@j3r3mcdev/oast-server 1.0.0 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/workflows/ci.yml +29 -29
- package/.github/workflows/publish.yml +31 -31
- package/README.md +192 -192
- package/dist/api/controllers/__tests__/tasks.controller.test.d.ts +1 -0
- package/dist/api/controllers/events.controller.d.ts +6 -0
- package/dist/api/controllers/health.controller.d.ts +4 -0
- package/dist/api/controllers/index.d.ts +0 -0
- package/dist/api/controllers/tasks.controller.d.ts +40 -0
- package/dist/api/dto/__tests__/create-task.dto.test.d.ts +1 -0
- package/dist/api/dto/__tests__/filter-tasks.dto.test.d.ts +1 -0
- package/dist/api/dto/create-task.dto.d.ts +9 -0
- package/dist/api/dto/filter-tasks.dto.d.ts +8 -0
- package/dist/api/services/__tests__/events.service.test.d.ts +1 -0
- package/dist/api/services/__tests__/tasks.service.test.d.ts +1 -0
- package/dist/api/services/events.service.d.ts +8 -0
- package/dist/api/services/tasks.service.d.ts +22 -0
- package/dist/api/sse/events.stream.d.ts +25 -0
- package/dist/config/constants.d.ts +0 -0
- package/dist/config/env.d.ts +0 -0
- package/dist/core/__tests__/core-router.test.d.ts +1 -0
- package/dist/core/__tests__/core-server.test.d.ts +1 -0
- package/dist/core/__tests__/event.normalizer.test.d.ts +1 -0
- package/dist/core/__tests__/event.router.test.d.ts +1 -0
- package/dist/core/__tests__/logger.test.d.ts +1 -0
- package/dist/core/__tests__/storage-manager.test.d.ts +1 -0
- package/dist/core/event.normalizer.d.ts +10 -0
- package/dist/core/event.router.d.ts +7 -0
- package/dist/core/http/__tests__/adapter-node.test.d.ts +1 -0
- package/dist/core/http/__tests__/body-parser-multipart.test.d.ts +1 -0
- package/dist/core/http/__tests__/body-parser-raw.test.d.ts +1 -0
- package/dist/core/http/__tests__/body-parser-text.test.d.ts +1 -0
- package/dist/core/http/__tests__/compile-path.test.d.ts +1 -0
- package/dist/core/http/__tests__/middleware-pipeline.test.d.ts +1 -0
- package/dist/core/http/__tests__/request.test.d.ts +1 -0
- package/dist/core/http/__tests__/response.test.d.ts +1 -0
- package/dist/core/http/__tests__/router-match.test.d.ts +1 -0
- package/dist/core/http/adapter-node.d.ts +8 -0
- package/dist/core/http/buildRequest.d.ts +2 -0
- package/dist/core/http/compile-path.d.ts +13 -0
- package/dist/core/http/errors.d.ts +9 -0
- package/dist/core/http/http-server.d.ts +7 -0
- package/dist/core/http/index.d.ts +0 -0
- package/dist/core/http/main.d.ts +0 -0
- package/dist/core/http/middleware.d.ts +12 -0
- package/dist/core/http/request.d.ts +35 -0
- package/dist/core/http/response.d.ts +17 -0
- package/dist/core/http/router.d.ts +28 -0
- package/dist/core/http/utils.d.ts +0 -0
- package/dist/core/id-generator.d.ts +3 -0
- package/dist/core/logger.d.ts +29 -0
- package/dist/core/router.d.ts +16 -0
- package/dist/core/server.d.ts +25 -0
- package/dist/core/storage.d.ts +24 -0
- package/dist/index.d.ts +1 -0
- package/dist/listeners/api/__tests__/api.controller.test.d.ts +1 -0
- package/dist/listeners/api/__tests__/api.extractor.test.d.ts +1 -0
- package/dist/listeners/api/__tests__/api.listener.test.d.ts +1 -0
- package/dist/listeners/api/__tests__/api.routes.test.d.ts +1 -0
- package/dist/listeners/api/__tests__/api.sse.test.d.ts +1 -0
- package/dist/listeners/api/api.controllers.d.ts +9 -0
- package/dist/listeners/api/api.extractor.d.ts +5 -0
