forked from DefectDojo/django-DefectDojo
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Import_scanner_test.py
244 lines (211 loc) · 10.9 KB
/
Import_scanner_test.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
# ruff: noqa: F821
import logging
import os
import re
import shutil
import sys
import unittest
import git
from base_test_class import BaseTestCase
from product_test import ProductTest
from selenium.webdriver.common.by import By
from selenium.webdriver.support.ui import Select
dir_path = os.path.dirname(os.path.realpath(__file__))
logger = logging.getLogger(__name__)
class ScannerTest(BaseTestCase):
def setUp(self):
super().setUp(self)
self.repo_path = dir_path + "/scans"
if os.path.isdir(self.repo_path):
shutil.rmtree(self.repo_path)
os.mkdir(self.repo_path)
git.Repo.clone_from("https://github.com/DefectDojo/sample-scan-files", self.repo_path)
self.remove_items = ["__init__.py", "__init__.pyc", "factory.py", "factory.pyc",
"factory.py", "LICENSE", "README.md", ".gitignore", ".git", "__pycache__"]
tool_path = dir_path[:-5] + "dojo/tools"
tools = sorted(os.listdir(tool_path))
tests = sorted(os.listdir(self.repo_path))
self.tools = [i for i in tools if i not in self.remove_items]
self.tests = [i for i in tests if i not in self.remove_items]
def test_check_test_file(self):
missing_tests = ["MISSING TEST FOLDER"]
for tool in self.tools:
if tool not in self.tests:
missing_tests += [tool]
missing_tests += ["\nNO TEST FILES"]
for test in self.tests:
cases = sorted(os.listdir(self.repo_path + "/" + test))
cases = [i for i in cases if i not in self.remove_items]
if len(cases) == 0 and tool not in missing_tests:
missing_tests += [test]
if len(missing_tests) > 0:
logger.info("The following scanners are missing test cases or incorrectly named")
logger.info("Names must match those listed in /dojo/tools")
logger.info("Test cases can be added/modified here:")
logger.info("https://github.com/DefectDojo/sample-scan-files\n")
for test in missing_tests:
logger.info(test)
assert len(missing_tests) == 0
def test_check_for_forms(self):
forms_path = dir_path[:-5] + "dojo/forms.py"
file = open(forms_path, "r+", encoding="utf-8")
forms = file.readlines()
file.close()
forms = [form.strip().lower() for form in forms]
forms = forms[forms.index('scan_type_choices = (("", "please select a scan type"),') + 1:
forms.index("sorted_scan_type_choices = sorted(scan_type_choices, key=lambda x: x[1])") - 1]
forms = [form.replace("(", "").replace(")", "").replace("-", " ").replace('"', "").replace(".", "") for form in forms]
forms = [form[:form.index(",")] for form in forms]
remove_patterns = [" scanner", " scan"]
for pattern in remove_patterns:
forms = [re.sub(pattern, "", fix) for fix in sorted(forms)]
acronyms = []
for words in forms:
acronyms += ["".join(word[0] for word in words.split())]
missing_forms = []
for tool in self.tools:
reg = re.compile(tool.replace("_", " "))
matches = list(filter(reg.search, forms)) + list(filter(reg.search, acronyms))
matches = [m.strip() for m in matches]
if len(matches) != 1:
if tool not in matches:
missing_forms += [tool]
if len(missing_forms) > 0:
logger.info("The following scanners are missing forms")
logger.info("Names must match those listed in /dojo/tools")
logger.info("forms can be added here:")
logger.info("https://github.com/DefectDojo/django-DefectDojo/blob/master/dojo/forms.py\n")
for tool in missing_forms:
logger.info(tool)
assert len(missing_forms) == 0
@unittest.skip("Deprecated since Dynamic Parser infrastructure")
def test_check_for_options(self):
template_path = dir_path[:-5] + "dojo/templates/dojo/import_scan_results.html"
file = open(template_path, "r+", encoding="utf-8")
templates = file.readlines()
file.close()
templates = [temp.strip().lower() for temp in templates]
templates = templates[templates.index("<ul>") + 1:
templates.index("</ul>")]
remove_patterns = ["<li><b>", "</b>", "</li>", " scanner", " scan"]
for pattern in remove_patterns:
templates = [re.sub(pattern, "", temp) for temp in templates]
templates = [temp[:temp.index(" - ")] for temp in sorted(templates) if " - " in temp]
templates = [temp.replace("-", " ").replace(".", "").replace("(", "").replace(")", "") for temp in templates]
acronyms = []
for words in templates:
acronyms += ["".join(word[0] for word in words.split())]
missing_templates = []
for tool in self.tools:
temp_tool = tool.replace("_", " ")
reg = re.compile(temp_tool)
matches = list(filter(reg.search, templates)) + list(filter(reg.search, acronyms))
matches = [m.strip() for m in matches]
if len(matches) == 0:
