wg-metasploit_data_models 4.1.4.01 → 4.1.4.02

data/spec/factories/mdm/sessions.rb

@@ -0,0 +1,13 @@
+FactoryBot.define do
+  factory :mdm_session, :aliases => [:session], :class => Mdm::Session do
+    #
+    # Associations
+    #
+    association :host, :factory => :mdm_host
+
+    #
+    # Attributes
+    #
+    opened_at { DateTime.now }
+  end
+end

data/spec/factories/mdm/tags.rb

@@ -0,0 +1,14 @@
+FactoryBot.define do
+  factory :mdm_tag, :class => Mdm::Tag do
+    desc { generate :mdm_tag_desc }
+    name { generate :mdm_tag_name }
+  end
+
+  sequence :mdm_tag_desc do |n|
+    "Mdm::Tag#description #{n}"
+  end
+
+  sequence :mdm_tag_name do |n|
+    "mdm_tag_name#{n}"
+  end
+end

data/spec/factories/mdm/task.rb

@@ -0,0 +1,16 @@
+FactoryBot.define do
+  factory :mdm_task, :aliases => [:task], :class => 'Mdm::Task' do
+    #
+    # Associations
+    #
+    association :workspace, :factory => :mdm_workspace
+
+    #
+    # Attributes
+    #
+    created_at { Time.now }
+    updated_at { Time.now }
+
+
+  end
+end

data/spec/factories/mdm/task_creds.rb

@@ -0,0 +1,9 @@
+# Read about factories at https://github.com/thoughtbot/factory_bot
+
+FactoryBot.define do
+  factory :mdm_task_cred, :class => 'Mdm::TaskCred' do
+
+    association :task, :factory => :mdm_task
+    association :cred, :factory => :mdm_cred
+  end
+end

data/spec/factories/mdm/task_hosts.rb

@@ -0,0 +1,9 @@
+# Read about factories at https://github.com/thoughtbot/factory_bot
+
+FactoryBot.define do
+  factory :mdm_task_host, :class => 'Mdm::TaskHost' do
+
+    association :task, :factory => :mdm_task
+    association :host, :factory => :mdm_host
+  end
+end

data/spec/factories/mdm/task_services.rb

@@ -0,0 +1,8 @@
+# Read about factories at https://github.com/thoughtbot/factory_bot
+
+FactoryBot.define do
+  factory :mdm_task_service, :class => 'Mdm::TaskService' do
+    association :task, :factory => :mdm_task
+    association :service, :factory => :mdm_service
+  end
+end

data/spec/factories/mdm/task_sessions.rb

@@ -0,0 +1,8 @@
+# Read about factories at https://github.com/thoughtbot/factory_bot
+
+FactoryBot.define do
+  factory :mdm_task_session, :class => 'Mdm::TaskSession' do
+    association :task, :factory => :mdm_task
+    association :session, :factory => :mdm_session
+  end
+end

data/spec/factories/mdm/users.rb

@@ -0,0 +1,22 @@
+FactoryBot.define do
+  factory :mdm_user, :class => Mdm::User do
+    admin { true }
+    company { "Interplanetary Teleportation, LTD" }
+    email { "rwillingham@itl.com" }
+    fullname { generate :mdm_user_fullname }
+    phone { "5123334444" }
+    username { generate :mdm_user_username }
+  end
+
+  factory :non_admin_mdm_user, :parent => :mdm_user do
+    admin { false }
+  end
+
+  sequence :mdm_user_fullname do |n|
+    "Mdm User Fullname the #{n.ordinalize}"
+  end
+
+  sequence :mdm_user_username do |n|
+    "mdm_user_username#{n}"
+  end
+end

data/spec/factories/mdm/vuln_attempts.rb

@@ -0,0 +1,8 @@
+FactoryBot.define do
+  factory :mdm_vuln_attempt, :class => Mdm::VulnAttempt do
+    #
+    # Associations
+    #
+    association :vuln, :factory => :mdm_vuln
+  end
+end

data/spec/factories/mdm/vuln_details.rb

@@ -0,0 +1,8 @@
+FactoryBot.define do
+  factory :mdm_vuln_detail, :class => Mdm::VulnDetail do
+    #
+    # Associations
+    #
+    association :vuln, :factory => :mdm_vuln
+  end
+end

data/spec/factories/mdm/vuln_refs.rb

@@ -0,0 +1,4 @@
+FactoryBot.define do
+  factory :mdm_vuln_ref, :class => Mdm::VulnRef do
+  end
+end

