@ginger_tea/bug_finder 1.4.1

package/README.md

@@ -0,0 +1,19 @@
+# bug-finder
+
+**bug-finder** adalah utilitas otomatisasi untuk menemukan kerentanan keamanan dasar di aplikasi web. Ini memungkinkan Anda untuk memeriksa tautan yang rusak dan melakukan pemeriksaan dasar pada formulir di situs web target.
+
+## Instalasi
+
+Untuk menginstal dependensi yang diperlukan, jalankan:
+
+```sh
+npm install
+
+
+### Tambahan
+
+Untuk menyempurnakan proyek ini, Anda bisa menambahkan fitur-fitur berikut:
+- **Pemeriksaan Formulir:** Menambahkan fungsi untuk memeriksa formulir tanpa validasi.
+- **Laporan Kerentanan:** Membuat laporan yang merangkum semua kerentanan yang ditemukan.
+- **Konfigurasi Lebih Lanjut:** Menambahkan opsi konfigurasi untuk URL target, batas waktu permintaan, dll.
+

package/index.js

@@ -0,0 +1,108 @@
+// index.js
+
+const axios = require('axios');
+const cheerio = require('cheerio');
+const Web3 = require('web3');
+
+
+
+const config = {
+    url: 'https://pancakeswap.finance/',
+    timeout: 5000, // Milidetik
+    web3Provider: 'https://eth-mainnet.g.alchemy.com/v2/V3ooohLuofPLdWS0UqJG5rhf-bE7zKzL' // Ganti dengan URL node Ethereum Anda
+};
+
+async function checkBrokenLinks(url) {
+    try {
+        const { data } = await axios.get(url);
+        const $ = cheerio.load(data);
+        const links = $('a');
+        const brokenLinks = [];
+
+        await Promise.all(links.map(async (i, link) => {
+            const href = $(link).attr('href');
+            if (href && href.startsWith('http')) {
+                try {
+                    await axios.get(href);
+                } catch (error) {
+                    brokenLinks.push(href);
+                }
+            }
+        }).get());
+
+        return brokenLinks;
+    } catch (error) {
+        console.error(`Error checking URL ${url} for broken links:`, error);
+        return [];
+    }
+}
+
+async function checkForms(url) {
+    try {
+        const { data } = await axios.get(url);
+        const $ = cheerio.load(data);
+        const forms = $('form');
+        const formsWithoutValidation = [];
+
+        forms.each((i, form) => {
+            const inputs = $(form).find('input, textarea, select');
+            let hasValidation = false;
+
+            inputs.each((j, input) => {
+                const required = $(input).attr('required');
+                const pattern = $(input).attr('pattern');
+                if (required || pattern) {
+                    hasValidation = true;
+                }
+            });
+
+            if (!hasValidation) {
+                formsWithoutValidation.push($(form).attr('action'));
+            }
+        });
+
+        return formsWithoutValidation;
+    } catch (error) {
+        console.error(`Error checking forms on URL ${url}:`, error);
+        return [];
+    }
+}
+
+async function checkWeb3Bug(web3Provider) {
+    try {
+        const web3 = new Web3(web3Provider);
+        const latestBlock = await web3.eth.getBlockNumber();
+        console.log('Latest block number:', latestBlock);
+        return true;
+    } catch (error) {
+        console.error('Error checking Web3 connection:', error);
+        return false;
+    }
+}
+
+async function generateVulnerabilityReport(url, timeout) {
+    try {
+        const brokenLinks = await checkBrokenLinks(url);
+        const formsWithoutValidation = await checkForms(url);
+        const web3Bug = await checkWeb3Bug(config.web3Provider);
+
+        return {
+            brokenLinks,
+            formsWithoutValidation,
+            web3Bug
+        };
+    } catch (error) {
+        console.error(`Error generating vulnerability report for URL ${url}:`, error);
+        return {};
+    }
+}
+
+async function main() {
+    const { url, timeout } = config;
+    const vulnerabilityReport = await generateVulnerabilityReport(url, timeout);
+    console.log('Vulnerability Report:', vulnerabilityReport);
+}
+
+main();
+
+module.exports = { checkBrokenLinks, checkForms, generateVulnerabilityReport };

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@ginger_tea/bug_finder",
+  "version": "1.4.1",
+  "description": "A utility to automate basic security vulnerability detection in web applications.",
+  "main": "index.js",
+  "scripts": {
+    "test": "mocha"
+  },
+  "author": "zocchi",
+  "license": "ISC",
+  "dependencies": {
+    "axios": "^1.7.2",
+    "cheerio": "^1.0.0-rc.5",
+    "web3": "^4.9.0"
+  },
+  "devDependencies": {
+    "mocha": "^10.4.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ekoadit/bug_finder.git"
+  }
+}

package/tea.yaml

@@ -0,0 +1,6 @@
+# https://tea.xyz/what-is-this-file
+---
+version: 1.0.0
+codeOwners:
+  - '0x2a8100F298100393E96632F3CcE1bae0e286e4Ac'
+quorum: 1

package/test/test.js

@@ -0,0 +1,39 @@
+// test/test.js
+
+const assert = require('assert');
+const { checkBrokenLinks, checkForms, generateVulnerabilityReport } = require('../index');
+
+describe('checkBrokenLinks', function() {
+    it('should return an array', async function() {
+        const result = await checkBrokenLinks('https://pancakeswap.finance/');
+        assert(Array.isArray(result));
+    });
+});
+
+describe('checkForms', function() {
+    it('should return an array', async function() {
+        const result = await checkForms('https://pancakeswap.finance/');
+        assert(Array.isArray(result));
+    });
+});
+
+describe('generateVulnerabilityReport', function() {
+    it('should return an object with correct keys', async function() {
+        const result = await generateVulnerabilityReport('https://pancakeswap.finance/', 5000);
+        assert.strictEqual(typeof result, 'object');
+        assert.ok(result.hasOwnProperty('brokenLinks'));
+        assert.ok(result.hasOwnProperty('formsWithoutValidation'));
+        assert.ok(result.hasOwnProperty('web3Bug'));
+    });
+
+    it('should have arrays as values', async function() {
+        const result = await generateVulnerabilityReport('https://pancakeswap.finance/', 5000);
+        assert(Array.isArray(result.brokenLinks));
+        assert(Array.isArray(result.formsWithoutValidation));
+    });
+
+    it('should have boolean as value for web3Bug', async function() {
+        const result = await generateVulnerabilityReport('https://pancakeswap.finance/', 5000);
+        assert.strictEqual(typeof result.web3Bug, 'boolean');
+    });
+});