supplier-meesho.webflow 1.0.0

package/MobSF/mobsf/StaticAnalyzer/forms.py

@@ -0,0 +1,92 @@
+import re
+
+from django import forms
+
+
+class AttackDetect(forms.Form):
+    file = forms.CharField()
+
+    def clean_file(self):
+        """Check ../ from path."""
+        file = self.cleaned_data['file']
+        if (('../' in file) or ('%2e%2e' in file)
+                or ('..' in file) or ('%252e' in file)):
+            raise forms.ValidationError('Attack Detected')
+
+        return file
+
+
+class IOSChecks(forms.Form):
+    file = forms.CharField()
+    type = forms.ChoiceField(  # noqa A003
+        choices=(
+            ('ipa', 'ipa'),
+            ('ios', 'ios')))
+
+    def clean_file(self):
+        """Safe Extension."""
+        file = self.cleaned_data['file']
+        ext = file.split('.')[-1]
+        ext_type = re.search('plist|db|sqlitedb|sqlite|txt|m', ext)
+        if not ext_type:
+            raise forms.ValidationError('File Extension not supported')
+        return file
+
+
+class APIChecks(forms.Form):
+    hash = forms.CharField(min_length=32, max_length=32)  # noqa A003
+
+    def clean_hash(self):
+        """Hash is valid."""
+        md5 = self.cleaned_data['hash']
+        md5_match = re.match('^[0-9a-f]{32}$', md5)
+        if not md5_match:
+            raise forms.ValidationError('Invalid Hash')
+        return md5
+
+
+class WebChecks(forms.Form):
+    md5 = forms.CharField(min_length=32, max_length=32)
+
+    def clean_md5(self):
+        """Hash is valid."""
+        md5 = self.cleaned_data['md5']
+        md5_match = re.match('^[0-9a-f]{32}$', md5)
+        if not md5_match:
+            raise forms.ValidationError('Invalid Hash')
+        return md5
+
+
+class AndroidChecks(forms.Form):
+    type = forms.ChoiceField(  # noqa A003
+        choices=(
+            ('eclipse', 'eclipse'),
+            ('studio', 'studio'),
+            ('java', 'java'),
+            ('smali', 'smali'),
+            ('apk', 'apk')))
+
+    def clean_file(self):
+        """Safe Extension."""
+        file = self.cleaned_data['file']
+        ext = file.split('.')[-1]
+        ext_type = re.search('java|smali', ext)
+        if not ext_type:
+            raise forms.ValidationError('File Extension not supported')
+        return file
+
+
+class ViewSourceIOSApiForm(AttackDetect, IOSChecks, APIChecks):
+    pass
+
+
+class ViewSourceIOSForm(AttackDetect, IOSChecks, WebChecks):
+    pass
+
+
+class ViewSourceAndroidApiForm(AttackDetect, AndroidChecks, APIChecks):
+    pass
+
+
+class ViewSourceAndroidForm(AttackDetect, AndroidChecks, WebChecks):
+    pass

package/MobSF/mobsf/StaticAnalyzer/models.py

@@ -0,0 +1,123 @@
+from datetime import datetime
+
+from django.db import models
+# Create your models here.
