wg-metasploit_data_models 4.1.4.01 → 4.1.4.02

data/spec/app/models/mdm/module/mixin_spec.rb

@@ -0,0 +1,34 @@
+RSpec.describe Mdm::Module::Mixin, type: :model do
+
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'associations' do
+    it { is_expected.to belong_to(:detail).class_name('Mdm::Module::Detail') }
+  end
+
+  context 'database' do
+    context 'columns' do
+      it { is_expected.to have_db_column(:detail_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:name).of_type(:text) }
+    end
+
+    context 'indices' do
+      it { is_expected.to have_db_index(:detail_id) }
+    end
+  end
+
+  context 'factories' do
+    context 'mdm_module_mixin' do
+      subject(:mdm_module_mixin) do
+        FactoryBot.build :mdm_module_mixin
+      end
+
+      it { is_expected.to be_valid }
+    end
+  end
+
+  context 'validations' do
+    it { is_expected.to validate_presence_of(:detail) }
+    it { is_expected.to validate_presence_of(:name) }
+  end
+end

data/spec/app/models/mdm/module/platform_spec.rb

@@ -0,0 +1,34 @@
+RSpec.describe Mdm::Module::Platform, type: :model do
+
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'associations' do
+    it { is_expected.to belong_to(:detail).class_name('Mdm::Module::Detail') }
+  end
+
+  context 'database' do
+    context 'columns' do
+      it { is_expected.to have_db_column(:detail_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:name).of_type(:text) }
+    end
+
+    context 'indices' do
+      it { is_expected.to have_db_index(:detail_id) }
+    end
+  end
+
+  context 'factories' do
+    context 'mdm_module_platform' do
+      subject(:mdm_module_platform) do
+        FactoryBot.build :mdm_module_platform
+      end
+
+      it { is_expected.to be_valid }
+    end
+  end
+
+  context 'validations' do
+    it { is_expected.to validate_presence_of :detail }
+    it { is_expected.to validate_presence_of :name }
+  end
+end

data/spec/app/models/mdm/module/ref_spec.rb

@@ -0,0 +1,58 @@
+RSpec.describe Mdm::Module::Ref, type: :model do
+
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'associations' do
+    it { is_expected.to belong_to(:detail).class_name('Mdm::Module::Detail') }
+
+    # shoulda matchers don't have support for :primary_key option, so need
+    # to test this association manually
+    context 'refs' do
+      context 'with Mdm::Refs' do
+        context 'with same name' do
+          let(:name) do
+            FactoryBot.generate :mdm_module_ref_name
+          end
+
+          let!(:module_ref) do
+            FactoryBot.create(:mdm_module_ref, :name => name)
+          end
+
+          let!(:ref) do
+            FactoryBot.create(:mdm_ref, :name => name)
+          end
+
+          it 'should have refs in association' do
+            expect(module_ref.refs).to match_array([ref])
+          end
+        end
+      end
+    end
+  end
+
+  context 'database' do
+    context 'columns' do
+      it { is_expected.to have_db_column(:detail_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:name) }
+    end
+
+    context 'indices' do
+      it { is_expected.to have_db_column(:detail_id) }
+    end
+  end
+
+  context 'factories' do
+    context 'mdm_module_ref' do
+      subject(:mdm_module_ref) do
+        FactoryBot.build :mdm_module_ref
+      end
+
+      it { is_expected.to be_valid }
+    end
+  end
+
+  context 'validations' do
+    it { is_expected.to validate_presence_of(:detail) }
+    it { is_expected.to validate_presence_of(:name) }
+  end
+end

data/spec/app/models/mdm/module/target_spec.rb

@@ -0,0 +1,36 @@
+RSpec.describe Mdm::Module::Target, type: :model do
+
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'associations' do
+    it { is_expected.to belong_to(:detail).class_name('Mdm::Module::Detail') }
+  end
+
+  context 'database' do
+    context 'columns' do
+      it { is_expected.to have_db_column(:detail_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:index).of_type(:integer) }
+      it { is_expected.to have_db_column(:name).of_type(:text) }
+    end
+
+    context 'indices' do
+      it { is_expected.to have_db_index(:detail_id) }
+    end
+  end
+
+  context 'factories' do
+    context 'mdm_module_target' do
+      subject(:mdm_module_target) do
+        FactoryBot.build :mdm_module_target
+      end
+
+      it { is_expected.to be_valid }
+    end
+  end
+
+  context 'validations' do
+    it { is_expected.to validate_presence_of(:detail) }
+    it { is_expected.to validate_presence_of(:index) }
+    it { is_expected.to validate_presence_of(:name) }
+  end
+end

