tests.py

import sys
import os
import re
import unittest
from pyfiscan import is_not_secure
from database import Database
from detect import detect_general, detect_withoutnewlines
from file_helpers import postprocess_php5fcgi
from file_helpers import filepaths_in_dir

class CompareVersions(unittest.TestCase):
    def test_version_comparison(self):
        """Version comparison."""
        self.assertTrue(is_not_secure('2.1', '2.0.2'))
        self.assertTrue(is_not_secure('2.0.1', '2.0'))
        self.assertTrue(is_not_secure('2.0.1', '2.0.0'))
        self.assertFalse(is_not_secure('2.0.2', '2.0.2'))
        self.assertFalse(is_not_secure('2.0.1', '2.0.2'))
        self.assertFalse(is_not_secure('2.0', '2.0.2'))
        self.assertFalse(is_not_secure('2.0', '2.0'))
        self.assertTrue(is_not_secure('2.0', '1.9.9'))
        self.assertTrue(is_not_secure('2015.0514', '2015.0426'))
        self.assertTrue(is_not_secure('1.06', '1.05'))
        self.assertTrue(is_not_secure('1.10', '1.06'))
        self.assertTrue(is_not_secure('1.0.1', '1.0-p0', 'WikkaWiki'))
        self.assertFalse(is_not_secure('1.0.1', '1.0-p1', 'WikkaWiki'))
        self.assertTrue(is_not_secure('1.0.1.9', '1.0.1-p8', 'WikkaWiki'))


class DatabaseHandlers(unittest.TestCase):
    def test_load_database(self):
        """Loads fingerprint data from YAML files."""
        database = Database('yamls/')
        if len(database.issues) == 0:
            self.assertEqual(1, 0, 'Empty database.')
        self.assertTrue(isinstance(database, Database))

    def test_query_locations_database(self):
        """Loads fingerprint data from test file and queries locations."""
        database = Database('testfiles/')
        self.assertNotEqual(len(database.issues), 0)
        self.assertTrue(isinstance(database, Database))
        self.assertEqual(len(database.issues), 4)
        locations = database.locations('First 1.1')
        self.assertEqual(len(locations), 1)
        self.assertEqual(locations[0], ['/location/to/data'])
        location = database.locations('Second 1.2', False)
        self.assertEqual(len(location), 1)
        self.assertEqual(location[0], '/location/to/data')


class UnwantedStrings(unittest.TestCase):
    def test_search_unwanted_strings(self):
        """No unwanted strings in files."""
        for root, dirs, filenames in os.walk('yamls'):
            for f in filenames:
                    filepath = os.path.join(root, f)
                    if filepath.endswith('.pyc'):
                        continue
                    if filepath.endswith('.swp'):
                        continue
                    file = open(filepath, 'r')
                    for line in file:
                        if re.search('osvdb', line):
                            self.fail('OSVDB string found from: %s' % filepath)
                        if re.search('https://wpscan.com', line):
                            self.fail('wpscan string found from: %s' % filepath)


class FilePaths(unittest.TestCase):
    def test_filepaths(self):
        """File paths in directory are detected correctly."""
        paths = filepaths_in_dir('testfiles/', False)
        self.assertEqual(sum(1 for _ in paths), 4)
        paths = filepaths_in_dir('testfiles/', True)
        self.assertEqual(sum(1 for _ in paths), 4)
    def test_php5fcgi(self):
        """File php5.fcgi is detected correctly."""
        self.assertTrue(postprocess_php5fcgi('testfiles/', ''))
        self.assertFalse(postprocess_php5fcgi('yamls/', ''))

class FileContents(unittest.TestCase):
    def test_detect_general_latin1(self):
        """Detect_general with ISO-8859-1 encoded file."""
        res = detect_general('testfiles/ISO-8859-1', '<!ENTITY bz-ver.*?(?P<version>5\.[0-9]+)')
    def test_detect_withoutnewlines_latin1(self):
        """Detect_general with ISO-8859-1 encoded file."""
        res = detect_withoutnewlines('testfiles/ISO-8859-1', '<!ENTITY bz-ver.*?(?P<version>5\.[0-9]+)')
    def test_detect_general_utf8(self):
        """Detect_general with UTF-8 encoded file."""
        res = detect_general('testfiles/UTF-8', '<!ENTITY bz-ver.*?(?P<version>5\.[0-9]+)')
    def test_detect_withoutnewlines_utf8(self):
        """Detect_general with UTF-8 encoded file."""
        res = detect_withoutnewlines('testfiles/UTF-8', '<!ENTITY bz-ver.*?(?P<version>5\.[0-9]+)')

if __name__ == '__main__':

    if sys.version_info[0] < 3:
        sys.exit("Must be executed using Python 3")

    suite1 = unittest.TestLoader().loadTestsFromTestCase(CompareVersions)
    suite2 = unittest.TestLoader().loadTestsFromTestCase(DatabaseHandlers)
    suite3 = unittest.TestLoader().loadTestsFromTestCase(UnwantedStrings)
    suite4 = unittest.TestLoader().loadTestsFromTestCase(FilePaths)
    suite5 = unittest.TestLoader().loadTestsFromTestCase(FileContents)
    alltests = unittest.TestSuite([suite1, suite2, suite3, suite4, suite5])
    unittest.TextTestRunner(verbosity=2).run(alltests)