tcell_agent 0.2.2

data/spec/lib/tcell_agent/rails_spec.rb

@@ -0,0 +1,57 @@
+require 'spec_helper'
+
+module TCellAgent
+
+  class MockRackApp
+
+    attr_reader :request_body
+
+    def initialize
+      @request_headers = {}
+    end
+
+    def call(env)
+      @env = env
+      @request_body = env['rack.input'].read
+      [200, {'Content-Type' => 'text/plain'}, ['OK']]
+    end
+
+    def [](key)
+      @env[key]
+    end
+
+  end
+
+
+  # describe MyMiddleware do
+
+  #   let(:file_like_object) { File.open("spec/resources/normal_config.json") }
+  #   let(:app) { MockRackApp.new }
+  #   subject { described_class.new(app) }
+
+  #   context "when called with a POST request" do
+  #     let(:request) { Rack::MockRequest.new(app) }
+  #     before(:each) do
+  #       request.post("/some/path", input: post_data, 'CONTENT_TYPE' => 'text/plain')
+  #     end
+
+  #     context "with some particular data" do
+  #       let(:post_data) { "String or IO post data" }
+
+  #       it "passes the request through unchanged" do
+  #         #File.stub(:open).with("config/tcell_agent.config","rb") { StringIO.new(file_like_object) }
+  #         #File.should_receive(:read).with('/tmp/myfile').and_return(StringIO.new(file_like_object))
+          
+  #         allow(File).to receive(:open).with('config/tcell_agent.config').and_return(file_like_object)
+  #         TCellAgent.configuration = TCellAgent::Configuration.new
+  #         main_worker = ::TCellAgent::AgentWorker.new(Process.pid)
+  #         ::TCellAgent::AgentThread.setThread(main_worker)
+  #         main_worker.start
+  #         expect(app['CONTENT_TYPE']).to eq('text/plain')
+  #         expect(app.request_body).to eq(post_data)
+  #       end
+  #     end
+  #   end
+  # end
+
+end

data/spec/lib/tcell_agent/sensor_events/dlp_spec.rb

@@ -0,0 +1,14 @@
+require 'spec_helper'
+
+module TCellAgent
+    module SensorEvents
+        describe DlpEvent do
+          context "Domain from Url" do
+            it "Test Simple Domain" do
+              dlp_event = DlpEvent.new("a","b","c").for_request("x","y")
+              expect(dlp_event["context"]).to eq("x")
+            end
+          end
+        end
+    end
+end

data/spec/lib/tcell_agent/sensor_events/util/redirect_utils_spec.rb

@@ -0,0 +1,25 @@
+require 'spec_helper'
+
+module TCellAgent
+    module SensorEvents
+        module Util
+            describe Util do
+                context "Domain from Url" do
+                  it "Test Simple Domain" do
+                    expect(Util.domainFromUrl("https://www.google.com")).to eq("www.google.com")
+                  end
+                  it "Test More Complex Domain" do
+                    expect(Util.domainFromUrl("https://www.test.com:8000/abc/def")).to eq("www.test.com")
+                  end
+                end
+                context "abc" do
+                  it "abc" do
+                    expect(Util.wildcardMatch("test","test")).to eq(true)
+                    expect(Util.wildcardMatch("www.google.com","*.google.com")).to eq(true)
+                    expect(Util.wildcardMatch("google.com","*.google.com")).to eq(false)
+                  end
+                end
+            end
+        end
+    end
+end