+
+
+class RecentScansDB(models.Model):
+    ANALYZER = models.CharField(max_length=50, default='')
+    SCAN_TYPE = models.CharField(max_length=10, default='')
+    FILE_NAME = models.CharField(max_length=260, default='')
+    APP_NAME = models.CharField(max_length=260, default='')
+    PACKAGE_NAME = models.CharField(max_length=260, default='')
+    VERSION_NAME = models.CharField(max_length=50, default='')
+    MD5 = models.CharField(max_length=32, default='', primary_key=True)
+    TIMESTAMP = models.DateTimeField(default=datetime.now)
+
+
+class StaticAnalyzerAndroid(models.Model):
+    FILE_NAME = models.CharField(max_length=260, default='')
+    APP_NAME = models.CharField(max_length=255, default='')
+    APP_TYPE = models.CharField(max_length=20, default='')
+    SIZE = models.CharField(max_length=50, default='')
+    MD5 = models.CharField(max_length=32, default='', primary_key=True)
+    SHA1 = models.CharField(max_length=40, default='')
+    SHA256 = models.CharField(max_length=64, default='')
+    PACKAGE_NAME = models.TextField(default='')
+    MAIN_ACTIVITY = models.TextField(default='')
+    EXPORTED_ACTIVITIES = models.TextField(default='')
+    BROWSABLE_ACTIVITIES = models.TextField(default={})
+    ACTIVITIES = models.TextField(default=[])
+    RECEIVERS = models.TextField(default=[])
+    PROVIDERS = models.TextField(default=[])
+    SERVICES = models.TextField(default=[])
+    LIBRARIES = models.TextField(default=[])
+    TARGET_SDK = models.CharField(max_length=50, default='')
+    MAX_SDK = models.CharField(max_length=50, default='')
+    MIN_SDK = models.CharField(max_length=50, default='')
+    VERSION_NAME = models.CharField(max_length=100, default='')
+    VERSION_CODE = models.CharField(max_length=50, default='')
+    ICON_HIDDEN = models.BooleanField(default=False)
+    ICON_FOUND = models.BooleanField(default=False)
+    PERMISSIONS = models.TextField(default={})
+    CERTIFICATE_ANALYSIS = models.TextField(default={})
+    MANIFEST_ANALYSIS = models.TextField(default=[])
+    BINARY_ANALYSIS = models.TextField(default=[])
+    FILE_ANALYSIS = models.TextField(default=[])
+    ANDROID_API = models.TextField(default={})
+    CODE_ANALYSIS = models.TextField(default={})
+    NIAP_ANALYSIS = models.TextField(default={})
+    URLS = models.TextField(default=[])
+    DOMAINS = models.TextField(default={})
+    EMAILS = models.TextField(default=[])
+    STRINGS = models.TextField(default=[])
+    FIREBASE_URLS = models.TextField(default=[])
+    FILES = models.TextField(default=[])
+    EXPORTED_COUNT = models.TextField(default={})
+    APKID = models.TextField(default={})
+    QUARK = models.TextField(default=[])
+    TRACKERS = models.TextField(default={})
+    PLAYSTORE_DETAILS = models.TextField(default={})
+    NETWORK_SECURITY = models.TextField(default=[])
+    SECRETS = models.TextField(default=[])
+
+
+class StaticAnalyzerIOS(models.Model):
+    FILE_NAME = models.CharField(max_length=255, default='')
+    APP_NAME = models.CharField(max_length=255, default='')
+    APP_TYPE = models.CharField(max_length=20, default='')
+    SIZE = models.CharField(max_length=50, default='')
+    MD5 = models.CharField(max_length=32, default='', primary_key=True)
+    SHA1 = models.CharField(max_length=40, default='')
+    SHA256 = models.CharField(max_length=64, default='')
+    BUILD = models.TextField(default='')
+    APP_VERSION = models.CharField(max_length=100, default='')
+    SDK_NAME = models.CharField(max_length=50, default='')
+    PLATFORM = models.CharField(max_length=50, default='')
+    MIN_OS_VERSION = models.CharField(max_length=50, default='')
+    BUNDLE_ID = models.TextField(default='')
+    BUNDLE_URL_TYPES = models.TextField(default=[])
+    BUNDLE_SUPPORTED_PLATFORMS = models.CharField(max_length=50, default=[])
+    ICON_FOUND = models.BooleanField(default=False)
+    INFO_PLIST = models.TextField(default='')
+    BINARY_INFO = models.TextField(default={})
+    PERMISSIONS = models.TextField(default={})
+    ATS_ANALYSIS = models.TextField(default=[])
+    BINARY_ANALYSIS = models.TextField(default=[])
+    MACHO_ANALYSIS = models.TextField(default={})
+    IOS_API = models.TextField(default={})
+    CODE_ANALYSIS = models.TextField(default={})