data/spec/factories/mdm/vulns.rb

@@ -0,0 +1,20 @@
+FactoryBot.define do
+  factory :mdm_vuln, :class => Mdm::Vuln do
+    name { generate :mdm_vuln_name }
+
+    trait :host do
+      association :host, :factory => :mdm_host
+    end
+
+    trait :service do
+      association :service, :factory => :mdm_service
+    end
+
+    factory :mdm_host_vuln, :traits => [:host]
+    factory :mdm_service_vuln, :traits => [:service]
+  end
+
+  sequence :mdm_vuln_name do |n|
+    "Mdm::Vuln#name #{n}"
+  end
+end

data/spec/factories/mdm/web_forms.rb

@@ -0,0 +1,33 @@
+FactoryBot.define do
+  factory :mdm_web_form, :aliases => [:web_form], :class => Mdm::WebForm do
+    #
+    # Associations
+    #
+    association :web_site, :factory => :mdm_web_site
+
+    trait :exported do
+      add_attribute(:method) { generate :mdm_web_form_method }
+      params { generate :mdm_web_form_params }
+      path { generate :mdm_web_form_path }
+    end
+  end
+
+  methods = ['GET', 'POST']
+
+  sequence :mdm_web_form_method do |n|
+    methods[n % methods.length]
+  end
+
+  sequence :mdm_web_form_params do |n|
+    [
+      [
+        "name#{n}",
+        "value#{n}"
+      ]
+    ]
+  end
+
+  sequence :mdm_web_form_path do |n|
+    "path/to/web/form/#{n}"
+  end
+end

data/spec/factories/mdm/web_pages.rb

@@ -0,0 +1,64 @@
+FactoryBot.define do
+  factory :mdm_web_page, :aliases => [:web_page], :class => Mdm::WebPage do
+    auth { generate :mdm_web_page_auth }
+    body { generate :mdm_web_page_body }
+    code { generate :mdm_web_page_code }
+    cookie { generate :mdm_web_page_cookie }
+    ctype { generate :mdm_web_page_ctype }
+    headers { generate :mdm_web_page_headers }
+    location { generate :mdm_web_page_location }
+    mtime { generate :mdm_web_page_mtime }
+    query { generate :mdm_web_page_query }
+
+    #
+    # Associations
+    #
+    association :web_site, :factory => :mdm_web_site
+  end
+
+  sequence :mdm_web_page_auth do |n|
+    "Authorization: #{n}"
+  end
+
+  sequence :mdm_web_page_body do |n|
+    xml = Builder::XmlMarkup.new(:indent => 2)
+
+    xml.html
+
+    xml.target!.strip
+  end
+
+  sequence :mdm_web_page_code do |n|
+    n
+  end
+
+  sequence :mdm_web_page_cookie do |n|
+    "name#{n}=value#{n}"
+  end
+
+  sequence :mdm_web_page_ctype do |n|
+    "application/x-#{n}"
+  end
+
+  sequence :mdm_web_page_headers do |n|
+    [
+        [
+            "Header#{n}",
+            "Value#{n}"
+        ]
+    ]
+  end
+
+  sequence :mdm_web_page_location do |n|
+    "http://example.com/location/#{n}"
+  end
+
+  sequence :mdm_web_page_mtime do |n|
+    past = Time.now - n
+    past.utc.strftime('%a, %d %b %Y %H:%M:%S %Z')
+  end
+
+  sequence :mdm_web_page_query do |n|
+    "param#{n}=value#{n}"
+  end
+end

data/spec/factories/mdm/web_sites.rb

@@ -0,0 +1,8 @@
+FactoryBot.define do
+  factory :mdm_web_site, :class => Mdm::WebSite do
+    #
+    # Associations
+    #
+    association :service, :factory => :mdm_service
+  end
+end

data/spec/factories/mdm/web_vulns.rb

@@ -0,0 +1,64 @@
+FactoryBot.define do
+  factory :mdm_web_vuln, :class => Mdm::WebVuln do
+    #
+    # Associations
+    #
+    association :web_site, :factory => :mdm_web_site
+
+    #
+    # Attributes
+    #
+
+    category { generate :mdm_web_vuln_category }
+    confidence { generate :mdm_web_vuln_confidence }
+    add_attribute(:method) { generate :mdm_web_vuln_method }
+    name { generate :mdm_web_vuln_name }
+    path { generate :mdm_web_vuln_path }
+    params { generate :mdm_web_vuln_params }
+    pname { params.first.first }
+    proof { generate :mdm_web_vuln_proof }
+    risk { generate :mdm_web_vuln_risk }
+  end
+
+  sequence :mdm_web_vuln_category do |n|
+    "mdm_web_vuln_category_#{n}"
+  end
+
+  sequence :mdm_web_vuln_confidence do |n|
+    # range is from 0 to 100
+    n % 101
+  end
+
+  method_count = Mdm::WebVuln::METHODS.length
+
+  sequence :mdm_web_vuln_method do |n|
+    Mdm::WebVuln::METHODS[n % method_count]
+  end
+
+  sequence :mdm_web_vuln_name do |n|
+    "Web Vulnerability #{n}"
+  end
+
+  sequence :mdm_web_vuln_path do |n|
+    "path/to/vulnerability/#{n}"
+  end
+
+  sequence :mdm_web_vuln_params do |n|
+    [
+        [
+            "param#{n}",
+            "value#{n}"
+        ]
+    ]
+  end
+
+  sequence :mdm_web_vuln_proof do |n|
+    "Mdm::WebVuln Proof #{n}"
+  end
+
+  sequence :mdm_web_vuln_risk do |n|
+    # range is 0 .. 5
+    n % 6
+
+  end
+end

