Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generic_SSRF tests sometimes fail #1500

Open
TheTechromancer opened this issue Jun 25, 2024 · 0 comments
Open

Generic_SSRF tests sometimes fail #1500

TheTechromancer opened this issue Jun 25, 2024 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@TheTechromancer
Copy link
Collaborator

The Generic_SSRF test fails occasionally (maybe once every 30 or 40 times).

https://github.com/blacklanternsecurity/bbot/actions/runs/9664760054/job/26660228261?pr=1499

Detailed failed test report:
Test Name: test_module_run (bbot/test/test_step_2/module_tests/base.py:113)
Location: bbot/test/test_step_2/module_tests/test_module_generic_ssrf.py::TestGeneric_SSRF::test_module_run at bbot/test/test_step_2/module_tests/base.py:113
Failure details:
self = <bbot.test.test_step_2.module_tests.test_module_generic_ssrf.TestGeneric_SSRF object at 0x7feefc20dc10>
module_test = <bbot.test.test_step_2.module_tests.base.ModuleTestBase.ModuleTest object at 0x7fea81f7fdc0>

    @pytest.mark.asyncio
    async def test_module_run(self, module_test):
>       self.check(module_test, module_test.events)

bbot/test/test_step_2/module_tests/base.py:116: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <bbot.test.test_step_2.module_tests.test_module_generic_ssrf.TestGeneric_SSRF object at 0x7feefc20dc10>
module_test = <bbot.test.test_step_2.module_tests.base.ModuleTestBase.ModuleTest object at 0x7fea81f7fdc0>
events = [SCAN("testgeneric_ssrf_test_p5uh4bttgr (SCAN:18483ad8cc553a63f0eb282250bb66fc3a1fb3d6)", module=TARGET, tags={'in-sco...200', 'in-scope', 'ip-127-0-0-1'}), IP_ADDRESS("127.0.0.1", module=host, tags={'private-ip', 'ipv4', 'in-scope'}), ...]

    def check(self, module_test, events):
        assert any(
            e.type == "VULNERABILITY" and "Out-of-band interaction: [Generic SSRF (GET)]" in e.data["description"]
            for e in events
        ), "Failed to detect Generic SSRF (GET)"
        assert any(
            e.type == "VULNERABILITY" and "Out-of-band interaction: [Generic SSRF (POST)]" in e.data["description"]
            for e in events
        ), "Failed to detect Generic SSRF (POST)"
>       assert any(
            e.type == "VULNERABILITY" and "Out-of-band interaction: [Generic XXE] [HTTP]" in e.data["description"]
            for e in events
        ), "Failed to detect Generic SSRF (XXE)"
E       AssertionError: Failed to detect Generic SSRF (XXE)
E       assert False
E        +  where False = any(<generator object TestGeneric_SSRF.check.<locals>.<genexpr> at 0x7fea71010d60>)

bbot/test/test_step_2/module_tests/test_module_generic_ssrf.py:56: AssertionError

---------- coverage: platform linux, python 3.9.19-final-0 -----------
Coverage XML written to file cov.xml

=========================== short test summary info ============================
FAILED bbot/test/test_step_2/module_tests/test_module_generic_ssrf.py::TestGeneric_SSRF::test_module_run - AssertionError: Failed to detect Generic SSRF (XXE)
assert False
@TheTechromancer TheTechromancer added the bug Something isn't working label Jun 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants