fuzzer 0.1.0

data/bin/fuzzer

@@ -0,0 +1,5 @@
+#!/usr/bin/env ruby
+
+require 'fuzzer'
+
+Fuzzer::CLI.start(ARGV)

data/lib/fuzzer.rb

@@ -0,0 +1,8 @@
+module Fuzzer 
+end
+
+require 'right_aws'
+require 'sqlite3'
+require 'zumobi'
+require 'fuzzer/version'
+require 'fuzzer/cli'

data/lib/fuzzer/cli.rb

@@ -0,0 +1,119 @@
+require 'open-uri'
+require 'right_aws'
+
+module Fuzzer
+
+class CLI
+    def self.start(argv)
+        url = argv.shift
+        
+        data = YAML::load(File.read("config.yml"));
+        if data['secret_access_key'].nil? || data['access_key_id'].nil?
+            puts "In this directory, create a config.yml file with the Amazon secret_access_key: <value> and access_key_id: <value>"
+            exit(1)
+        end
+        if (url.nil?)
+            puts "Usage: bundle exec fuzzer <url>"
+            exit(1) 
+        end
+        unless url =~ /^#{URI::regexp}$/
+            puts "I'm not seeing a valid URL here: #{url}"
+            exit(1)
+        end
+
+        file_name = CLI.download(url)
+        short_name = CLI.gunzip(file_name)
+        
+        # manipulate it
+        puts "We can corrupt this database two ways:"
+        puts "  easy: only currupt data that would come from the feed"
+        puts "  severe: also corrupt db integrity and delete nodes"
+        
+        begin
+            print "e)asy or s)evere? "
+            input = gets.chomp
+        end while (input != "e" && input != "s")
+        
+        db = SQLite3::Database.new(short_name)
+        CLI.fuzz_content(db)
+        CLI.fuzz_integrity(db) if input == "s"
+        
+        # Query as to what should be broken?
+        final_name = CLI.gzip(short_name)
+        upload(data, final_name)
+        
+    rescue Exception => e
+        puts "Well, that didn't end well: #{e.message}"
+    end
+    
+    private
+    
+    # content_items, content_item_details, that aren't id or *_fk
+    # change types, nullify, empty string, etc.
+    def self.fuzz_content(db)
+        values = ["null", "''", "'true'", "'false'", 0, 1, 4, 4.0, "'This is a very long string * This is a very long string * This is a very long string * This is a very long string * This is a very long string * This is a very long string * This is a very long string * This is a very long string * This is a very long string'"]
+
+        results = db.query("select * from content_items limit 1")
+        cols = results.columns.select { |name| name != "id" && !name.end_with?("_fk") }
+
+        db.execute("select * from content_items").each do |row|
+            (5).times do
+                db.execute("update content_items set #{cols.sample} = #{values.sample} where id = #{row[0]}")
+            end
+        end
+        results.close
+    end
+    
+    # blobs, android_metadata can also be corrupted. 
+    # Nodes can be deleted. ids and fks can be nullified.
+    # For now, just find and change an app_unique_key 
+    def self.fuzz_integrity(db)
+        rows = db.execute("select app_unique_key from content_items where app_unique_key is not null and app_unique_key != 'Settings' and app_unique_key != 'settings'")
+        key = rows.sample
+        db.execute("update content_items set title='Fuzzed',app_unique_key='fuzzed' where app_unique_key = ?", key)
+    end
+    
+    def self.download(url)
+        uri = URI.parse(url)
+        file_name = uri.path[uri.path.rindex("/")+1,uri.path.length]
+        File.open(file_name, "wb") do |saved_file|
+            open(url, 'rb') do |read_file|
+                saved_file.write(read_file.read)
+                puts "Downloaded: #{url}"
+            end
+        end
+        file_name
+    end
+
+    def self.gunzip(file_name)
+        short_name = file_name.gsub('.gz','')
+        File.open(short_name, "w+") do |file|
+            gunk = File.open(file_name, "rb")
+            file.write( Zumobi::GzipReader.un_gzip(gunk.read))
+        end
+        FileUtils.rm(file_name)
+        puts "Gunzipped the db: #{file_name}"
+        short_name
+    end
+
+    def self.gzip(file_name)
+        new_name = file_name.gsub(".db", ".#{Time.now.to_i.to_s}.db.gz")
+        File.open(new_name, "w+") do |file|
+            gunk = File.open(file_name, "rb")
+            file.write( Zumobi::GzipWriter.gzip(gunk.read))
+        end
+        FileUtils.rm(file_name)
+        puts "Gzipped the db: #{new_name}"
+        new_name
+    end
+
+    def self.upload(data, final_name)
+        s3 = Rightscale::S3.new(data['access_key_id'], data['secret_access_key'])
+        bucket = s3.bucket('media.test.zumobi.net', true)
+        key = bucket.key("fuzzed/#{final_name}")
+        key.put(File.read(final_name), 'public-read')
+        puts "Fuzzed db now available at: http://media.test.zumobi.net/fuzzed/#{final_name}"
+    end
+end
+
+end

data/lib/fuzzer/version.rb

@@ -0,0 +1,3 @@
+module Fuzzer
+  VERSION = "0.1.0"
+end

data/test/test_fuzzer.rb

@@ -0,0 +1,9 @@
+require 'test/unit'
+require 'rubygems' # Tests don't run without this, in 1.8.7 at least.
+require 'fuzzer'
+
+class FuzzerTest < Test::Unit::TestCase
+    def test_output
+        # assert_equal "This is my task".colorize(:color => :green), Fuzzer.new.generate()
+    end
+end

metadata

@@ -0,0 +1,115 @@
+--- !ruby/object:Gem::Specification
+name: fuzzer
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+  prerelease: 
+platform: ruby
+authors:
+- Alx Dark
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-07-29 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: right_aws
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: zumobi
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: debugger
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Downloads, corrupts, and uploads client sqlite dbs for testing purposes.
+email: alx.dark@zumobi.com
+executables:
+- fuzzer
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/fuzzer/cli.rb
+- lib/fuzzer/version.rb
+- lib/fuzzer.rb
+- test/test_fuzzer.rb
+- bin/fuzzer
+homepage: ''
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.23
+signing_key: 
+specification_version: 3
+summary: Fuzzes client sqlite dbs.
+test_files:
+- test/test_fuzzer.rb