2021-02-25 18:02:43 +00:00
|
|
|
package testutils
|
|
|
|
|
|
|
|
import (
|
2022-01-27 20:29:28 +00:00
|
|
|
"crypto/tls"
|
2021-07-30 09:59:12 +00:00
|
|
|
"errors"
|
2021-10-01 15:23:06 +00:00
|
|
|
"fmt"
|
2021-02-25 18:02:43 +00:00
|
|
|
"net"
|
2021-11-01 10:17:20 +00:00
|
|
|
"net/http"
|
|
|
|
"net/http/httptest"
|
2021-02-25 18:02:43 +00:00
|
|
|
"os"
|
|
|
|
"os/exec"
|
2021-07-30 09:59:12 +00:00
|
|
|
"regexp"
|
2021-02-25 18:02:43 +00:00
|
|
|
"strings"
|
2021-11-01 10:17:20 +00:00
|
|
|
|
|
|
|
"github.com/gobwas/ws"
|
2021-11-01 10:21:56 +00:00
|
|
|
"github.com/julienschmidt/httprouter"
|
2021-02-25 18:02:43 +00:00
|
|
|
)
|
|
|
|
|
2021-10-01 15:23:06 +00:00
|
|
|
// RunNucleiTemplateAndGetResults returns a list of results for a template
|
|
|
|
func RunNucleiTemplateAndGetResults(template, url string, debug bool, extra ...string) ([]string, error) {
|
2021-10-14 21:30:51 +00:00
|
|
|
return RunNucleiAndGetResults(true, template, url, debug, extra...)
|
2021-10-01 15:23:06 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// RunNucleiWorkflowAndGetResults returns a list of results for a workflow
|
|
|
|
func RunNucleiWorkflowAndGetResults(template, url string, debug bool, extra ...string) ([]string, error) {
|
2021-10-14 21:30:51 +00:00
|
|
|
return RunNucleiAndGetResults(false, template, url, debug, extra...)
|
2021-10-01 15:23:06 +00:00
|
|
|
}
|
|
|
|
|
2021-10-14 21:30:51 +00:00
|
|
|
func RunNucleiAndGetResults(isTemplate bool, template, url string, debug bool, extra ...string) ([]string, error) {
|
2021-10-01 15:23:06 +00:00
|
|
|
var templateOrWorkflowFlag string
|
|
|
|
if isTemplate {
|
|
|
|
templateOrWorkflowFlag = "-t"
|
|
|
|
} else {
|
|
|
|
templateOrWorkflowFlag = "-w"
|
|
|
|
}
|
|
|
|
|
2021-10-14 21:30:51 +00:00
|
|
|
return RunNucleiBareArgsAndGetResults(debug, append([]string{
|
|
|
|
templateOrWorkflowFlag,
|
|
|
|
template,
|
|
|
|
"-target",
|
|
|
|
url,
|
|
|
|
}, extra...)...)
|
|
|
|
}
|
|
|
|
|
|
|
|
func RunNucleiBareArgsAndGetResults(debug bool, extra ...string) ([]string, error) {
|
|
|
|
cmd := exec.Command("./nuclei")
|
2021-12-14 16:13:53 +00:00
|
|
|
cmd.Args = append(cmd.Args, extra...)
|
2022-03-03 13:40:03 +00:00
|
|
|
cmd.Args = append(cmd.Args, "-duc") // disable auto updates
|
2021-02-25 18:02:43 +00:00
|
|
|
if debug {
|
2021-10-14 21:30:51 +00:00
|
|
|
cmd.Args = append(cmd.Args, "-debug")
|
2021-02-25 18:02:43 +00:00
|
|
|
cmd.Stderr = os.Stderr
|
2021-10-01 15:23:06 +00:00
|
|
|
fmt.Println(cmd.String())
|
2021-10-14 21:30:51 +00:00
|
|
|
} else {
|
|
|
|
cmd.Args = append(cmd.Args, "-silent")
|
2021-02-25 18:02:43 +00:00
|
|
|
}
|
|
|
|
data, err := cmd.Output()
|
2022-03-01 07:58:43 +00:00
|
|
|
if debug {
|
|
|
|
fmt.Println(string(data))
|
|
|
|
}
|
2021-02-25 18:02:43 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2021-10-01 15:23:06 +00:00
|
|
|
var parts []string
|
2021-03-05 06:38:31 +00:00
|
|
|
items := strings.Split(string(data), "\n")
|
|
|
|
for _, i := range items {
|
|
|
|
if i != "" {
|
|
|
|
parts = append(parts, i)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return parts, nil
|
|
|
|
}
|
|
|
|
|
2021-09-03 14:44:00 +00:00
|
|
|
var templateLoaded = regexp.MustCompile(`(?:Templates|Workflows) loaded[^:]*: (\d+)`)
|
2021-07-30 09:59:12 +00:00
|
|
|
|
2021-09-03 14:25:50 +00:00
|
|
|
// RunNucleiBinaryAndGetLoadedTemplates returns a list of results for a template
|
2021-10-01 15:23:06 +00:00
|
|
|
func RunNucleiBinaryAndGetLoadedTemplates(nucleiBinary string, debug bool, args []string) (string, error) {
|
2021-07-30 09:59:12 +00:00
|
|
|
cmd := exec.Command(nucleiBinary, args...)