+    FILE_ANALYSIS = models.TextField(default=[])
+    LIBRARIES = models.TextField(default=[])
+    FILES = models.TextField(default=[])
+    URLS = models.TextField(default=[])
+    DOMAINS = models.TextField(default={})
+    EMAILS = models.TextField(default=[])
+    STRINGS = models.TextField(default=[])
+    FIREBASE_URLS = models.TextField(default=[])
+    APPSTORE_DETAILS = models.TextField(default={})
+    SECRETS = models.TextField(default=[])
+
+
+class StaticAnalyzerWindows(models.Model):
+    FILE_NAME = models.CharField(max_length=260, default='')
+    APP_NAME = models.CharField(max_length=260, default='')
+    PUBLISHER_NAME = models.TextField(default='')
+    SIZE = models.CharField(max_length=50, default='')
+    MD5 = models.CharField(max_length=32, default='', primary_key=True)
+    SHA1 = models.CharField(max_length=40, default='')
+    SHA256 = models.CharField(max_length=64, default='')
+    APP_VERSION = models.TextField(default='')
+    ARCHITECTURE = models.TextField(default='')
+    COMPILER_VERSION = models.TextField(default='')
+    VISUAL_STUDIO_VERSION = models.TextField(default='')
+    VISUAL_STUDIO_EDITION = models.TextField(default='')
+    TARGET_OS = models.TextField(default='')
+    APPX_DLL_VERSION = models.TextField(default='')
+    PROJ_GUID = models.TextField(default='')
+    OPTI_TOOL = models.TextField(default='')
+    TARGET_RUN = models.TextField(default='')
+    FILES = models.TextField(default=[])
+    STRINGS = models.TextField(default=[])
+    BINARY_ANALYSIS = models.TextField(default=[])
+    BINARY_WARNINGS = models.TextField(default=[])

package/MobSF/mobsf/StaticAnalyzer/tests.py

@@ -0,0 +1,425 @@
+#!/usr/bin/env python
+import json
+import logging
+import os
+import platform
+
+from django.conf import settings
+from django.http import HttpResponse
+from django.test import Client, TestCase
+
+from mobsf.MobSF.utils import api_key
+
+logger = logging.getLogger(__name__)
+
+RESCAN = False
+# Set RESCAN to True if Static Analyzer Code is modified
+
+
+def static_analysis_test():
+    """Test Static Analyzer."""
+    logger.info('Running Static Analyzer Unit test')
+    try:
+        uploaded = []
+        logger.info('Running Upload Test')
+        http_client = Client()
+        apk_dir = os.path.join(settings.BASE_DIR, 'StaticAnalyzer/test_files/')
+        for filename in os.listdir(apk_dir):
+            if not filename.endswith((
+                    '.xapk',
+                    '.apk',
+                    '.ipa',
+                    '.appx',
+                    '.zip')):
+                continue
+            if platform.system() == 'Windows' and filename.endswith('.ipa'):
+                continue
+            fpath = os.path.join(apk_dir, filename)
+            with open(fpath, 'rb') as file_pointer:
+                response = http_client.post(
+                    '/upload/',
+                    {'file': file_pointer})
+                obj = json.loads(response.content.decode('utf-8'))
+                if response.status_code == 200 and obj['status'] == 'success':
+                    logger.info('[OK] Upload OK: %s', filename)
+                    uploaded.append(obj)
+                else:
+                    logger.error('Performing Upload: %s', filename)
+                    return True
+        logger.info('[OK] Completed Upload test')
+        logger.info('Running Static Analysis Test')
+        for upl in uploaded:
+            scan_url = '/{}/?name={}&checksum={}&type={}'.format(
+                upl['analyzer'], upl['file_name'],
+                upl['hash'], upl['scan_type'])
+            if RESCAN:
+                scan_url = scan_url + '&rescan=1'
+            resp = http_client.get(scan_url, follow=True)
+            if resp.status_code == 200:
+                logger.info('[OK] Static Analysis Complete: %s', scan_url)
+            else:
+                logger.error('Performing Static Analysis: %s', scan_url)
+                return True
+        logger.info('[OK] Static Analysis test completed')
+        logger.info('Running PDF Generation Test')
+        if platform.system() in ['Darwin', 'Linux']:
+            pdfs = [
+                '/pdf/?md5=02e7989c457ab67eb514a8328779f256',