data/spec/app/models/mdm/nexpose_console_spec.rb

@@ -0,0 +1,146 @@
+RSpec.describe Mdm::NexposeConsole, type: :model do
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'factory' do
+    it 'should be valid' do
+      nexpose_console = FactoryBot.build(:mdm_nexpose_console)
+      expect(nexpose_console).to be_valid
+    end
+  end
+
+  context 'database' do
+
+    context 'timestamps'do
+      it { is_expected.to have_db_column(:created_at).of_type(:datetime).with_options(:null => false) }
+      it { is_expected.to have_db_column(:updated_at).of_type(:datetime).with_options(:null => false) }
+    end
+
+    context 'columns' do
+      it { is_expected.to have_db_column(:enabled).of_type(:boolean).with_options(:default => true) }
+      it { is_expected.to have_db_column(:owner).of_type(:text) }
+      it { is_expected.to have_db_column(:address).of_type(:text) }
+      it { is_expected.to have_db_column(:port).of_type(:integer).with_options(:default => 3780) }
+      it { is_expected.to have_db_column(:username).of_type(:text) }
+      it { is_expected.to have_db_column(:password).of_type(:text) }
+      it { is_expected.to have_db_column(:status).of_type(:text) }
+      it { is_expected.to have_db_column(:version).of_type(:text) }
+      it { is_expected.to have_db_column(:cert).of_type(:text) }
+      it { is_expected.to have_db_column(:cached_sites).of_type(:binary) }
+      it { is_expected.to have_db_column(:name).of_type(:text) }
+    end
+  end
+
+  context '#destroy' do
+    it 'should successfully destroy the object' do
+      nexpose_console = FactoryBot.create(:mdm_nexpose_console, :address => 'localhost')
+      expect {
+        nexpose_console.destroy
+      }.to_not raise_error
+      expect {
+        nexpose_console.reload
+      }.to raise_error(ActiveRecord::RecordNotFound)
+    end
+  end
+
+  context 'validations' do
+    context 'address' do
+      it 'should require an address' do
+        addressless_nexpose_console = FactoryBot.build(:mdm_nexpose_console, :address => nil)
+        expect(addressless_nexpose_console).not_to be_valid
+        expect(addressless_nexpose_console.errors[:address]).to include("can't be blank")
+      end
+
+      it 'should be valid for a valid hostname' do
+        host_nexpose_console = FactoryBot.build(:mdm_nexpose_console, :address => 'testvalue.test.com')
+        expect(host_nexpose_console).to be_valid
+      end
+
+      it 'should be invalid for a malformed hostname' do
+        host_nexpose_consoles = ['testvalue.test.com:', 'testvalue-.test.com', '[testvalue.test.com]']
+        host_nexpose_consoles.each do | entry |
+          host_nexpose_console = FactoryBot.build(:mdm_nexpose_console, :address => entry)
+          expect(host_nexpose_console).not_to be_valid
+          expect(host_nexpose_console.errors[:address]).to include("must be a valid (IP or hostname) address")
+        end
+      end
+
+      it 'should be valid for IPv4 format' do
+        ipv4_nexpose_console = FactoryBot.build(:mdm_nexpose_console, :address => '192.168.1.120')
+        expect(ipv4_nexpose_console).to be_valid
+      end
+
+      it 'should be valid for IPv6 format' do
+        ipv6_nexpose_console = FactoryBot.build(:mdm_nexpose_console, :address => '2001:0db8:85a3:0000:0000:8a2e:0370:7334')
+        expect(ipv6_nexpose_console).to be_valid
+      end
+    end
+
+    context 'port' do
+      it 'should require a port' do
+        portless_nexpose_console = FactoryBot.build(:mdm_nexpose_console, :port => nil)
+        expect(portless_nexpose_console).not_to be_valid
+        expect(portless_nexpose_console.errors[:port]).to include("is not included in the list")
+      end
+
+      it 'should not be valid for out-of-range numbers' do
+        out_of_range = FactoryBot.build(:mdm_nexpose_console, :port => 70000)
+        expect(out_of_range).not_to be_valid
+        expect(out_of_range.errors[:port]).to include("is not included in the list")
+      end
+
+      it 'should not be valid for port 0' do
+        out_of_range = FactoryBot.build(:mdm_nexpose_console, :port => 0)
+        expect(out_of_range).not_to be_valid
+        expect(out_of_range.errors[:port]).to include("is not included in the list")
+      end
+
+      it 'should not be valid for decimal numbers' do
+        out_of_range = FactoryBot.build(:mdm_nexpose_console, :port => 5.67)
+        expect(out_of_range).not_to be_valid
+        expect(out_of_range.errors[:port]).to include("must be an integer")
+      end
+
+      it 'should not be valid for a negative number' do
+        out_of_range = FactoryBot.build(:mdm_nexpose_console, :port => -8)
+        expect(out_of_range).not_to be_valid
+        expect(out_of_range.errors[:port]).to include("is not included in the list")
+      end
+    end
+
+    context 'name' do
+      it 'should require a name' do
+        unnamed_console = FactoryBot.build(:mdm_nexpose_console, :name => nil)
+        expect(unnamed_console).not_to be_valid
+        expect(unnamed_console.errors[:name]).to include("can't be blank")
+      end
+    end
+
+    context 'username' do
+      it 'should require a name' do
+        console = FactoryBot.build(:mdm_nexpose_console, :username => nil)
+        expect(console).not_to be_valid
+        expect(console.errors[:username]).to include("can't be blank")
+      end
+    end
+
+    context 'password' do
+      it 'should require a password' do
+        console = FactoryBot.build(:mdm_nexpose_console, :password => nil)
+        expect(console).not_to be_valid
+        expect(console.errors[:password]).to include("can't be blank")
+      end
+    end
+
+  end
+
+  context 'callbacks' do
+    describe '#strip_protocol' do
+      it 'should strip protocol handlers from the front of the address' do
+        nexpose_console = FactoryBot.create(:mdm_nexpose_console, :address => 'https://foo.bar.com')
+        expect(nexpose_console.address).to eq 'foo.bar.com'
+      end
+
+    end
+  end
+
+end

