Added quick tests
This commit is contained in:
@@ -1,13 +0,0 @@
|
|||||||
{
|
|
||||||
"files": {
|
|
||||||
"main.css": "/static/css/main.c375ae17.css",
|
|
||||||
"main.js": "/static/js/main.76d17c5c.js",
|
|
||||||
"index.html": "/index.html",
|
|
||||||
"main.c375ae17.css.map": "/static/css/main.c375ae17.css.map",
|
|
||||||
"main.76d17c5c.js.map": "/static/js/main.76d17c5c.js.map"
|
|
||||||
},
|
|
||||||
"entrypoints": [
|
|
||||||
"static/css/main.c375ae17.css",
|
|
||||||
"static/js/main.76d17c5c.js"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"><link rel="manifest" href="/site.webmanifest"><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFFFF"/><meta name="description" content="Firegex by Pwnzer0tt1"/><title>Firegex</title><script defer="defer" src="/static/js/main.76d17c5c.js"></script><link href="/static/css/main.c375ae17.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
@import url(https://fonts.googleapis.com/css2?family=Lato&display=swap);.center-flex,.center-flex-row{align-items:center;display:flex;justify-content:center}.center-flex-row{flex-direction:column}.flex-spacer{flex-grow:1}.Footer_center-flex-row__yo4XA,.Footer_center-flex__uvxL9,.Footer_footer__S9pCA{align-items:center;display:flex;justify-content:center}.Footer_center-flex-row__yo4XA{flex-direction:column}.Footer_flex-spacer__VEUAB{flex-grow:1}.Footer_footer__S9pCA{background-color:#242a33;height:150px;margin-top:50px}.Header_header__Ri4em{align-items:center;background-color:#242a33;display:flex;height:140px;justify-content:center;width:100%}.Header_logo__3Bvhn{height:70%;margin-left:40px;width:200px}body{font-family:Lato,sans-serif;margin:0}.ServiceRow_center-flex-row__E5vBK,.ServiceRow_center-flex__hmJif,.ServiceRow_row__-A-i2{align-items:center;display:flex;justify-content:center}.ServiceRow_center-flex-row__E5vBK{flex-direction:column}.ServiceRow_flex-spacer__vmC0u{flex-grow:1}::-webkit-scrollbar{background:#333;cursor:pointer;margin:3px;width:12px}::-webkit-scrollbar-thumb{background:#757575;border-radius:8px}.ServiceRow_row__-A-i2{border-radius:20px;margin:10px;padding:30px 0;width:95%}.ServiceRow_name__6f1O6{color:#fff;font-size:2.3em;font-weight:bolder;margin-bottom:13px;margin-right:10px}.RegexView_box__g-S5R{margin:5px;padding:30px}.RegexView_regex_text__Fy5MY{background-color:#25262b;border-radius:15px;padding:10px}
|
|
||||||
/*# sourceMappingURL=main.c375ae17.css.map*/
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
{"version":3,"file":"static/css/main.c375ae17.css","mappings":"wEAUA,8BAGE,mBAFA,aACA,sBACA,CAGF,iBAEE,sBAGF,aACE,YAZF,gFAGE,mBAFA,aACA,sBACA,CAGF,+BAEE,sBAGF,2BACE,YCnBF,sBAGI,yBAFA,aACA,eCJY,CCEhB,sBAKI,mBAFA,wBDLY,CCMZ,aAFA,aAIA,uBALA,UAKA,CAGJ,oBAGI,WADA,iBADA,WAEA,CHVJ,KAEE,4BADA,QACA,CAGF,yFAGE,mBAFA,aACA,sBACA,CAGF,mCAEE,sBAGF,+BACE,YAGF,oBAGE,gBACA,eAFA,UAAU,CADV,UAGA,CAEF,0BACE,mBACA,kBI9BF,uBAGI,mBACA,YAFA,eADA,SAGA,CAIJ,wBAKI,WAJA,gBACA,mBAEA,mBADA,iBAEA,CCbJ,sBAEI,UAAS,CADT,YACU,CAGd,6BAEI,wBHPS,CGQT,mBAFA,YAEA","sources":["index.scss","components/Footer/Footer.module.scss","_vars.scss","components/Header/Header.module.scss","components/ServiceRow/ServiceRow.module.scss","components/RegexView/RegexView.module.scss"],"sourcesContent":["\n@use \"vars\" as *;\n\n@import url('https://fonts.googleapis.com/css2?family=Lato&display=swap');\n\nbody {\n margin: 0;\n font-family: 'Lato', sans-serif;\n}\n\n.center-flex{\n display: flex;\n justify-content: center;\n align-items: center;\n}\n\n.center-flex-row{\n @extend .center-flex;\n flex-direction: column;\n}\n\n.flex-spacer{\n flex-grow: 1;\n}\n\n::-webkit-scrollbar {\n width: 12px;\n margin:3px;\n background: #333;\n cursor: pointer;\n}\n::-webkit-scrollbar-thumb {\n background: #757575;\n border-radius: 8px;\n}","@use \"../../vars\" as *;\r\n@use \"../../index.scss\" as *;\r\n\r\n.footer{\r\n height: 150px;\r\n margin-top: 50px;\r\n background-color: $primary_color;\r\n @extend .center-flex;\r\n}","\r\n$primary_color: #242a33;\r\n$second_color: #1A1B1E;\r\n$third_color:#25262b;\r\n","\r\n@use \"../../vars\" as *;\r\n\r\n.header{\r\n width: 100%;\r\n height: 140px;\r\n background-color: $primary_color;\r\n display: flex;\r\n align-items: center;\r\n justify-content: center;\r\n}\r\n\r\n.logo{\r\n width: 200px;\r\n margin-left: 40px;\r\n height: 70%;\r\n}","\r\n@use \"../../index.scss\" as *;\r\n\r\n.row{\r\n width: 95%;\r\n padding: 30px 0px;\r\n border-radius: 20px;\r\n margin: 10px;\r\n @extend .center-flex;\r\n}\r\n\r\n.name{\r\n font-size: 2.3em;\r\n font-weight: bolder;\r\n margin-right: 10px;\r\n margin-bottom: 13px;\r\n color:#FFF;\r\n}","\r\n@use \"../../vars\" as *;\r\n\r\n.box{\r\n padding:30px;\r\n margin:5px;\r\n}\r\n\r\n.regex_text{\r\n padding: 10px;\r\n background-color: $third_color;\r\n border-radius: 15px;\r\n}"],"names":[],"sourceRoot":""}
|
|
||||||
File diff suppressed because one or more lines are too long
@@ -1,70 +0,0 @@
|
|||||||
/*!
|
|
||||||
* The buffer module from node.js, for the browser.
|
|
||||||
*
|
|
||||||
* @author Feross Aboukhadijeh <https://feross.org>
|
|
||||||
* @license MIT
|
|
||||||
*/
|
|
||||||
|
|
||||||
/*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */
|
|
||||||
|
|
||||||
/*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @license React
|
|
||||||
* react-dom.production.min.js
|
|
||||||
*
|
|
||||||
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
||||||
*
|
|
||||||
* This source code is licensed under the MIT license found in the
|
|
||||||
* LICENSE file in the root directory of this source tree.
|
|
||||||
*/
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @license React
|
|
||||||
* react-jsx-runtime.production.min.js
|
|
||||||
*
|
|
||||||
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
||||||
*
|
|
||||||
* This source code is licensed under the MIT license found in the
|
|
||||||
* LICENSE file in the root directory of this source tree.
|
|
||||||
*/
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @license React
|
|
||||||
* react.production.min.js
|
|
||||||
*
|
|
||||||
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
||||||
*
|
|
||||||
* This source code is licensed under the MIT license found in the
|
|
||||||
* LICENSE file in the root directory of this source tree.
|
|
||||||
*/
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @license React
|
|
||||||
* scheduler.production.min.js
|
|
||||||
*
|
|
||||||
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
||||||
*
|
|
||||||
* This source code is licensed under the MIT license found in the
|
|
||||||
* LICENSE file in the root directory of this source tree.
