test: offline suite + committed fixtures for every stage

2026-06-29 17:36:05 -04:00
parent aa4501f2fa
commit aa4be25063
15 changed files with 594 additions and 0 deletions
@@ -0,0 +1,4 @@
+{"host":"api.example.com","a":["93.184.216.34"],"cname":[],"status_code":"NOERROR"}
+{"host":"www.example.com","a":["93.184.216.35"],"cname":[],"status_code":"NOERROR"}
+{"host":"admin.example.com","a":["93.184.216.36"],"cname":["internal.example.com"],"status_code":"NOERROR"}
+{"host":"external.notmine.com","a":["198.51.100.7"],"cname":[],"status_code":"NOERROR"}
@@ -0,0 +1,4 @@
+{"input":"api.example.com","host":"93.184.216.34","port":"443","url":"https://api.example.com","scheme":"https","status_code":200,"title":"API Gateway","webserver":"Apache/2.4.49","tech":["Apache HTTP Server:2.4.49"],"tls":{"subject_cn":"api.example.com","issuer_org":["Let's Encrypt"],"not_after":"2026-09-01T00:00:00Z"}}
+{"input":"www.example.com","host":"93.184.216.35","port":"80","url":"http://www.example.com","scheme":"http","status_code":301,"title":"Moved","webserver":"nginx/1.18.0","tech":["Nginx:1.18.0"]}
+{"input":"www.example.com","host":"93.184.216.35","port":"443","url":"https://www.example.com","scheme":"https","status_code":200,"title":"Example Corp","webserver":"nginx/1.18.0","tech":["Nginx:1.18.0"],"tls":{"subject_cn":"www.example.com","issuer_cn":"R3","not_after":"2026-08-01T00:00:00Z"}}
+{"input":"admin.example.com","host":"93.184.216.36","port":"8080","url":"http://admin.example.com:8080","scheme":"http","status_code":200,"title":"Tomcat Manager","webserver":"Apache-Coyote/1.1","tech":["Apache Tomcat:9.0.30"]}
@@ -0,0 +1,6 @@
+{"host":"api.example.com","ip":"93.184.216.34","port":443,"protocol":"tcp"}
+{"host":"api.example.com","ip":"93.184.216.34","port":22,"protocol":"tcp"}
+{"host":"www.example.com","ip":"93.184.216.35","port":80,"protocol":"tcp"}
+{"host":"www.example.com","ip":"93.184.216.35","port":443,"protocol":"tcp"}
+{"host":"admin.example.com","ip":"93.184.216.36","port":8080,"protocol":"tcp"}
+{"host":"external.notmine.com","ip":"198.51.100.7","port":80,"protocol":"tcp"}
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE nmaprun>
+<nmaprun scanner="nmap" args="nmap -sV -sT -oX - -Pn -p 22,80,443,8080 93.184.216.34 93.184.216.35 93.184.216.36" version="7.94">
+  <host>
+    <address addr="93.184.216.34" addrtype="ipv4"/>
+    <hostnames>
+      <hostname name="api.example.com" type="user"/>
+    </hostnames>
+    <ports>
+      <port protocol="tcp" portid="22">
+        <state state="open" reason="syn-ack"/>
+        <service name="ssh" product="OpenSSH" version="8.2p1 Ubuntu 4ubuntu0.5" method="probed" conf="10">
+          <cpe>cpe:/a:openbsd:openssh:8.2p1</cpe>
+        </service>
+      </port>
+      <port protocol="tcp" portid="443">
+        <state state="open" reason="syn-ack"/>
+        <service name="http" product="Apache httpd" version="2.4.49" method="probed" conf="10" tunnel="ssl">
+          <cpe>cpe:/a:apache:http_server:2.4.49</cpe>
+        </service>
+      </port>
+    </ports>
+  </host>
+  <host>
+    <address addr="93.184.216.35" addrtype="ipv4"/>
+    <hostnames>
+      <hostname name="www.example.com" type="user"/>