data/spec/app/models/mdm/note_spec.rb

@@ -0,0 +1,91 @@
+RSpec.describe Mdm::Note, type: :model do
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'factory' do
+    it 'should be valid' do
+      note = FactoryBot.build(:mdm_note)
+      expect(note).to be_valid
+    end
+  end
+
+  context 'database' do
+
+    context 'timestamps'do
+      it { is_expected.to have_db_column(:created_at).of_type(:datetime) }
+      it { is_expected.to have_db_column(:updated_at).of_type(:datetime) }
+    end
+
+    context 'columns' do
+      it { is_expected.to have_db_column(:workspace_id).of_type(:integer).with_options(:null => false, :default =>1) }
+      it { is_expected.to have_db_column(:host_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:service_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:vuln_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:ntype).of_type(:string) }
+      it { is_expected.to have_db_column(:critical).of_type(:boolean) }
+      it { is_expected.to have_db_column(:seen).of_type(:boolean) }
+      it { is_expected.to have_db_column(:data).of_type(:text) }
+    end
+  end
+
+  context '#destroy' do
+    it 'should successfully destroy the object' do
+      note = FactoryBot.create(:mdm_note)
+      expect {
+        note.destroy
+      }.to_not raise_error
+      expect {
+        note.reload
+      }.to raise_error(ActiveRecord::RecordNotFound)
+    end
+  end
+
+  context 'associations' do
+    it { is_expected.to belong_to(:workspace).class_name('Mdm::Workspace') }
+    it { is_expected.to belong_to(:host).class_name('Mdm::Host') }
+    it { is_expected.to belong_to(:service).class_name('Mdm::Service') }
+    it { is_expected.to belong_to(:vuln).class_name('Mdm::Vuln') }
+  end
+
+  context 'scopes' do
+    context 'flagged' do
+      it 'should exclude non-critical note' do
+        flagged_note = FactoryBot.create(:mdm_note, :critical => true, :seen => false)
+        non_critical_note = FactoryBot.create(:mdm_note, :critical => false, :seen => false)
+        flagged_set = Mdm::Note.flagged
+        expect(flagged_set).to include(flagged_note)
+        expect(flagged_set).not_to include(non_critical_note)
+      end
+
+      it 'should exclude seen notes' do
+        flagged_note = FactoryBot.create(:mdm_note, :critical => true, :seen => false)
+        non_critical_note = FactoryBot.create(:mdm_note, :critical => false, :seen => true)
+        flagged_set = Mdm::Note.flagged
+        expect(flagged_set).to include(flagged_note)
+        expect(flagged_set).not_to include(non_critical_note)
+      end
+    end
+
+    context 'visible' do
+      it 'should only include visible notes' do
+        flagged_note = FactoryBot.create(:mdm_note, :ntype => 'flag.me', :critical => true, :seen => false)
+        webform_note = FactoryBot.create(:mdm_note, :ntype => 'web.form', :critical => true, :seen => false)
+        visible_set = Mdm::Note.visible
+        expect(visible_set).to include(flagged_note)
+        expect(visible_set).not_to include(webform_note)
+      end
+    end
+
+    context 'search' do
+      it 'should match on ntype' do
+        flagged_note = FactoryBot.create(:mdm_note, :ntype => 'flag.me', :critical => true, :seen => false)
+        expect(Mdm::Note.search('flag.me')).to include(flagged_note)
+      end
+
+      it 'should match on host name' do
+        flagged_note = FactoryBot.create(:mdm_note, :seen => false)
+        host_name = flagged_note.host.name
+        expect(Mdm::Note.search(host_name)).to include(flagged_note)
+      end
+    end
+  end
+end

