From ffd946e2cb53eb883226a68a26ea021983eb099a Mon Sep 17 00:00:00 2001 From: devloop Date: Sun, 22 Sep 2024 15:13:33 +0200 Subject: [PATCH] integration tests: since there is now a NVD cleanup step, use static versions of the files --- tests/integration/wapiti/Dockerfile.integration | 6 ++---- tests/integration/wapiti/cherokee.json.xz | Bin 0 -> 1516 bytes tests/integration/wapiti/jquery.json.xz | Bin 0 -> 1636 bytes tests/integration/wapiti/nginx.json.xz | Bin 0 -> 4988 bytes 4 files changed, 2 insertions(+), 4 deletions(-) create mode 100644 tests/integration/wapiti/cherokee.json.xz create mode 100644 tests/integration/wapiti/jquery.json.xz create mode 100644 tests/integration/wapiti/nginx.json.xz diff --git a/tests/integration/wapiti/Dockerfile.integration b/tests/integration/wapiti/Dockerfile.integration index 5e935213e..c67688cb2 100644 --- a/tests/integration/wapiti/Dockerfile.integration +++ b/tests/integration/wapiti/Dockerfile.integration @@ -37,10 +37,8 @@ COPY --from=build /usr/local/bin/wapiti /usr/local/bin/wapiti-getcookie /usr/loc # Create the Wapiti config directory RUN mkdir -p /root/.wapiti/config/cves -# Download the NVD CVE files directly from GitHub -RUN curl -k -L https://github.com/wapiti-scanner/nvd-web-cves/releases/download/nvd-web-cves-20240809/nginx.json.xz -o /root/.wapiti/config/cves/nginx.json.xz && \ - curl -k -L https://github.com/wapiti-scanner/nvd-web-cves/releases/download/nvd-web-cves-20240809/cherokee.json.xz -o /root/.wapiti/config/cves/cherokee.json.xz && \ - curl -k -L https://github.com/wapiti-scanner/nvd-web-cves/releases/download/nvd-web-cves-20240809/jquery.json.xz -o /root/.wapiti/config/cves/jquery.json.xz +# Copy NVD files to .wapiti/config/cves +COPY ./tests/integration/wapiti/*.json.xz /root/.wapiti/config/cves/ COPY ./tests/integration/wapiti/test.py /usr/local/bin/test.py COPY ./tests/integration/wapiti/templates_and_data.py /usr/local/bin/templates_and_data.py diff --git a/tests/integration/wapiti/cherokee.json.xz b/tests/integration/wapiti/cherokee.json.xz new file mode 100644 index 0000000000000000000000000000000000000000..41d724b35889d79694144889f75e1d3a1fe49647 GIT binary patch literal 1516 zcmVvefz($i=&NS}<;+NtX z40M71j8=j$1ix^aA+pxpzn!6rjQh0+PL~aU$o}`1?lF+EM|lrpZLf2!wCqR!RFwMX z+wh5znfw;innw6T3V-KvP=+LT8q9-wtkjdUw{NNu1=a_Z1iv`FHCi-T;3+y+!Vtx- z5whUG)B`NyRtoOma9jT?9RKYs7b!