Contents

require 'spec_helper'

describe Arachni::Element::Capabilities::Auditable::RDiff do

    before :all do
        Arachni::Options.url = @url = web_server_url_for( :rdiff )
        @auditor = Auditor.new( nil, Arachni::Framework.new )
    end

    describe '#rdiff_analysis' do
        before do
            @opts = {
                pairs: [
                    { 'good' => 'bad '}
                ]
            }
            @params = { 'rdiff' => 'blah' }
            issues.clear
        end

        context 'when the element action matches a skip rule' do
            it 'returns false' do
                auditable = Arachni::Element::Link.new( 'http://stuff.com/', @params )
                auditable.rdiff_analysis( @opts ).should be_false
            end
        end

        context 'when response behavior suggests a vuln' do
            it 'logs an issue' do
                auditable = Arachni::Element::Link.new( @url + '/true', @params )
                auditable.auditor = @auditor
                auditable.rdiff_analysis( @opts )
                @auditor.http.run
                @auditor.http.run

                results = Arachni::Module::Manager.results
                results.should be_any
                results.first.var.should == 'rdiff'
            end
        end

        context 'when responses are\'t consistent with vuln behavior' do
            it 'does not log any issues' do
                auditable = Arachni::Element::Link.new( @url + '/false', @params )
                auditable.auditor = @auditor
                auditable.rdiff_analysis( @opts )
                @auditor.http.run
                @auditor.http.run

                issues.should be_empty
            end
        end

    end

end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
arachni-0.4.5.2	spec/arachni/element/capabilities/auditable/rdiff_spec.rb
arachni-0.4.5.1	spec/arachni/element/capabilities/auditable/rdiff_spec.rb
arachni-0.4.5	spec/arachni/element/capabilities/auditable/rdiff_spec.rb
arachni-0.4.4	spec/arachni/element/capabilities/auditable/rdiff_spec.rb