- package/dist/listeners/api/api.listener.d.ts +17 -0
- package/dist/listeners/api/api.routes.d.ts +5 -0
- package/dist/listeners/api/api.sse.d.ts +10 -0
- package/dist/listeners/dns/__tests__/dns.test.d.ts +1 -0
- package/dist/listeners/dns/dns.extractor.d.ts +8 -0
- package/dist/listeners/dns/dns.listener.d.ts +15 -0
- package/dist/listeners/http/__tests__/http.extractor.test.d.ts +1 -0
- package/dist/listeners/http/__tests__/http.listener.test.d.ts +1 -0
- package/dist/listeners/http/http.extractor.d.ts +11 -0
- package/dist/listeners/http/http.listener.d.ts +17 -0
- package/dist/listeners/listener.interface.d.ts +4 -0
- package/dist/listeners/smtp/__tests__/smtp.extractor.test.d.ts +1 -0
- package/dist/listeners/smtp/__tests__/smtp.listener.test.d.ts +1 -0
- package/dist/listeners/smtp/smtp.extractor.d.ts +12 -0
- package/dist/listeners/smtp/smtp.listener.d.ts +13 -0
- package/dist/listeners/ssrf/__tests__/ssrf.extractor.test.d.ts +1 -0
- package/dist/listeners/ssrf/__tests__/ssrf.listener.test.d.ts +1 -0
- package/dist/listeners/ssrf/__tests__/ssrf.listener.test.js +4 -16
- package/dist/listeners/ssrf/ssrf.extractor.d.ts +10 -0
- package/dist/listeners/ssrf/ssrf.listener.d.ts +8 -0
- package/dist/listeners/tcp/tcp.extractor.d.ts +4 -0
- package/dist/listeners/tcp/tcp.listener.d.ts +18 -0
- package/dist/listeners/webhook/__tests__/webhook.extractor.test.d.ts +1 -0
- package/dist/listeners/webhook/__tests__/webhook.listener.test.d.ts +1 -0
- package/dist/listeners/webhook/webhook.extractor.d.ts +8 -0
- package/dist/listeners/webhook/webhook.listener.d.ts +8 -0
- package/dist/listeners/websocket/__tests__/websocket.extractor.test.d.ts +1 -0
- package/dist/listeners/websocket/__tests__/websocket.listener.test.d.ts +1 -0
- package/dist/listeners/websocket/websocket.extractor.d.ts +10 -0
- package/dist/listeners/websocket/websocket.listener.d.ts +8 -0
- package/dist/storage-adapters/adapters/__tests__/memory.storage.test.d.ts +1 -0
- package/dist/storage-adapters/adapters/memory.storage.d.ts +21 -0
- package/dist/storage-adapters/adapters/redis.storage.d.ts +0 -0
- package/dist/storage-adapters/adapters/sqlite.storage.d.ts +0 -0
- package/dist/storage-adapters/storage.interface.d.ts +18 -0
- package/dist/types/event.types.d.ts +118 -0
- package/dist/utils/token.d.ts +0 -0
- package/jest.config.js +14 -11
- package/package.json +45 -45
- package/sadmin list shadows +9 -9
- package/src/api/controllers/__tests__/tasks.controller.test.ts +74 -74
- package/src/api/controllers/events.controller.ts +10 -10
- package/src/api/controllers/health.controller.ts +7 -7
- package/src/api/controllers/tasks.controller.ts +41 -41
- package/src/api/dto/__tests__/create-task.dto.test.ts +41 -41
- package/src/api/dto/__tests__/filter-tasks.dto.test.ts +35 -35
- package/src/api/dto/create-task.dto.ts +33 -33
- package/src/api/dto/filter-tasks.dto.ts +33 -33
- package/src/api/services/__tests__/events.service.test.ts +41 -41
- package/src/api/services/__tests__/tasks.service.test.ts +41 -41
- package/src/api/services/events.service.ts +17 -17
- package/src/api/services/tasks.service.ts +79 -79
- package/src/api/sse/events.stream.ts +90 -90
- package/src/core/__tests__/core-router.test.ts +30 -30
- package/src/core/__tests__/core-server.test.ts +44 -44
- package/src/core/__tests__/event.normalizer.test.ts +56 -56
