v4.5 Demo initial commit
This commit is contained in:
DaStra3003
@@ -0,0 +1,658 @@
|
||||
from django.contrib.auth.models import User
|
||||
from django.http import HttpResponse
|
||||
from .models import *
|
||||
from .db_create import *
|
||||
from .db_read import *
|
||||
from .db_delete import *
|
||||
from .db_validate import *
|
||||
from .user_funcs import *
|
||||
from .db_read import (
|
||||
get_all_binwalk_raw_data_from_file,
|
||||
get_all_strings_raw_data_from_file,
|
||||
get_strings_by_type,
|
||||
get_all_binwalk_analyzed_data_from_file,
|
||||
get_all_strings_analyzed_data_from_file,
|
||||
get_critical_strings_by_severity,
|
||||
get_raw_data_by_file_extended
|
||||
)
|
||||
|
||||
|
||||
import os
|
||||
import json
|
||||
|
||||
|
||||
def get_all_files(folder_path):
|
||||
try:
|
||||
files = [f for f in os.listdir(folder_path) if os.path.isfile(os.path.join(folder_path, f))]
|
||||
return files
|
||||
except Exception as e:
|
||||
print(f"An error occurred: {e}")
|
||||
return []
|
||||
|
||||
|
||||
|
||||
from rest_framework.views import APIView
|
||||
from rest_framework.response import Response
|
||||
from rest_framework import status
|
||||
from django.core.serializers import serialize
|
||||
from rest_framework import serializers
|
||||
from django.http import JsonResponse
|
||||
|
||||
|
||||
class ManufacturerSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = Manufacturer
|
||||
fields = ['id', 'name', 'created']
|
||||
|
||||
|
||||
class DeviceSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = Device
|
||||
fields = ['id', 'device_name', 'created']
|
||||
|
||||
|
||||
class DeviceTypeSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = DeviceType
|
||||
fields = ['id', 'device_type']
|
||||
|
||||
|
||||
class FileSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = File
|
||||
fields = ['file_id', 'filename', 'upload_time', 'status', 'device_id']
|
||||
|
||||
|
||||
class HashSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = File
|
||||
fields = ['hash_id', 'hash_value', 'cracked', 'cracked_value', 'executed_at']
|
||||
|
||||
|
||||
class ProductSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = Product
|
||||
fields = ['id', 'manufacturer', 'device_type', 'product_name', 'created']
|
||||
|
||||
|
||||
class FirmwareSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = Firmware
|
||||
fields = ['id', 'product', 'version', 'created']
|
||||
|
||||
|
||||
class UserSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = User
|
||||
fields = ['username', 'password', 'role']
|
||||
|
||||
|
||||
class LoginSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = User
|
||||
fields = ['username', 'password']
|
||||
|
||||
|
||||
class IdSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
model = User
|
||||
fields = ['id']
|
||||
|
||||
|
||||
class ExampleAPI(APIView):
|
||||
def get(self, request, pk, py, *args, **kwargs):
|
||||
queryset = get_device_type_by_id(pk)
|
||||
queryset = get_all_device_types()
|
||||
#queryset = get_files_by_device(pk)
|
||||
return Response(queryset)
|
||||
|
||||
def post(self, request, pk, py):
|
||||
received_data = request.data
|
||||
response_data = {"received": received_data}
|
||||
return Response(response_data, status=status.HTTP_201_CREATED)
|
||||
|
||||
|
||||
class CreateFirmware(APIView):
|
||||
def post(self, request):
|
||||
serializer = FirmwareSerializer(data=request.data)
|
||||
if serializer.is_valid():
|
||||
product_id = serializer.validated_data.get("product").id
|
||||
version = serializer.validated_data.get("version")
|
||||
response = create_firmware(product_id, version)
|
||||
return response
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class CreateProduct(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
serializer = ProductSerializer(data=request.data)
|
||||
if serializer.is_valid():
|
||||
manufacturer_id = serializer.validated_data.get("manufacturer").id
|
||||
device_type_id = serializer.validated_data.get("device_type").id
|
||||
product_name = serializer.validated_data.get("product_name")
|
||||
response = create_product(manufacturer_id, device_type_id, product_name)
|
||||
return response
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class CreateDeviceType(APIView):
|
||||
def post(self, request):
|
||||
serializer = DeviceTypeSerializer(data=request.data)
|
||||
if serializer.is_valid():
|
||||
device_type = serializer.data.get("device_type")
|
||||
respone = create_device_type(device_type)
|
||||
return respone
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class CreateManufacturer(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
serializer = ManufacturerSerializer(data=request.data)
|
||||
if serializer.is_valid():
|
||||
name = serializer.data.get("name")
