% Regression tests on Windows only for Scapy
# More informations at http://www.secdev.org/projects/UTscapy/
############
############
+ Networking tests
= Automaton - SelectableSelector system timeout
class TimeOutSelector(SelectableObject):
def check_recv(self):
return False
assert select_objects([TimeOutSelector()], 0) == []
assert select_objects([TimeOutSelector()], 1) == []
############
############
+ Windows Networking tests
= Mocked read_routes6() calls
import mock
from scapy.tools.UTscapy import Bunch
from scapy.arch.windows import _read_routes6_post2008
def check_mandatory_ipv6_routes(routes6):
"""Ensure that mandatory IPv6 routes are present."""
if len([r for r in routes6 if r[0] == "::" and r[4] == ["::1"]]) < 1:
return False
if len([r for r in routes6 if r[0] == "fe80::" and (r[1] == 64 or r[1] == 32)]) < 1:
return False
if len([r for r in routes6 if in6_islladdr(r[0]) and r[1] == 128]) < 1:
return False
return True
def dev_from_index_custom(if_index):
if_list = [{'mac': 'D0:50:99:56:DD:F9', 'win_index': '13', 'guid': '{C56DFFB3-992C-4964-B000-3E7C0F76E8BA}', 'name': 'Killer E2200 Gigabit Ethernet Controller', 'description': 'Ethernet'}, {'mac': '00:FF:0E:C7:25:37', 'win_index': '3', 'guid': '{0EC72537-B662-4F5D-B34E-48BFAE799BBE}', 'name': 'TAP-Windows Adapter V9', 'description': 'Ethernet 2'}]
values = {}
for i in if_list:
try:
interface = NetworkInterface(i)
values[interface.guid] = interface
except (KeyError, PcapNameNotFoundError):
pass
for devname, iface in values.items():
if iface.win_index == str(if_index):
return iface
raise ValueError("Unknown network interface index %r" % if_index)
@mock.patch("scapy.arch.windows.construct_source_candidate_set")
@mock.patch("scapy.arch.windows.get_if_list")
@mock.patch("scapy.arch.windows.dev_from_index")
@mock.patch("scapy.arch.windows.POWERSHELL_PROCESS.query")
def test_read_routes6_windows(mock_comm, mock_dev_from_index, mock_winpcapylist, mock_utils6cset):
"""Test read_routes6() on Windows"""
# 'Get-NetRoute -AddressFamily IPV6 | select ifIndex, DestinationPrefix, NextHop'
get_net_route_output = """
ifIndex : 3
DestinationPrefix : ff00::/8
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 16
DestinationPrefix : ff00::/8
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 13
DestinationPrefix : ff00::/8
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 1
DestinationPrefix : ff00::/8
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 13
DestinationPrefix : fe80::dc1d:24e8:af00:125e/128
NextHop : ::
RouteMetric : 20
InterfaceMetric : 256
ifIndex : 3
DestinationPrefix : fe80::9402:5804:cb16:fb3b/128
NextHop : ::
RouteMetric : 1
InterfaceMetric : 0
ifIndex : 16
DestinationPrefix : fe80::100:7f:fffe/128
NextHop : ::
RouteMetric : 1
InterfaceMetric : 0
ifIndex : 3
DestinationPrefix : fe80::/64
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 16
DestinationPrefix : fe80::/64
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 13
DestinationPrefix : fe80::/64
NextHop : ::
RouteMetric : 0
InterfaceMetric : 1
ifIndex : 13
DestinationPrefix : 2a01:e35:2f17:fe60:dc1d:24e8:af00:125e/128
NextHop : ::
RouteMetric : 20
InterfaceMetric : 256
ifIndex : 13
DestinationPrefix : 2a01:e35:2f17:fe60::/64
NextHop : ::
RouteMetric : 30
InterfaceMetric : 256
ifIndex : 1
DestinationPrefix : ::1/128
NextHop : ::
RouteMetric : 0
InterfaceMetric : 256
ifIndex : 13
DestinationPrefix : ::/0
NextHop : fe80::224:d4ff:fea0:a6d7
RouteMetric : 0
InterfaceMetric : 256
"""
mock_comm.return_value = get_net_route_output.split("\n")
mock_winpcapylist.return_value = [u'\\Device\\NPF_{0EC72537-B662-4F5D-B34E-48BFAE799BBE}', u'\\Device\\NPF_{C56DFFB3-992C-4964-B000-3E7C0F76E8BA}']
# Mocked in6_getifaddr() output
mock_dev_from_index.side_effect = dev_from_index_custom
# Random
mock_utils6cset.side_effect = lambda x,y,z: ["::1"] if x=="::" else ["fdbb:d995:ddd8:51fc::"]
# Test the function
routes = _read_routes6_post2008()
for r in routes:
print(r)
print(len(routes))
assert(len(routes) == 9)
assert(check_mandatory_ipv6_routes(routes))
test_read_routes6_windows()
= Test _read_routes_post2008 with missing InterfaceMetric
from scapy.arch.windows import _read_routes_post2008
@mock.patch("scapy.arch.windows._get_metrics")
@mock.patch("scapy.arch.windows.POWERSHELL_PROCESS.query")
@mock.patch("scapy.arch.windows.get_if_list")
@mock.patch("scapy.arch.windows.dev_from_index")
def test_missing_ifacemetric(mock_dev_from_index, mock_winpcapylist, mock_exec_query, mock_get_metrics):
exc_query_output = """ifIndex : 3
DestinationPrefix : 255.255.255.255/0
NextHop : 192.168.103.1
RouteMetric : 10
InterfaceMetric : 256
ifIndex : 13
DestinationPrefix : 255.255.255.255/32
NextHop : 0.0.0.0
RouteMetric : 20
InterfaceMetric :
"""
mock_exec_query.side_effect = lambda *args, **kargs: exc_query_output.split("\n")
