ip1; $x -le $ip2; $x++) {
        $ip = ([System.Net.IPAddress]$x).GetAddressBytes()
        [Array]::Reverse($ip)
        $ip -join '.'
    }
}

<#
.Synopsis
   Short description
.DESCRIPTION
   Long description
.EXAMPLE
   Example of how to use this cmdlet
.EXAMPLE
   Another example of how to use this cmdlet
#>
function Invoke-PingScan
{
    [CmdletBinding()]
    [OutputType([int])]
    Param
    (
        # Param1 help description
        [Parameter(Mandatory=$true,
                   ValueFromPipelineByPropertyName=$true,
                   Position=0)]
        [string]$StartIP,

        # Param2 help description
        [Parameter(Mandatory=$true,
                   ValueFromPipelineByPropertyName=$true,
                   Position=1)]
        [string]$EndIP,

        # Param3 help description
        [Parameter(
                   ValueFromPipelineByPropertyName=$true,
                   Position=2)]
        [int]$TimeOut = 100
    )

    Begin
    {
    }
    Process
    {
        # Get list of IPs to ping
        $ips = New-IPRange $StartIP $EndIP
        $ip_num = $ips.count
        # Instansiate a ping object
        $ping = New-Object System.Net.NetworkInformation.Ping
        $count = 1
        $progress =0
		$results = @()
        foreach ($ip in $ips)
        {
          
          $results += $ping.Send($ip, $TimeOut)  | where {$_.Status -eq "Success"} | Select-Object Address 

          # Provide progress, specially usefull in large reports
          $record_progress = [int][Math]::Ceiling((($progress / $ip_num) * 100))
          Write-Progress -Activity "Ping Scan" -PercentComplete $record_progress -Status "Pinging hosts - $record_progress%" -Id 1;
          $progress++
        }
    }
    End
    {
		$results
    }
}


<#
.Synopsis
   Short description
.DESCRIPTION
   Long description
.EXAMPLE
   Returns all records in the XML file
.EXAMPLE
   Returns the objects for Service Records
   Import-DNSReconXML .\output.xml -Filter SRV
.EXAMPLE
   Returns the objects for A, AAAA and PTR Records
   Import-DNSReconXML .\output.xml -Filter A,AAAA,PTR
#>
function Import-DNSReconXML
{
    [CmdletBinding()]
    Param
    (
        # XML File generated by DNSRecon
        [Parameter(Mandatory=$true,
                   ValueFromPipelineByPropertyName=$true,
                   Position=0)]
        [ValidateScript({Test-Path $_})] 
        $XMLFile,

        # DNS RR Records to query for
        [Parameter(Mandatory=$false,
                   ValueFromPipelineByPropertyName=$true,
                   Position=1)]
        [ValidateSet("A","AAAA","NS","TXT","SPF","MX","SOA","SRV","PTR")] 
        $Filter
    )

    Begin
    {
        [Array]$dnsrecords = @()
        if ($Filter -eq $null)
        {
            $Filter = "A","AAAA","NS","TXT","SPF","MX","SOA","SRV","PTR"   
        }

    }
    Process
    {
        [xml]$dnsr = Get-Content $XMLFile
        # How many servers
        $record_count = $dnsr.records.record.Length
        # processed server count
        $i = 0;
        # Parse each record
        foreach ($record in $dnsr.records.record) {
            $record_progress = [int][Math]::Ceiling((($i / $record_count) * 100))
            Write-Progress -Activity "Processing XML" -PercentComplete $record_progress -Status "Processing records - $record_progress%" -Id 1;
            
            if ($Filter -contains $record.type) {

                # Check each of the record types
                switch -Regex ($record.type)
                {
                    # Parse SRV records
                    "SRV" 
                    {
                        $DNSRObject = New-Object PSObject 
                        $DNSRObject | add-member Noteproperty Type         $record.type
                        $DNSRObject | add-member Noteproperty Name         $record.name
                        $DNSRObject | add-member Noteproperty Target       $record.target
                        $DNSRObject | add-member Noteproperty Address      $record.address
                        $DNSRObject | add-member Noteproperty Port         $record.port
                        $DNSRObject | add-member Noteproperty ZoneTransfer $record.zone_server
                        $DNSRObject | add-member Noteproperty Text         $null
                        