`$5D1xT;2Lj@#T+--C#TyIf3r5B=u2)H%@ zfybcQ&-EbBQnI)r;0cotjya70RDwFKU^eyt6BDNZ>xy=6#(JgJE5v6z>{;O|m`e3? zOJ**dIoaB}__#uy)63anf)&cN*1r8ZodP!mt^aqPs*C;=h%CDxU|So3Ad|UO%WF#f z#sl;lL`zb1iD=ws3hvkkUETa8X?K%)wT?O=w3}LLU&R1k32N9r9^05^!@YKg zi7mCVPxmJH5w@ebm!;(nX=tzDa-*-HFWoyGwr*JHVzX;_xu6<2eV^A@)jd07T%-_Z z;2kZ=3sYEf)>dRBIzk;52Y8-MuqwY9JR8}P92Eqh=#nkCyidfW1&zG==R5#IC?Jbg z>s}x$%#thgPt_<4w1JYuaJxk$qw2cg<(12c9bNwv0S!Mj`ymq^ALC%r@xB&rMrhIo z&$8lcCQx1B4mV-I;J4C0UU}!4cwBm{y}@v*0z-n)d{xdIlO)loM{%GveLNVaGxSv| z7)G)(dJJ|7SL)$t$KC8q-U@m`Nal-#U<>F&m@~QZBpq$;z&Ga$paX0HHLHaVzs%C8 zh71i*x4=4+tib5pwuh_26oBE+%7uLMvtE)r$GI$T-UO;O5SwAX!z73rGpOIdjvx_<2iI2b!%>InN>-K-C>>=BYWVkXwvtIFZeaq{ zA_Ti^9iOTkNU39N|70{D(py%qlUbkz@!otK0g)$Az1qY-M}kRPe6FCQExCJo5FbnO z?KQ11Oa!GK$W!Zy&CNYDrdQspaBL1&4Vet-F@~$g2&+Fc1YMul1(LMY6$lUnzQQT! zLCB!ziJx3Vxl4)O*OaDh^nK5ZS^exD6z`ewBVO=nZv>bkZvQ&Ag*3@WMQ|MS`}I;S zcbn$fa`p8C>7LX!!#dw$0U-XeK>3hix&cX=hoSdVkVUIbgIKt0(4#?MW)M)SVOS73 z3QIP&cbid5EWu+?>hCFBsDVne#lRnQ@0+FmG7!^T0=0lS%QW<}*SaPT- zgiWBPI@+{AD24dQMw@h)aZxKsgn{ZILK>huu)LcBtvV449x>@SpbZ$xx^7*B>nNfR z+%rxjD+aWtH-qqgxPhwq4Um%gs@ZALbpD|2uJf#vb^vc|xtlhxG(dH>qP_S?*0mG? zq6NhYr?i4-qeBS7TupqN=5+0ZSYCx9dIg;R`_L=GN`ClEI;^c6>Xi|SJ;4aVK$^_i zeKqrfyVlVyQ*+}H@w~Y8+bsv6K|r{d0{06?U_R<%I~pX4P%vC1!MhTP)OMcQ%8su$ zrlmmugi1Wh6vD=(3D-#S0Hk_$)*jSDE_REfIIA518)~g&NG_(a72S`5ASw3f?{md! z74cAysaPfFgmVlr6E0(4vD1_pu7)-pLT{>J92iSxEcvFDg`29ZwM#ZRAv5jeUbspVEPChGhG>vv8=SaFHy9{u}nBqs>kWU6ERM;SCe9A zl7tCPrBD)Er9&%EvmW#{i?-LMMQmx9$isOK!W=Wc zw}nV@wWmI_xzb`nX_%oB@oV{zB=sL@X_N%%Z5uju00014-+|hqS3K|l0mcivefz($i=&NS}<;+NtX z40M71eyYW(HypL4iF61xy_QK!TYyoAgK>|ehXcg-artKR^_en*uDy;6)|5SxqAs9j z`vno+-Gh7O`5=ZNScD`-MAS}`0`t9S<5b%S%Qa>YpzF&~ZY#u8^L4SeHAU5`Zv`kT z%^7e5K?-L7{iSe#aS9tKssZ;&Ns;Da=A`Yh!^E%=2?3X>Tt7;G3mgCZD zg^x&^OE9^xMh5cExAV>W@NI-oRBY{>|I_5LTqOb0ExoYq*zr2Np-F(>rZz+@uuZA^ zk;{X!JPtZ2ZN|L6SusGc*Y-rlHyGm39nVlxf>}pSEiI5?J1xJ%kxM6SL_4u}?wFes zAM*7N(aa%WD-Px_TkS;~n4esE@G8Z>@M|!xhCY0ByD?B5Ed)^+lZV3D}x@$Gn{ zMr}a5lO59BYuf0|JVE>_t`8^#b%^K(^qZ-#D?ffs? z6aOgp)b?n4A#piIP6{b{2Ei;mP)7Ei`!t6+lhnaGG&v|%c3;08j3C`xSS7_>NnkkH z2Z_^!