|
||||
response = create_manufacturer(name)
|
||||
return response
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class CreateDeviceSerializer(serializers.Serializer):
|
||||
device_type_id = serializers.IntegerField()
|
||||
device_name = serializers.CharField(max_length=255)
|
||||
serial = serializers.CharField(max_length=255)
|
||||
manufacturer_id = serializers.IntegerField()
|
||||
comment = serializers.CharField(max_length=255, required=False, allow_blank=True)
|
||||
|
||||
def create(self, validated_data):
|
||||
return validated_data
|
||||
|
||||
|
||||
class CreateDevice(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
serializer = CreateDeviceSerializer(data=request.data)
|
||||
if serializer.is_valid():
|
||||
device_type_id = serializer.validated_data.get("device_type_id")
|
||||
device_name = serializer.validated_data.get("device_name")
|
||||
serial = serializer.validated_data.get("serial")
|
||||
manufacturer_id = serializer.validated_data.get("manufacturer_id")
|
||||
comment = serializer.validated_data.get("comment", None)
|
||||
response = create_new_device(manufacturer_id, device_type_id, device_name, serial, comment)
|
||||
return response
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class CreateFileWithFirmware(APIView):
|
||||
def post(self, request):
|
||||
device_id = request.data.get('device_id')
|
||||
firmware_version = request.data.get('firmware_version')
|
||||
filename = request.data.get('filename')
|
||||
ip_address = request.data.get('ip_address')
|
||||
file_status = request.data.get('status')
|
||||
|
||||
response = create_file_with_firmware_version(device_id, firmware_version, filename, ip_address, file_status)
|
||||
|
||||
return response
|
||||
|
||||
|
||||
class FilesForDevice(APIView):
|
||||
def get(self, request, pk, *args, **kwargs):
|
||||
device_queryset = Device.objects.prefetch_related('file_set').get(device_id=pk)
|
||||
device_serializer = DeviceSerializer(device_queryset)
|
||||
file_serializer = FileSerializer(device_queryset.file_set.all(), many=True)
|
||||
response_data = {
|
||||
'device': device_serializer.data,
|
||||
'files': file_serializer.data
|
||||
}
|
||||
return Response(response_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class HashesFromFile(APIView):
|
||||
def get(self, request, pk, *args, **kwargs):
|
||||
file_queryset = Device.objects.prefetch_related('file_set').get(file_id=pk)
|
||||
file_serializer = FileSerializer(file_queryset)
|
||||
hash_serializer = FileSerializer(file_queryset.file_set.all(), many=True)
|
||||
response_data = {
|
||||
'file': file_serializer.data,
|
||||
'hashes': hash_serializer.data
|
||||
}
|
||||
return Response(response_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetObject(APIView):
|
||||
def get(self, request, model_name, *args, **kwargs):
|
||||
model_class = globals().get(model_name)
|
||||
if not model_class:
|
||||
return Response({'status': 'error', 'message': 'Invalid model name'}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
filter_kwargs = request.query_params.dict()
|
||||
select_related_fields = request.query_params.getlist('select_related')
|
||||
|
||||
try:
|
||||
data = generic_get_objects(model_class, filter_kwargs, select_related_fields)
|
||||
return Response({'status': 'success', 'data': data}, status=status.HTTP_200_OK)
|
||||
except ObjectDoesNotExist as e:
|
||||
return Response({'status': 'error', 'message': str(e)}, status=status.HTTP_404_NOT_FOUND)
|
||||
except Exception as e:
|
||||
return Response({'status': 'error', 'message': 'An error occurred'},
|
||||
status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
|
||||
|
||||
class GetManufacturers(APIView):
|
||||
def get(self, request, *args, **kwargs):
|
||||
manufacturers = get_all_manufacturers()
|
||||
return Response(manufacturers, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetDeviceTypes(APIView):
|
||||
def get(self, request, *args, **kwargs):
|
||||
devicetypes = get_all_device_types()
|
||||
return Response(devicetypes, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class RegisterUser(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
serializer = UserSerializer(data=request.data)
|
||||
if serializer.is_valid():
|
||||
username = serializer.validated_data.get("username")
|
||||
password = serializer.validated_data.get("password")
|
||||
if serializer.validated_data.get("role") == 'admin':
|
||||
is_superuser = True
|
||||
is_staff = True
|
||||
else:
|
||||
is_superuser = False
|
||||
is_staff = True
|
||||
response = register_user(request, username, password, is_superuser, is_staff)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_201_CREATED)
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class ListUser(APIView):
|
||||
def get(self, request,*args, **kwargs):