data/spec/app/models/mdm/profile_spec.rb

@@ -0,0 +1,3 @@
+RSpec.describe Mdm::Profile, type: :model do
+  it_should_behave_like 'Metasploit::Concern.run'
+end

data/spec/app/models/mdm/ref_spec.rb

@@ -0,0 +1,71 @@
+RSpec.describe Mdm::Ref, type: :model do
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'associations' do
+    # shoulda matchers don't have support for :primary_key option, so need to
+    # test this association manually
+    context 'module_refs' do
+      context 'with Mdm::Module::Refs' do
+        context 'with same name' do
+          let(:name) do
+            FactoryBot.generate :mdm_ref_name
+          end
+
+          let!(:module_ref) do
+            FactoryBot.create(:mdm_module_ref, :name => name)
+          end
+
+          let!(:ref) do
+            FactoryBot.create(:mdm_ref, :name => name)
+          end
+
+          it 'should have module_refs in assocation' do
+            expect(ref.module_refs).to match_array([module_ref])
+          end
+        end
+      end
+    end
+
+    # @todo https://www.pivotaltracker.com/story/show/48915453
+    it { is_expected.to have_many(:vulns_refs).class_name('Mdm::VulnRef') }
+    it { is_expected.to have_many(:vulns).class_name('Mdm::Vuln').through(:vulns_refs) }
+  end
+
+  context 'database' do
+    context 'columns' do
+      it { is_expected.to have_db_column(:name).of_type(:string) }
+      it { is_expected.to have_db_column(:ref_id).of_type(:integer) }
+
+      context 'timestamps' do
+        it { is_expected.to have_db_column(:created_at).of_type(:datetime) }
+        it { is_expected.to have_db_column(:updated_at).of_type(:datetime) }
+      end
+    end
+
+    context 'indices' do
+      it { is_expected.to have_db_index(:name) }
+    end
+  end
+
+  context 'factories' do
+    context 'mdm_ref' do
+      subject(:mdm_ref) do
+        FactoryBot.build :mdm_ref
+      end
+
+      it { is_expected.to be_valid }
+    end
+  end
+
+  context '#destroy' do
+    it 'should successfully destroy the object' do
+      mdm_ref = FactoryBot.create(:mdm_ref)
+      expect {
+        mdm_ref.destroy
+      }.to_not raise_error
+      expect {
+        mdm_ref.reload
+      }.to raise_error(ActiveRecord::RecordNotFound)
+    end
+  end
+end

data/spec/app/models/mdm/route_spec.rb

@@ -0,0 +1,35 @@
+RSpec.describe Mdm::Route, type: :model do
+  it_should_behave_like 'Metasploit::Concern.run'
+
+  context 'associations' do
+    it { is_expected.to belong_to(:session).class_name('Mdm::Session') }
+  end
+
+  context 'factory' do
+    it 'should be valid' do
+      route = FactoryBot.build(:mdm_route)
+      expect(route).to be_valid
+    end
+  end
+
+  context '#destroy' do
+    it 'should successfully destroy the object' do
+      route = FactoryBot.create(:mdm_route)
+      expect {
+        route.destroy
+      }.to_not raise_error
+      expect {
+        route.reload
+      }.to raise_error(ActiveRecord::RecordNotFound)
+    end
+  end
+
+  context 'database' do
+    context 'columns' do
+      it { is_expected.to have_db_column(:session_id).of_type(:integer) }
+      it { is_expected.to have_db_column(:subnet).of_type(:string) }
+      it { is_expected.to have_db_column(:netmask).of_type(:string) }
+    end
+  end
+
+end