mirror of
https://github.com/aljazceru/recon-pipeline.git
synced 2025-12-23 01:04:20 +01:00
Co-authored-by: Ryan Good <usafaryangood@gmail.com> * added initial skeleton; restructured project directories * removed workers directive from luigi; changed input to tko-subs * changed masscan command to use config.tool_paths * linted __init__ files and updated docstring for get_scans * added per-file-ignores for linting * recon-pipeline linted * PoC working for amass results -> db; rudimentary db mgmt commands also * more linting * added database management commands to the shell * db_location passes through to all tasks; masscan results added to db * removed unused imports from masscan.py * added ParseNmapOutput class to handle parsing for database storage * cleaned up repeat code * searchsploit results stored in db * lint/format * gobuster scans now stored in database * fixed test_recon tests to use db_location * fixed web tests * tkosub entries recorded in db * subjack scan results stored in database * webanalyze results stored in db * refactored older commits to use newer helper functions * refactored older commits to use newer helper functions * aquatone results stored in database refactored a few scans to use dbmanager helper functions refactored db structure wrt headers/screenshots added 80/443 to web_ports in config.py * fixed a few queries and re-added webanalyze to FullScan * view targets/endpoints done * overhauled nmap parsing * print all nmap_results good, next to focus on filtering * complex nmap filters complete * nmap printing done * updated pipfile * view web-technologies complete * view searchsploit results complete * removed filesystem code from amass * targetlist moved to db only * targets,amass,masscan all cutover to full database; added view ports * nmap fully db compliant * aquatone and webtargets db compliant * gobuster uses db now * webanalyze db compliant * all scans except corscanner are db compliant * recon tests passing * web tests passing * linted files * added tests for helpers.py and parsers.py * refactored some redundant code * added tests to pre-commit * updated amass tests and pre-commit version * updated recon.targets tests * updated nmap tests * updated masscan tests * updated config tests * updated web targets tests * added gobuster tests * added aquatone tests * added subdomain takeover and webanalyze tests; updated test data * removed homegrown sqlite target in favor of the sqla implementation * added tests for recon-pipeline.py * fixed cluge function to set __package__ globally * updated amass tests * updated targets tests * updated nmap tests * updated masscan tests * updated aquatone tests * updated nmap tests to account for no searchsploit * updated nmap tests to account for no searchsploit * updated masscan tests * updated subjack/tkosub tests * updated web targets tests * updated webanalyze tests * added corscanner tests * linted DBManager a bit * fixed weird cyclic import issue that only happened during docs build; housekeeping * added models tests, removed test_install dir * updated docs a bit; sidenav is wonky * fixed readthedocs requirements.txt * fixed issue where view results werent populated directly after scan * added new tests to pipeline; working on docs * updated a few overlooked view command items * updated tests to reflect changes to shell * incremental push of docs update * documentation done * updated exploitdb install * updated exploitdb install * updated seclists install * parseamass updates db in the event of no amass output * removed corscanner * added pipenv shell to install instructions per @GreaterGoodest * added pipenv shell to install instructions per @GreaterGoodest * added check for chromium-browser during aquatone install; closes #26 * added check for old recon-tools dir; updated Path.resolve calls to Path.expanduser.resolve; fixed very specific import bug due to filesystem location * added CONTIBUTING.md; updated pre-commit hooks/README * added .gitattributes for linguist reporting * updated tests * fixed a few weird bugs found during test * updated README * updated asciinema links in README * updated README with view command video * updated other location for url scheme /status * add ability to specify single target using --target (#31) * updated a few items in docs and moved tool-dict to tools-dir * fixed issue where removing tempfile without --verbose caused scan to fail
54 lines
2.1 KiB
Python
54 lines
2.1 KiB
Python
import shutil
|
|
import tempfile
|
|
from pathlib import Path
|
|
from unittest.mock import MagicMock
|
|
|
|
import pytest
|
|
|
|
import pipeline.models.db_manager
|
|
from pipeline.models.port_model import Port
|
|
from pipeline.models.target_model import Target
|
|
from pipeline.models.ip_address_model import IPAddress
|
|
|
|
|
|
class TestDBManager:
|
|
def setup_method(self, tmp_path):
|
|
self.tmp_path = Path(tempfile.mkdtemp())
|
|
self.db_mgr = pipeline.models.db_manager.DBManager(db_location=self.tmp_path / "testdb")
|
|
|
|
def teardown_method(self):
|
|
shutil.rmtree(self.tmp_path)
|
|
|
|
def create_temp_target(self):
|
|
tgt = Target(
|
|
hostname="localhost",
|
|
ip_addresses=[IPAddress(ipv4_address="127.0.0.1"), IPAddress(ipv6_address="::1")],
|
|
open_ports=[
|
|
Port(port_number=443, protocol="tcp"),
|
|
Port(port_number=80, protocol="tcp"),
|
|
Port(port_number=53, protocol="udp"),
|
|
],
|
|
)
|
|
return tgt
|
|
|
|
def test_invalid_ip_to_add_ipv4_or_v6_address_to_target(self):
|
|
retval = self.db_mgr.add_ipv4_or_v6_address_to_target("dummytarget", "not an ip address")
|
|
assert retval is None
|
|
|
|
def test_get_all_web_targets(self):
|
|
subdomain = Target(hostname="google.com")
|
|
ipv4 = Target(ip_addresses=[IPAddress(ipv4_address="13.56.144.135")])
|
|
ipv6 = Target(ip_addresses=[IPAddress(ipv6_address="2606:4700:10::6814:3c33")])
|
|
self.db_mgr.get_and_filter = MagicMock(return_value=[subdomain, ipv4, ipv6])
|
|
expected = ["13.56.144.135", "2606:4700:10::6814:3c33", "google.com"]
|
|
actual = self.db_mgr.get_all_web_targets()
|
|
assert set(actual) == set(expected)
|
|
|
|
@pytest.mark.parametrize("test_input, expected", [("tcp", ["80", "443"]), ("udp", ["53"])])
|
|
def test_get_ports_by_ip_or_host_and_protocol_tcp(self, test_input, expected):
|
|
tgt = self.create_temp_target()
|
|
self.db_mgr.get_or_create_target_by_ip_or_hostname = MagicMock(return_value=tgt)
|
|
expectedset = set(expected)
|
|
actual = self.db_mgr.get_ports_by_ip_or_host_and_protocol("dummy", test_input)
|
|
assert set(actual) == expectedset
|