- package/src/core/__tests__/event.router.test.ts +89 -89
- package/src/core/__tests__/logger.test.ts +32 -32
- package/src/core/__tests__/storage-manager.test.ts +74 -74
- package/src/core/event.normalizer.ts +147 -147
- package/src/core/event.router.ts +13 -13
- package/src/core/http/__tests__/adapter-node.test.ts +52 -52
- package/src/core/http/__tests__/body-parser-multipart.test.ts +41 -41
- package/src/core/http/__tests__/body-parser-raw.test.ts +28 -28
- package/src/core/http/__tests__/body-parser-text.test.ts +28 -28
- package/src/core/http/__tests__/compile-path.test.ts +39 -39
- package/src/core/http/__tests__/middleware-pipeline.test.ts +51 -51
- package/src/core/http/__tests__/request.test.ts +34 -34
- package/src/core/http/__tests__/response.test.ts +35 -35
- package/src/core/http/__tests__/router-match.test.ts +171 -171
- package/src/core/http/adapter-node.ts +51 -51
- package/src/core/http/buildRequest.ts +18 -18
- package/src/core/http/compile-path.ts +32 -32
- package/src/core/http/errors.ts +37 -37
- package/src/core/http/http-server.ts +52 -52
- package/src/core/http/middleware.ts +160 -160
- package/src/core/http/request.ts +55 -55
- package/src/core/http/response.ts +93 -93
- package/src/core/http/router.ts +138 -138
- package/src/core/id-generator.ts +8 -8
- package/src/core/logger.ts +113 -113
- package/src/core/router.ts +44 -44
- package/src/core/server.ts +85 -85
- package/src/core/storage.ts +64 -64
- package/src/index.ts +89 -89
- package/src/listeners/api/__tests__/api.controller.test.ts +116 -116
- package/src/listeners/api/__tests__/api.extractor.test.ts +46 -46
- package/src/listeners/api/__tests__/api.listener.test.ts +82 -82
- package/src/listeners/api/__tests__/api.routes.test.ts +155 -155
- package/src/listeners/api/__tests__/api.sse.test.ts +105 -105
- package/src/listeners/api/api.controllers.ts +67 -67
- package/src/listeners/api/api.extractor.ts +43 -43
- package/src/listeners/api/api.listener.ts +50 -50
- package/src/listeners/api/api.routes.ts +76 -76
- package/src/listeners/api/api.sse.ts +38 -38
- package/src/listeners/dns/__tests__/dns.test.ts +118 -118
- package/src/listeners/dns/dns.extractor.ts +14 -14
- package/src/listeners/dns/dns.listener.ts +61 -61
- package/src/listeners/http/__tests__/http.extractor.test.ts +59 -59
- package/src/listeners/http/__tests__/http.listener.test.ts +133 -133
- package/src/listeners/http/http.extractor.ts +15 -15
- package/src/listeners/http/http.listener.ts +110 -110
- package/src/listeners/listener.interface.ts +4 -4
- package/src/listeners/smtp/__tests__/smtp.extractor.test.ts +69 -69
- package/src/listeners/smtp/__tests__/smtp.listener.test.ts +150 -150
- package/src/listeners/smtp/smtp.extractor.ts +18 -18
- package/src/listeners/smtp/smtp.listener.ts +60 -60
- package/src/listeners/ssrf/__tests__/ssrf.extractor.test.ts +41 -41
- package/src/listeners/ssrf/__tests__/ssrf.listener.test.ts +87 -98
- package/src/listeners/ssrf/ssrf.extractor.ts +14 -14
- package/src/listeners/ssrf/ssrf.listener.ts +37 -37
- package/src/listeners/tcp/tcp.extractor.ts +16 -16
- package/src/listeners/tcp/tcp.listener.ts +61 -61
- package/src/listeners/webhook/__tests__/webhook.extractor.test.ts +35 -35
- package/src/listeners/webhook/__tests__/webhook.listener.test.ts +122 -122