mock_winpcapylist.return_value = [u'\\Device\\NPF_{0EC72537-B662-4F5D-B34E-48BFAE799BBE}', u'\\Device\\NPF_{C56DFFB3-992C-4964-B000-3E7C0F76E8BA}']
mock_dev_from_index.side_effect = dev_from_index_custom
mock_get_metrics.side_effect = lambda: {'16': 0, '13': 123}
routes = _read_routes_post2008()
for r in routes:
print(r)
assert len(routes) == 2
# Test if metrics were correctly read/guessed
assert routes[0][5] == 266
assert routes[1][5] == 143
test_missing_ifacemetric()
= Test _get_metrics with weird netsh length
from scapy.arch.windows import _get_metrics
@mock.patch("scapy.arch.windows.POWERSHELL_PROCESS.query")
def test_get_metrics(mock_exec_query):
exc_query_output = """Interface Loopback Pseudo-Interface 1 Parameters
-------------------------------
IfLuid : loopback_0
IfIndex : 1
State : connected
Metric : 75
Link MTU : 4294967295 byt
Reachable Time : 40500 ms
Base Reachable Time : 30000 ms
Retransmission Interval : 1000 ms
DAD Transmits : 0
Site Prefix Length : 64
Site Id : 1
Forwarding : disabled
Advertising : disabled
Neighbor Discovery : disabled
Neighbor Unreachability Detection : disabled
Router Discovery : dhcp
Managed Address Configuration : enabled
Other Stateful Configuration : enabled
Weak Host Sends : disabled
Weak Host Receives : disabled
Use Automatic Metric : enabled
Ignore Default Routes : disabled
Advertised Router Lifetime : 1800 seconds
Advertise Default Route : disabled
Current Hop Limit : 0
Force ARPND Wake up patterns : disabled
Directed MAC Wake up patterns : disabled
ECN capability : application
Interface Wi-Fi Parameters
-------------------------------
IfLuid : wireless_32768
IfIndex : 7
State : connected
Metric : 55
Link MTU : 1500 bytes
Reachable Time : 43500 ms
Base Reachable Time : 30000 ms
Retransmission Interval : 1000 ms
DAD Transmits : 3
Site Prefix Length : 64
Site Id : 1
Forwarding : disabled
Advertising : disabled
Neighbor Discovery : enabled
Neighbor Unreachability Detection : enabled
Router Discovery : dhcp
Managed Address Configuration : enabled
Other Stateful Configuration : enabled
Weak Host Sends : disabled
Weak Host Receives : disabled
Use Automatic Metric : enabled
Ignore Default Routes : disabled
Advertised Router Lifetime : 1800 seconds
Advertise Default Route : disabled
Current Hop Limit : 0
Force ARPND Wake up patterns : disabled
Directed MAC Wake up patterns : disabled
ECN capability : application
"""
mock_exec_query.side_effect = lambda *args, **kargs: exc_query_output.split("\n")
metrics = _get_metrics()
print(metrics)
assert metrics == {'1': 75, '7': 55}
test_get_metrics()
############
############
+ Windows arch unit tests
= Test PowerShell availability
from scapy.config import conf
assert conf.prog.powershell != None
= Store powershell results
import mock
from scapy.config import conf
ps_ip = get_ip_from_name(conf.iface.name)
ps_if_list = get_windows_if_list()
ps_read_routes = read_routes()
# Turn on VBS mode
conf.prog.powershell = None
= Test get_ip_from_name with VBS
ps_ip
assert get_ip_from_name(conf.iface.name) == ps_ip
= Test get_windows_if_list with VBS
ps_if_list
def is_in_if_list(i, list):
if not i["mac"]:
return True
for j in list:
if j["guid"] == i["guid"] and j["name"] == i["name"]:
return True
return False
vbs_if_list = get_windows_if_list()
vbs_if_list
_correct = True
for i in vbs_if_list:
if not is_in_if_list(i, ps_if_list):
_correct = False
break
assert _correct
= Test read_routes with VBS
ps_read_routes
def is_in_route_list(i, list):
# Ignore all empty IP or macs
if i[4] == '':
return True
if i[3].mac == '' or i[3].guid == '' or i[3].ip == '':
return True
for j in list:
if j[2] == i[2] and j[4] == i[4] and j[3].guid == i[3].guid:
return True
return False
vbs_read_routes = read_routes()
vbs_if_list
_correct = True
for i in vbs_read_routes:
if not is_in_route_list(i, ps_read_routes):
_correct = False
break
assert _correct
conf.prog._reload()
= show_interfaces
from scapy.arch import show_interfaces
with ContextManagerCaptureOutput() as cmco:
show_interfaces()
lines = cmco.get_output().split("\n")[1:]
for l in lines:
if not l.strip():
continue
int(l[:2])
= dev_from_pcapname
from scapy.config import conf
assert dev_from_pcapname(conf.iface.pcap_name).guid == conf.iface.guid
= test pcap_service_status
status = pcap_service_status()
status
assert status[0] in ["npcap", "npf"]
assert status[2] == True
= test pcap_service_stop
pcap_service_stop()
assert pcap_service_status()[2] == False
= test pcap_service_start
pcap_service_start()
assert pcap_service_status()[2] == True
= Test auto-pcap start UI
old_ifaces = IFACES.data
@mock.patch("scapy.arch.windows.get_if_list")
def _test_autostart_ui(mocked_getiflist):
mocked_getiflist.side_effect = lambda: []
IFACES.reload()
assert IFACES.data == {}
_test_autostart_ui()
IFACES.data = old_ifaces