data/spec/lib/tcell_agent/sensor_events/util/sanitizer_utilities_spec.rb

@@ -0,0 +1,57 @@
+require 'spec_helper'
+
+module TCellAgent
+    module SensorEvents
+        module Util
+            describe Util do
+                context "SHA256 Hash test" do
+                  it "Create simple HMAC" do
+                    expect(Util.hmac("testdata","testkey")).to eq("220afe7c01cca398fff2fc2c3687be94ded74f1b853db65707bf8440055217b0")
+                  end
+                  it "Check with config HMAC" do
+                    old_hmac = TCellAgent.configuration.hmac_key
+                    hmac_key = "HMAC KEY 123"
+                    TCellAgent.configuration.hmac_key = hmac_key
+                    expect(Util.getHmacKey).to eq(hmac_key)
+                    TCellAgent.configuration.hmac_key = old_hmac
+                  end
+                end
+                context "Parsing request cookies and replacing values" do
+                  it "Parsing regular uri without params" do
+                    TCellAgent.configuration.app_id = nil
+                    original_uri = "http://foo.com/posts"
+                    expect_santized_uri = "http://foo.com/posts"
+                    expect(Util.sanitize_uri(original_uri)).to eq(expect_santized_uri)
+                  end                  
+                  it "Parsing regular uri with regular query string" do
+                    TCellAgent.configuration.app_id = nil
+                    original_uri = "http://foo.com/posts?abcd"
+                    expect_santized_uri = "http://foo.com/posts?abcd="
+                    expect(Util.sanitize_uri(original_uri)).to eq(expect_santized_uri)
+                  end                  
+                  it "Parsing uri" do
+                    TCellAgent.configuration.app_id = nil
+                    original_uri = "http://foo.com/posts?id=30&limit=5#time=1305298413"
+                    expect_santized_uri = "http://foo.com/posts?id=61aa3630ced0e67b63a1c61e3b86f4d30d6ec2c5b6c37f8aac8d8a813e66df73&limit=89abb06a7bf0401b5911e61b68660c241d002ffb1685a6d2a5ba3853c73e9111#time=1305298413"
+                    expect(Util.sanitize_uri(original_uri)).to eq(expect_santized_uri)
+                  end
+                  it "returns an empty set" do
+                    TCellAgent.configuration.app_id = nil
+                    expect(Util.santize_request_cookie_string("ABC")).to eq("")
+                    expect(Util.santize_request_cookie_string("abcd=")).to match("")
+                  end
+                  it "parses a cookie" do
+                    TCellAgent.configuration.app_id = nil
+                    expect(Util.santize_request_cookie_string("x=y;z=a")).to eq("x=97cb9e2aa3ec93888b356dbcf13b280e2a8c16fc1f594a783395503d42321707;z=566c1a1c12ad909d628d4537e10773bf085a07bc4199fdf776e162c96480c5ec")
+                  end
+                end
+                context "Parsing a response set-cookie and replacing values" do
+                  it "sanitize a typical response set-cookie value" do
+                    santized_string = Util.santize_response_cookie_string("name=Nicholas; expires=Sat, 02 May 2009 23:38:25 GMT; httponly")
+                    expect(santized_string).to eq("name=beb56c04cdd764f6b7cbe6c078236aeb7246748abae29b530b93d3f5d4587eb0=; expires=Sat, 02 May 2009 23:38:25 GMT=; httponly=")
+                  end
+                end
+            end
+        end
+    end
+end

data/spec/lib/tcell_agent_spec.rb

@@ -0,0 +1,22 @@
+require 'spec_helper'
+
+module TCellAgent
+    describe Agent do
+        context "Agent Read File" do
+          agent_worker = Agent.new(0)
+          it "Reads in a policy file" do
+            policy_file_json = {
+                    "csp-headers"=>{
+                        "policy_id"=>"00a1",
+                        "headers"=>[
+                            {"name"=>"csp", "value"=>"csp loaded header"}
+                        ]
+                    }
+            }
+            agent_worker.processPolicyJson(policy_file_json)
+            expect(agent_worker.policies[TCellAgent::PolicyTypes::CSP].headers[0].type).to eq("csp")
+            expect(agent_worker.policies[TCellAgent::PolicyTypes::CSP].headers[0].value).to eq("csp loaded header")
+          end
+        end
+    end
+end

data/spec/resources/normal_config.json

@@ -0,0 +1,13 @@
+{
+    "version":1,
+    "applications": 
+    [
+    {
+      "app_id": "spec-app-id",
+      "api_key": "spec-api-key",
+      "tcell_api_url": "http://test.tcell.io/api/v1",
+      "tcell_input_url": "http://test.tcell.io/api/v1",
+      "logging_options":{"enabled":true, "level":"DEBUG"}
+    }
+    ]
+}

data/spec/spec_helper.rb

@@ -0,0 +1,4 @@
+require 'rspec'
+require 'rails'
+require 'webmock/rspec'
+require File.join(File.dirname(__FILE__), '..', 'lib', 'tcell_agent')

