arachni 0.4.0.4 → 0.4.1

data/spec/arachni/component/options/url_spec.rb

@@ -0,0 +1,36 @@
+require_relative '../../../spec_helper'
+
+describe Arachni::Component::Options::URL do
+    before( :all ) do
+        @opt = Arachni::Component::Options::URL.new( ' ')
+    end
+
+    describe '#valid?' do
+        context 'when the value is valid' do
+            it 'should return true' do
+                @opt.valid?( 'http://localhost' ).should be_true
+            end
+        end
+        context 'when the value is not valid' do
+            it 'should return false' do
+                @opt.valid?( 'http://localhost22' ).should be_false
+                @opt.valid?( 'localhost' ).should be_false
+                @opt.valid?( 11 ).should be_false
+                @opt.valid?( '#$#$c3c43' ).should be_false
+                @opt.valid?( true ).should be_false
+            end
+        end
+        context 'when required but empty' do
+            it 'should return false' do
+                @opt.class.new( '', [true] ).valid?( nil ).should be_false
+            end
+        end
+    end
+
+    describe '#type' do
+        it 'should return the option type as a string' do
+            @opt.type.should == 'url'
+        end
+    end
+
+end

data/spec/arachni/crypto/rsa_aes_cbc_spec.rb

@@ -0,0 +1,31 @@
+require_relative '../../spec_helper'
+require_testee
+
+require 'tempfile'
+
+describe RSA_AES_CBC do
+
+    SEED = 'seed data'
+
+    before :all do
+        private_key_file = Tempfile.new( 'private_key.pem' )
+        private_key = OpenSSL::PKey::RSA.generate( 1024 )
+        private_key_file.write( private_key.to_pem )
+        private_key_file.close
+
+        public_key  = private_key.public_key
+        public_key_file = Tempfile.new( 'public_key.pem' )
+        public_key_file.write( public_key.to_pem )
+        public_key_file.close
+
+        @private_key_file_path = private_key_file.path
+        @public_key_file_path = public_key_file.path
+
+        @crypto = RSA_AES_CBC.new( @public_key_file_path, @private_key_file_path )
+    end
+
+    it 'should generate matching encrypted and decrypted data' do
+        @crypto.decrypt( @crypto.encrypt( SEED ) ).should == SEED
+    end
+
+end