|
|
||||||
*/
|
|
||||||
|
|
||||||
/**
|
|
||||||
* React Router v6.3.0
|
|
||||||
*
|
|
||||||
* Copyright (c) Remix Software Inc.
|
|
||||||
*
|
|
||||||
* This source code is licensed under the MIT license found in the
|
|
||||||
* LICENSE.md file in the root directory of this source tree.
|
|
||||||
*
|
|
||||||
* @license MIT
|
|
||||||
*/
|
|
||||||
|
|
||||||
/** @license React v16.13.1
|
|
||||||
* react-is.production.min.js
|
|
||||||
*
|
|
||||||
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
||||||
*
|
|
||||||
* This source code is licensed under the MIT license found in the
|
|
||||||
* LICENSE file in the root directory of this source tree.
|
|
||||||
*/
|
|
||||||
File diff suppressed because one or more lines are too long
124
tests/test.py
Executable file
124
tests/test.py
Executable file
@@ -0,0 +1,124 @@
|
|||||||
|
#!/usr/bin/env python3
|
||||||
|
import argparse, socket,secrets, base64
|
||||||
|
from time import sleep
|
||||||
|
from requests import Session
|
||||||
|
from multiprocessing import Process
|
||||||
|
|
||||||
|
pref = "\033["
|
||||||
|
reset = f"{pref}0m"
|
||||||
|
|
||||||
|
class colors:
|
||||||
|
black = "30m"
|
||||||
|
red = "31m"
|
||||||
|
green = "32m"
|
||||||
|
yellow = "33m"
|
||||||
|
blue = "34m"
|
||||||
|
magenta = "35m"
|
||||||
|
cyan = "36m"
|
||||||
|
white = "37m"
|
||||||
|
|
||||||
|
def puts(text, *args, color=colors.white, is_bold=False, **kwargs):
|
||||||
|
print(f'{pref}{1 if is_bold else 0};{color}' + text + reset, *args, **kwargs)
|
||||||
|
|
||||||
|
def sep(): puts("-----------------------------------", is_bold=True)
|
||||||
|
parser = argparse.ArgumentParser()
|
||||||
|
parser.add_argument("--address", "-a", type=str , required=False, help='Address of firegex backend', default="http://127.0.0.1:5000/")
|
||||||
|
parser.add_argument("--service_port", "-P", type=int , required=False, help='Port of the test service', default=1337)
|
||||||
|
parser.add_argument("--service_name", "-n", type=str , required=False, help='Name of the test service', default="Test Service")
|
||||||
|
parser.add_argument("--password", "-p", type=str, required=True, help='Firegex passowrd')
|
||||||
|
args = parser.parse_args()
|
||||||
|
sep()
|
||||||
|
puts(f"Testing will start on ", color=colors.cyan, end="")
|
||||||
|
puts(f"{args.address}", color=colors.yellow)
|
||||||
|
|
||||||
|
s = Session()
|
||||||
|
#Connect to Firegex
|
||||||
|
req = s.post(f"{args.address}api/login", json={"password":args.password})
|
||||||
|
assert req.json()["status"] == "ok", f"Test Failed: Unknown response or wrong passowrd {req.text}"
|
||||||
|
puts(f"Sucessfully logged in ✔", color=colors.green)
|
||||||
|
|
||||||
|
#Create new Service
|
||||||
|
req = s.post(f"{args.address}api/services/add" , json={"name":args.service_name,"port":args.service_port})
|
||||||
|
assert req.json()["status"] == "ok", f"Test Failed: Couldn't create service {req.text} ✔"
|
||||||
|
puts(f"Sucessfully created service {args.service_name} on with public port {args.service_port} ✔", color=colors.green)
|
||||||
|
|
||||||
|
#Find the Service
|
||||||
|
req = s.get(f"{args.address}api/services")
|
||||||
|
internal_port = service_id = None
|
||||||
|
try:
|
||||||
|
for service in req.json():
|
||||||
|
if service["name"] == args.service_name:
|
||||||
|
service_id = service["id"]
|
||||||
|
internal_port = service["internal_port"]
|
||||||
|