+                '/pdf/?md5=3a552566097a8de588b8184b059b0158',
+                '/pdf/?md5=6c23c2970551be15f32bbab0b5db0c71',
+                '/pdf/?md5=52c50ae824e329ba8b5b7a0f523efffe',
+                '/pdf/?md5=57bb5be0ea44a755ada4a93885c3825e',
+                '/pdf/?md5=8179b557433835827a70510584f3143e',
+                '/pdf/?md5=7b0a23bffc80bac05739ea1af898daad',
+            ]
+        else:
+            pdfs = [
+                '/pdf/?md5=02e7989c457ab67eb514a8328779f256',
+                '/pdf/?md5=3a552566097a8de588b8184b059b0158',
+                '/pdf/?md5=52c50ae824e329ba8b5b7a0f523efffe',
+                '/pdf/?md5=57bb5be0ea44a755ada4a93885c3825e',
+                '/pdf/?md5=8179b557433835827a70510584f3143e',
+                '/pdf/?md5=7b0a23bffc80bac05739ea1af898daad',
+            ]
+
+        for pdf in pdfs:
+            resp = http_client.get(pdf)
+            if (resp.status_code == 200
+                    and resp.headers['content-type'] == 'application/pdf'):
+                logger.info('[OK] PDF Report Generated: %s', pdf)
+            else:
+                logger.error('Generating PDF: %s', pdf)
+                logger.info(resp.content)
+                return True
+        logger.info('[OK] PDF Generation test completed')
+
+        # Compare apps test
+        logger.info('Running App Compare tests')
+        first_app = '3a552566097a8de588b8184b059b0158'
+        second_app = '52c50ae824e329ba8b5b7a0f523efffe'
+        url = '/compare/{}/{}/'.format(first_app, second_app)
+        resp = http_client.get(url, follow=True)
+        assert (resp.status_code == 200)
+        if resp.status_code == 200:
+            logger.info('[OK] App compare tests passed successfully')
+        else:
+            logger.error('App compare tests failed')
+            logger.info(resp.content)
+            return True
+
+        # Search by MD5
+        if platform.system() in ['Darwin', 'Linux']:
+            scan_md5s = ['02e7989c457ab67eb514a8328779f256',
+                         '3a552566097a8de588b8184b059b0158',
+                         '6c23c2970551be15f32bbab0b5db0c71',
+                         '52c50ae824e329ba8b5b7a0f523efffe',
+                         '57bb5be0ea44a755ada4a93885c3825e',
+                         '8179b557433835827a70510584f3143e',
+                         '7b0a23bffc80bac05739ea1af898daad']
+        else:
+            scan_md5s = ['02e7989c457ab67eb514a8328779f256',
+                         '3a552566097a8de588b8184b059b0158',
+                         '52c50ae824e329ba8b5b7a0f523efffe',
+                         '57bb5be0ea44a755ada4a93885c3825e',
+                         '8179b557433835827a70510584f3143e',
+                         '7b0a23bffc80bac05739ea1af898daad']
+        logger.info('Running Search test')
+        for scan_md5 in scan_md5s:
+            url = '/search?md5={}'.format(scan_md5)
+            resp = http_client.get(url, follow=True)
+            assert (resp.status_code == 200)
+            if resp.status_code == 200:
+                logger.info('[OK] Search by MD5 test passed for %s', scan_md5)
+            else:
+                logger.error('Search by MD5 test failed for %s', scan_md5)
+                logger.info(resp.content)
+                return True
+        logger.info('[OK] Search by MD5 tests completed')
+
+        # Deleting Scan Results
+        logger.info('Running Delete Scan Results test')
+        for md5 in scan_md5s:
+            resp = http_client.post('/delete_scan/', {'md5': md5})
+            if resp.status_code == 200:
+                dat = json.loads(resp.content.decode('utf-8'))
+                if dat['deleted'] == 'yes':
+                    logger.info('[OK] Deleted Scan: %s', md5)
+                else:
+                    logger.error('Deleting Scan: %s', md5)
+                    return True
+            else:
+                logger.error('Deleting Scan: %s', md5)
+                return True
+        logger.info('Delete Scan Results test completed')
+    except Exception:
+        logger.exception('Completing Static Analyzer Test')
+        return True
+    return False
+
+
+def api_test():
+    """View for Handling REST API Test."""
