Skip to content

Commit

Permalink
[tests] Add Wapiti 2.2.1 tests.
Browse files Browse the repository at this point in the history
  • Loading branch information
@DePierre
DePierre committed Jan 24, 2017
1 parent 0557b15 commit aa56037
Show file tree
Hide file tree
Showing 3 changed files with 676 additions and 1 deletion.
101 changes: 100 additions & 1 deletion tests/tools/wapiti/test_parser.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@

from ptp.libptp.constants import UNKNOWN, INFO, LOW, MEDIUM, HIGH
from ptp.libptp.exceptions import NotSupportedVersionError
from ptp.tools.wapiti.parser import WapitiXMLParser
from ptp.tools.wapiti.parser import WapitiXMLParser, Wapiti221XMLParser


def lxml_etree_parse(string):
Expand Down Expand Up @@ -48,6 +48,22 @@ def test_parser_wapiti_xml_is_mine_version_not_supported(self, mock_lxml_etree_p
WapitiXMLParser.__format__ = ''
self.assertFalse(WapitiXMLParser.is_mine('foo', 'bar', first=True))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti_xml_is_mine_invalid_tool_name(self, mock_lxml_etree_parse):
from .wapiti_reports_2_3_0 import report_high
stripped_report = report_high.replace('<info name="generatorName">wapiti</info>', '<info name="generatorName">INVALIDTOOLNAME</info>')
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[stripped_report]):
WapitiXMLParser.__format__ = ''
self.assertFalse(WapitiXMLParser.is_mine('foo', 'bar', first=True))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti_xml_is_mine_no_report_infos(self, mock_lxml_etree_parse):
from .wapiti_reports_2_3_0 import report_high
stripped_report = report_high.replace('report_infos', 'INFOSTHATWONTBEFOUND')
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[stripped_report]):
WapitiXMLParser.__format__ = ''
self.assertFalse(WapitiXMLParser.is_mine('foo', 'bar', first=True))

###
# WapitiXMLParser.parse_metadata
###
Expand Down Expand Up @@ -84,3 +100,86 @@ def test_parser_wapiti_xml_parse_report(self, mock_lxml_etree_parse):
assert_that(report, is_not(has_item([{'ranking': UNKNOWN}])))
assert_that(report, is_not(has_item([{'ranking': INFO}])))
assert_that(report, is_not(has_item([{'ranking': MEDIUM}])))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti_xml_parse_report_no_vulns(self, mock_lxml_etree_parse):
from .wapiti_reports_2_3_0 import report_no_vulns
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[report_no_vulns]):
WapitiXMLParser.__format__ = ''
my_wapiti = WapitiXMLParser()
report = my_wapiti.parse_report()
self.assertTrue(report == [])

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti_xml_parse_report_invalid_no_vulns(self, mock_lxml_etree_parse):
from .wapiti_reports_2_3_0 import report_invalid_no_vulns
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[report_invalid_no_vulns]):
WapitiXMLParser.__format__ = ''
my_wapiti = WapitiXMLParser()
report = my_wapiti.parse_report()
self.assertTrue(report == [])

###
# Wapiti221XMLParser.is_mine
###
@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_is_mine(self, mock_lxml_etree_parse):
from .wapiti_reports_2_2_1 import report_high
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[report_high]):
Wapiti221XMLParser.__format__ = ''
self.assertTrue(Wapiti221XMLParser.is_mine('foo', 'bar', first=True))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_is_not_mine(self, mock_lxml_etree_parse):
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=['foo.bar']):
Wapiti221XMLParser.__format__ = ''
self.assertFalse(Wapiti221XMLParser.is_mine('foo', 'bar', first=True))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_is_mine_no_version(self, mock_lxml_etree_parse):
from .wapiti_reports_2_2_1 import report_high
stripped_report = report_high.replace('<generatedBy', '"generatorINVALIDHEADER"')
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[stripped_report]):
Wapiti221XMLParser.__format__ = ''
self.assertFalse(Wapiti221XMLParser.is_mine('foo', 'bar', first=True))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_is_mine_version_not_supported(self, mock_lxml_etree_parse):
from .wapiti_reports_2_2_1 import report_high
stripped_report = report_high.replace('Wapiti 2.2.1', 'Wapiti VERSIONTHATWONTEVEREXIST')
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[stripped_report]):
Wapiti221XMLParser.__format__ = ''
self.assertFalse(Wapiti221XMLParser.is_mine('foo', 'bar', first=True))

###
# Wapiti221XMLParser.parse_metadata
###
@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_parse_metadata(self, mock_lxml_etree_parse):
from .wapiti_reports_2_2_1 import report_high
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[report_high]):
Wapiti221XMLParser.__format__ = ''
my_wapiti221 = Wapiti221XMLParser('foo', 'bar', first=True)
assert_that(my_wapiti221.parse_metadata(), has_entry('version', 'Wapiti 2.2.1'))

@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_parse_metadata_version_not_supported(self, mock_lxml_etree_parse):
from .wapiti_reports_2_2_1 import report_high
stripped_report = report_high.replace('Wapiti 2.2.1', 'Wapiti VERSIONTHATWONTEVEREXIST')
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[stripped_report]):
Wapiti221XMLParser.__format__ = ''
my_wapiti221 = Wapiti221XMLParser('foo', 'bar', first=True)
with self.assertRaises(NotSupportedVersionError):
my_wapiti221.parse_metadata()

###
# Wapiti221XMLParser.parse_report
###
@mock.patch('lxml.etree.parse', side_effect=lxml_etree_parse)
def test_parser_wapiti221_xml_parse_report(self, mock_lxml_etree_parse):
from .wapiti_reports_2_2_1 import report_high
with mock.patch('ptp.libptp.parser.AbstractParser._recursive_find', return_value=[report_high]):
Wapiti221XMLParser.__format__ = ''
my_wapiti221 = Wapiti221XMLParser()
report = my_wapiti221.parse_report()
assert_that(report, has_items(*[{'ranking': HIGH, 'name': 'Cross Site Scripting', 'description': '\nCross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users. Examples of such code include HTML code and client-side scripts. '}] * 1))
Loading

0 comments on commit aa56037

Please sign in to comment.