`05P~*o0G6FCMNI=pO0vPWt2Y(3+;u$iaSQ*qNCA;{F!hF@?30!PVN!OP);P z1p%3mC1i%CerEkib>H#ML*3PkZOV?0lz-jtQiOeyRqvO0SJSF@^0v~#TDKC`*CzHk zRd4b-T6m$t% zp8jkNNT#{X{d2RMoBBDjgm7y>VRUG0qIyCX6L6K>d!(q>@F6G zHewM`G-sZxbH$yO7*Q3)SA*wtE)K9cJ5Z*$57COchjFgPp^ZgAEoYG-ZBT zsf#oH$u3S4%vmS!pgjtj3({xh?%NmryA69xG%S2wPk+hw)wtOEeT+ELVu4qOu;}NJ zT=g#Ury!Hzvw*e2V>kJFTlhBfvC%g}ueuLjwaR7Lq`XyBAd=BIVkdup+2NT0(lla~ z2n|yEQUy}K73n}{R6)R7#6hc(YguY#`y^6|*ruJD>+e+iy7FK@16mld<`LDe6}E9; zJ9O=zSmr{}{{<9}YFcH5^T!1D9Hn1VQ6NR*htqp}Z~kgrn`t9Op(4t-eg;z`tGppt z|BNd{HnM2E?5eQXwC>A1PhBj-v9QW0ii$^SKbp`EP;>(5=B}|oj$aDpJ5QCT*YJN} zfHpqm*=l-tAS%BGY`VwF>;?hEku7;DSXacOtDpN>OJp^ORSf>bm_Z51fw~*kPT{B} zdenB>0v&t^wpsLh1#u@XxbaV0R?g;!ucE*Z?iCPrVTs@BVb7u;J7%o5FllO5#@Jdf96h2)Yh12dK{Ch=fN}XHD*D-yC z2R8iX;TPyq#HB#EIFnioxF}C)k%gWUTf!RR3x&8&Q#Ao{g000001X)_0{4Q4j literal 0 HcmV?d00001 diff --git a/tests/integration/wapiti/nginx.json.xz b/tests/integration/wapiti/nginx.json.xz new file mode 100644 index 0000000000000000000000000000000000000000..261199fded0d970b7dd0442cc38a8141fe63adb1 GIT binary patch literal 4988 zcmV-?6NBviH+ooF000E$*0e?f03iVu0001VFXf})TYnQgT>vefz($i=&NS}<;+NtX z40M71ey5f28W%&Lg|U7TO_?Z;_^^>m4{%!d|3L(k)pJte3wcq0G`XZ^mi0OaO$hLD z#B9|hZ8~!KiIXpb6P$xSJ(D1%UanN{d{lmzfh_c4&8DeDo4-kA!%SlMcR|ADRXqrP z#=?v==BNY<$fFQbIbgveMC~M|I(#px%WhN9Zp~YkJ<9XOGxt8tqw=AT9so zw>$Q6pvtdLdpOE0Qu!&!(vWf}@oT3g+}hHJb$IU>a1EDY9x$$ z^XJKZ7>_6cjq6c8v`0KMtPosG?CR<$5me*5+6#RD7Ib^VRWpkYdS)5p@Y85HQk0^b zp%`@B-E`yi=^5qO=NRg9hSgqrpj2jTA68-Z4X2+I8%eOJ-Yx&4L_iwr=dO70|gvuEu{JyGKL}*X-bt9XK+dfY06GO z^*u5oE*qH*_C0=>)s02c9L{@zexH{QZZK2@LhgeQG?k~rz|%%}Qr?IMM!K~Yf+a&& zvNW>dmJ2T{8nOXg3He=oVz za4t^kkXl0pWfFKlL|Lg!#Hco1ioqCH*WmkL0stZS-}f-6V1Mxnbq`O=R^IVJV|yG7 z314hoB5msXpL}R5i0d@0ReAITlE)7NU0b0MMP3x(J;=r@VpN=gT7iUds*IcnF2r3C?u+<=!x1 zT50a;&CTt=3t{Z#5QyCLtCdPY92dBHRP=U-=qf}R?%L8TWn-J5D1=7xTf(Z3X%70c z55jc52d%jLdCpReC2q6e1UBD}k+LTJh69wZIEn! zt#Jxpa$V;l*~E~DtAaw>)bomVm^svjd|c{)Y12@mszv!~>Y$cJ02y@v{BsvynEHcG z<1I&Np288wCD2d)kzw}T#0a@Q$}5%DP&mxCwrU--FeeLPIV%Ho_zy+T|Nb+O0vn6yZ;! zAQVMWQ;rv@>fM;Rafr{Z2viYj3H<}RyLQ@cPAgcf8aFJAGh5Lvz@40Zz8lqmsh%iE zZ05LZ;9l1s2AHFKs+N-BT!kK&ys55B3=qtGhxKy_$9<$FFJHHUTNyF&&ZfgpKlB}h zY?&7`kB(D@vN1 zn&hOK(^E3sb1HVqG}WSs{ti_28mcgZ$0V-A1I!