cristiancmoises
/
gophish
mirror of https://github.com/gophish/gophish
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
gophish/models/page_test.go

144 lines
4.2 KiB
Go
Raw Normal View History

Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
package models
import (
"strings"
"github.com/PuerkitoBio/goquery"
"gopkg.in/check.v1"
)
func (s *ModelsSuite) TestPostPage(c *check.C) {
html := `<html>
<head></head>
<body><form action="example.com">
<input name="username"/>
<input name="password" type="password"/>
</form></body>
</html>`
p := Page{
Name: "Test Page",
HTML: html,
RedirectURL: "http://example.com",
}
// Check the capturing credentials and passwords
p.CaptureCredentials = true
p.CapturePasswords = true
err := PostPage(&p)
c.Assert(err, check.Equals, nil)
c.Assert(p.RedirectURL, check.Equals, "http://example.com")
d, err := goquery.NewDocumentFromReader(strings.NewReader(p.HTML))
c.Assert(err, check.Equals, nil)
forms := d.Find("form")
forms.Each(func(i int, f *goquery.Selection) {
// Check the action has been set
a, _ := f.Attr("action")
c.Assert(a, check.Equals, "")
// Check the password still has a name
_, ok := f.Find("input[type=\"password\"]").Attr("name")
c.Assert(ok, check.Equals, true)
// Check the username is still correct
u, ok := f.Find("input").Attr("name")
c.Assert(ok, check.Equals, true)
c.Assert(u, check.Equals, "username")
})
Support Re-enabling CapturePasswords for Landing Pages (#1271) Fixed a bug when marking the capture password, saving and unmarking the capture password, the attribute does not comeback and the password will never be captured again for this template.
2018-11-11 18:34:26 +00:00
Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
// Check what happens when we don't capture passwords
p.CapturePasswords = false
p.HTML = html
p.RedirectURL = ""
err = PutPage(&p)
c.Assert(err, check.Equals, nil)
c.Assert(p.RedirectURL, check.Equals, "")
d, err = goquery.NewDocumentFromReader(strings.NewReader(p.HTML))
c.Assert(err, check.Equals, nil)
forms = d.Find("form")
forms.Each(func(i int, f *goquery.Selection) {
// Check the action has been set
a, _ := f.Attr("action")
c.Assert(a, check.Equals, "")
Support Re-enabling CapturePasswords for Landing Pages (#1271) Fixed a bug when marking the capture password, saving and unmarking the capture password, the attribute does not comeback and the password will never be captured again for this template.
2018-11-11 18:34:26 +00:00
// Check the password name has been removed
Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
_, ok := f.Find("input[type=\"password\"]").Attr("name")
c.Assert(ok, check.Equals, false)
// Check the username is still correct
u, ok := f.Find("input").Attr("name")
c.Assert(ok, check.Equals, true)
c.Assert(u, check.Equals, "username")
})
Support Re-enabling CapturePasswords for Landing Pages (#1271) Fixed a bug when marking the capture password, saving and unmarking the capture password, the attribute does not comeback and the password will never be captured again for this template.
2018-11-11 18:34:26 +00:00
// Check when we don't capture credentials
Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
p.CaptureCredentials = false
p.HTML = html
err = PutPage(&p)
c.Assert(err, check.Equals, nil)
d, err = goquery.NewDocumentFromReader(strings.NewReader(p.HTML))
c.Assert(err, check.Equals, nil)
forms = d.Find("form")
forms.Each(func(i int, f *goquery.Selection) {
// Check the action has been set
a, _ := f.Attr("action")
c.Assert(a, check.Equals, "")
Support Re-enabling CapturePasswords for Landing Pages (#1271) Fixed a bug when marking the capture password, saving and unmarking the capture password, the attribute does not comeback and the password will never be captured again for this template.
2018-11-11 18:34:26 +00:00
// Check the password name has been removed
Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
_, ok := f.Find("input[type=\"password\"]").Attr("name")
c.Assert(ok, check.Equals, false)
Support Re-enabling CapturePasswords for Landing Pages (#1271) Fixed a bug when marking the capture password, saving and unmarking the capture password, the attribute does not comeback and the password will never be captured again for this template.
2018-11-11 18:34:26 +00:00
// Check the username name has been removed
Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
_, ok = f.Find("input").Attr("name")
c.Assert(ok, check.Equals, false)
})
Support Re-enabling CapturePasswords for Landing Pages (#1271) Fixed a bug when marking the capture password, saving and unmarking the capture password, the attribute does not comeback and the password will never be captured again for this template.
2018-11-11 18:34:26 +00:00
// Finally, re-enable capturing passwords (ref: #1267)
p.CaptureCredentials = true
p.CapturePasswords = true
err = PutPage(&p)
c.Assert(err, check.Equals, nil)
d, err = goquery.NewDocumentFromReader(strings.NewReader(p.HTML))
c.Assert(err, check.Equals, nil)
forms = d.Find("form")
forms.Each(func(i int, f *goquery.Selection) {
// Check the password still has a name
_, ok := f.Find("input[type=\"password\"]").Attr("name")
c.Assert(ok, check.Equals, true)
})
Isolate model tests (#933) * isolates Group model tests * move SMTP related tests from models_test.go to smtp_test.go * isolate Page model tests * isolate Result model tests
2018-01-20 00:11:00 +00:00
}
Moved template validation into separate function, and added validation for pages
2018-09-09 16:33:51 +00:00
func (s *ModelsSuite) TestPageValidation(c *check.C) {
html := `<html>
<head></head>
<body>{{.BaseURL}}</body>
</html>`
p := Page{
HTML: html,
RedirectURL: "http://example.com",
}
// Validate that a name is required
err := p.Validate()
c.Assert(err, check.Equals, ErrPageNameNotSpecified)
p.Name = "Test Page"
// Validate that CaptureCredentials is automatically set if somehow the
// user fails to set it, but does indicate that passwords should be
// captured
p.CapturePasswords = true
c.Assert(p.CaptureCredentials, check.Equals, false)
err = p.Validate()
c.Assert(err, check.Equals, nil)
c.Assert(p.CaptureCredentials, check.Equals, true)
adding extended_templates feature
2020-04-16 00:55:43 +00:00
// bypassing..no longer needed
/*
// Validate that if the HTML contains an invalid template tag, that we
// catch it
p.HTML = `<html>
<head></head>
<body>{{.INVALIDTAG}}</body>
</html>`
err = p.Validate()
c.Assert(err, check.NotNil)
Moved template validation into separate function, and added validation for pages
2018-09-09 16:33:51 +00:00
adding extended_templates feature
2020-04-16 00:55:43 +00:00
// Validate that if the RedirectURL contains an invalid template tag, that
// we catch it
p.HTML = "valid data"
p.RedirectURL = "http://example.com/{{.INVALIDTAG}}"
err = p.Validate()
c.Assert(err, check.NotNil)*/
Moved template validation into separate function, and added validation for pages
2018-09-09 16:33:51 +00:00
}