data/spec/arachni/database/hash_spec.rb

@@ -0,0 +1,217 @@
+require_relative '../../spec_helper'
+require_testee
+
+describe Arachni::Database::Hash do
+
+    before :all do
+        @hash = Arachni::Database::Hash.new
+        @non_existent = 'blahblahblah'
+
+        @seeds = {
+            'key' => 'val',
+            :key  => 'val2',
+            { 'key' => 'val' } => 'val4'
+        }
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-empty?
+    it 'should implement empty?()' do
+        h = Arachni::Database::Hash.new
+
+        h.empty?.should == {}.empty?
+
+        nh = { :k => 'v' }
+        h[:k] = 'v'
+
+        h.empty?.should == nh.empty?
+        h.clear
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-5B-5D-3D
+    it 'should implement #[]=( k, v ) (and store( k, v ))' do
+        @seeds.each {
+            |k, v|
+            ( @hash[k] = v ).should == v
+        }
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-5B-5D
+    it 'should implement #[]' do
+        @seeds.each {
+            |k, v|
+            @hash[k].should == v
+        }
+
+        @hash[@non_existent].should == @seeds[@non_existent]
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-assoc
+    it 'should implement assoc( k )' do
+        @seeds.each {
+            |k, v|
+            @hash.assoc( k ).should == @seeds.assoc( k )
+        }
+
+        @hash.assoc( @non_existent ).should == @seeds.assoc( @non_existent )
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-rassoc
+    it 'should implement rassoc( k )' do
+        @seeds.each {
+            |k, v|
+            @hash.rassoc( v ).should == @seeds.rassoc( v )
+        }
+
+        @hash.rassoc( @non_existent ).should == @seeds.rassoc( @non_existent )
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-delete
+    it 'should implement delete( k, &block )' do
+        @hash.delete( @non_existent ).should == @seeds.delete( @non_existent )
+        @seeds[@non_existent] = @hash[@non_existent] = 'foo'
+        @hash.delete( @non_existent ).should == @seeds.delete( @non_existent )
+
+        @hash.delete( @non_existent ) { |k| k }.should ==
+            @seeds.delete( @non_existent ) { |k| k }
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-shift
+    it 'should implement shift()' do
+        @hash.shift.should == @seeds.shift
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-each
+    it 'should implement each() (and each_pair())' do
+        @hash.each {
+            |k, v|
+            @seeds[k].should == v
+        }
+
+        # they muct both return enumerators
+        @hash.each.class.should == @seeds.each.class
+
+        @hash.each_pair {
+            |k, v|
+            @seeds[k].should == v
+        }
+
+        # they muct both return enumerators
+        @hash.each_pair.class.should == @seeds.each_pair.class
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-each_key
+    it 'should implement each_key()' do
+        @hash.each_key {
+            |k|
+            @seeds[k].should == @hash[k]
+        }
+
+        # they muct both return enumerators
+        @hash.each_key.class.should == @seeds.each_key.class
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-each_value
+    it 'should implement each_value()' do
+        @hash.each_value {
+            |v|
+            @seeds[ @seeds.key( v )].should == v
+        }
+
+        # they muct both return enumerators
+        @hash.each_value.class.should == @seeds.each_value.class
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-keys
+    it 'should implement keys()' do
+        @hash.keys.should == @seeds.keys
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-key
+    it 'should implement key()' do
+        @hash.each_key {
+            |k|
+            @seeds.key( k ).should == @hash.key( k )
+        }
+
+        @hash.key( @non_existent ).should == @seeds.key( @non_existent )
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-values
+    it 'should implement values()' do
+        @hash.values.should == @seeds.values
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-include?
+    it 'should implement include?() (and member?(), key?(), has_key?())' do
+        @hash.each_key {
+            |k|
+            @seeds.include?( k ).should == @hash.include?( k )
+            @seeds.member?( k ).should == @hash.member?( k )
+            @seeds.key?( k ).should == @hash.key?( k )
+            @seeds.has_key?( k ).should == @hash.has_key?( k )
+        }
+
+        @hash.include?( @non_existent ).should == @seeds.include?( @non_existent )
+        @hash.member?( @non_existent ).should == @seeds.member?( @non_existent )
+        @hash.key?( @non_existent ).should == @seeds.key?( @non_existent )
+        @hash.has_key?( @non_existent ).should == @seeds.has_key?( @non_existent )
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-merge
+    it 'should implement merge()' do
+        mh = { :another_key => 'another value' }
+
+        nh = @hash.merge( mh )
+        nh.keys.should == @seeds.merge( mh ).keys
+        nh.values.should == @seeds.merge( mh ).values
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-merge!
+    it 'should implement merge!() (and update())' do
+        mh = { :another_other_key => 'another other value' }
+        mh2 = { :another_other_key2 => 'another other value2' }
+
+        @hash.merge!( mh )
+        @seeds.merge!( mh )
+
+        @hash.update( mh2 )
+        @seeds.update( mh2 )
+
+        @hash.keys.should == @seeds.keys
+        @hash.values.should == @seeds.values
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-to_hash
+    it 'should implement to_hash()' do
+        @hash.to_hash.should == @seeds.to_hash
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-to_a
+    it 'should implement to_a()' do
+        @hash.to_a.should == @seeds.to_a
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-size
+    it 'should implement size()' do
+        @hash.size.should == @seeds.size
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-3D-3D
+    it 'should implement ==() (and eql?())' do
+        (@hash == @hash.merge( {} )).should == true
+        (@hash == @seeds).should == true
+    end
+
+    # http://www.ruby-doc.org/core-1.9.3/Hash.html#method-i-clear
+    it 'should implement clear()' do
+        @hash.clear
+        @seeds.clear
+        @hash.size.should == @seeds.size
+    end
+
+    after :all do
+        # clear the DB files
+        @hash.clear
+    end
+
+end

data/spec/arachni/database/queue_spec.rb

@@ -0,0 +1,52 @@
+require_relative '../../spec_helper'
+require_testee
+
+describe Arachni::Database::Queue do
+
+    before :all do
+        @seeds = [
+            'val',
+            :val,
+            { 'val' => :val },
+            [ 'val', :val ]
+        ]
+
+        @queue  = Arachni::Database::Queue.new
+        @seed_q = Queue.new
+    end
+
+    # http://www.ruby-doc.org/stdlib-1.9.3/libdoc/thread/rdoc/Queue.html#method-i-empty-3F
+    it 'should implement empty?()' do
+        @queue.empty?.should == @seed_q.empty?
+    end
+
+    # http://www.ruby-doc.org/stdlib-1.9.3/libdoc/thread/rdoc/Queue.html#method-i-3C-3C
+    it 'should implement <<(v) (and push( v ), enq( v ))' do
+        @queue  << @seeds[0].should == @seed_q << @seeds[0]
+        @queue.push( @seeds[1] ).should == @seed_q.push( @seeds[1] )
+        @queue.enq( @seeds[2] ).should == @seed_q.enq( @seeds[2] )
+    end
+
+    # http://www.ruby-doc.org/stdlib-1.9.3/libdoc/thread/rdoc/Queue.html#method-i-pop
+    it 'should implement shift() (and pop(), deq())' do
+        @queue.pop.should == @seed_q.pop
+        @queue.shift.should == @seed_q.shift
+        @queue.deq.should == @seed_q.deq
+    end
+
+    # http://www.ruby-doc.org/stdlib-1.9.3/libdoc/thread/rdoc/Queue.html#method-i-size
+    it 'should implement size()' do
+        @queue.size.should == @seed_q.size
+    end
+
+    # http://www.ruby-doc.org/stdlib-1.9.3/libdoc/thread/rdoc/Queue.html#method-i-clear
+    it 'should implement clear()' do
+        @queue.clear
+        @seed_q.clear
+        @queue.size.should == @seed_q.size
+    end
+
+    after :all do
+        @queue.clear
+    end
+end