data/tcell_agent.gemspec

@@ -0,0 +1,29 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+#bin  = File.expand_path('../bin', __FILE__)
+
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'tcell_agent/version'
+Gem::Specification.new do |spec|
+  spec.name          = "tcell_agent"
+  spec.version       = TCellAgent::VERSION
+  spec.authors       = ["Garrett"]
+  spec.email         = ["garrett@tcell.io"]
+  spec.summary       = "tCell.io Agent for Rails & Sinatra"
+  spec.description   = "This agent allows users to use the tCell.io service with their Rails or Sinatra app."
+  spec.homepage      = "https://www.tcell.io"
+  spec.license       = "Copyright (c) 2015 tCell.io (see LICENSE file)"
+
+  spec.files = Dir['Rakefile', '{lib,config,spec}/**/*', 'README*', 'LICENSE*','tcell_agent.gemspec']
+  spec.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib","config","spec"]
+
+  spec.add_runtime_dependency "rest-client",'>= 1.6'
+  spec.add_runtime_dependency "json",'>=1.8'
+  spec.add_runtime_dependency "pbkdf2",'>=0.1'
+  spec.add_development_dependency "rspec-core"
+  spec.add_development_dependency "bundler", ">= 1.7"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec",'~>0.9' 
+end

metadata

@@ -0,0 +1,249 @@
+--- !ruby/object:Gem::Specification
+name: tcell_agent
+version: !ruby/object:Gem::Version
+  version: 0.2.2
+platform: ruby
+authors:
+- Garrett
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-12-04 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rest-client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: pbkdf2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.1'
+- !ruby/object:Gem::Dependency
+  name: rspec-core
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.9'
+description: This agent allows users to use the tCell.io service with their Rails
+  or Sinatra app.
+email:
+- garrett@tcell.io
+executables:
+- tcell_agent
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- Rakefile
+- bin/tcell_agent
+- config/initializers/authlogic_auth.rb
+- config/initializers/devise_auth.rb
+- config/initializers/init.rb
+- lib/tcell_agent.rb
+- lib/tcell_agent/agent.rb
+- lib/tcell_agent/agent/event_processor.rb
+- lib/tcell_agent/agent/policy_manager.rb
+- lib/tcell_agent/agent/policy_types.rb
+- lib/tcell_agent/agent/static_agent.rb
+- lib/tcell_agent/api.rb
+- lib/tcell_agent/appsensor.rb
+- lib/tcell_agent/appsensor/cmdi.rb
+- lib/tcell_agent/appsensor/path_traversal.rb
+- lib/tcell_agent/appsensor/sqli.rb
+- lib/tcell_agent/appsensor/xss.rb
+- lib/tcell_agent/authlogic.rb
+- lib/tcell_agent/configuration.rb
+- lib/tcell_agent/dataloss.rb
+- lib/tcell_agent/devise.rb
+- lib/tcell_agent/instrumentation.rb
+- lib/tcell_agent/logger.rb
+- lib/tcell_agent/policies/add_script_tag_policy.rb
+- lib/tcell_agent/policies/appsensor_policy.rb
+- lib/tcell_agent/policies/clickjacking_policy.rb
+- lib/tcell_agent/policies/content_security_policy.rb
+- lib/tcell_agent/policies/dataloss_policy.rb
+- lib/tcell_agent/policies/honeytokens_policy.rb
+- lib/tcell_agent/policies/http_redirect_policy.rb
+- lib/tcell_agent/policies/http_tx_policy.rb
+- lib/tcell_agent/policies/login_fraud_policy.rb
+- lib/tcell_agent/policies/secure_headers_policy.rb
+- lib/tcell_agent/rails.rb
+- lib/tcell_agent/rails/devise.rb
+- lib/tcell_agent/rails/dlp.rb
+- lib/tcell_agent/rails/middleware/body_filter_middleware.rb
+- lib/tcell_agent/rails/middleware/context_middleware.rb