data/spec/factories/mdm/workspaces.rb

@@ -0,0 +1,23 @@
+FactoryBot.define do
+  factory :mdm_workspace, :class => Mdm::Workspace do
+    #
+    # Associations
+    #
+    association :owner, :factory => :mdm_user
+
+    #
+    # Attributes
+    #
+    boundary { generate :mdm_ipv4_address }
+    description { generate :mdm_workspace_description }
+    name { generate :mdm_workspace_name }
+  end
+
+  sequence :mdm_workspace_description do |n|
+    "Mdm::Workspace description #{n}"
+  end
+
+  sequence :mdm_workspace_name do |n|
+    "Mdm::Workspace Name #{n}"
+  end
+end

data/spec/factories/metasploit_data_models/automatic_exploitation/match_results.rb

@@ -0,0 +1,7 @@
+FactoryBot.define do
+  factory :automatic_exploitation_match_result, :class => 'MetasploitDataModels::AutomaticExploitation::MatchResult' do
+    association :match, factory: :automatic_exploitation_match
+    association :run, factory: :automatic_exploitation_run
+    state { "succeeded" }
+  end
+end

data/spec/factories/metasploit_data_models/automatic_exploitation/match_sets.rb

@@ -0,0 +1,8 @@
+# Read about factories at https://github.com/thoughtbot/factory_bot
+
+FactoryBot.define do
+  factory :automatic_exploitation_match_set, :class => MetasploitDataModels::AutomaticExploitation::MatchSet do
+    association :workspace, factory: :mdm_workspace
+    association :user, factory: :mdm_user
+  end
+end

data/spec/factories/metasploit_data_models/automatic_exploitation/matches.rb

@@ -0,0 +1,7 @@
+FactoryBot.define do
+  factory :automatic_exploitation_match, :class => MetasploitDataModels::AutomaticExploitation::Match do
+    association :module_detail, factory: :mdm_module_detail
+    association :match_set, factory: :automatic_exploitation_match_set
+    association :matchable, factory: :mdm_vuln
+  end
+end

data/spec/factories/metasploit_data_models/automatic_exploitation/runs.rb

@@ -0,0 +1,6 @@
+FactoryBot.define do
+  factory :automatic_exploitation_run, :class => MetasploitDataModels::AutomaticExploitation::Run do
+    association :workspace, factory: :mdm_workspace
+    association :user, factory: :mdm_user
+  end
+end

data/spec/factories/module_runs.rb

@@ -0,0 +1,40 @@
+FactoryBot.define do
+  sequence(:session_id)
+
+  factory :metasploit_data_models_module_run, class: MetasploitDataModels::ModuleRun do
+
+    association :user, factory: :mdm_user
+
+    trait :failed do
+      status { MetasploitDataModels::ModuleRun::FAIL }
+    end
+
+    trait :exploited do
+      status { MetasploitDataModels::ModuleRun::SUCCEED }
+    end
+
+    trait :error do
+      status { MetasploitDataModels::ModuleRun::ERROR }
+    end
+
+    attempted_at { Time.now }
+    session_id { 1 }
+    port { generate :port }
+    proto { "tcp" }
+    fail_detail { generate :module_run_fail_detail }
+    status { MetasploitDataModels::ModuleRun::SUCCEED }
+    username { "joefoo" }
+    module_fullname { generate :module_run_module_fullname }
+  end
+
+  sequence :module_run_module_fullname do |n|
+    "exploit/windows/happy-stack-smasher-#{n}"
+  end
+
+  sequence :module_run_fail_detail do |n|
+    "MetasploitDataModels::ModuleRun#fail_detail #{n}"
+  end
+
+
+end
+

