# -*- coding:binary -*-
require 'spec_helper'
require 'msf/core'
require 'rex/proto/http/response'
require 'msf/http/typo3'
describe Msf::HTTP::Typo3 do
subject do
mod = ::Msf::Module.new
mod.extend described_class
mod
end
let(:invalid_user) do
"invalid"
end
let(:invalid_password) do
"invalid"
end
let(:valid_user) do
"admin"
end
let(:valid_password) do
"password"
end
let(:valid_cookie) do
"be_typo_user=e31843639e5e17b9600602f9378b6ff0"
end
describe '#target_uri' do
it 'returns an URI' do
expect(subject.target_uri).to be_kind_of URI
end
end
describe '#typo3_url_login' do
it 'ends with /typo3/index.php' do
expect(subject.typo3_url_login).to end_with('/typo3/index.php')
end
end
describe '#typo3_url_backend' do
it 'ends with /typo3/backend.php' do
expect(subject.typo3_url_backend).to end_with('/typo3/backend.php')
end
end
describe '#typo3_admin_cookie_valid?' do
it 'returns true when valid admin cookie' do
allow(subject).to receive(:send_request_cgi) do
res = Rex::Proto::Http::Response.new
res.body = ''
res
end
expect(subject.typo3_admin_cookie_valid?("#{valid_cookie};")).to eq(true)
end
it 'returns false when invalid admin cookie' do
allow(subject).to receive(:send_request_cgi) do
res = Rex::Proto::Http::Response.new
res
end
expect(subject.typo3_admin_cookie_valid?("invalid")).to eq(false)
end
end
describe '#typo3_backend_login' do
it 'returns nil login page can not be reached' do
allow(subject).to receive(:send_request_cgi) do
res = Rex::Proto::Http::Response::E404.new
res
end
expect(subject.typo3_backend_login(valid_user, valid_password)).to be_nil
end
it 'returns nil when login page can be reached but isn\'t a TYPO3' do
allow(subject).to receive(:send_request_cgi) do
res = Rex::Proto::Http::Response.new
res.body = 'Hello World'
res
end
expect(subject.typo3_backend_login(valid_user, valid_password)).to be_nil
end
it 'returns nil when TYPO3 credentials are invalid' do
allow(subject).to receive(:send_request_cgi) do |opts|
if opts['uri'] == "/typo3/index.php" && opts['method'] == 'GET'
res = Rex::Proto::Http::Response.new
res.body = ''
res.body << ''
elsif opts['uri'] == "/typo3/index.php" && opts['method'] == 'POST'
res = Rex::Proto::Http::Response.new
res.body = 'Login Failed'
else
res = Rex::Proto::Http::Response::E404.new
end
res
end
expect(subject.typo3_backend_login(invalid_user, invalid_password)).to be_nil
end
it 'returns a cookie string when TYPO3 credentials are valid' do
allow(subject).to receive(:send_request_cgi) do |opts|
if opts['uri'] == "/typo3/index.php" && opts['method'] == 'GET'
res = Rex::Proto::Http::Response.new
res.body = ''
res.body << ''
elsif opts['uri'] == "/typo3/index.php" && opts['method'] == 'POST'
res = Rex::Proto::Http::Response.new
res.headers['Set-Cookie'] = "#{valid_cookie};"
elsif opts['uri'] == "/typo3/backend.php" && opts['method'] == 'GET'
res = Rex::Proto::Http::Response.new
res.body = ''
res
else
res = Rex::Proto::Http::Response::E404.new
end
res
end
expect(subject.typo3_backend_login(valid_user, valid_password)).to include(valid_cookie)
end
end
end