+- lib/tcell_agent/rails/middleware/global_middleware.rb
+- lib/tcell_agent/rails/middleware/headers_middleware.rb
+- lib/tcell_agent/rails/routes.rb
+- lib/tcell_agent/rails/settings_reporter.rb
+- lib/tcell_agent/sensor_events/app_config.rb
+- lib/tcell_agent/sensor_events/app_sensor.rb
+- lib/tcell_agent/sensor_events/dlp.rb
+- lib/tcell_agent/sensor_events/honeytokens.rb
+- lib/tcell_agent/sensor_events/login_fraud.rb
+- lib/tcell_agent/sensor_events/metrics.rb
+- lib/tcell_agent/sensor_events/sensor.rb
+- lib/tcell_agent/sensor_events/server_agent.rb
+- lib/tcell_agent/sensor_events/util/redirect_utils.rb
+- lib/tcell_agent/sensor_events/util/sanitizer_utilities.rb
+- lib/tcell_agent/sensor_events/util/utils.rb
+- lib/tcell_agent/sinatra.rb
+- lib/tcell_agent/start_background_thread.rb
+- lib/tcell_agent/userinfo.rb
+- lib/tcell_agent/utils/queue_with_timeout.rb
+- lib/tcell_agent/version.rb
+- spec/controllers/application_controller.rb
+- spec/lib/tcell_agent/api/api_spec.rb
+- spec/lib/tcell_agent/appsensor_spec.rb
+- spec/lib/tcell_agent/policies/add_script_tag_policy_spec.rb
+- spec/lib/tcell_agent/policies/appsensor_policy_spec.rb
+- spec/lib/tcell_agent/policies/clickjacking_policy_spec.rb
+- spec/lib/tcell_agent/policies/content_security_policy_spec.rb
+- spec/lib/tcell_agent/policies/dataloss_policy_spec.rb
+- spec/lib/tcell_agent/policies/honeytokens_policy_spec.rb
+- spec/lib/tcell_agent/policies/http_redirect_policy_spec.rb
+- spec/lib/tcell_agent/policies/http_tx_policy_spec.rb
+- spec/lib/tcell_agent/policies/login_policy_spec.rb
+- spec/lib/tcell_agent/policies/secure_headers_policy_spec.rb
+- spec/lib/tcell_agent/rails/middleware/global_middleware_spec.rb
+- spec/lib/tcell_agent/rails_spec.rb
+- spec/lib/tcell_agent/sensor_events/dlp_spec.rb
+- spec/lib/tcell_agent/sensor_events/util/redirect_utils_spec.rb
+- spec/lib/tcell_agent/sensor_events/util/sanitizer_utilities_spec.rb
+- spec/lib/tcell_agent_spec.rb
+- spec/resources/normal_config.json
+- spec/spec_helper.rb
+- tcell_agent.gemspec
+homepage: https://www.tcell.io
+licenses:
+- Copyright (c) 2015 tCell.io (see LICENSE file)
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+- config
+- spec
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: tCell.io Agent for Rails & Sinatra
+test_files:
+- spec/controllers/application_controller.rb
+- spec/lib/tcell_agent/api/api_spec.rb
+- spec/lib/tcell_agent/appsensor_spec.rb
+- spec/lib/tcell_agent/policies/add_script_tag_policy_spec.rb
+- spec/lib/tcell_agent/policies/appsensor_policy_spec.rb
+- spec/lib/tcell_agent/policies/clickjacking_policy_spec.rb
+- spec/lib/tcell_agent/policies/content_security_policy_spec.rb
+- spec/lib/tcell_agent/policies/dataloss_policy_spec.rb
+- spec/lib/tcell_agent/policies/honeytokens_policy_spec.rb
+- spec/lib/tcell_agent/policies/http_redirect_policy_spec.rb
+- spec/lib/tcell_agent/policies/http_tx_policy_spec.rb
+- spec/lib/tcell_agent/policies/login_policy_spec.rb
+- spec/lib/tcell_agent/policies/secure_headers_policy_spec.rb
+- spec/lib/tcell_agent/rails/middleware/global_middleware_spec.rb
+- spec/lib/tcell_agent/rails_spec.rb
+- spec/lib/tcell_agent/sensor_events/dlp_spec.rb
+- spec/lib/tcell_agent/sensor_events/util/redirect_utils_spec.rb
+- spec/lib/tcell_agent/sensor_events/util/sanitizer_utilities_spec.rb
+- spec/lib/tcell_agent_spec.rb
+- spec/resources/normal_config.json
+- spec/spec_helper.rb