|
2022-03-03 13:40:03 +00:00
|
|
|
cmd.Args = append(cmd.Args, "-duc") // disable auto updates
|
2021-10-01 15:23:06 +00:00
|
|
|
if debug {
|
2021-12-14 16:13:53 +00:00
|
|
|
cmd.Args = append(cmd.Args, "-debug")
|
2021-10-01 15:23:06 +00:00
|
|
|
fmt.Println(cmd.String())
|
|
|
|
}
|
2021-07-30 09:59:12 +00:00
|
|
|
data, err := cmd.CombinedOutput()
|
2022-03-01 07:58:43 +00:00
|
|
|
if debug {
|
|
|
|
fmt.Println(string(data))
|
|
|
|
}
|
2021-07-30 09:59:12 +00:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
matches := templateLoaded.FindAllStringSubmatch(string(data), -1)
|
|
|
|
if len(matches) == 0 {
|
|
|
|
return "", errors.New("no matches found")
|
|
|
|
}
|
|
|
|
return matches[0][1], nil
|
|
|
|
}
|
|
|
|
|
2021-02-25 18:02:43 +00:00
|
|
|
// TestCase is a single integration test case
|
|
|
|
type TestCase interface {
|
2021-02-26 07:43:11 +00:00
|
|
|
// Execute executes a test case and returns any errors if occurred
|
2021-02-25 18:02:43 +00:00
|
|
|
Execute(filePath string) error
|
|
|
|
}
|
|
|
|
|
|
|
|
// TCPServer creates a new tcp server that returns a response
|
|
|
|
type TCPServer struct {
|
|
|
|
URL string
|
|
|
|
listener net.Listener
|
|
|
|
}
|
|
|
|
|
2022-01-27 20:29:28 +00:00
|
|
|
// keys taken from https://pascal.bach.ch/2015/12/17/from-tcp-to-tls-in-go/
|
|
|
|
const serverKey = `-----BEGIN EC PARAMETERS-----
|
2022-01-27 22:16:47 +00:00
|
|
|
BgUrgQQAIg==
|
2022-01-27 20:29:28 +00:00
|
|
|
-----END EC PARAMETERS-----
|
|
|
|
-----BEGIN EC PRIVATE KEY-----
|
2022-01-27 22:16:47 +00:00
|
|
|
MIGkAgEBBDBJazGwuqgOLsCMr7P56w26JBEHQokiuAy2iCQfCnmOWm7S9FveQ/DP
|
|
|
|
qB69zvUPs26gBwYFK4EEACKhZANiAARehvy96ygCAsJ6iQvthzl/Nvq4P3c4MGyx
|
|
|
|
UMLMe0L10OCxeCl5ZY2CuFf8UnBgV1u414U4+yjIrS57w1/3utBKC9TVRGj+Vcls
|
|
|
|
2NZ4+8Jh6/M/Jf/Mpd8QyIy0WesEUM4=
|
2022-01-27 20:29:28 +00:00
|
|
|
-----END EC PRIVATE KEY-----
|
|
|
|
`
|
|
|
|
|
|
|
|
const serverCert = `-----BEGIN CERTIFICATE-----
|
2022-01-27 22:16:47 +00:00
|
|
|
MIICJDCCAakCCQDFa0/D9jJw6DAKBggqhkjOPQQDAjB7MQswCQYDVQQGEwJVUzEP
|
|
|
|
MA0GA1UECAwGcGRsYW5kMQ8wDQYDVQQHDAZwZGNpdHkxCzAJBgNVBAoMAnBkMQsw
|
|
|
|
CQYDVQQLDAJwZDELMAkGA1UEAwwCcGQxIzAhBgkqhkiG9w0BCQEWFGFueXRoaW5n
|
|
|
|
QGFueXRoaW5nLnBkMB4XDTIyMDEyNzIyMDUwNFoXDTMyMDEyNTIyMDUwNFowezEL
|
|
|
|
MAkGA1UEBhMCVVMxDzANBgNVBAgMBnBkbGFuZDEPMA0GA1UEBwwGcGRjaXR5MQsw
|
|
|
|
CQYDVQQKDAJwZDELMAkGA1UECwwCcGQxCzAJBgNVBAMMAnBkMSMwIQYJKoZIhvcN
|
|
|
|
AQkBFhRhbnl0aGluZ0Bhbnl0aGluZy5wZDB2MBAGByqGSM49AgEGBSuBBAAiA2IA
|
|
|
|
BF6G/L3rKAICwnqJC+2HOX82+rg/dzgwbLFQwsx7QvXQ4LF4KXlljYK4V/xScGBX
|
|
|
|
W7jXhTj7KMitLnvDX/e60EoL1NVEaP5VyWzY1nj7wmHr8z8l/8yl3xDIjLRZ6wRQ
|
|
|
|
zjAKBggqhkjOPQQDAgNpADBmAjEAgxGPbjRlhz+1Scmr6RU9VbzVJWN8KCsTTpx7
|
|
|
|