|
||||
return Response(list_users(request), status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class DeleteUser(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
user_id = request.data.get("id")
|
||||
if not user_id:
|
||||
return Response({"error": "Missing user_id"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
user_id = int(user_id)
|
||||
except ValueError:
|
||||
return Response({"error": "Invalid user_id"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
response = delete_user(request, user_id)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class Login(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
username = request.data.get("username")
|
||||
password = request.data.get("password")
|
||||
|
||||
if not username or not password:
|
||||
return Response({"error": "Missing required fields"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
response = login_user(request, username, password)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_200_OK)
|
||||
|
||||
class SetPassword(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
user_id = request.data.get("user_id")
|
||||
new_password = request.data.get("new_password")
|
||||
|
||||
if not user_id or not new_password:
|
||||
return Response({"error": "Missing required fields"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
user_id = int(user_id)
|
||||
except ValueError:
|
||||
return Response({"error": "Invalid user_id"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
response = set_password(request, user_id, new_password)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_200_OK)
|
||||
except ValidationError as e:
|
||||
return Response({"error": str(e)}, status=status.HTTP_400_BAD_REQUEST)
|
||||
except Exception as e:
|
||||
return Response({"error": "An error occurred"}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
|
||||
|
||||
class ChangePassword(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
user_id = request.data.get("user_id")
|
||||
new_password = request.data.get("new_password")
|
||||
|
||||
if not user_id or not new_password:
|
||||
return Response({"error": "Missing required fields"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
user_id = int(user_id)
|
||||
except ValueError:
|
||||
return Response({"error": "Invalid user_id"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
response = change_password(request, user_id, new_password)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_200_OK)
|
||||
except ValidationError as e:
|
||||
return Response({"error": str(e)}, status=status.HTTP_400_BAD_REQUEST)
|
||||
except Exception as e:
|
||||
return Response({"error": "An error occurred"}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
|
||||
|
||||
class RegisterUser(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
username = request.data.get("username")
|
||||
password = request.data.get("password")
|
||||
role = request.data.get("role")
|
||||
|
||||
if not username or not password or not role:
|
||||
return Response({"error": "Missing required fields"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
if role == 'admin':
|
||||
is_superuser = True
|
||||
is_staff = True
|
||||
else:
|
||||
is_superuser = False
|
||||
is_staff = True
|
||||
|
||||
response = register_user(request, username, password, is_superuser, is_staff)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_201_CREATED)
|
||||
|
||||
|
||||
class Logout(APIView):
|
||||
def post(self, request, *args, **kwargs):
|
||||
user_id = request.data.get("user_id")
|
||||
|
||||
if not user_id:
|
||||
return Response({"error": "Missing user_id"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
user_id = int(user_id)
|
||||
except ValueError:
|
||||
return Response({"error": "Invalid user_id"}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
response = logout_user(request, user_id)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_200_OK)
|
||||
except ValidationError as e:
|
||||
return Response({"error": str(e)}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
|
||||
class DeleteUserView(APIView):
|
||||
def delete(self, request, user_id, *args, **kwargs):
|
||||
try:
|
||||
response = delete_user(request, user_id)
|
||||
if isinstance(response, JsonResponse):
|
||||
return response
|
||||
return Response(response, status=status.HTTP_200_OK)
|
||||
except ValidationError as e:
|
||||
return Response({"error": str(e)}, status=status.HTTP_400_BAD_REQUEST)
|
||||
except Exception as e:
|
||||
return Response({"error": "An error occurred"}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
|
||||
|
||||
class GetDevices(APIView):
|
||||
def get(self, request, *args, **kwargs):
|
||||
devices = get_all_devices()
|
||||
return Response(devices, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetDeviceById(APIView):