data/spec/lib/base64_serializer_spec.rb

@@ -0,0 +1,172 @@
+RSpec.describe MetasploitDataModels::Base64Serializer do
+  let(:base64_marshaled) do
+    marshaled = Marshal.dump(unserialized)
+
+    [
+        marshaled
+    ].pack('m')
+  end
+
+  let(:default) do
+    {}
+  end
+
+  let(:unserialized) do
+    {
+        :foo => 'bar',
+        :baz => 'baz'
+    }
+  end
+
+  let(:yaml) do
+    unserialized.to_yaml
+  end
+
+  subject(:base64_serializer) do
+    described_class.new
+  end
+
+  context 'CONSTANTS' do
+    it 'should define DEFAULT' do
+      expect(described_class::DEFAULT).to eq(default)
+    end
+
+    context 'LOADERS' do
+      it 'should prefer base64 marshaled first' do
+        first = described_class::LOADERS[0]
+        deserialized = first.call(base64_marshaled)
+
+        expect(deserialized).to eq(unserialized)
+      end
+
+      it 'should fallback to the old YAML format second' do
+        second = described_class::LOADERS[1]
+        deserialized = second.call(yaml)
+
+        expect(deserialized).to eq(unserialized)
+      end
+
+      it 'should finally give up and just return the value' do
+        last = described_class::LOADERS.last
+        deserialized = last.call(unserialized)
+
+        expect(deserialized).to eq(unserialized)
+      end
+    end
+  end
+
+  context '#default' do
+    it 'should default to {}' do
+      expect(base64_serializer.default).to eq({})
+    end
+
+    it 'should return a duplicate' do
+      duplicate = base64_serializer.default
+      value = double('Value')
+      duplicate[:key] = value
+
+      expect(duplicate).not_to eq(base64_serializer.default)
+    end
+  end
+
+  context '#dump' do
+    it 'should output Base64 encoded marshaled data' do
+      dumped = base64_serializer.dump(unserialized)
+
+      expect(dumped).to eq(base64_marshaled)
+    end
+  end
+
+  context '#initialize' do
+    let(:attributes) do
+      {}
+    end
+
+    subject(:base64_serializer) do
+      described_class.new(attributes)
+    end
+
+    context 'with :default' do
+      let(:attributes) do
+        {
+            :default => default
+        }
+      end
+
+      let(:default) do
+        [
+            [
+                'param',
+                'value'
+            ]
+        ]
+      end
+
+      it 'should have :default in attributes' do
+        expect(attributes).to have_key(:default)
+      end
+
+      it 'should set default to :default value' do
+        expect(base64_serializer.default).to eq(attributes[:default])
+      end
+    end
+
+    context 'without :default' do
+      it 'should not have :default in attributes' do
+        expect(attributes).not_to have_key(:default)
+      end
+
+      it 'should default #default to DEFAULT' do
+        expect(base64_serializer.default).to eq(default)
+      end
+    end
+  end
+
+  context '#load' do
+    context 'with nil' do
+      let(:serialized) do
+        nil
+      end
+
+      it 'should return #default' do
+        default = double('Default')
+        allow(base64_serializer).to receive(:default).and_return(default)
+        deserialized = base64_serializer.load(serialized)
+
+        expect(deserialized).to eq(default)
+      end
+    end
+
+    context 'with Base64 encoded marshaled' do
+      it 'should return unserialized' do
+        deserialized = base64_serializer.load(base64_marshaled)
+
+        expect(deserialized).to eq(unserialized)
+      end
+
+    end
+
+    context 'with YAML' do
+      it 'should return unserialized' do
+        deserialized = base64_serializer.load(yaml)
+
+        expect(deserialized).to eq(unserialized)
+      end
+    end
+
+    context 'without Base64 encoded marshaled' do
+      context 'without YAML' do
+        let(:raw_value) do
+          "< a > b >"
+        end
+
+        it 'should return raw value' do
+          deserialized = base64_serializer.load(raw_value)
+
+          expect(deserialized).to eq(raw_value)
+        end
+      end
+    end
+  end
+end
+

data/spec/lib/ipaddr_spec.rb

@@ -0,0 +1,29 @@
+RSpec.describe IPAddr do
+  subject(:ip_address) { IPAddr.new('10.0.0.1') }
+  
+  describe '#==' do
+    it { is_expected.to be == '10.0.0.1'}
+    it { is_expected.to be == IPAddr.new('10.0.0.1')}
+    it { is_expected.not_to be == 'foo'}
+    
+    it 'does not raise an error when compared to a non ip address' do
+      expect {
+        ip_address == 'foo'
+      }.to_not raise_error
+    end
+  end
+  
+  describe '#include?' do
+    subject(:ip_range) { IPAddr.new('10.0.0.1/24') }
+    it { is_expected.to include '10.0.0.1'}
+    it { is_expected.to include ip_address}
+    it { is_expected.not_to include 'foo'}
+    
+    it 'does not raise an error when checking for a non ip address' do
+      expect {
+        ip_range.include? 'foo'
+      }.to_not raise_error
+    end
+  end
+  
+end