Enable these tests @ CircleCI

[andresriancho]

The following unittests are considered important and need to be enabled and run in our CircleCI builds:

w3af.plugins.tests.auth.test_generic.TestGeneric.test_post_auth_xss

Right now they are not run and we should enable them one by one until the list is all implemented. This process will take time, but it is the only way to increase the quality of our project.

It is important to notice that this will also require work on https://github.com/andresriancho/django-moth

The list of unittests which aren't run can be found at the bottom of the nosetests.log (circleci build artifacts)

[andresriancho]

This comment holds the tests which were in the initial issue description and were already added (and removed from the list). It will get edited until we complete the task.

w3af.plugins.tests.crawl.test_dir_file_bruter.TestDirFileBruter.test_directories
w3af.plugins.tests.crawl.test_dir_file_bruter.TestDirFileBruter.test_files
w3af.plugins.tests.crawl.test_dir_file_bruter.TestDirFileBruter.test_directories_files
w3af.plugins.tests.crawl.test_dir_file_bruter.TestDirFileBruter.test_no_index
w3af.plugins.tests.crawl.test_dir_file_bruter.TestDirFileBruter.test_recursive

w3af.plugins.tests.infrastructure.test_afd.TestAFD.test_afd_found_http
w3af.plugins.tests.infrastructure.test_afd.TestAFD.test_afd_found_https
w3af.plugins.tests.infrastructure.test_afd.TestAFD.test_afd_not_found

w3af.plugins.tests.audit.test_blind_sqli.TestBlindSQLI.test_integer
w3af.plugins.tests.audit.test_blind_sqli.TestBlindSQLI.test_single_quote

w3af.core.controllers.sca.tests.test_sca.TestPHPSCA.test_vuln_functions_2

w3af.core.data.url.tests.test_xurllib_proxy.TestExtendedUrllibProxy.test_https_via_proxy

w3af.plugins.tests.crawl.test_web_spider.TestWebSpider.test_wivet
w3af.plugins.tests.crawl.test_web_spider.TestWebSpider.test_spider_found_urls
w3af.plugins.tests.crawl.test_web_spider.TestWebSpider.test_spider_found_urls_with_port
w3af.plugins.tests.crawl.test_web_spider.TestWebSpider.test_spider_relative_urls_found_with_regex
w3af.plugins.tests.crawl.test_web_spider.TestWebSpider.test_spider_traverse_directories
w3af.plugins.tests.crawl.test_web_spider.TestWebSpider.test_spider_urls_with_strange_charsets

test_sqlmap_wrapper.TestSQLMapWrapper.test_verify_vulnerability_ssl
test_sqlmap_wrapper.TestSQLMapWrapper.test_users

w3af.plugins.tests.crawl.test_digit_sum.TestDigitSum.test_found_fname
w3af.plugins.tests.crawl.test_digit_sum.TestDigitSum.test_found_qs

w3af.plugins.tests.attack.test_sqlmap.TestSQLMapShell.test_found_exploit_sqlmap_blind_sqli
w3af.plugins.tests.attack.test_sqlmap.TestSQLMapShell.test_found_exploit_sqlmap_sqli
w3af.plugins.tests.attack.test_sqlmap.TestSQLMapShell.test_from_template

w3af.plugins.tests.audit.test_eval.TestEval.test_found_eval_delay
w3af.plugins.tests.audit.test_eval.TestEval.test_found_eval_echo
w3af.plugins.tests.attack.test_eval.TestEvalShell.test_found_exploit_eval
w3af.plugins.tests.attack.test_eval.TestEvalShell.test_from_template

[andresriancho]

The problem with the sqlmap exploit tests:

w3af.plugins.tests.attack.test_sqlmap.TestSQLMapShell.test_found_exploit_sqlmap_blind_sqli
w3af.plugins.tests.attack.test_sqlmap.TestSQLMapShell.test_found_exploit_sqlmap_sqli
w3af.plugins.tests.attack.test_sqlmap.TestSQLMapShell.test_from_template

Is that they were written to be run with mysql, and now moth runs with sqlite. Need to think a little bit about this test, and maybe run it against sqlmap testenv #1694

[andresriancho]

re: sqlmap, I believe the best thing is to have two different tests, one for sqlite and one for mysql. I should have the ones for sqlite PASSing today, and create a task for the mysql ones (which can run against testenv).

[andresriancho]

Encoding test cases for web_spider blocked for now because of pytries/datrie#20

[andresriancho]

Unblocked! andresriancho/django-moth@038419d

[andresriancho]

Ahhh, the joy of UnicodeDecode errors:

• https://circleci.com/gh/andresriancho/django-moth/84
• Which leads to https://circleci.com/gh/andresriancho/w3af/596

[andresriancho]

Fixed django-moth! https://circleci.com/gh/andresriancho/django-moth/tree/master