+    logger.info('\nRunning REST API Unit test')
+    auth = api_key()
+    try:
+        uploaded = []
+        logger.info('Running Test on Upload API')
+        http_client = Client()
+        apk_dir = os.path.join(settings.BASE_DIR, 'StaticAnalyzer/test_files/')
+        for filename in os.listdir(apk_dir):
+            if not filename.endswith((
+                    '.xapk',
+                    '.apk',
+                    '.ipa',
+                    '.appx',
+                    '.zip')):
+                continue
+            if platform.system() == 'Windows' and filename.endswith('.ipa'):
+                continue
+            fpath = os.path.join(apk_dir, filename)
+            if (platform.system() not in ['Darwin', 'Linux']
+                    and fpath.endswith('.ipa')):
+                continue
+            with open(fpath, 'rb') as file_pointer:
+                response = http_client.post(
+                    '/api/v1/upload',
+                    {'file': file_pointer},
+                    HTTP_AUTHORIZATION=auth)
+                obj = json.loads(response.content.decode('utf-8'))
+                if response.status_code == 200 and 'hash' in obj:
+                    logger.info('[OK] Upload OK: %s', filename)
+                    uploaded.append(obj)
+                else:
+                    logger.error('Performing Upload %s', filename)
+                    return True
+        logger.info('[OK] Completed Upload API test')
+        logger.info('Running Static Analysis API Test')
+        for upl in uploaded:
+            resp = http_client.post(
+                '/api/v1/scan', upl, HTTP_AUTHORIZATION=auth)
+            if resp.status_code == 200:
+                logger.info('[OK] Static Analysis Complete: %s',
+                            upl['file_name'])
+            else:
+                logger.error('Performing Static Analysis: %s',
+                             upl['file_name'])
+                return True
+        logger.info('[OK] Static Analysis API test completed')
+        # Scan List API test
+        logger.info('Running Scan List API tests')
+        resp = http_client.get('/api/v1/scans', HTTP_AUTHORIZATION=auth)
+        if resp.status_code == 200:
+            logger.info('Scan List API Test 1 success')
+        else:
+            logger.error('Scan List API Test 1')
+            return True
+        resp = http_client.get(
+            '/api/v1/scans?page=1&page_size=10', HTTP_AUTHORIZATION=auth)
+        if resp.status_code == 200:
+            logger.info('Scan List API Test 2 success')
+        else:
+            logger.error('Scan List API Test 2')
+            return True
+        resp = http_client.get('/api/v1/scans', HTTP_X_MOBSF_API_KEY=auth)
+        if resp.status_code == 200:
+            logger.info('Scan List API Test with custom http header 1 success')
+        else:
+            logger.error('Scan List API Test with custom http header 1')
+            return True
+        resp = http_client.get(
+            '/api/v1/scans?page=1&page_size=10', HTTP_X_MOBSF_API_KEY=auth)
+        if resp.status_code == 200:
+            logger.info('Scan List API Test with custom http header 2 success')
+        else:
+            logger.error('Scan List API Test with custom http header 2')
+            return True
+        logger.info('[OK] Scan List API tests completed')
+        # PDF Tests
+        logger.info('Running PDF Generation API Test')
+        if platform.system() in ['Darwin', 'Linux']:
+            pdfs = [
+                {'hash': '02e7989c457ab67eb514a8328779f256'},
+                {'hash': '3a552566097a8de588b8184b059b0158'},
+                {'hash': '6c23c2970551be15f32bbab0b5db0c71'},
+                {'hash': '52c50ae824e329ba8b5b7a0f523efffe'},
+                {'hash': '57bb5be0ea44a755ada4a93885c3825e'},
+                {'hash': '8179b557433835827a70510584f3143e'},