- package/src/listeners/webhook/webhook.extractor.ts +12 -12
- package/src/listeners/webhook/webhook.listener.ts +58 -58
- package/src/listeners/websocket/__tests__/websocket.extractor.test.ts +33 -33
- package/src/listeners/websocket/__tests__/websocket.listener.test.ts +90 -90
- package/src/listeners/websocket/websocket.extractor.ts +11 -11
- package/src/listeners/websocket/websocket.listener.ts +40 -40
- package/src/storage-adapters/adapters/__tests__/memory.storage.test.ts +75 -75
- package/src/storage-adapters/adapters/memory.storage.ts +64 -64
- package/src/storage-adapters/storage.interface.ts +26 -26
- package/src/types/event.types.ts +147 -147
- package/tsconfig.json +21 -15
|
@@ -1,18 +1,18 @@
|
|
|
1
|
-
export class SmtpExtractor {
|
|
2
|
-
static extract(session: any, body: string) {
|
|
3
|
-
const envelope = session?.envelope ?? {};
|
|
4
|
-
const mailFrom = envelope.mailFrom ?? {};
|
|
5
|
-
const rcptTo = Array.isArray(envelope.rcptTo) ? envelope.rcptTo : [];
|
|
6
|
-
|
|
7
|
-
return {
|
|
8
|
-
ip: session?.remoteAddress ?? "",
|
|
9
|
-
from: mailFrom.address ?? "",
|
|
10
|
-
to: rcptTo[0]?.address ?? "",
|
|
11
|
-
subject: session?.headers?.subject ?? "",
|
|
12
|
-
raw: {
|
|
13
|
-
session,
|
|
14
|
-
body,
|
|
15
|
-
},
|
|
16
|
-
};
|
|
17
|
-
}
|
|
18
|
-
}
|
|
1
|
+
export class SmtpExtractor {
|
|
2
|
+
static extract(session: any, body: string) {
|
|
3
|
+
const envelope = session?.envelope ?? {};
|
|
4
|
+
const mailFrom = envelope.mailFrom ?? {};
|
|
5
|
+
const rcptTo = Array.isArray(envelope.rcptTo) ? envelope.rcptTo : [];
|
|
6
|
+
|
|
7
|
+
return {
|
|
8
|
+
ip: session?.remoteAddress ?? "",
|
|
9
|
+
from: mailFrom.address ?? "",
|
|
10
|
+
to: rcptTo[0]?.address ?? "",
|
|
11
|
+
subject: session?.headers?.subject ?? "",
|
|
12
|
+
raw: {
|
|
13
|
+
session,
|
|
14
|
+
body,
|
|
15
|
+
},
|
|
16
|
+
};
|
|
17
|
+
}
|
|
18
|
+
}
|
|
@@ -1,60 +1,60 @@
|
|
|
1
|
-
import { CoreRouter } from "../../core/router";
|
|
2
|
-
import { EventNormalizer } from "../../core/event.normalizer";
|
|
3
|
-
import { Logger } from "../../core/logger";
|
|
4
|
-
|
|
5
|
-
export class SmtpListener {
|
|
6
|
-
private router: CoreRouter;
|
|
7
|
-
private server: any;
|
|
8
|
-
private logger: Logger;
|
|
9
|
-
|
|
10
|
-
constructor(router: CoreRouter, options: { server: any; logger?: Logger }) {
|
|
11
|
-
this.router = router;
|
|
12
|
-
this.server = options.server;
|
|
13
|
-
this.logger = options.logger ?? new Logger({ context: "SmtpListener" });
|
|
14
|
-
}
|
|
15
|
-
|
|
16
|
-
async start() {
|
|
17
|
-
this.logger.info("SMTP Listener started");
|
|
18
|
-
|
|
19
|
-
this.server.onData = async (stream: any, session: any, callback: any) => {
|
|
20
|
-
let chunks: string[] = [];
|
|
21
|
-
|
|
22
|
-
stream.on("data", (chunk: any) => {
|
|
23
|
-
chunks.push(chunk.toString());
|
|
24
|
-
});
|
|
25
|
-
|
|
26
|
-
stream.on("end", async () => {
|
|
27
|
-
const body = chunks.join("");
|
|
28
|
-
|
|
29
|
-
let event;
|
|
30
|
-
try {
|
|
31
|
-
event = EventNormalizer.normalizeSmtp({
|
|
32
|
-
ip: session.remoteAddress,
|
|
33
|
-
from: session.envelope.mailFrom.address,
|
|
34
|
-
to: session.envelope.rcptTo.map((r: any) => r.address),
|
|
35
|
-
subject: session.headers.subject,
|
|
36
|
-
body,
|
|
37
|
-
raw: session,
|
|
38
|
-
});
|
|
39
|
-
} catch (err: any) {
|
|
40