|
||||
def get(self, request, device_id, *args, **kwargs):
|
||||
device = get_device_by_id(device_id)
|
||||
return Response(device, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetFileByDevice(APIView):
|
||||
def get(self, request, device_id, *args, **kwargs):
|
||||
files = get_files_by_device(device_id)
|
||||
return Response(files, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetRawHashesByFile(APIView):
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
hash_data = get_all_hash_raw_data_from_file(file_id)
|
||||
if isinstance(hash_data, JsonResponse):
|
||||
return hash_data
|
||||
return Response(hash_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetRawUrlsByFile(APIView):
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
url_data = get_all_url_raw_data_from_file(file_id)
|
||||
if isinstance(url_data, JsonResponse):
|
||||
return url_data
|
||||
return Response(url_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetAnalyzedUrlsByFile(APIView):
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
url_data = get_all_url_analyzed_data_from_file(file_id)
|
||||
if isinstance(url_data, JsonResponse):
|
||||
return url_data
|
||||
return Response(url_data, status=status.HTTP_200_OK)
|
||||
|
||||
class GetAnalyzedDataByFile(APIView):
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
url_data = get_analyzed_data_by_file(file_id)
|
||||
if isinstance(url_data, JsonResponse):
|
||||
return url_data
|
||||
return Response(url_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetAnalyzedUrlsByRawUrlId(APIView):
|
||||
def get(self, request, raw_url_id, *args, **kwargs):
|
||||
url_data = get_all_url_analyzed_by_raw_url_id(raw_url_id)
|
||||
if isinstance(url_data, JsonResponse):
|
||||
return url_data
|
||||
return Response(url_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetAnalyzedHashesByRawUrlId(APIView):
|
||||
def get(self, request, raw_hash_id, *args, **kwargs):
|
||||
url_data = get_all_hash_analyzed_by_raw_hash_id(raw_hash_id)
|
||||
if isinstance(url_data, JsonResponse):
|
||||
return url_data
|
||||
return Response(url_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class DeleteDevice(APIView):
|
||||
def delete(self, request, device_id, *args, **kwargs):
|
||||
deleteted = delete_device(device_id)
|
||||
return Response(deleteted, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class DeleteManufacturer(APIView):
|
||||
def delete(self, request, manufacturer_id, *args, **kwargs):
|
||||
deleteted = delete_manufacturer(manufacturer_id)
|
||||
return Response(deleteted, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class DeleteDeviceType(APIView):
|
||||
def delete(self, request, device_type_id, *args, **kwargs):
|
||||
deleted = delete_device_type(device_type_id)
|
||||
return Response(deleted, status=status.HTTP_200_OK)
|
||||
|
||||
class GetBinwalkRawByFile(APIView):
|
||||
"""
|
||||
GET /api/get_binwalk_raw_data_from_file/<file_id>
|
||||
Returns all Binwalk raw data for a file.
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
binwalk_data = get_all_binwalk_raw_data_from_file(file_id)
|
||||
if isinstance(binwalk_data, JsonResponse):
|
||||
return binwalk_data
|
||||
return Response(binwalk_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetStringsRawByFile(APIView):
|
||||
"""
|
||||
GET /api/get_strings_raw_data_from_file/<file_id>
|
||||
Returns all Strings raw data for a file.
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
strings_data = get_all_strings_raw_data_from_file(file_id)
|
||||
if isinstance(strings_data, JsonResponse):
|
||||
return strings_data
|
||||
return Response(strings_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetStringsByType(APIView):
|
||||
"""
|
||||
GET /api/get_strings_by_type/<file_id>/<string_type>
|
||||
Returns strings filtered by type (url, ip, path, etc.).
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, string_type, *args, **kwargs):
|
||||
strings_data = get_strings_by_type(file_id, string_type)
|
||||
if isinstance(strings_data, JsonResponse):
|
||||
return strings_data
|
||||
return Response(strings_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetBinwalkAnalyzedByFile(APIView):
|
||||
"""
|
||||
GET /api/get_binwalk_analyzed_data_from_file/<file_id>
|
||||
Returns analyzed Binwalk data for a file.
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
binwalk_data = get_all_binwalk_analyzed_data_from_file(file_id)
|
||||
if isinstance(binwalk_data, JsonResponse):
|
||||
return binwalk_data
|
||||
return Response(binwalk_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetStringsAnalyzedByFile(APIView):
|
||||
"""
|
||||
GET /api/get_strings_analyzed_data_from_file/<file_id>
|
||||
Returns analyzed Strings data for a file.