puts(f"Sucessfully received the internal port {internal_port} ✔", color=colors.green)
|
||||||
|
break
|
||||||
|
except Exception:
|
||||||
|
puts(f"Test Failed: Coulnd't get the service internal port {req.text}", color=colors.red)
|
||||||
|
exit(1)
|
||||||
|
|
||||||
|
#Start listener
|
||||||
|
def startServer():
|
||||||
|
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||||
|
sock.bind(('127.0.0.1', internal_port))
|
||||||
|
sock.listen(8)
|
||||||
|
while True:
|
||||||
|
connection,address = sock.accept()
|
||||||
|
buf = connection.recv(4096)
|
||||||
|
connection.send(buf)
|
||||||
|
connection.close()
|
||||||
|
|
||||||
|
server = Process(target=startServer)
|
||||||
|
server.start()
|
||||||
|
|
||||||
|
#Start firewall
|
||||||
|
req = s.get(f"{args.address}api/service/{service_id}/start")
|
||||||
|
assert req.json()["status"] == "ok", f"Test Failed: Couldn't start the service {req.text}"
|
||||||
|
puts(f"Sucessfully started service with id {service_id} ✔", color=colors.green)
|
||||||
|
|
||||||
|
#Hacky solution - wait a bit for the server to start
|
||||||
|
sleep(1)
|
||||||
|
|
||||||
|
#Send data via the proxy, and validate it
|
||||||
|
def sendCheckData(data):
|
||||||
|
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||||
|
s.connect(('localhost', args.service_port))
|
||||||
|
s.sendall(data)
|
||||||
|
received_data = s.recv(4096)
|
||||||
|
s.close()
|
||||||
|
return received_data == data
|
||||||
|
|
||||||
|
if sendCheckData(b'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'):
|
||||||
|
puts(f"Successfully tested first proxy with no regex ✔", color=colors.green)
|
||||||
|
else:
|
||||||
|
puts(f"Test Failed: Data was corrupted", color=colors.red)
|
||||||
|
|
||||||
|
#Add new regex
|
||||||
|
secret = bytes(secrets.token_hex(16).encode())
|
||||||
|
regex = base64.b64encode(secret).decode()
|
||||||
|
req = s.post(f"{args.address}api/regexes/add",
|
||||||
|
json={"is_blacklist":True,"is_case_sensitive":True,"service_id":service_id,"mode":"B","regex":regex})
|
||||||
|
puts(f"Sucessfully added regex to service with id {service_id} ✔", color=colors.green)
|
||||||
|
|
||||||
|
#Test the regex
|
||||||
|
if not sendCheckData(b'AAAAAAAAAAAAAAAA' + secret + b'AAAAAAAAAAAAAAAAA'):
|
||||||
|
puts(f"The malicious request was successfully blocked ✔", color=colors.green)
|
||||||
|
else:
|
||||||
|
puts(f"Test Failed: The request wasn't blocked", color=colors.red)
|
||||||
|
|
||||||
|
#Pause the proxy
|
||||||
|
req = s.get(f"{args.address}api/service/{service_id}/pause")
|
||||||
|
assert req.json()["status"] == "ok", f"Test Failed: Couldn't delete service {req.text}"
|
||||||
|
puts(f"Sucessfully stopped service with id {service_id} ✔", color=colors.green)
|
||||||
|
|
||||||
|
#Check if it's actually paused
|
||||||
|
if sendCheckData(b'AAAAAAAAAAAAAAAA' + secret + b'AAAAAAAAAAAAAAAAA'):
|
||||||
|
puts(f"The request wasn't blocked ✔", color=colors.green)
|
||||||
|
else:
|
||||||
|
puts(f"Test Failed: The request was blocked when it shouldn't have", color=colors.red)
|
||||||
|
|
||||||
|
#Delete the Service
|
||||||
|
req = s.get(f"{args.address}api/service/{service_id}/delete")
|
||||||
|
assert req.json()["status"] == "ok", f"Test Failed: Couldn't delete service {req.text}"
|
||||||
|
puts(f"Sucessfully delete service with id {service_id} ✔", color=colors.green)
|
||||||
|
|
||||||
|
server.terminate()
|
||||||
Reference in New Issue
Block a user