if temp_tool not in matches:
missing_templates += [tool]
if len(missing_templates) > 0:
logger.info("The following scanners are missing templates")
logger.info("Names must match those listed in /dojo/tools")
logger.info("templates can be added here:")
logger.info("https://github.com/DefectDojo/django-DefectDojo/blob/master/dojo/templates/dojo/import_scan_results.html\n")
for tool in missing_templates:
logger.info(tool)
assert len(missing_templates) == 0
def test_engagement_import_scan_result(self):
driver = self.driver
self.goto_product_overview(driver)
driver.find_element(By.CSS_SELECTOR, ".dropdown-toggle.pull-left").click()
driver.find_element(By.LINK_TEXT, "Add New Engagement").click()
driver.find_element(By.ID, "id_name").send_keys("Scan type mapping")
driver.find_element(By.NAME, "_Import Scan Results").click()
options_text = "".join(driver.find_element(By.NAME, "scan_type").text).split("\n")
options_text = [scan.strip() for scan in options_text]
mod_options = options_text
mod_options = [re.sub(" Scanner", "", scan) for scan in mod_options]
mod_options = [re.sub(" Scan", "", scan) for scan in mod_options]
mod_options = [scan.lower().replace("-", " ").replace(".", "") for scan in mod_options]
acronyms = []
for scans in mod_options:
acronyms += ["".join(scan[0] for scan in scans.split())]
potential_matches = mod_options + acronyms
scan_map = {}
for test in self.tests:
temp_test = test.replace("_", " ").replace("-", " ")
reg = re.compile(".*" + temp_test + ".*")
found_matches = {}
for i in range(len(potential_matches)):
matches = list(filter(reg.search, [potential_matches[i]]))
if len(matches) > 0:
index = i
if i >= len(mod_options):
index = i - len(mod_options)
found_matches[index] = matches[0]
if len(found_matches) == 1:
index = list(found_matches.keys())[0]
scan_map[test] = options_text[index]
elif len(found_matches) > 1:
try:
index = list(found_matches.values()).index(temp_test)
scan_map[test] = options_text[list(found_matches.keys())[index]]
except:
pass
failed_tests = []
for test in self.tests:
cases = sorted(os.listdir(self.repo_path + "/" + test))
cases = [i for i in cases if i not in self.remove_items]
if len(cases) == 0:
failed_tests += [test.upper() + ": No test cases"]
for case in cases:
self.goto_product_overview(driver)
driver.find_element(By.CSS_SELECTOR, ".dropdown-toggle.pull-left").click()
driver.find_element(By.LINK_TEXT, "Add New Engagement").click()
driver.find_element(By.ID, "id_name").send_keys(test + " - " + case)
driver.find_element(By.NAME, "_Import Scan Results").click()
try:
driver.find_element(By.ID, "id_active").get_attribute("checked")
driver.find_element(By.ID, "id_verified").get_attribute("checked")
scan_type = scan_map[test]
Select(driver.find_element(By.ID, "id_scan_type")).select_by_visible_text(scan_type)
test_location = self.repo_path + "/" + test + "/" + case
driver.find_element(By.ID, "id_file").send_keys(test_location)
driver.find_element(By.CSS_SELECTOR, "input.btn.btn-primary").click()
EngagementTXT = "".join(driver.find_element(By.TAG_NAME, "BODY").text).split("\n")
reg = re.compile("processed, a total of")
matches = list(filter(reg.search, EngagementTXT))
if len(matches) != 1:
failed_tests += [test.upper() + " - " + case + ": Not imported"]
except Exception as e:
if e == "Message: timeout":
failed_tests += [test.upper() + " - " + case + ": Not imported due to timeout"]
else:
failed_tests += [test.upper() + ": Cannot auto select scan type"]
break
if len(failed_tests) > 0:
logger.info("The following scan imports produced errors")
logger.info("Names of tests must match those listed in /dojo/tools")
logger.info("Tests can be added/modified here:")
logger.info("https://github.com/DefectDojo/sample-scan-files\n")
for test in failed_tests:
logger.info(test)
assert len(failed_tests) == 0
def tearDown(self):
super().tearDown(self)
shutil.rmtree(self.repo_path)
def suite():
suite = unittest.TestSuite()
suite.addTest(BaseTestCase("test_login"))
suite.addTest(BaseTestCase("disable_block_execution"))
suite.addTest(ScannerTest("test_check_test_file"))
suite.addTest(ScannerTest("test_check_for_doc"))
suite.addTest(ScannerTest("test_check_for_forms"))
suite.addTest(ScannerTest("test_check_for_options"))
suite.addTest(ProductTest("test_create_product"))
suite.addTest(ScannerTest("test_engagement_import_scan_result"))
suite.addTest(ProductTest("test_delete_product"))
return suite
if __name__ == "__main__":
runner = unittest.TextTestRunner(descriptions=True, failfast=True, verbosity=2)
ret = not runner.run(suite()).wasSuccessful()
BaseTestCase.tearDownDriver()
sys.exit(ret)