24f090e81e
Some checks failed
CI Docker Mining Proof / Linux agent hashrate proof (push) Has been cancelled
106 lines
3.2 KiB
Go
106 lines
3.2 KiB
Go
package recon
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
func TestProfileOptions(t *testing.T) {
|
|
quick := ProfileOptions(ProfileQuick)
|
|
if len(quick.Ports) != 10 || quick.MaxPages != 1 || quick.SkipPorts {
|
|
t.Fatalf("quick=%+v", quick)
|
|
}
|
|
deep := ProfileOptions(ProfileDeep)
|
|
if deep.MaxPages != 50 || deep.CrawlDepth != 2 {
|
|
t.Fatalf("deep=%+v", deep)
|
|
}
|
|
ssrf := ProfileOptions(ProfileSSRFOnly)
|
|
if !ssrf.SkipPorts || ssrf.MaxPages != 50 {
|
|
t.Fatalf("ssrf=%+v", ssrf)
|
|
}
|
|
}
|
|
|
|
func TestScanStreamEmitsPortsFirst(t *testing.T) {
|
|
SetPortDialHook(func(host string, port int, _ time.Duration) bool {
|
|
return port == 80 || port == 443
|
|
})
|
|
t.Cleanup(func() { SetPortDialHook(nil) })
|
|
SetFetchPageHook(func(rawURL string) (int, string, error) {
|
|
return 200, `<html><title>Home</title></html>`, nil
|
|
})
|
|
t.Cleanup(func() { SetFetchPageHook(nil) })
|
|
SetBannerHooks(
|
|
func(_ string, p int) string { if p == 22 { return "SSH" }; return "" },
|
|
func(_ string, p int) (string, string) { if p == 80 { return "t", "s" }; return "", "" },
|
|
func(_ string, p int) string { if p == 5985 { return "w" }; return "" },
|
|
nil,
|
|
)
|
|
t.Cleanup(func() { SetBannerHooks(nil, nil, nil, nil) })
|
|
|
|
var events []string
|
|
report, err := ScanStream(ScanRequest{Host: "stream.lab", Profile: ProfileQuick, Port: 80, Scheme: "http"}, "scan-1", func(eventType string, _ map[string]interface{}) {
|
|
events = append(events, eventType)
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if report.ScanID != "scan-1" || report.Profile != ProfileQuick {
|
|
t.Fatalf("report=%+v", report)
|
|
}
|
|
if len(events) == 0 {
|
|
t.Fatal("expected streaming events")
|
|
}
|
|
firstPort := -1
|
|
for i, e := range events {
|
|
if e == "recon_port" && firstPort < 0 {
|
|
firstPort = i
|
|
}
|
|
}
|
|
if firstPort < 0 {
|
|
t.Fatalf("missing recon_port events: %v", events)
|
|
}
|
|
for i, e := range events {
|
|
if e == "recon_page" && i < firstPort {
|
|
t.Fatalf("pages before ports: %v", events)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestDiffReportsNewPortsAndForms(t *testing.T) {
|
|
prev := &ScanReport{
|
|
Ports: []PortResult{{Port: 80, Open: true}},
|
|
Crawl: &CrawlReport{MultipartForms: []FormFinding{{PageURL: "http://a/", Action: "/upload"}}},
|
|
}
|
|
cur := &ScanReport{
|
|
Ports: []PortResult{{Port: 80, Open: true}, {Port: 443, Open: true}},
|
|
Crawl: &CrawlReport{
|
|
MultipartForms: []FormFinding{
|
|
{PageURL: "http://a/", Action: "/upload"},
|
|
{PageURL: "http://a/admin", Action: "/post"},
|
|
},
|
|
},
|
|
}
|
|
diff := DiffReports(prev, cur)
|
|
if len(diff.NewPorts) != 1 || diff.NewPorts[0] != 443 {
|
|
t.Fatalf("ports=%v", diff.NewPorts)
|
|
}
|
|
if len(diff.NewForms) != 1 || diff.NewForms[0].Action != "/post" {
|
|
t.Fatalf("forms=%v", diff.NewForms)
|
|
}
|
|
}
|
|
|
|
func TestBuildHistoryDiffChain(t *testing.T) {
|
|
now := time.Now().UTC()
|
|
rows := []*ScanReport{
|
|
{ScanID: "a", Host: "h", ScannedAt: now, Ports: []PortResult{{Port: 22, Open: true}}},
|
|
{ScanID: "b", Host: "h", ScannedAt: now.Add(time.Minute), Ports: []PortResult{{Port: 22, Open: true}, {Port: 80, Open: true}}},
|
|
}
|
|
hist := BuildHistory(rows)
|
|
if len(hist) != 2 || hist[0].Diff == nil || len(hist[0].Diff.NewPorts) != 1 {
|
|
t.Fatalf("first diff=%+v", hist[0].Diff)
|
|
}
|
|
if hist[1].Diff == nil || len(hist[1].Diff.NewPorts) != 1 || hist[1].Diff.NewPorts[0] != 80 {
|
|
t.Fatalf("second diff=%+v", hist[1].Diff)
|
|
}
|
|
}
|