|
-
callback(new Error(err.message));
|
|
41
|
-
return;
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
try {
|
|
45
|
-
await this.router.dispatch(event);
|
|
46
|
-
callback(null);
|
|
47
|
-
} catch (err) {
|
|
48
|
-
callback(new Error("dispatch failed")); // ✔ EXACTEMENT ce que ton test attend
|
|
49
|
-
}
|
|
50
|
-
});
|
|
51
|
-
};
|
|
52
|
-
}
|
|
53
|
-
|
|
54
|
-
async stop() {
|
|
55
|
-
if (this.server?.close) {
|
|
56
|
-
this.server.close();
|
|
57
|
-
this.logger.info("SMTP Listener stopped");
|
|
58
|
-
}
|
|
59
|
-
}
|
|
60
|
-
}
|
|
1
|
+
import { CoreRouter } from "../../core/router";
|
|
2
|
+
import { EventNormalizer } from "../../core/event.normalizer";
|
|
3
|
+
import { Logger } from "../../core/logger";
|
|
4
|
+
|
|
5
|
+
export class SmtpListener {
|
|
6
|
+
private router: CoreRouter;
|
|
7
|
+
private server: any;
|
|
8
|
+
private logger: Logger;
|
|
9
|
+
|
|
10
|
+
constructor(router: CoreRouter, options: { server: any; logger?: Logger }) {
|
|
11
|
+
this.router = router;
|
|
12
|
+
this.server = options.server;
|
|
13
|
+
this.logger = options.logger ?? new Logger({ context: "SmtpListener" });
|
|
14
|
+
}
|
|
15
|
+
|
|
16
|
+
async start() {
|
|
17
|
+
this.logger.info("SMTP Listener started");
|
|
18
|
+
|
|
19
|
+
this.server.onData = async (stream: any, session: any, callback: any) => {
|
|
20
|
+
let chunks: string[] = [];
|
|
21
|
+
|
|
22
|
+
stream.on("data", (chunk: any) => {
|
|
23
|
+
chunks.push(chunk.toString());
|
|
24
|
+
});
|
|
25
|
+
|
|
26
|
+
stream.on("end", async () => {
|
|
27
|
+
const body = chunks.join("");
|
|
28
|
+
|
|
29
|
+
let event;
|
|
30
|
+
try {
|
|
31
|
+
event = EventNormalizer.normalizeSmtp({
|
|
32
|
+
ip: session.remoteAddress,
|
|
33
|
+
from: session.envelope.mailFrom.address,
|
|
34
|
+
to: session.envelope.rcptTo.map((r: any) => r.address),
|
|
35
|
+
subject: session.headers.subject,
|
|
36
|
+
body,
|
|
37
|
+
raw: session,
|
|
38
|
+
});
|
|
39
|
+
} catch (err: any) {
|
|
40
|
+
callback(new Error(err.message));
|
|
41
|
+
return;
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
try {
|
|
45
|
+
await this.router.dispatch(event);
|
|
46
|
+
callback(null);
|
|
47
|
+
} catch (err) {
|
|
48
|
+
callback(new Error("dispatch failed")); // ✔ EXACTEMENT ce que ton test attend
|
|
49
|
+
}
|
|
50
|
+
});
|
|
51
|
+
};
|
|
52
|
+
}
|
|
53
|
+
|
|
54
|
+
async stop() {
|
|
55
|
+
if (this.server?.close) {
|
|
56
|
+
this.server.close();
|
|
57
|
+
this.logger.info("SMTP Listener stopped");
|
|
58
|
+
}
|
|
59
|
+
}
|
|
60
|
+
}
|
|
@@ -1,41 +1,41 @@
|
|
|
1
|
-
import { SsrfExtractor } from "../ssrf.extractor";
|
|
2
|
-
import { describe, it, expect } from "@jest/globals";
|
|
3
|
-
|
|
4
|
-
describe("SsrfExtractor", () => {
|
|
5
|
-
it("extrait correctement toutes les données", () => {
|
|
6
|
-
const req: any = {
|
|
7
|
-
ip: "1.2.3.4",
|
|
8
|
-
method: "GET",
|
|
9
|
-
path: "/test",
|
|
10
|
-
headers: { host: "example.com" },
|
|
11
|
-
query: { a: 1 },
|
|
12
|
-
raw: { foo: "bar" },
|
|
13
|
-
};
|
|
14
|
-
|
|
15
|
-
const extracted = SsrfExtractor.extract(req);
|
|
16
|
-
|
|
17
|
-
expect(extracted).toEqual({
|
|
18
|
-
ip: "1.2.3.4",
|
|
19
|
-
method: "GET",
|
|
20
|
-
path: "/test",
|
|
21
|
-
headers: { host: "example.com" },
|
|
22
|
-
query: { a: 1 },
|
|
23
|
-
raw: req,
|