+                {'hash': '7b0a23bffc80bac05739ea1af898daad'},
+            ]
+        else:
+            pdfs = [
+                {'hash': '02e7989c457ab67eb514a8328779f256'},
+                {'hash': '3a552566097a8de588b8184b059b0158'},
+                {'hash': '52c50ae824e329ba8b5b7a0f523efffe'},
+                {'hash': '57bb5be0ea44a755ada4a93885c3825e'},
+                {'hash': '8179b557433835827a70510584f3143e'},
+                {'hash': '7b0a23bffc80bac05739ea1af898daad'},
+            ]
+        for pdf in pdfs:
+            resp = http_client.post(
+                '/api/v1/download_pdf', pdf, HTTP_AUTHORIZATION=auth)
+            resp_custom = http_client.post(
+                '/api/v1/download_pdf', pdf, HTTP_X_MOBSF_API_KEY=auth)
+            assert (resp.status_code == 200)
+            assert (resp_custom.status_code == 200)
+            if (resp.status_code == 200
+                    and resp.headers['content-type'] == 'application/pdf'):
+                logger.info('[OK] PDF Report Generated: %s', pdf['hash'])
+            else:
+                logger.error('Generating PDF: %s', pdf['hash'])
+                logger.info(resp.content)
+                return True
+        logger.info('[OK] PDF Generation API test completed')
+        logger.info('Running JSON Report API test')
+        # JSON Report
+        ctype = 'application/json; charset=utf-8'
+        for jsn in pdfs:
+            resp = http_client.post(
+                '/api/v1/report_json', jsn, HTTP_AUTHORIZATION=auth)
+            resp_custom = http_client.post(
+                '/api/v1/report_json', jsn, HTTP_X_MOBSF_API_KEY=auth)
+            assert (resp.status_code == 200)
+            assert (resp_custom.status_code == 200)
+            if (resp.status_code == 200
+                    and resp.headers['content-type'] == ctype):
+                logger.info('[OK] JSON Report Generated: %s', jsn['hash'])
+            else:
+                logger.error('Generating JSON Response: %s', jsn['hash'])
+                return True
+        logger.info('[OK] JSON Report API test completed')
+        logger.info('Running View Source API test')
+        # View Source tests
+        files = [{'file': 'opensecurity/helloworld/MainActivity.java',
+                  'type': 'apk',
+                  'hash': '3a552566097a8de588b8184b059b0158'},
+                 {'file': 'opensecurity/webviewignoressl/MainActivity.java',
+                  'type': 'studio',
+                  'hash': '52c50ae824e329ba8b5b7a0f523efffe'},
+                 {'file': 'DamnVulnerableIOSApp/AppDelegate.m',
+                  'type': 'ios',
+                  'hash': '57bb5be0ea44a755ada4a93885c3825e'}]
+        if platform.system() in ['Darwin', 'Linux']:
+            files.append({
+                'file': 'helloworld.app/Info.plist',
+                'type': 'ipa',
+                'hash': '6c23c2970551be15f32bbab0b5db0c71'})
+        for sfile in files:
+            resp = http_client.post(
+                '/api/v1/view_source', sfile, HTTP_AUTHORIZATION=auth)
+            resp_custom = http_client.post(
+                '/api/v1/view_source', sfile, HTTP_X_MOBSF_API_KEY=auth)
+            assert (resp.status_code == 200)
+            assert (resp_custom.status_code == 200)
+            if resp.status_code == 200:
+                dat = json.loads(resp.content.decode('utf-8'))
+                if dat['title']:
+                    logger.info('[OK] Reading - %s', sfile['file'])
+                else:
+                    logger.error('Reading - %s', sfile['file'])
+                    return True
+            else:
+                logger.error('Reading - %s', sfile['file'])
+                return True
+        logger.info('[OK] View Source API test completed')
+        # Compare apps test
+        logger.info('Running App Compare API tests')