                        $dnsrecords += $DNSRObject
                    }

                    # Parse NS records
                    "NS" 
                    {
                        $DNSRObject = New-Object PSObject 
                        $DNSRObject | add-member Noteproperty Type         $record.type
                        $DNSRObject | add-member Noteproperty Name         $record.target
                        $DNSRObject | add-member Noteproperty Target       $null
                        $DNSRObject | add-member Noteproperty Address      $record.address
                        $DNSRObject | add-member Noteproperty Port         $null
                        $DNSRObject | add-member Noteproperty ZoneTransfer $record.zone_server
                        $DNSRObject | add-member Noteproperty Text         $null
                   
                        $dnsrecords += $DNSRObject
                    }

                    # Parse AAA records
                    "AAAA|A|PTR"
                    {
                        $DNSRObject = New-Object PSObject 
                        $DNSRObject | add-member Noteproperty Type         $record.type
                        $DNSRObject | add-member Noteproperty Name         $record.name
                        $DNSRObject | add-member Noteproperty Target       $record.target
                        $DNSRObject | add-member Noteproperty Address      $record.address
                        $DNSRObject | add-member Noteproperty Port         $record.port
                        $DNSRObject | add-member Noteproperty ZoneTransfer $record.zone_server
                        $DNSRObject | add-member Noteproperty Text         $null

                        $dnsrecords += $DNSRObject
                    }

                    # Parse MX records
                    "MX"
                    {
                        $DNSRObject = New-Object PSObject 
                        $DNSRObject | add-member Noteproperty Type         $record.type
                        $DNSRObject | add-member Noteproperty Name         $record.exchange
                        $DNSRObject | add-member Noteproperty Target       $null
                        $DNSRObject | add-member Noteproperty Address      $record.address
                        $DNSRObject | add-member Noteproperty Port         $record.port
                        $DNSRObject | add-member Noteproperty ZoneTransfer $record.zone_server
                        $DNSRObject | add-member Noteproperty Text         $null

                        $dnsrecords += $DNSRObject
                    }

                    # Parse SOA records
                    "SOA" 
                    {
                        $DNSRObject = New-Object PSObject 
                        $DNSRObject | add-member Noteproperty Type         $record.type
                        $DNSRObject | add-member Noteproperty Name         $record.mname
                        $DNSRObject | add-member Noteproperty Target       $null
                        $DNSRObject | add-member Noteproperty Address      $record.address
                        $DNSRObject | add-member Noteproperty Port         $record.port
                        $DNSRObject | add-member Noteproperty ZoneTransfer $record.zone_server
                        $DNSRObject | add-member Noteproperty Text         $null

                        $dnsrecords += $DNSRObject
                    }
        
                    "TXT|SPF"
                    {
                        $DNSRObject = New-Object PSObject 
                        $DNSRObject | add-member Noteproperty Type         $record.type
                        $DNSRObject | add-member Noteproperty Name         $record.name
                        $DNSRObject | add-member Noteproperty Target       $record.target
                        $DNSRObject | add-member Noteproperty Address      $null
                        $DNSRObject | add-member Noteproperty Port         $null
                        $DNSRObject | add-member Noteproperty ZoneTransfer $record.zone_server
                        $DNSRObject | add-member Noteproperty Text         $record.text

                        $dnsrecords += $DNSRObject
                    }
                }
            }
            $i++
        }
    }
    End
    {
        $dnsrecords
    }
}


