rbat 0.1.1

A terminal-native binary analysis tool for security researchers and reverse engineers.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

use crate::rbat::{AnalysisResult, Result, RiskAssessment};
use std::fs::File;
use std::io::Write;
use std::path::Path;

/// Generates a comprehensive JSON report containing all raw analysis details and the final risk assessment.
///
/// This format is ideal for integration into automated security pipelines or custom visualization tools.
pub fn generate_json_report(
    filename: &Path,
    assessment: &RiskAssessment,
    analysis_result: &AnalysisResult,
    out_path: &Path,
) -> Result<()> {
    let report = serde_json::json!({
        "target": {
            "name": filename.file_name().unwrap_or_default().to_string_lossy(),
            "path": filename.to_string_lossy(),
        },
        "timestamp": chrono::Local::now().to_rfc3339(),
        "risk_assessment": assessment,
        "analysis_details": analysis_result,
    });

    let json_string = serde_json::to_string_pretty(&report)
        .map_err(|e| crate::rbat::RbatError::UnsupportedBinaryFormat(e.to_string()))?;

    let mut file = File::create(out_path)?;
    file.write_all(json_string.as_bytes())?;

    println!("[+] JSON report generated at {}", out_path.display());
    Ok(())
}

#[cfg(test)]
mod tests {
    use super::*;
    use tempfile::tempdir;

    #[test]
    fn test_generate_json_report() {
        let dir = tempdir().unwrap();
        let out_path = dir.path().join("test_report.json");

        let assessment = RiskAssessment::default();
        let analysis = AnalysisResult::default();

        // This will likely fallback to HTML in a CI environment without fullbleed setup
        let result = generate_json_report(Path::new("test_bin"), &assessment, &analysis, &out_path);
        assert!(result.is_ok());

        // Check if either .pdf or .html was created
        let html_path = dir.path().join("test_report.html");
        assert!(out_path.exists() || html_path.exists());
    }
}