data/spec/arachni/element/base_spec.rb

@@ -0,0 +1,127 @@
+require_relative '../../spec_helper'
+
+describe Arachni::Element::Base do
+    before( :all ) do
+        @utils=  Arachni::Module::Utilities
+        @url = @utils.normalize_url( 'http://test.com' )
+        @raw = { raw: { hash: 'stuff' } }
+        @e = Arachni::Element::Base.new( @url, @raw )
+    end
+
+    it 'should have the assigned URL' do
+        @e.url.should == @url
+    end
+
+    it 'should have the assigned raw data' do
+        @e.raw.should == @raw
+    end
+
+    describe '#url=' do
+        it 'should normalize the passed URL' do
+            e = Arachni::Element::Base.new( @url, @raw )
+            url = 'http://test.com/some stuff#frag!'
+            e.url = url
+            e.url.should == @utils.normalize_url( url )
+        end
+    end
+
+    describe '#action=' do
+        it 'should normalize the passed URL' do
+            e = Arachni::Element::Base.new( @url, @raw )
+            url = 'http://test.com/some stuff#frag!'
+            e.action = url
+            e.action.should == @utils.normalize_url( url )
+        end
+
+        it 'should convert the passed URL to absolute' do
+            e = Arachni::Element::Base.new( @url, @raw )
+            url = 'some stuff#frag!'
+            e.action = url
+            e.action.should == @utils.to_absolute( url, @url )
+        end
+    end
+
+    describe '#==' do
+        it 'should assert equality based on method, action and inputs' do
+            e = Arachni::Element::Link.new( @url, inputs: { 'name' => 'val' } )
+            c = Arachni::Element::Link.new( @url, inputs: { 'name' => 'val' } )
+            c.should == e
+
+            e = Arachni::Element::Form.new( @url, inputs: { 'name' => 'val' } )
+            c = Arachni::Element::Form.new( @url, inputs: { 'name' => 'val' } )
+            c.should == e
+
+            e = Arachni::Element::Form.new( @url, method: 'post', inputs: { 'name' => 'val' } )
+            c = Arachni::Element::Form.new( @url, method: 'post', inputs: { 'name' => 'val' } )
+            c.should == e
+
+            e = Arachni::Element::Form.new( @url, inputs: { 'name' => 'val' } )
+            c = Arachni::Element::Form.new( @url, method: 'post', inputs: { 'name' => 'val' } )
+
+            c.should_not == e
+
+            e = Arachni::Element::Form.new( @url, inputs: { 'name' => 'val' } )
+            c = Arachni::Element::Form.new( @url + 's', inputs: { 'name' => 'val' } )
+            c.should_not == e
+
+            e = Arachni::Element::Form.new( @url, inputs: { 'name' => 'val' } )
+            c = Arachni::Element::Form.new( @url, inputs: { 'name2' => 'val' } )
+            c.should_not == e
+        end
+    end
+
+    describe '#dup' do
+        before do
+            @elem = Arachni::Element::Link.new( @url, inputs: { 'name' => 'val' } )
+        end
+        it 'should duplicate the element' do
+            e = @elem.dup
+            e.should == @elem
+            e.url = 'blah'
+            e.auditable = e.auditable.merge( 'crap' => 'stuff' )
+            @elem.auditable['crap'].should be_nil
+            @elem.url.should == @url
+        end
+        it 'should maintain the scope override' do
+            e = @elem.dup
+            e.override_instance_scope?.should be_false
+            e.override_instance_scope?.should == @elem.override_instance_scope?
+
+            e.override_instance_scope
+            c = e.dup
+            e.override_instance_scope?.should be_true
+            c.override_instance_scope?.should == e.override_instance_scope?
+
+            a = @elem.dup
+            a.override_instance_scope
+            a.override_instance_scope?.should_not == @elem.override_instance_scope?
+        end
+    end
+
+    describe '#hash' do
+        context 'when the #method is updated' do
+            it 'should be updated too' do
+                e = Arachni::Element::Base.new( @url, @raw )
+                h = e.hash
+                e.method = 'get'
+                e.hash.should_not == h
+            end
+        end
+        context 'when the #action is updated' do
+            it 'should be updated too' do
+                e = Arachni::Element::Base.new( @url, @raw )
+                h = e.hash
+                e.action = 'http://stuff.com'
+                e.hash.should_not == h
+            end
+        end
+        context 'when the #auditable is updated' do
+            it 'should be updated too' do
+                e = Arachni::Element::Base.new( @url, @raw )
+                h = e.hash
+                e.auditable = { 'stuff' => 'blah' }
+                e.hash.should_not == h
+            end
+        end
+    end
+end