Open-AudIT
https://www.open-audit.org/phpBB3/

Keys and Firefox Extensions Don't show up in offline audits
https://www.open-audit.org/phpBB3/viewtopic.php?f=8&t=2308
Page 1 of 1

Author:  jpmorgan [ Fri Aug 10, 2007 12:16 pm ]
Post subject:  Keys and Firefox Extensions Don't show up in offline audits

Microsoft Keys and Firefox Extensions Don't show up in offline audits. The reason is because the object objTextFile is used for both reading the Firefox Extensions.rdf file as well as writing the offline audit file. In the Firefox Extensions section find all references to objTextFile and replace with objTextFile2.

[code]' FireFox Extensions
comment = "Firefox Extensions"
if verbose = "y" then
wscript.echo comment
end if
folder = "c:\documents and settings"
dim folder_array()
dim folder_array_2()
i = 0
'Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colSubfolders = objWMIService.ExecQuery ("Associators of {Win32_Directory.Name='" & folder & "'} Where AssocClass = Win32_Subdirectory ResultRole = PartComponent")
redim folder_array(colSubFolders.count)
redim folder_array_2(colSubFolders.count)
For Each objFolder in colSubfolders
folder = split(objFolder.Name,"\",-1,1)
moz_folder = "\\" & system_name & "\c$\documents and settings" & "\" & folder(2) & "\application data\mozilla\firefox\profiles"
Set objFSO = CreateObject("Scripting.FileSystemObject")
If objFSO.FolderExists(moz_folder) Then
folder_array(i) = objFolder.Name & "\application data\mozilla\firefox\profiles"
folder_array_2(i) = moz_folder
i = i + 1
end if
Next
redim preserve folder_array(i - 1)
redim preserve folder_array_2(i -1)
For i = 0 to UBound(folder_array)
'If don't want to redim preserve above, you could comment out and do something like
'instead.
'if folder_array(i) = "" then
' exit for
'end if
Set colSubfolders2 = objWMIService.ExecQuery ("Associators of {Win32_Directory.Name='" & folder_array(i) & "'} Where AssocClass = Win32_Subdirectory ResultRole = PartComponent")
For Each objFolder2 in colSubfolders2
split_folder = split(objFolder2.Name,"\",-1,1)
'wscript.echo "Returned (local) directory"
'wscript.echo objFolder2.Name
'wscript.echo "--------------------------"
moz_folder_2 = folder_array_2(i) & "\" & split_folder(7) & "\Extensions.rdf"
moz_folder_3 = folder_array_2(i) & "\" & split_folder(7) & "\extensions\Extensions.rdf"
'wscript.echo "Calculated remote filename"
'wscript.echo moz_folder_2
'wscript.echo "--------------------------"
if objFSO.FileExists(moz_folder_2) then
Set objTextFile2 = objFSO.OpenTextFile(moz_folder_2, 1)
Do Until objTextFile2.AtEndOfStream
input_string = objTextFile2.ReadLine
MyPos = Instr(1, input_string, "<RDF:Description")
if MyPos > 0 then
Do Until objTextFile2.AtEndOfStream
input_string2 = objTextFile2.ReadLine
MyPos2 = Instr(1, input_string2, "</RDF:Description>")
if MyPos2 > 0 then exit do
MyArray = Split(input_string2, chr(34), -1, 1)
if Instr(1, MyArray(0), "S1:version=") then version = MyArray(1)
if Instr(1, MyArray(0), "S1:name=") then name = MyArray(1)
if Instr(1, MyArray(0), "S1:description=") then description = MyArray(1)
if Instr(1, MyArray(0), "S1:creator=") then creator = MyArray(1)
if Instr(1, MyArray(0), "S1:homepageURL=") then homepage = MyArray(1)
Loop
'wscript.echo "--------------------"
'wscript.echo "Name: Mozilla Firefox Extension - " & name
'wscript.echo "Version: " & version
'wscript.echo "Description: " & description
'wscript.echo "Creator: " & creator
'wscript.echo "Homepage: " & homepage
if name <> "" then
form_input = "software^^^Mozilla Firefox Extension - " & clean(name) & "^^^" _
& clean(version) & "^^^" _
& "^^^" _
& "^^^" _
& "^^^" _
& clean(creator) & "^^^" _
& "^^^" _
& "^^^" _
& clean(homepage) & "^^^" _
& clean(description) & "^^^"
entry form_input,comment,objTextFile,oAdd,oComment
end if
form_input = ""
name = ""
version = ""
description = ""
creator = ""
homepage = ""
end if
Loop
end if
if objFSO.FileExists(moz_folder_3) then
Set objTextFile2 = objFSO.OpenTextFile(moz_folder_3, 1)
Do Until objTextFile2.AtEndOfStream
input_string = objTextFile2.ReadLine
MyPos = Instr(1, input_string, "<RDF:Description")
if MyPos > 0 then
Do Until objTextFile2.AtEndOfStream
input_string2 = objTextFile2.ReadLine
MyPos2 = Instr(1, input_string2, "</RDF:Description>")
if MyPos2 > 0 then exit do
MyArray = Split(input_string2, chr(34), -1, 1)
if Instr(1, MyArray(0), "em:version=") then version = MyArray(1)
if Instr(1, MyArray(0), "em:name=") then name = MyArray(1)
if Instr(1, MyArray(0), "em:description=") then description = MyArray(1)
if Instr(1, MyArray(0), "em:creator=") then creator = MyArray(1)
if Instr(1, MyArray(0), "em:homepageURL=") then homepage = MyArray(1)
Loop
'wscript.echo "--------------------"
'wscript.echo "Name: Mozilla Firefox Extension - " & name
'wscript.echo "Version: " & version
'wscript.echo "Description: " & description
'wscript.echo "Creator: " & creator
'wscript.echo "Homepage: " & homepage
if name <> "" then
form_input = "software^^^Mozilla Firefox Extension - " & clean(name) & "^^^" _
& clean(version) & "^^^" _
& "^^^" _
& "^^^" _
& "^^^" _
& clean(creator) & "^^^" _
& "^^^" _
& "^^^" _
& clean(homepage) & "^^^" _
& clean(description) & "^^^"
entry form_input,comment,objTextFile,oAdd,oComment
end if
form_input = ""
name = ""
version = ""
description = ""
creator = ""
homepage = ""
end if
Loop
end if
Next
Next
[/code]

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/