mirror of
https://github.com/ChronosX88/PyNesca.git
synced 2024-10-18 06:31:00 +00:00
95 lines
3.1 KiB
Python
95 lines
3.1 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding:utf-8 -*-
|
|
|
|
from modules.network_scan.FTPScanner import FTPScanner
|
|
from pyftpdlib.authorizers import DummyAuthorizer
|
|
from pyftpdlib.handlers import FTPHandler
|
|
from pyftpdlib.servers import FTPServer
|
|
import unittest
|
|
from tempfile import mkdtemp
|
|
import multiprocessing
|
|
from time import sleep
|
|
|
|
import http.server
|
|
import socketserver
|
|
import os
|
|
|
|
TEST_CREDS = (("admin", "admin"), ("1", "1"), ('user', 'password'))
|
|
PORT = 2121
|
|
|
|
|
|
def run_anonymous_ftp(temp_dir):
|
|
authorizer = DummyAuthorizer()
|
|
authorizer.add_anonymous(temp_dir)
|
|
handler = FTPHandler
|
|
handler.authorizer = authorizer
|
|
server = FTPServer(("127.0.0.1", PORT), handler)
|
|
server.serve_forever()
|
|
|
|
|
|
def run_bruteforce_ftp(temp_dir):
|
|
authorizer = DummyAuthorizer()
|
|
user, password = TEST_CREDS[-1]
|
|
authorizer.add_user(user, password, temp_dir, perm="elradfmw")
|
|
handler = FTPHandler
|
|
handler.authorizer = authorizer
|
|
handler.max_login_attempts = 2 # Drop connection on each 2 incorrect attempts
|
|
server = FTPServer(("127.0.0.1", PORT), handler)
|
|
server.serve_forever()
|
|
|
|
|
|
def run_mumble():
|
|
handler = http.server.SimpleHTTPRequestHandler
|
|
httpd = socketserver.TCPServer(("127.0.0.1", PORT), handler)
|
|
httpd.serve_forever()
|
|
|
|
|
|
class TestFTPScanner(unittest.TestCase):
|
|
def test_closed_port(self):
|
|
scanner = FTPScanner(timeout=10, credentials=TEST_CREDS)
|
|
result = scanner.scan_address('127.0.0.1', 31337)
|
|
print(result)
|
|
#self.assertEqual(result['status'], 'Connection refused', "Should be error")
|
|
self.assertTrue("Connection refused" in result['ftp_status'], "Connection refused")
|
|
|
|
def test_mumble(self):
|
|
p = multiprocessing.Process(target=run_mumble)
|
|
p.start()
|
|
sleep(5)
|
|
scanner = FTPScanner(timeout=10, credentials=TEST_CREDS)
|
|
result = scanner.scan_address('127.0.0.1', PORT)
|
|
print(result)
|
|
self.assertEqual(result['status'], 'error', "Should be error")
|
|
self.assertTrue("timed out" in result['error_type'], "Timed out")
|
|
p.terminate()
|
|
|
|
def test_anonymous_login(self):
|
|
temp_dir = mkdtemp()
|
|
p = multiprocessing.Process(target=run_anonymous_ftp, args=(temp_dir,))
|
|
p.start()
|
|
sleep(5)
|
|
scanner = FTPScanner(timeout=10, credentials=TEST_CREDS)
|
|
result = scanner.scan_address('127.0.0.1', PORT)
|
|
print(result)
|
|
self.assertEqual(result['login'], None, "Should be True")
|
|
self.assertEqual(result['password'], None, "Should be True")
|
|
p.terminate()
|
|
os.rmdir(temp_dir)
|
|
|
|
def test_bruteforce(self):
|
|
temp_dir = mkdtemp()
|
|
p = multiprocessing.Process(target=run_bruteforce_ftp, args=(temp_dir,))
|
|
p.start()
|
|
sleep(5)
|
|
scanner = FTPScanner(timeout=10, credentials=TEST_CREDS)
|
|
result = scanner.scan_address('127.0.0.1', PORT)
|
|
print(result)
|
|
self.assertEqual(result['login'], TEST_CREDS[-1][0], "Should be True")
|
|
self.assertEqual(result['password'], TEST_CREDS[-1][1], "Should be True")
|
|
p.terminate()
|
|
os.rmdir(temp_dir)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main()
|