%COeFzL8i} zFIX!GD&D`lBcezdQj!tr z&K*uWVwZC*>iu6+dbz@Vj>@p;1#|3`(2$2muix@G0ANk4HOAnR85QiHX69P&ai{>H zGz_L78U2j~-7R*#q1bO5TUkRWm%_=|7ghuS z7xzKeBdgw5wZZGl@HhuC*hX$e`W_5637zngg-(3gRKIg4_Yy?&PU!}^LQ>w~4C!E# zx7%!qrZvtR)`vhHWaV2GzT2Q(M=y?kW)X}Wgr^!5-S8^?;oBB8N|8QIO9Ep_84-`H zgp=V-CUpoz{v=GUT*gBo?f!I8+yk$f!jA&s2cTIH`|a4uHh%lJ^t829`h$XkgkO;t z;!clowyERK7f7VoPpz{vB}q-H$`@+oK2m25B+O@=H%T%-YW-!ob;2H$hx)Rh!kC(g zm=}=lk*2}Af8Wo24`2My0*4+pU4Z-h0wi;9DvgU?+r`Q_l4WG}Rue^!a|v=!_D$?D zRoHV@i<={P1{OPL z0FV%40h;g6YbVY4Ssg|?J~{zpLpL}6DLgu8CqAT)1M ziC=Pi`hC-!*Yi#ZwrjXLcTaoikcxoMkhiqMm#%xP8!^&-(5ontdPLnl_+)#H0U ze=RY(c(9BRGMty(%zNo9-B&In5oe8Cw?e!9EQ90{iqi`lnfn-RB+PW?B?it^( z7AO~7N{Bmw+m|R^MrBAK0_1N6Xc3opM0{pc!lu?Fw%C(haSrJ`3RbS&-Pm!M0&v(OSb%Vz(*fm&1~ zXQOT+H|1%(E82(|(+h3pNV4D;NP9X$R=a9MXqx?uc)hi$lMKu_+P|Q?4xO`!XDo`uXtITzh#B~En5Ec^&0{MNeg=vQb5ZiDz6a#LR7 z;aizgu23OcyLUxN)?T}MR8exsR-vG&t9 zsG+~_k7ffCHwg@{a>$?FM|atfKd_wF)H#H<`mitmQ}`B#($uvdCSv#lVNMKd8t1=o zUE>6!Z>BNM)Jg%yq;6a<8bYd{b#i)+eZSthUvW!O0{4Ej(UTDEd9-|=Q{txu_`R~d zCeyi3Jvun-1aQOmLK%l$!hN(OCIGKTMo^l`jrfA0rKsy8@te=-S{ad653YEzu=vN)7*{NPUk3~=W(1PsMW&Ak?fYGO zuakVlrt3KEQz9(^6#uLXw5G6zWtg3eD~SHTtZw_h7xnQT5?^J(LiGVuI} zVtk`rbpUD9aBZBF!%H*Q8cHb#uVDde#V%F}l0!MuxyalAz83oC$BAA%7yq0jarMAl zjjgRA@*XT^p>KBD)0=Ep7`RNG_a7LD#RIa$K|_M~sWSNfSaGyh1MasLOM@L!px6h% z^jz~O$`FECn*{-eu`S_Gg%6rWB=#n6IyZ3Fp|sM0W^%FRcP)2GM0)r(ZF7RljMs; zPZ7%{B~Jr*uo{%A6rc8-db&?RRyqQ)ci#J>IJ5Sl{ayZ9PTS(FjcdPd(cb}kr-hlY zjXi2CqxoiB>t>dmJl0;&yn%RRJ*Hru`_az^+!T>Rp6;LiT$l17kVn8B@dcPg=BO)w%M<)7)jvQ+3@?;H#}WIz_-K6V&X@#>SgSKA+4g_B!^ zS&5=}p4QaL#SMU)$(x~lZ6jzJCAAXxOb{FHZr0@97^GlbXrwA1-p-&{b6}Dh%=nvVkK`=vCl9|kErQp| z7VfAswq)1NhMqi4oj2QxHZiG`Po39oU~2S2Wq<87S8aT~Viv0T9*~Nj;BE(6E1#6a zP#>eMMFaMD=P@%ukW=~)E!-5Oc7bCxL(|y2A&c@w46&sJDA<Py@d-u|=MBOX_t9s+*{ zFhpv!KY;+wiwkDQ6ny4NdcFs0Uv6I3a$HMtcp#6Otu|0iL>YSE`57?~5}Ox%jg0AvkDkeGhez@N4l-9}LfV?ruT_94 z@dbZo7^#V#iC~Y>jxLOg-wu}xu$-sM9vl9G4Z1PXZRX4;_+s^(Vnnx4jjm5!*K3kB zMKoaT2m0%*?&?0pji(p2N`(~xMD*5&TzjIE>7O210WeoFnzg#_z2}?-uV@X6X+Q(i zRtUx!xJB*lJOn(js{5v2<_t%kAhAkN)h5_lzYxlEF{AP4hPJ(ToECzrM!_lyjU0IX zI-0j`eijjLYzlwjk=Z9nUMFAIezuu`cE53Ug;G=Sd9%(c3hV5jqKr3VGYj9z7mL+PR&^1#141XU$?A2 zv^vYeN>uB!M@7z9&S%K9HDUp^#8!E^=W#YU5>8YV^j;K9+_L1skU$2n>B2aa<