123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391 |
- /**
- * Flow Control tests.
- *
- * @author tlwr [toby@toby.codes]
- *
- * @copyright Crown Copyright 2017
- * @license Apache-2.0
- */
- import TestRegister from "../../TestRegister.js";
- const ALL_BYTES = [
- "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
- "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f",
- "\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f",
- "\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f",
- "\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f",
- "\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f",
- "\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f",
- "\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f",
- "\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f",
- "\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f",
- "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf",
- "\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf",
- "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf",
- "\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf",
- "\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef",
- "\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff",
- ].join("");
- TestRegister.addTests([
- {
- name: "Fork: nothing",
- input: "",
- expectedOutput: "",
- recipeConfig: [
- {
- op: "Fork",
- args: ["\n", "\n", false],
- },
- ],
- },
- {
- name: "Fork, Merge: nothing",
- input: "",
- expectedOutput: "",
- recipeConfig: [
- {
- op: "Fork",
- args: ["\n", "\n", false],
- },
- {
- op: "Merge",
- args: [],
- },
- ],
- },
- {
- name: "Fork, (expect) Error, Merge",
- input: "1.1\n2.5\na\n3.4",
- expectedError: true,
- recipeConfig: [
- {
- op: "Fork",
- args: ["\n", "\n", false],
- },
- {
- op: "Object Identifier to Hex",
- args: [],
- },
- {
- op: "Merge",
- args: [],
- },
- ],
- },
- {
- name: "Fork, Conditional Jump, Encodings",
- input: "Some data with a 1 in it\nSome data with a 2 in it",
- expectedOutput: "U29tZSBkYXRhIHdpdGggYSAxIGluIGl0\n53 6f 6d 65 20 64 61 74 61 20 77 69 74 68 20 61 20 32 20 69 6e 20 69 74\n",
- recipeConfig: [
- {"op": "Fork", "args": ["\\n", "\\n", false]},
- {"op": "Conditional Jump", "args": ["1", false, "skipReturn", "10"]},
- {"op": "To Hex", "args": ["Space"]},
- {"op": "Return", "args": []},
- {"op": "Label", "args": ["skipReturn"]},
- {"op": "To Base64", "args": ["A-Za-z0-9+/="]}
- ]
- },
- {
- name: "Jump: Empty Label",
- input: [
- "should be changed",
- ].join("\n"),
- expectedOutput: [
- "should be changed was changed",
- ].join("\n"),
- recipeConfig: [
- {
- op: "Jump",
- args: ["", 10],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "should be changed"
- },
- "should be changed was changed",
- true,
- true,
- true,
- ],
- },
- ],
- },
- {
- name: "Jump: skips 1",
- input: [
- "shouldnt be changed",
- ].join("\n"),
- expectedOutput: [
- "shouldnt be changed",
- ].join("\n"),
- recipeConfig: [
- {
- op: "Jump",
- args: ["skipReplace", 10],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "shouldnt be changed"
- },
- "shouldnt be changed was changed",
- true,
- true,
- true,
- ],
- },
- {
- op: "Label",
- args: ["skipReplace"]
- },
- ],
- },
- {
- name: "Conditional Jump: Skips 0",
- input: [
- "match",
- "should be changed 1",
- "should be changed 2",
- ].join("\n"),
- expectedOutput: [
- "match",
- "should be changed 1 was changed",
- "should be changed 2 was changed"
- ].join("\n"),
- recipeConfig: [
- {
- op: "Conditional Jump",
- args: ["match", false, "", 0],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "should be changed 1"
- },
- "should be changed 1 was changed",
- true,
- true,
- true,
- ],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "should be changed 2"
- },
- "should be changed 2 was changed",
- true,
- true,
- true,
- ],
- },
- ],
- },
- {
- name: "Comment: nothing",
- input: "",
- expectedOutput: "",
- recipeConfig: [
- {
- "op": "Comment",
- "args": [""]
- }
- ]
- },
- {
- name: "Fork, Comment, Base64",
- input: "cat\nsat\nmat",
- expectedOutput: "Y2F0\nc2F0\nbWF0\n",
- recipeConfig: [
- {
- "op": "Fork",
- "args": ["\\n", "\\n", false]
- },
- {
- "op": "Comment",
- "args": ["Testing 123"]
- },
- {
- "op": "To Base64",
- "args": ["A-Za-z0-9+/="]
- }
- ]
- },
- {
- name: "Conditional Jump: Skips 1",
- input: [
- "match",
- "should not be changed",
- "should be changed",
- ].join("\n"),
- expectedOutput: [
- "match",
- "should not be changed",
- "should be changed was changed"
- ].join("\n"),
- recipeConfig: [
- {
- op: "Conditional Jump",
- args: ["match", false, "skip match", 10],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "should not be changed"
- },
- "should not be changed was changed",
- true,
- true,
- true,
- ],
- },
- {
- op: "Label", args: ["skip match"],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "should be changed"
- },
- "should be changed was changed",
- true,
- true,
- true,
- ],
- },
- ],
- },
- {
- name: "Conditional Jump: Skips backwards",
- input: [
- "match",
- ].join("\n"),
- expectedOutput: [
- "replaced",
- ].join("\n"),
- recipeConfig: [
- {
- op: "Label",
- args: ["back to the beginning"],
- },
- {
- op: "Jump",
- args: ["skip replace"],
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": "match"
- },
- "replaced",
- true,
- true,
- true,
- ],
- },
- {
- op: "Label",
- args: ["skip replace"],
- },
- {
- op: "Conditional Jump",
- args: ["match", false, "back to the beginning", 10],
- },
- ],
- },
- {
- name: "Register: RC4 key",
- input: "http://malwarez.biz/beacon.php?key=0e932a5c&data=8db7d5ebe38663a54ecbb334e3db11",
- expectedOutput: "All the secrets",
- recipeConfig: [
- {
- op: "Register",
- args: ["key=([\\da-f]*)", true, false]
- },
- {
- op: "Find / Replace",
- args: [
- {
- "option": "Regex",
- "string": ".*data=(.*)"
- }, "$1", true, false, true
- ]
- },
- {
- op: "RC4",
- args: [
- {
- "option": "Hex",
- "string": "$R0"
- }, "Hex", "Latin1"
- ]
- }
- ]
- },
- {
- name: "Register: AES key",
- input: "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",
- expectedOutput: `"You know," said Arthur, "it's at times like this, when I'm trapped in a Vogon airlock with a man from Betelgeuse, and about to die of asphyxiation in deep space that I really wish I'd listened to what my mother told me when I was young."
- "Why, what did she tell you?"
- "I don't know, I didn't listen."`,
- recipeConfig: [
- {
- op: "Register",
- args: ["(.{32})", true, false]
- },
- {
- op: "Drop bytes",
- args: [0, 32, false]
- },
- {
- op: "AES Decrypt",
- args: [
- {
- "option": "Hex",
- "string": "1748e7179bd56570d51fa4ba287cc3e5"
- },
- {
- "option": "Hex",
- "string": "$R0"
- },
- "CTR", "Hex", "Raw",
- {
- "option": "Hex",
- "string": ""
- }
- ]
- }
- ]
- },
- {
- name: "Label, Comment: Complex content",
- input: ALL_BYTES,
- expectedOutput: ALL_BYTES,
- recipeConfig: [
- {
- op: "Label",
- args: [""]
- },
- {
- op: "Comment",
- args: [""]
- }
- ]
- },
- ]);
|