|
24
|
-
});
|
|
25
|
-
});
|
|
26
|
-
|
|
27
|
-
it("retourne une structure complète même si des champs manquent", () => {
|
|
28
|
-
const req: any = {};
|
|
29
|
-
|
|
30
|
-
const extracted = SsrfExtractor.extract(req);
|
|
31
|
-
|
|
32
|
-
expect(extracted).toEqual({
|
|
33
|
-
ip: "",
|
|
34
|
-
method: undefined,
|
|
35
|
-
path: undefined,
|
|
36
|
-
headers: {},
|
|
37
|
-
query: {},
|
|
38
|
-
raw: req,
|
|
39
|
-
});
|
|
40
|
-
});
|
|
41
|
-
});
|
|
1
|
+
import { SsrfExtractor } from "../ssrf.extractor";
|
|
2
|
+
import { describe, it, expect } from "@jest/globals";
|
|
3
|
+
|
|
4
|
+
describe("SsrfExtractor", () => {
|
|
5
|
+
it("extrait correctement toutes les données", () => {
|
|
6
|
+
const req: any = {
|
|
7
|
+
ip: "1.2.3.4",
|
|
8
|
+
method: "GET",
|
|
9
|
+
path: "/test",
|
|
10
|
+
headers: { host: "example.com" },
|
|
11
|
+
query: { a: 1 },
|
|
12
|
+
raw: { foo: "bar" },
|
|
13
|
+
};
|
|
14
|
+
|
|
15
|
+
const extracted = SsrfExtractor.extract(req);
|
|
16
|
+
|
|
17
|
+
expect(extracted).toEqual({
|
|
18
|
+
ip: "1.2.3.4",
|
|
19
|
+
method: "GET",
|
|
20
|
+
path: "/test",
|
|
21
|
+
headers: { host: "example.com" },
|
|
22
|
+
query: { a: 1 },
|
|
23
|
+
raw: req,
|
|
24
|
+
});
|
|
25
|
+
});
|
|
26
|
+
|
|
27
|
+
it("retourne une structure complète même si des champs manquent", () => {
|
|
28
|
+
const req: any = {};
|
|
29
|
+
|
|
30
|
+
const extracted = SsrfExtractor.extract(req);
|
|
31
|
+
|
|
32
|
+
expect(extracted).toEqual({
|
|
33
|
+
ip: "",
|
|
34
|
+
method: undefined,
|
|
35
|
+
path: undefined,
|
|
36
|
+
headers: {},
|
|
37
|
+
query: {},
|
|
38
|
+
raw: req,
|
|
39
|
+
});
|
|
40
|
+
});
|
|
41
|
+
});
|
|
@@ -1,98 +1,87 @@
|
|
|
1
|
-
import http from "http";
|
|
2
|
-
import { SsrfListener } from "../ssrf.listener";
|
|
3
|
-
import { SsrfExtractor } from "../ssrf.extractor";
|
|
4
|
-
import { EventNormalizer } from "../../../core/event.normalizer";
|
|
5
|
-
import {
|
|
6
|
-
describe,
|
|
7
|
-
it,
|
|
8
|
-
expect,
|
|
9
|
-
beforeEach,
|
|
10
|
-
afterEach,
|
|
11
|
-
jest,
|
|
12
|
-
} from "@jest/globals";
|
|
13
|
-
|
|
14
|
-
jest.mock("../ssrf.extractor");
|
|
15
|
-
jest.mock("../../../core/event.normalizer");
|
|
16
|
-
|
|
17
|
-
describe("SsrfListener", () => {
|
|
18
|
-
let router: any;
|
|
19
|
-
let port: number;
|
|
20
|
-
let listener: SsrfListener;
|
|
21
|
-
|
|
22
|
-
beforeEach(() => {
|
|
23
|
-
router = {
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
expect(
|
|
65
|
-
expect(router.dispatch).
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
},
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
const req = http.request(
|
|
89
|
-
{ hostname: "localhost", port, path: "/ssrf", method: "GET" },
|
|
90
|
-
(res) => {
|
|
91
|
-
expect(res.statusCode).toBe(500);
|
|
92
|
-
resolve();
|
|
93
|
-
},
|
|
94
|
-
);
|
|
95
|
-
req.end();
|
|
96
|
-
});
|
|
97
|
-
});
|
|
98
|
-
});
|
|
1
|
+
import http from "http";
|
|
2
|
+
import { SsrfListener } from "../ssrf.listener";
|
|
3
|
+
import { SsrfExtractor } from "../ssrf.extractor";
|
|
4
|
+
import { EventNormalizer } from "../../../core/event.normalizer";
|
|
5
|
+
import {
|
|
6
|
+
describe,
|
|
7
|
+
it,
|
|
8
|
+
expect,
|
|
9
|
+
beforeEach,
|
|
10
|
+
afterEach,
|
|
11
|
+
jest,
|
|
12
|
+
} from "@jest/globals";
|
|
13
|
+
|
|
14
|
+