pqfmKpJ29UYReZN+fm/6fc5vkv1rAjEAkTuTf8ARSn1UiKlCTTDQVtCoRcMVLQQp
|
|
|
|
TCxxGzcAlUAAJE6+SJpY7fPRe+n2EvPS
|
2022-01-27 20:29:28 +00:00
|
|
|
-----END CERTIFICATE-----
|
|
|
|
`
|
|
|
|
|
2021-02-25 18:02:43 +00:00
|
|
|
// NewTCPServer creates a new TCP server from a handler
|
2022-01-27 20:29:28 +00:00
|
|
|
func NewTCPServer(withTls bool, port int, handler func(conn net.Conn)) *TCPServer {
|
2021-02-25 18:02:43 +00:00
|
|
|
server := &TCPServer{}
|
|
|
|
|
2022-01-27 20:29:28 +00:00
|
|
|
l, err := net.Listen("tcp", fmt.Sprintf("127.0.0.1:%d", port))
|
2021-02-25 18:02:43 +00:00
|
|
|
if err != nil {
|
|
|
|
panic(err)
|
|
|
|
}
|
|
|
|
server.URL = l.Addr().String()
|
|
|
|
server.listener = l
|
|
|
|
|
2022-01-27 20:29:28 +00:00
|
|
|
cer, err := tls.X509KeyPair([]byte(serverCert), []byte(serverKey))
|
|
|
|
if err != nil {
|
|
|
|
panic(err)
|
|
|
|
}
|
|
|
|
config := &tls.Config{Certificates: []tls.Certificate{cer}}
|
|
|
|
|
2021-02-25 18:02:43 +00:00
|
|
|
go func() {
|
|
|
|
for {
|
|
|
|
// Listen for an incoming connection.
|
|
|
|
conn, err := l.Accept()
|
|
|
|
if err != nil {
|
|
|
|
continue
|
|
|
|
}
|
|
|
|
// Handle connections in a new goroutine.
|
2022-01-27 20:29:28 +00:00
|
|
|
if withTls {
|
|
|
|
connTls := tls.Server(conn, config)
|
|
|
|
go handler(connTls)
|
|
|
|
} else {
|
|
|
|
go handler(conn)
|
|
|
|
}
|
2021-02-25 18:02:43 +00:00
|
|
|
}
|
|
|
|
}()
|
|
|
|
return server
|
|
|
|
}
|
|
|
|
|
|
|
|
// Close closes the TCP server
|
|
|
|
func (s *TCPServer) Close() {
|
|
|
|
s.listener.Close()
|
|
|
|
}
|
2021-11-01 10:17:20 +00:00
|
|
|
|
|
|
|
// NewWebsocketServer creates a new websocket server from a handler
|
2021-11-01 10:21:56 +00:00
|
|
|
func NewWebsocketServer(path string, handler func(conn net.Conn), originValidate func(origin string) bool, port ...int) *httptest.Server {
|
|
|
|
handlerFunc := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
2021-11-01 10:17:20 +00:00
|
|
|
if value := r.Header.Get("Origin"); value != "" && !originValidate(value) {
|
|
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
conn, _, _, err := ws.UpgradeHTTP(r, w)
|
|
|
|
if err != nil {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
go func() {
|
|
|
|
defer conn.Close()
|
|
|
|
|
|
|
|
handler(conn)
|
|
|
|
}()
|
2021-11-01 10:21:56 +00:00
|
|
|
})
|
|
|
|
|
|
|
|
if path != "" {
|
2021-11-02 21:04:48 +00:00
|
|
|
router := httprouter.New()
|
2021-11-01 10:21:56 +00:00
|
|
|
router.HandlerFunc("*", "/test", handlerFunc)
|
2021-11-02 21:04:48 +00:00
|
|
|
return httptest.NewServer(router)
|
2021-11-01 10:21:56 +00:00
|
|
|
}
|
2021-11-02 21:04:48 +00:00
|
|
|
return httptest.NewServer(handlerFunc)
|
2021-11-01 10:17:20 +00:00
|
|
|
}
|