Upload files to "tests"

2026-06-21 17:44:13 +00:00
parent 12a69a96fe
commit 418f5baf36
5 changed files with 407 additions and 0 deletions
@@ -0,0 +1,48 @@
+from __future__ import annotations
+
+import tempfile
+import unittest
+from pathlib import Path
+from unittest.mock import patch
+
+from redflare.core.models import Target
+from redflare.core.standards import enrich_finding
+from redflare.modules.base import ModuleContext
+from redflare.modules.http import HTTPResponse
+from redflare.modules.vulnerabilities import CVEIntelligenceModule, fingerprint_response
+
+
+class CVEIntelligenceTests(unittest.TestCase):
+    def test_fingerprints_only_explicit_versions(self):
+        body = b'<meta name="generator" content="WordPress 6.4.2"><script src="jquery-3.6.0.min.js"></script>'
+        values = fingerprint_response({"server": "nginx/1.24.0", "x-powered-by": "Express"}, body)
+        products = {(item.product, item.version) for item in values}
+        self.assertEqual(products, {("nginx", "1.24.0"), ("WordPress", "6.4.2"), ("jQuery", "3.6.0")})
+        self.assertNotIn("Express", {item.product for item in values})
+
+    @patch("redflare.modules.vulnerabilities.query_nvd")
+    @patch("redflare.modules.vulnerabilities.request")
+    def test_emits_cve_findings_with_clickable_reference(self, get, nvd):
+        get.return_value = HTTPResponse("https://example.test", 200, {"server": "nginx/1.24.0"}, b"")
+        nvd.return_value = [{
+            "id": "CVE-2026-12345",
+            "published": "2026-01-02T00:00:00Z",
+            "lastModified": "2026-01-03T00:00:00Z",
+            "vulnStatus": "Analyzed",
+            "descriptions": [{"lang": "en", "value": "Fixture vulnerability."}],
+            "metrics": {"cvssMetricV31": [{"cvssData": {"baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N"}}]},
+            "references": [{"url": "https://vendor.example/advisory"}],
+        }]
+        with tempfile.TemporaryDirectory() as directory:
+            context = ModuleContext("run_test", Path(directory), timeout=1)
+            result = CVEIntelligenceModule().run(Target("https://example.test", "example.test", "https", 443), context)
+        self.assertEqual(len(result.findings), 1)
+        finding = enrich_finding(result.findings[0])
+        self.assertEqual(finding.test_id, "RFV2-COMP-001")
+        self.assertEqual(finding.severity, "critical")
+        self.assertEqual(finding.standards["CVE"][0]["id"], "CVE-2026-12345")
+        self.assertTrue(finding.standards["CVE"][0]["url"].startswith("https://nvd.nist.gov/"))
+
+
+if __name__ == "__main__":
+    unittest.main()