jest.mock("../ssrf.extractor");
|
|
15
|
+
jest.mock("../../../core/event.normalizer");
|
|
16
|
+
|
|
17
|
+
describe("SsrfListener", () => {
|
|
18
|
+
let router: any;
|
|
19
|
+
let port: number;
|
|
20
|
+
let listener: SsrfListener;
|
|
21
|
+
|
|
22
|
+
beforeEach((done) => {
|
|
23
|
+
router = { dispatch: jest.fn() };
|
|
24
|
+
|
|
25
|
+
port = 12000 + Math.floor(Math.random() * 2000);
|
|
26
|
+
|
|
27
|
+
(SsrfExtractor.extract as jest.Mock).mockReturnValue({
|
|
28
|
+
ip: "1.2.3.4",
|
|
29
|
+
method: "GET",
|
|
30
|
+
path: "/ssrf",
|
|
31
|
+
headers: {},
|
|
32
|
+
query: {},
|
|
33
|
+
raw: {},
|
|
34
|
+
});
|
|
35
|
+
|
|
36
|
+
(EventNormalizer.normalizeSsrf as jest.Mock).mockReturnValue({
|
|
37
|
+
id: "123",
|
|
38
|
+
type: "ssrf",
|
|
39
|
+
timestamp: 111,
|
|
40
|
+
sourceIp: "1.2.3.4",
|
|
41
|
+
request: {
|
|
42
|
+
method: "GET",
|
|
43
|
+
path: "/ssrf",
|
|
44
|
+
headers: {},
|
|
45
|
+
query: {},
|
|
46
|
+
},
|
|
47
|
+
});
|
|
48
|
+
|
|
49
|
+
listener = new SsrfListener(router, port);
|
|
50
|
+
|
|
51
|
+
// 🔥 On attend que le serveur soit prêt
|
|
52
|
+
listener["server"].on("listening", done);
|
|
53
|
+
});
|
|
54
|
+
|
|
55
|
+
afterEach(() => {
|
|
56
|
+
listener.stop();
|
|
57
|
+
});
|
|
58
|
+
|
|
59
|
+
it("appelle router.dispatch avec l'événement normalisé", async () => {
|
|
60
|
+
await new Promise<void>((resolve) => {
|
|
61
|
+
const req = http.request(
|
|
62
|
+
{ hostname: "localhost", port, path: "/ssrf", method: "GET" },
|
|
63
|
+
(res) => {
|
|
64
|
+
expect(res.statusCode).toBe(200);
|
|
65
|
+
expect(router.dispatch).toHaveBeenCalledTimes(1);
|
|
66
|
+
resolve();
|
|
67
|
+
},
|
|
68
|
+
);
|
|
69
|
+
req.end();
|
|
70
|
+
});
|
|
71
|
+
});
|
|
72
|
+
|
|
73
|
+
it("retourne 500 si router.dispatch échoue", async () => {
|
|
74
|
+
router.dispatch.mockRejectedValue(new Error("fail"));
|
|
75
|
+
|
|
76
|
+
await new Promise<void>((resolve) => {
|
|
77
|
+
const req = http.request(
|
|
78
|
+
{ hostname: "localhost", port, path: "/ssrf", method: "GET" },
|
|
79
|
+
(res) => {
|
|
80
|
+
expect(res.statusCode).toBe(500);
|
|
81
|
+
resolve();
|
|
82
|
+
},
|
|
83
|
+
);
|
|
84
|
+
req.end();
|
|
85
|
+
});
|
|
86
|
+
});
|
|
87
|
+
});
|
|
@@ -1,14 +1,14 @@
|
|
|
1
|
-
export class SsrfExtractor {
|
|
2
|
-
static extract(req: any) {
|
|
3
|
-
const headers = req.headers ?? {};
|
|
4
|
-
|
|
5
|
-
return {
|
|
6
|
-
ip: req.ip ?? headers["x-forwarded-for"] ?? "",
|
|
7
|
-
method: req.method,
|
|
8
|
-
path: req.path ?? req.url,
|
|
9
|
-
headers,
|
|
10
|
-
query: req.query ?? {},
|
|
11
|
-
raw: req,
|
|
12
|
-
};
|
|
13
|
-
}
|
|
14
|
-
}
|
|
1
|
+
export class SsrfExtractor {
|
|
2
|
+
static extract(req: any) {
|
|
3
|
+
const headers = req.headers ?? {};
|
|
4
|
+
|
|
5
|
+
return {
|
|
6
|
+
ip: req.ip ?? headers["x-forwarded-for"] ?? "",
|
|
7
|
+
method: req.method,
|
|
8
|
+
path: req.path ?? req.url,
|
|
9
|
+
headers,
|
|
10
|
+
query: req.query ?? {},
|
|
11
|
+
raw: req,
|
|
12
|
+
};
|
|
13
|
+
}
|
|
14
|
+
}
|
|
@@ -1,37 +1,37 @@
|
|
|
1
|
-
import { CoreRouter } from "../../core/router";
|
|
2
|
-
import { SsrfExtractor } from "./ssrf.extractor";
|
|
3
|
-
import { EventNormalizer } from "../../core/event.normalizer";
|
|
4
|
-
import { Logger } from "../../core/logger";
|
|
5
|
-
import http from "http";