+        resp = http_client.post(
+            '/api/v1/compare',
+            {
+                'hash1': '3a552566097a8de588b8184b059b0158',
+                'hash2': '52c50ae824e329ba8b5b7a0f523efffe',
+            },
+            HTTP_AUTHORIZATION=auth)
+        assert (resp.status_code == 200)
+        resp_custom = http_client.post(
+            '/api/v1/compare',
+            {
+                'hash1': '3a552566097a8de588b8184b059b0158',
+                'hash2': '52c50ae824e329ba8b5b7a0f523efffe',
+            },
+            HTTP_X_MOBSF_API_KEY=auth)
+        assert (resp_custom.status_code == 200)
+        if resp.status_code == 200:
+            logger.info('[OK] App compare API tests completed')
+        else:
+            logger.error('App compare API tests failed')
+            logger.info(resp.content)
+            return True
+        logger.info('Running Delete Scan Results test')
+        # Deleting Scan Results
+        if platform.system() in ['Darwin', 'Linux']:
+            scan_md5s = ['02e7989c457ab67eb514a8328779f256',
+                         '3a552566097a8de588b8184b059b0158',
+                         '6c23c2970551be15f32bbab0b5db0c71',
+                         '52c50ae824e329ba8b5b7a0f523efffe',
+                         '57bb5be0ea44a755ada4a93885c3825e',
+                         '8179b557433835827a70510584f3143e',
+                         '7b0a23bffc80bac05739ea1af898daad',
+                         ]
+        else:
+            scan_md5s = ['02e7989c457ab67eb514a8328779f256',
+                         '3a552566097a8de588b8184b059b0158',
+                         '52c50ae824e329ba8b5b7a0f523efffe',
+                         '57bb5be0ea44a755ada4a93885c3825e',
+                         '8179b557433835827a70510584f3143e',
+                         '7b0a23bffc80bac05739ea1af898daad',
+                         ]
+        for md5 in scan_md5s:
+            resp = http_client.post(
+                '/api/v1/delete_scan', {'hash': md5}, HTTP_AUTHORIZATION=auth)
+            if resp.status_code == 200:
+                dat = json.loads(resp.content.decode('utf-8'))
+                if dat['deleted'] == 'yes':
+                    logger.info('[OK] Deleted Scan: %s', md5)
+                else:
+                    logger.error('Deleting Scan: %s', md5)
+                    return True
+            else:
+                logger.error('Deleting Scan: %s', md5)
+                return True
+        logger.info('Delete Scan Results API test completed')
+    except Exception:
+        logger.exception('Completing REST API Unit Test')
+        return True
+    return False
+
+
+def start_test(request):
+    """Static Analyzer Unit test."""
+    item = request.GET.get('module', 'static')
+    if item == 'static':
+        comp = 'static_analyzer'
+        failed_stat = static_analysis_test()
+    else:
+        comp = 'static_analyzer_api'
+        failed_stat = api_test()
+    try:
+        if failed_stat:
+            message = 'some tests failed'
+            resp_code = 403
+        else:
+            message = 'all tests completed'
+            resp_code = 200
+    except Exception:
+        resp_code = 403
+        message = 'error'
+    logger.info('\n\nALL TESTS COMPLETED!')
+    logger.info('Test Status: %s', message)
+    return HttpResponse(json.dumps({comp: message}),
+                        content_type='application/json; charset=utf-8',
+                        status=resp_code)
+
+
+class StaticAnalyzerAndAPI(TestCase):
+    """Unit Tests."""
+
+    def setUp(self):
+        self.http_client = Client()
+
+    def test_static_analyzer(self):
+        resp = self.http_client.post('/tests/?module=static')
+        self.assertEqual(resp.status_code, 200)
+
+    def test_rest_api(self):
+        resp = self.http_client.post('/tests/?module=api')
+        self.assertEqual(resp.status_code, 200)