<#
.Synopsis
   Short description
.DESCRIPTION
   Long description
.EXAMPLE
   Return object with Profile Configuration info.
   Import-NessusReport .\report.nessus -InfoType ProfileInfo
.EXAMPLE
   Returns objects for each of the hosts scanned with Properties and Report Items for each.
   Import-NessusReport .\report.nessus
.EXAMPLE
   Looks for hosts for which a a Vulnerability was found that a Metasploit exploit exists and return the IP and Name of the Module.
   Import-NessusReport .\repport.nessus | foreach {$_.reportitems} | where {$_.metasploit -ne $null} | foreach { "$($_.host) $($_.metasploitmodule)"}

#>
function Import-NessusReport
{
    [CmdletBinding()]
    [OutputType([int])]
    Param
    (
        # Nessus Version 2 report file
        [Parameter(Mandatory=$true,
                   ValueFromPipelineByPropertyName=$true,
                   Position=0)]
        [ValidateScript({Test-Path $_})] 
        $NessusFile,

        # Type of Information to return
        [Parameter(Mandatory=$false,
                   ValueFromPipelineByPropertyName=$true,
                   Position=1)]
        [ValidateSet("ProfileInfo","Vulnerabilities")] 
        $InfoType = "Vulnerabilities"
    )

    Begin
    {
        [xml]$nessus = Get-Content $NessusFile
    }
    Process
    {
        if ($InfoType -eq "Vulnerabilities")
        {
            # How many servers
            $record_count = $nessus.NessusClientData_v2.Report.ReportHost.Length
            # processed host count
            $i = 0;
            # Declare Array that will be returned with the objects
            $reported_hosts = @()
            # for each of the hosts reported
            $nessus.NessusClientData_v2.Report.ReportHost | foreach {
                # Declare variables for properties that will form the object
                $hproperties = @{}
                $host_properties = @{}
                $vulns = @()
                $hostip = $_.name

                # Gathering properties for each host
                $_.HostProperties.tag | foreach {$hproperties += @{$_.name = $_."#text"}}
    
                # Set the Host and Host Properties object properties
                $host_properties += @{Host = $hostip.Trim()}
                $host_properties += @{Host_Properties = New-Object PSObject -Property $hproperties}

                # Collect vulnerable information for each host
                $_.ReportItem | where {$_.pluginID -ne "0"} | foreach {
                    
                    $vuln_properties = New-Object PSObject
                    $vuln_properties | add-member Noteproperty  Host                  $hostip.Trim()
                    $vuln_properties | add-member Noteproperty  Port                  $_.Port
                    $vuln_properties | add-member Noteproperty  ServiceName           $_.svc_name
                    $vuln_properties | add-member Noteproperty  Severity              $_.severity
                    $vuln_properties | add-member Noteproperty  PluginID              $_.pluginID
                    $vuln_properties | add-member Noteproperty  PluginName            $_.pluginName
                    $vuln_properties | add-member Noteproperty  PluginFamily          $_.pluginFamily
                    $vuln_properties | add-member Noteproperty  RiskFactor            $_.risk_factor
                    $vuln_properties | add-member Noteproperty  Synopsis              $_.synopsis
                    $vuln_properties | add-member Noteproperty  Description           $_.description
                    $vuln_properties | add-member Noteproperty  Solution              $_.solution
                    $vuln_properties | add-member Noteproperty  PluginOutput          $_.plugin_output
                    $vuln_properties | add-member Noteproperty  SeeAlso               $_.see_also
                    $vuln_properties | add-member Noteproperty  CVE                   $_.cve
                    $vuln_properties | add-member Noteproperty  BID                   $_.bid
                    $vuln_properties | add-member Noteproperty  ExternaReference      $_.xref
                    $vuln_properties | add-member Noteproperty  PatchPublicationDate  $_.patch_publication_date
                    $vuln_properties | add-member Noteproperty  VulnPublicationDate   $_.vuln_publication_date
                    $vuln_properties | add-member Noteproperty  Exploitability        $_.exploitability_ease
                    $vuln_properties | add-member Noteproperty  ExploitAvailable      $_.exploit_available
                    $vuln_properties | add-member Noteproperty  CANVAS                $_.exploit_framework_canvas
                    $vuln_properties | add-member Noteproperty  Metasploit            $_.exploit_framework_metasploit
                    $vuln_properties | add-member Noteproperty  COREImpact            $_.exploit_framework_core
                    $vuln_properties | add-member Noteproperty  MetasploitModule      $_.metasploit_name
                    $vuln_properties | add-member Noteproperty  CANVASPackage         $_.canvas_package
                    $vuln_properties | add-member Noteproperty  CVSSVector            $_.cvss_vector
                    $vuln_properties | add-member Noteproperty  CVSSBase              $_.cvss_base_score
                    $vuln_properties | add-member Noteproperty  CVSSTemporal          $_.cvss_temporal_score
                    $vuln_properties | add-member Noteproperty  PluginType            $_.plugin_type
                    $vuln_properties | add-member Noteproperty  PluginVersion         $_.plugin_version
                    
