Files
recon-pipeline/tests/test_models/test_db_manager.py
epi052 6eb3bd8cb0 Completed store results in a database project (#32)
Co-authored-by: Ryan Good <usafaryangood@gmail.com>

* added initial skeleton; restructured project directories

* removed workers directive from luigi; changed input to tko-subs

* changed masscan command to use config.tool_paths

* linted __init__ files and updated docstring for get_scans

* added per-file-ignores for linting

* recon-pipeline linted

* PoC working for amass results -> db; rudimentary db mgmt commands also

* more linting

* added database management commands to the shell

* db_location passes through to all tasks; masscan results added to db

* removed unused imports from masscan.py

* added ParseNmapOutput class to handle parsing for database storage

* cleaned up repeat code

* searchsploit results stored in db

* lint/format

* gobuster scans now stored in database

* fixed test_recon tests to use db_location

* fixed web tests

* tkosub entries recorded in db

* subjack scan results stored in database

* webanalyze results stored in db

* refactored older commits to use newer helper functions

* refactored older commits to use newer helper functions

* aquatone results stored in database

refactored a few scans to use dbmanager helper functions
refactored db structure wrt headers/screenshots
added 80/443 to web_ports in config.py

* fixed a few queries and re-added webanalyze to FullScan

* view targets/endpoints done

* overhauled nmap parsing

* print all nmap_results good, next to focus on filtering

* complex nmap filters complete

* nmap printing done

* updated pipfile

* view web-technologies complete

* view searchsploit results complete

* removed filesystem code from amass

* targetlist moved to db only

* targets,amass,masscan all cutover to full database; added view ports

* nmap fully db compliant

* aquatone and webtargets db compliant

* gobuster uses db now

* webanalyze db compliant

* all scans except corscanner are db compliant

* recon tests passing

* web tests passing

* linted files

* added tests for helpers.py and parsers.py

* refactored some redundant code

* added tests to pre-commit

* updated amass tests and pre-commit version

* updated recon.targets tests

* updated nmap tests

* updated masscan tests

* updated config tests

* updated web targets tests

* added gobuster tests

* added aquatone tests

* added subdomain takeover and webanalyze tests; updated test data

* removed homegrown sqlite target in favor of the sqla implementation

* added tests for recon-pipeline.py

* fixed cluge function to set __package__ globally

* updated amass tests

* updated targets tests

* updated nmap tests

* updated masscan tests

* updated aquatone tests

* updated nmap tests to account for no searchsploit

* updated nmap tests to account for no searchsploit

* updated masscan tests

* updated subjack/tkosub tests

* updated web targets tests

* updated webanalyze tests

* added corscanner tests

* linted DBManager a bit

* fixed weird cyclic import issue that only happened during docs build; housekeeping

* added models tests, removed test_install dir

* updated docs a bit; sidenav is wonky

* fixed readthedocs requirements.txt

* fixed issue where view results werent populated directly after scan

* added new tests to pipeline; working on docs

* updated a few overlooked view command items

* updated tests to reflect changes to shell

* incremental push of docs update

* documentation done

* updated exploitdb install

* updated exploitdb install

* updated seclists install

* parseamass updates db in the event of no amass output

* removed corscanner

* added pipenv shell to install instructions per @GreaterGoodest

* added pipenv shell to install instructions per @GreaterGoodest

* added check for chromium-browser during aquatone install; closes #26

* added check for old recon-tools dir; updated Path.resolve calls to Path.expanduser.resolve; fixed very specific import bug due to filesystem location

* added CONTIBUTING.md; updated pre-commit hooks/README

* added .gitattributes for linguist reporting

* updated tests

* fixed a few weird bugs found during test

* updated README

* updated asciinema links in README

* updated README with view command video

* updated other location for url scheme /status

* add ability to specify single target using --target (#31)

* updated a few items in docs and moved tool-dict to tools-dir

* fixed issue where removing tempfile without --verbose caused scan to fail
2020-04-17 10:29:16 -05:00

54 lines
2.1 KiB
Python

import shutil
import tempfile
from pathlib import Path
from unittest.mock import MagicMock
import pytest
import pipeline.models.db_manager
from pipeline.models.port_model import Port
from pipeline.models.target_model import Target
from pipeline.models.ip_address_model import IPAddress
class TestDBManager:
def setup_method(self, tmp_path):
self.tmp_path = Path(tempfile.mkdtemp())
self.db_mgr = pipeline.models.db_manager.DBManager(db_location=self.tmp_path / "testdb")
def teardown_method(self):
shutil.rmtree(self.tmp_path)
def create_temp_target(self):
tgt = Target(
hostname="localhost",
ip_addresses=[IPAddress(ipv4_address="127.0.0.1"), IPAddress(ipv6_address="::1")],
open_ports=[
Port(port_number=443, protocol="tcp"),
Port(port_number=80, protocol="tcp"),
Port(port_number=53, protocol="udp"),
],
)
return tgt
def test_invalid_ip_to_add_ipv4_or_v6_address_to_target(self):
retval = self.db_mgr.add_ipv4_or_v6_address_to_target("dummytarget", "not an ip address")
assert retval is None
def test_get_all_web_targets(self):
subdomain = Target(hostname="google.com")
ipv4 = Target(ip_addresses=[IPAddress(ipv4_address="13.56.144.135")])
ipv6 = Target(ip_addresses=[IPAddress(ipv6_address="2606:4700:10::6814:3c33")])
self.db_mgr.get_and_filter = MagicMock(return_value=[subdomain, ipv4, ipv6])
expected = ["13.56.144.135", "2606:4700:10::6814:3c33", "google.com"]
actual = self.db_mgr.get_all_web_targets()
assert set(actual) == set(expected)
@pytest.mark.parametrize("test_input, expected", [("tcp", ["80", "443"]), ("udp", ["53"])])
def test_get_ports_by_ip_or_host_and_protocol_tcp(self, test_input, expected):
tgt = self.create_temp_target()
self.db_mgr.get_or_create_target_by_ip_or_hostname = MagicMock(return_value=tgt)
expectedset = set(expected)
actual = self.db_mgr.get_ports_by_ip_or_host_and_protocol("dummy", test_input)
assert set(actual) == expectedset