|
|
6
|
-
|
|
7
|
-
export class SsrfListener {
|
|
8
|
-
private router: CoreRouter;
|
|
9
|
-
private server: http.Server;
|
|
10
|
-
private logger: Logger;
|
|
11
|
-
|
|
12
|
-
constructor(router: CoreRouter, port: number) {
|
|
13
|
-
this.router = router;
|
|
14
|
-
this.logger = new Logger({ context: "SsrfListener" });
|
|
15
|
-
|
|
16
|
-
this.server = http.createServer(async (req, res) => {
|
|
17
|
-
try {
|
|
18
|
-
const extracted = SsrfExtractor.extract(req);
|
|
19
|
-
const event = EventNormalizer.normalizeSsrf(extracted);
|
|
20
|
-
|
|
21
|
-
await this.router.dispatch(event);
|
|
22
|
-
res.writeHead(200);
|
|
23
|
-
res.end("OK");
|
|
24
|
-
} catch (err) {
|
|
25
|
-
res.writeHead(500);
|
|
26
|
-
res.end("ERROR");
|
|
27
|
-
}
|
|
28
|
-
});
|
|
29
|
-
|
|
30
|
-
this.server.listen(port);
|
|
31
|
-
}
|
|
32
|
-
|
|
33
|
-
stop() {
|
|
34
|
-
this.server.close();
|
|
35
|
-
this.logger.info("SSRF Listener stopped");
|
|
36
|
-
}
|
|
37
|
-
}
|
|
1
|
+
import { CoreRouter } from "../../core/router";
|
|
2
|
+
import { SsrfExtractor } from "./ssrf.extractor";
|
|
3
|
+
import { EventNormalizer } from "../../core/event.normalizer";
|
|
4
|
+
import { Logger } from "../../core/logger";
|
|
5
|
+
import http from "http";
|
|
6
|
+
|
|
7
|
+
export class SsrfListener {
|
|
8
|
+
private router: CoreRouter;
|
|
9
|
+
private server: http.Server;
|
|
10
|
+
private logger: Logger;
|
|
11
|
+
|
|
12
|
+
constructor(router: CoreRouter, port: number) {
|
|
13
|
+
this.router = router;
|
|
14
|
+
this.logger = new Logger({ context: "SsrfListener" });
|
|
15
|
+
|
|
16
|
+
this.server = http.createServer(async (req, res) => {
|
|
17
|
+
try {
|
|
18
|
+
const extracted = SsrfExtractor.extract(req);
|
|
19
|
+
const event = EventNormalizer.normalizeSsrf(extracted);
|
|
20
|
+
|
|
21
|
+
await this.router.dispatch(event);
|
|
22
|
+
res.writeHead(200);
|
|
23
|
+
res.end("OK");
|
|
24
|
+
} catch (err) {
|
|
25
|
+
res.writeHead(500);
|
|
26
|
+
res.end("ERROR");
|
|
27
|
+
}
|
|
28
|
+
});
|
|
29
|
+
|
|
30
|
+
this.server.listen(port);
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
stop() {
|
|
34
|
+
this.server.close();
|
|
35
|
+
this.logger.info("SSRF Listener stopped");
|
|
36
|
+
}
|
|
37
|
+
}
|
|
@@ -1,16 +1,16 @@
|
|
|
1
|
-
import { RawTcpEvent, NormalizedTcpEvent } from "../../types/event.types";
|
|
2
|
-
import { IdGenerator } from "../../core/id-generator";
|
|
3
|
-
|
|
4
|
-
export class TcpExtractor {
|
|
5
|
-
static normalize(raw: RawTcpEvent): NormalizedTcpEvent {
|
|
6
|
-
return {
|
|
7
|
-
id: IdGenerator.generate(),
|
|
8
|
-
type: "tcp",
|
|
9
|
-
timestamp: Date.now(),
|
|
10
|
-
ip: raw.ip ?? "",
|
|
11
|
-
port: raw.port ?? 0,
|
|
12
|
-
data: raw.data ?? "",
|
|
13
|
-
raw,
|
|
14
|
-
};
|
|
15
|
-
}
|
|
16
|
-
}
|
|
1
|
+
import { RawTcpEvent, NormalizedTcpEvent } from "../../types/event.types";
|
|
2
|
+
import { IdGenerator } from "../../core/id-generator";
|
|
3
|
+
|
|
4
|
+
export class TcpExtractor {
|
|
5
|
+
static normalize(raw: RawTcpEvent): NormalizedTcpEvent {
|
|
6
|
+
return {
|
|
7
|
+
id: IdGenerator.generate(),
|
|
8
|
+
type: "tcp",
|
|
9
|
+
timestamp: Date.now(),
|
|
10
|
+
ip: raw.ip ?? "",
|
|
11
|
+
port: raw.port ?? 0,
|
|
12
|
+
data: raw.data ?? "",
|
|
13
|
+
raw,
|
|
14
|
+
};
|
|
15
|
+
}
|
|
16
|
+
}
|