#54 Unittest-fixes, MS17Scan(Issue #36) and order tests

Merged
carlos.garcia merged 12 commits from stefan.schmidt/merge_tests into SPIN/master 6 years ago

This consists of 3 parts:

Unittest-fixes: This adds several additional testcases for EternalBlue, Joomla and SqliAttack because we only had a default testcase for these attacks. This also fixes some crashes with get_nth_element and adds testcases for these scenarios. This also replaces 3 portscan testcases, which used mock, with 1 testcase which avoids mocking because it covers the same situations. (Having 3 testcases was unnecessary)

Order tests: This adds a generic test which checks if the packets in a result of an attack injection(input packets and injected packets) are ordered correctly according to their timestamps. We found that, at the moment, the packets of the DDoS injection are not ordered correctly. We already identified the problem and have a working solution which is NOT part of this pull request. We'd first like to discuss our solution/idea in the next meeting before actually putting it into ID2T because we want to make sure that this is okay with you.

MS17Scan(Issue #36): This adds the MS17-Scan from the EternalBlue exploit as a standalone attack. This includes unit-tests for the new "MS17ScanAttack" attack. This also removes the MS17-Scan code from the EternalBlue exploit and changes some hashes of the EternalBlue tests because of this.

This consists of 3 parts: Unittest-fixes: This adds several additional testcases for EternalBlue, Joomla and SqliAttack because we only had a default testcase for these attacks. This also fixes some crashes with get_nth_element and adds testcases for these scenarios. This also replaces 3 portscan testcases, which used mock, with 1 testcase which avoids mocking because it covers the same situations. (Having 3 testcases was unnecessary) Order tests: This adds a generic test which checks if the packets in a result of an attack injection(input packets and injected packets) are ordered correctly according to their timestamps. We found that, at the moment, the packets of the DDoS injection are not ordered correctly. We already identified the problem and have a working solution which is NOT part of this pull request. We'd first like to discuss our solution/idea in the next meeting before actually putting it into ID2T because we want to make sure that this is okay with you. MS17Scan(Issue #36): This adds the MS17-Scan from the EternalBlue exploit as a standalone attack. This includes unit-tests for the new "MS17ScanAttack" attack. This also removes the MS17-Scan code from the EternalBlue exploit and changes some hashes of the EternalBlue tests because of this.
This pull request has been merged successfully!
Sign in to join this conversation.
No Milestone
No assignee
1 Participants
Loading...
Cancel
Save
There is no content yet.