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
strings_data = get_all_strings_analyzed_data_from_file(file_id)
|
||||
if isinstance(strings_data, JsonResponse):
|
||||
return strings_data
|
||||
return Response(strings_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetCriticalStrings(APIView):
|
||||
"""
|
||||
GET /api/get_critical_strings/<file_id>?severity=medium
|
||||
Returns critical strings filtered by severity.
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
min_severity = request.query_params.get('severity', 'medium')
|
||||
strings_data = get_critical_strings_by_severity(file_id, min_severity)
|
||||
if isinstance(strings_data, JsonResponse):
|
||||
return strings_data
|
||||
return Response(strings_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class GetRawDataExtended(APIView):
|
||||
"""
|
||||
GET /api/get_raw_data_extended/<file_id>
|
||||
Returns ALL raw data including firmware data.
|
||||
"""
|
||||
|
||||
def get(self, request, file_id, *args, **kwargs):
|
||||
raw_data = get_raw_data_by_file_extended(file_id)
|
||||
if isinstance(raw_data, JsonResponse):
|
||||
return raw_data
|
||||
return Response(raw_data, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
class UploadFirmware(APIView):
|
||||
"""
|
||||
POST /api/upload_firmware
|
||||
Uploads a .bin firmware and starts automatic analysis.
|
||||
Body: {
|
||||
"device_id": int,
|
||||
"firmware_version": str,
|
||||
"filename": str,
|
||||
"ip_address": str,
|
||||
"status": str
|
||||
}
|
||||
"""
|
||||
|
||||
def post(self, request):
|
||||
device_id = request.data.get('device_id')
|
||||
firmware_version = request.data.get('firmware_version')
|
||||
filename = request.data.get('filename')
|
||||
ip_address = request.data.get('ip_address')
|
||||
file_status = request.data.get('status')
|
||||
|
||||
# Validation
|
||||
if not all([device_id, firmware_version, filename, ip_address, file_status]):
|
||||
return Response(
|
||||
{"error": "Missing required fields"},
|
||||
status=status.HTTP_400_BAD_REQUEST
|
||||
)
|
||||
|
||||
# Check whether it is a .bin file
|
||||
if not filename.lower().endswith('.bin'):
|
||||
return Response(
|
||||
{"error": "Only .bin files are supported for firmware analysis"},
|
||||
status=status.HTTP_400_BAD_REQUEST
|
||||
)
|
||||
|
||||
# Create file (as with PCAP)
|
||||
response = create_file_with_firmware_version(
|
||||
device_id,
|
||||
firmware_version,
|
||||
filename,
|
||||
ip_address,
|
||||
file_status
|
||||
)
|
||||
|
||||
# If file creation was successful, start firmware analysis
|
||||
if isinstance(response, JsonResponse):
|
||||
response_data = json.loads(response.content.decode('utf-8'))
|
||||
if response_data.get('status') == 'success':
|
||||
file_id = response_data['data']['id']
|
||||
|
||||
# Raw dataset was already created in create_file_with_firmware_version
|
||||
# Trigger firmware analysis (analogous to analyze_pcap_file)
|
||||
from .analyze.analyze_firmware import analyze_firmware_file
|
||||
from .models import RawDataset
|
||||
|
||||
try:
|
||||
raw_dataset = RawDataset.objects.get(file_id=file_id)
|
||||
analyze_firmware_file(filename, raw_dataset.id)
|
||||
except Exception as e:
|
||||
logger.error(f"Firmware analysis failed: {e}")
|
||||
|
||||
# Convert JsonResponse to Response
|
||||
return Response(response_data, status=response.status_code)
|
||||
|
||||
# If response is not a JsonResponse, return it directly
|
||||
return response
|
||||
|
||||
# Add import statements at the top of views.py:
|
||||
# from .db_read import (
|
||||
# get_all_binwalk_raw_data_from_file,
|
||||
# get_all_strings_raw_data_from_file,
|
||||
# get_strings_by_type,
|
||||
# get_all_binwalk_analyzed_data_from_file,
|
||||
# get_all_strings_analyzed_data_from_file,
|
||||
# get_critical_strings_by_severity,
|
||||
# get_raw_data_by_file_extended
|
||||
# )
|
||||
Reference in New Issue
Block a user