+    </hostnames>
+    <ports>
+      <port protocol="tcp" portid="80">
+        <state state="open" reason="syn-ack"/>
+        <service name="http" product="nginx" version="1.18.0" method="probed" conf="10">
+          <cpe>cpe:/a:igor_sysoev:nginx:1.18.0</cpe>
+        </service>
+      </port>
+      <port protocol="tcp" portid="443">
+        <state state="open" reason="syn-ack"/>
+        <service name="http" product="nginx" version="1.18.0" method="probed" conf="10" tunnel="ssl"/>
+      </port>
+    </ports>
+  </host>
+  <host>
+    <address addr="93.184.216.36" addrtype="ipv4"/>
+    <hostnames>
+      <hostname name="admin.example.com" type="user"/>
+    </hostnames>
+    <ports>
+      <port protocol="tcp" portid="8080">
+        <state state="open" reason="syn-ack"/>
+        <service name="http-proxy" product="Apache Tomcat" version="9.0.30" method="probed" conf="10">
+          <cpe>cpe:/a:apache:tomcat:9.0.30</cpe>
+        </service>
+      </port>
+    </ports>
+  </host>
+  <runstats>
+    <finished time="1700000000" timestr="Tue Nov 14 00:00:00 2023" elapsed="12.34" exit="success"/>
+  </runstats>
+</nmaprun>
@@ -0,0 +1,3 @@
+{"template-id":"apache-detect","info":{"name":"Apache Detection","severity":"info","reference":["https://httpd.apache.org/"]},"host":"api.example.com","matched-at":"https://api.example.com"}
+{"template-id":"tomcat-manager-exposed","info":{"name":"Apache Tomcat Manager Exposed","severity":"high","reference":["https://tomcat.apache.org/"]},"host":"admin.example.com","matched-at":"http://admin.example.com:8080/manager/html"}
+{"template-id":"tls-version","info":{"name":"TLS Version Detection","severity":"info","reference":[]},"host":"www.example.com","matched-at":"www.example.com:443"}
@@ -0,0 +1,6 @@
+in_scope_domains:
+  - example.com
+in_scope_cidrs:
+  - 93.184.216.0/24
+out_of_scope:
+  - internal-only.example.com
@@ -0,0 +1,33 @@
+{
+  "Apache httpd 2.4.49": {
+    "RESULTS_EXPLOIT": [
+      {
+        "Title": "Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)",
+        "EDB-ID": "50383",
+        "Date_Published": "2021-10-07",
+        "Path": "/usr/share/exploitdb/exploits/multiple/webapps/50383.sh",
+        "URL": "https://www.exploit-db.com/exploits/50383",
+        "Type": "webapps",
+        "Platform": "multiple"
+      },
+      {
+        "Title": "Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE)",
+        "EDB-ID": "50406",
+        "Date_Published": "2021-10-08",
+        "Path": "/usr/share/exploitdb/exploits/multiple/webapps/50406.py",
+        "URL": "https://www.exploit-db.com/exploits/50406",
+        "Type": "webapps",
+        "Platform": "multiple"
+      }
+    ]
+  },
+  "Apache Tomcat 9.0.30": {
+    "RESULTS_EXPLOIT": []
+  },
+  "OpenSSH 8.2p1 Ubuntu 4ubuntu0.5": {
+    "RESULTS_EXPLOIT": []
+  },
+  "nginx 1.18.0": {
+    "RESULTS_EXPLOIT": []
+  }
+}
@@ -0,0 +1,4 @@
+{"host":"api.example.com","input":"example.com","source":["crtsh"]}
+{"host":"www.example.com","input":"example.com","source":["dnsdumpster"]}
+{"host":"admin.example.com","input":"example.com","source":["crtsh"]}
+{"host":"external.notmine.com","input":"example.com","source":["crtsh"]}