Commit Graph

21 Commits

Author SHA1 Message Date
Andreas Jaeger 8c881bcbe5 Retire repository
See
http://lists.openstack.org/pipermail/openstack-discuss/2019-July/007708.html

Change-Id: If97f10290c16903d550c66163b082bd23357fca2
2020-05-08 13:51:25 +02:00
Michael Dong 6cf7bdab87 Bug fixes and error message updates
Fixes:
1) Crashes in runner and file_utils
2) Binary strings being read in as payloads

Updates:
1) Clarified error messages in parser
2) Confusing variable names in test cases vs issues

Adds:
1) A `syntribos root` CLI sub command to display the current syntribos root dir

Change-Id: I22edf7a1f3d39724522aee88d08b00d299b67248
2018-11-28 12:32:24 -06:00
Michael Dong feb3a59c95 YAML support, basicauth extension, bugfixes
1) Allows for YAML body in request templates. If a content-type
    is specified for a request template, Syntribos will validate the
    body against the header. This is to prevent templates from silently
    failing to parse and sending unintended data to the target.
 2) Added extension to support basicauth
 3) Lowered confidence ratings for various tests

Change-Id: I672b0e0aa3da1aa6dd7e9a8456da73f0a15759b7
2018-10-09 15:55:53 -05:00
Rahul Nair 94d0205b8e Pylint changes update
Updated the enabled tests and edited set of files to pass present
enabled tests.

Change-Id: I369166bacbd816b4d85732d476158468ed271d49
2016-11-22 16:10:50 -06:00
Rahul Nair d3123057c3 Adding sub commands to Syntribos
This change adds some commands to syntribos

sub commands:

- list_tests
- run
- dry_run

Also, refactoring runner.py and added utils/cli.py
to add all utility methods used for cli output.
Change-Id: Ieed2e06e0fb6eec34be640ae1db86785403546df
2016-08-16 16:15:14 -05:00
Charles Neill 95ed57ca94 Removes FuzzRequest from Syntribos
- This removes FuzzRequest as a type of RequestObject. All requests are
  now RequestObjects, and are parsed by the
  syntribos.clients.http.parser
- Fuzzing a request is now done via
  syntribos.tests.fuzz.datagen.fuzz_request()
- Moved _remove_attr_names and _remove_braces to the RequestObject
- Added unittests for fuzz datagen, http client models

Change-Id: Ib589c34ad80da58daab875d7383210d22d82d764
2016-08-03 01:15:38 +00:00
Charles Neill 879a76a488 Renaming BaseTestCase/BaseFuzzTestCase methods
This updates the BTC/BFTC class methods based on the changes we agreed
on in our 7/13 meeting.

Details here: https://etherpad.openstack.org/p/syntribos-planning

Change-Id: I05e426ee1832385ec42d64ba930caea9ddd5374f
2016-07-29 14:55:27 -05:00
Vinay Potluri cf9ab6ebe7 Added string presence check
Removed data driven pass case and refactored data driven failure case
with a string presence check

Change-Id: I1abce36296676e2c7d4a3eacaf16c619b80199f1
2016-07-28 16:52:57 -05:00
Rahul Nair dcdcda3dde Modifying checks to use test objects
Check modified to use test objects.

Change-Id: I110a7609fc172f03998a201ca6975af26f1003c3
2016-07-18 15:48:56 -05:00
Charles Neill a8a9ac6e37 Converting to oslo.config for configuration
- Merges arguments.py and and existing config.py files into one file
- Removes dependencies on cafe.* config file / CLI parsing
- Adds "register_opts" to BTC to allow Tests to specify config options
- Moves us completely from cclogging to Python logging

Change-Id: I0d4a84563d54307c94c0064be429919f9d91d67b
2016-07-11 11:52:51 -05:00
Charles Neill 70c62a0c0b Refactoring BaseTestCase/BaseFuzzTestCase
- Removed unnecessary code from BTC
- Moved some components from BFTC to BTC
- Start using signals for all tests
- Renamed several variables in BTC for clarity
- Cleaned up BaseAuthTestCase somewhat

Change-Id: I3efc44b33aa4416e1f9853910485a8c5703a9057
2016-07-05 15:42:01 -05:00
michael.dong@rackspace.com 445e12362e Simplified imports and added constants
Issues, Constants, and Results are now imported in the __init__.py of
the module

Change-Id: I805c9df4f8b838d63e2a7d04f5998718a7bf4ecb
2016-06-21 13:34:39 -05:00
michael.dong@rackspace.com 7f7ad241ef Improved XML external entity tests
1) XML external entity tests are now only generated and run when the API method
supports XML.
2) Supports timing attacks
3) Now fuzzes permutations of XXE DTDs

Change-Id: Ibe81e69f00ef3f29234037a421e40645cf1341e9
2016-05-05 16:33:49 -05:00
Charles Neill 921157a4d6 Change license from block quotes to '#'s (Sphinx)
We are currently using block quotes for license comments, which means
that Sphinx pulls this into every module, which is bad. Hash-prefixed
comments for licenses seem to be the standard for OpenStack as well.

Change-Id: Iabc60228c1201a960f672e1b0c7ab3c5312c9d8e
Implements: blueprint docstring-add-to-framework
2016-04-14 18:17:40 -05:00
michael.dong@rackspace.com 3fff915563 Test logic is no longer written in terms of assertions
Changes to the framework are only found in runner.py and base.py.

Tests are now no longer written as lists of assertions, which before meant that
it was impossible to access any variables used in the test itself after the
test was over. Instead, the register_issue method now adds the issue to
cls.failures, and will throw an AssertionError if there are any failures
reported to the test runner. This will allow us to do things like put the
failure string into the Issue description.

Change-Id: Ic3ca2ec48a6e1d99d56e605a2e0d0dc89158bc72
Implements: bp/framework-issue-creation
2016-03-29 17:58:45 -05:00
michael.dong@rackspace.com c511322c5f Modified base test cases
Test cases that inherit from base fuzz will now include the issues tested
by the BaseFuzzTestCase

Change-Id: Ib16879ade23ca7bbaaa39fd2d4a9e64a6d40283a
2016-03-14 15:24:58 -05:00
Jenkins 92f8dd4f5f Merge "Results aggregation" 2016-03-09 15:42:09 +00:00
Michael Dong ec54af8d32 Results aggregation
Issues are now only reported once for each URL and HTTP method

Change-Id: Icd711d3e0d735d030c785d0220bdaaf4a42e07e4
2016-03-08 13:26:30 -06:00
Greg Anderson 1658f6f9e1 XSS Body Test
Change-Id: Iec74ad6a537e798648a39536f23e119bff1fcc1b
2016-02-18 10:43:27 -06:00
Michael Dong 20171a64c2 extended xml entity tests to all payload params
Change-Id: I18e9a350ece3c755cda30cc955a476f53a45c2aa
2016-01-29 01:24:34 -06:00
Greg Anderson 03eb6d383f Added XML external entity test
Change-Id: I777fc04442acb8209a0dd3df7870f0c8140b7be7
2016-01-27 23:36:27 +00:00