                   
                    $vulns += $vuln_properties
                }
                $host_properties += @{ReportItems = $vulns}
    
                # Create each host object
                $reported_vuln = New-Object PSObject -Property $host_properties
                $reported_hosts += $reported_vuln

                # Provide progress, specially usefull in large reports
                $record_progress = [int][Math]::Ceiling((($i / $record_count) * 100))
                Write-Progress -Activity "Processing Vulnerability Report" -PercentComplete $record_progress -Status "Processing records - $record_progress%" -Id 1;
                $i++
            }
            $reported_hosts
        }
        else
        {
            $prefs = @()
            $ips_plugins =@()
            # Get Server Settings
            $nessus.NessusClientData_v2.Policy.Preferences.ServerPreferences.preference | % { $ServerSettings = @{} } { $ServerSettings += @{$_.name = $_.value} }
            
            
            # Policy Name
            $polname = $nessus.NessusClientData_v2.Policy.policyName
            
            # Get policy settings
            $prefobj = $nessus.NessusClientData_v2.Policy.Preferences.PluginsPreferences.ChildNodes
            foreach ($pref in $prefobj) 
            {
                $pref_property = @{}
                Get-Member -InputObject $pref -MemberType Property | foreach { $pref_property += @{$_.name = $pref.($_.name.trim()) }
                $prefs += New-Object PSObject -Property $pref_property
                }
            }
            
            # Get selected Plugin Families
            $nessus.NessusClientData_v2.Policy.FamilySelection.FamilyItem |% { $families = @{} } { $families += @{$_.familyname = $_.value} }

            # Individual Plugin Selection
            $ips = $nessus.NessusClientData_v2.Policy.IndividualPluginSelection.PluginItem 
            foreach ($plugin in $ips)
            {
                $plugin_property = @{}
                Get-Member -InputObject $plugin -MemberType Property | foreach { $plugin_property += @{$_.name = $plugin.($_.name.trim()) }
                $ips_plugins += New-Object PSObject -Property $plugin_property
                }
            }

        }
        $policyobj = New-Object PSObject
        $policyobj | add-member Noteproperty PolicyName                $polname
        $policyobj | add-member Noteproperty Preferences               $prefs
        $policyobj | add-member Noteproperty PluginFamilies            $families
        $policyobj | add-member Noteproperty IndividualPluginSelection $ips_plugins
        $policyobj | add-member Noteproperty ServerSettings            $ServerSettings
        $policyobj
    }
    End
    {
    }
}

function Confirm-IsAdmin {
    (whoami /all | Select-String S-1-16-12288) -ne $null
}

Export-ModuleMember -Function Import-DNSReconXML
Export-ModuleMember -Function Import-NessusReport
Export-ModuleMember -Function Invoke-PingScan
Export-ModuleMember -Function Confirm-IsAdmin