From 1490268ea6ae75e5e9b78861c56dc9b04db903f3 Mon Sep 17 00:00:00 2001 From: Louis Burda Date: Mon, 10 May 2021 17:18:28 +0200 Subject: extended query function to load file info, added poc test --- service/src/test.sh | 72 +++++++++++++++++++++++++++++++++++++---------------- 1 file changed, 50 insertions(+), 22 deletions(-) (limited to 'service/src/test.sh') diff --git a/service/src/test.sh b/service/src/test.sh index 9a905b7..57c7ca7 100644 --- a/service/src/test.sh +++ b/service/src/test.sh @@ -26,26 +26,54 @@ checkleaks() { export RESULTDIR="scans" -announce "Trying ASCII STL" -( - echo "submit" - cat tests/sample-ascii.stl | wc -c - cat tests/sample-ascii.stl -) | checkleaks - -announce "Trying BIN STL" -( - echo "submit" - cat tests/sample-binary.stl | wc -c - cat tests/sample-binary.stl - echo "testname" -) | checkleaks - - -announce "Testing Proof-Of-Concept" -( - echo "submit" - cat tests/evil1.stl | wc -c - cat tests/evil1.stl -) | checkleaks +if [ "$1" == "stl" ]; then + announce "Testing ASCII STL Parsing" + ( + echo "submit" + cat tests/sample-ascii.stl | wc -c + cat tests/sample-ascii.stl + ) | checkleaks + + announce "Testing BIN STL Parsing" + ( + echo "submit" + cat tests/sample-binary.stl | wc -c + cat tests/sample-binary.stl + echo "testname" + ) | checkleaks + +elif [ "$1" == "poc" ]; then + + announce "Testing Proof-Of-Concept" + + rm -rf scans/* + + echo -e "\n--- Uploading evil STL ---\n" 1>&2 + ( + echo "submit" + cat tests/evil1.stl | wc -c + cat tests/evil1.stl + echo "AAAA" + ) | ./printdoc + + echo -e "\n--- Testing Exploit ---\n" 1>&2 + + ( + echo "query" + echo "AAAA" + echo "0" + echo "n" + + echo "query" + ) | ./printdoc + +else + ( + echo "submit" + echo "2" + echo "AA" + echo "AAAA" + ) | ./printdoc + +fi -- cgit v1.2.3-71-gd317