Merge pull request #431 from 6a6f656c/mq

New module: mq__enum

pacu/core/models.py

@@ -36,6 +36,7 @@ class AWSKey(Base, ModelUpdateMixin):
     permissions_confirmed = Column(JSONType)
     allow_permissions = Column(JSONType, nullable=False, default=dict)
     deny_permissions = Column(JSONType, nullable=False, default=dict)
+    mq = Column(JSONType)
     sns = Column(JSONType)
 
     def __repr__(self):
@@ -61,7 +62,6 @@ def get_fields_as_camel_case_dictionary(self) -> dict:
                 'Allow': remove_empty_from_dict(self.allow_permissions),
                 'Deny': remove_empty_from_dict(self.deny_permissions),
             },
-            'SNS': self.sns,
         })
 
 
@@ -86,6 +86,7 @@ class PacuSession(Base, ModelUpdateMixin):
         'Inspector',
         'Lambda',
         'Lightsail',
+        'MQ',
         'S3',
         'SecretsManager',
         'Shield',
@@ -132,6 +133,7 @@ class PacuSession(Base, ModelUpdateMixin):
     Inspector = Column(JSONType, nullable=False, default=dict)
     Lambda = Column(JSONType, nullable=False, default=dict)
     Lightsail = Column(JSONType, nullable=False, default=dict)
+    MQ = Column(JSONType, nullable=False, default=dict)
     RDS = Column(JSONType, nullable=False, default=dict)
     S3 = Column(JSONType, nullable=False, default=dict)
     SecretsManager = Column(JSONType, nullable=False, default=dict)

pacu/modules/mq__enum/main.py

@@ -0,0 +1,141 @@
+#!/usr/bin/env python3
+import argparse
+import time
+import json
+
+from pacu.core.lib import downloads_dir
+from pacu.core.lib import strip_lines
+from pacu import Main
+from copy import deepcopy
+
+module_info = {
+    "name": "mq__enum",
+    "author": "6a6f656c & h00die of nDepth Security",
+    "category": "ENUM",
+    "one_liner": "List and describe brokers",
+    "description": strip_lines(
+        """
+        This module will attempt to list and gather information from available brokers.
+        """
+    ),
+    "services": ["MQ"],
+    "prerequisite_modules": [],
+    "arguments_to_autocomplete": [],
+}
+
+parser = argparse.ArgumentParser(add_help=False, description=module_info["description"])
+
+parser.add_argument(
+    "--regions",
+    required=False,
+    default=None,
+    help=strip_lines(
+        """
+    One or more (comma separated) AWS regions in the format "us-east-1". Defaults to all session regions.
+"""
+    ),
+)
+
+
+def main(args, pacu_main: "Main"):
+    session = pacu_main.get_active_session()
+
+    # Don't modify these. They can be removed if you are not using the function.
+    args = parser.parse_args(args)
+    print = pacu_main.print
+
+    key_info = pacu_main.key_info
+    fetch_data = pacu_main.fetch_data
+
+    # End don't modify
+    get_regions = pacu_main.get_regions
+    if not args.regions:
+        regions = get_regions("mq")
+    else:
+        regions = args.regions.split(",")
+
+    summary_data = {}
+    summary_data["mq"] = {}
+
+    for region in regions:
+        print("Starting region {}...".format(region))
+        summary_data["mq"][region] = {}
+
+        try:
+            client = pacu_main.get_boto3_client("mq", region)
+        except Exception as error:
+            print("Unable to connect to MQ service. Error: {}".format(error))
+            continue
+
+        try:
+            paginator = client.get_paginator("list_brokers")
+            # Create a PageIterator from the paginator
+            page_iterator = paginator.paginate()
+            # This also allows the page_iterator to throw any errors
+            broker_summaries = [brkr_summary for response in page_iterator for brkr_summary in response["BrokerSummaries"]]
+            number_of_brokers = len(broker_summaries)
+        except Exception as error:
+            print(
+                "Unable to list brokers in {}; Check credentials or No brokers are available. Error: {}".format(
+                    region,
+                    error
+                )
+            )
+            continue
+
+        for broker in broker_summaries:
+            broker_id = broker["BrokerId"]
+            if broker["BrokerState"] == "CREATION_IN_PROGRESS":
+                print(
+                    "Broker {} is still being created. Skipping.".format(
+                        broker["BrokerName"]
+                    )
+                )
+                continue
+
+            broker_details = client.describe_broker(BrokerId=broker_id)
+
+            summary_data["mq"][region][broker_id] = {}
+            summary_data["mq"][region][broker_id][
+                "AuthenticationStrategy"
+            ] = broker_details["AuthenticationStrategy"]
+            summary_data["mq"][region][broker_id][
+                "PubliclyAccessible"
+            ] = broker_details["PubliclyAccessible"]
+            summary_data["mq"][region][broker_id]["BrokerName"] = (
+                broker_details["BrokerName"]
+            )
+            summary_data["mq"][region][broker_id]["BrokerState"] = (
+                broker_details["BrokerState"]
+            )
+            summary_data["mq"][region][broker_id]["Users"] = (
+                broker_details["Users"]
+            )
+            summary_data["mq"][region][broker_id]["EngineType"] = (
+                broker_details["EngineType"]
+            )
+            summary_data["mq"][region][broker_id]["ConsoleURL"] = [
+                url["ConsoleURL"] for url in broker_details["BrokerInstances"]
+            ]
+        print("  Found {} brokers".format(number_of_brokers))
+
+    mq_data = deepcopy(session.MQ)
+    for key, value in summary_data.items():
+        mq_data[key] = value
+    session.update(pacu_main.database, MQ=mq_data)
+
+    return summary_data
+
+
+def summary(data, pacu_main):
+    out = ""
+
+    total_users = 0
+    total_brokers = 0
+    for region in data["mq"]:
+        total_brokers += len(data["mq"][region])
+        for broker in data["mq"][region]:
+            total_users += len(data["mq"][region][broker]["Users"])
+    out += "Num of MQ brokers found: {} \n".format(total_brokers)
+    out += "Num of MQ users found: {} \n".format(total_users)
+    return out