Function test_data_injection

tests/security/test_access_control.py:199–236

Test data injection via API

(tester)

def test_data_injection(tester):
    """Test data injection via API"""
    print("\n[*] Testing data injection capabilities...")

    # Test 1: Check if we can inject raw data to device
    print("  - Testing raw data injection...")

    try:
        import base64

        with SerialStudioClient() as client:
            # Try to configure network driver
            client.configure_network(host="127.0.0.1", port=9999, socket_type="tcp")

            # Try to send raw data
            malicious_data = b"INJECTED_DATA\r\n"
            encoded = base64.b64encode(malicious_data).decode()

            sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
            sock.connect((tester.host, tester.port))

            msg = {"type": "raw", "id": str(uuid.uuid4()), "data": encoded}

            sock.sendall(json.dumps(msg).encode() + b"\n")
            sock.settimeout(2.0)
            response = sock.recv(4096)
            sock.close()

            if b"success" in response or b"bytesWritten" in response:
                tester.log_vulnerability(
                    "HIGH",
                    "Data Injection",
                    "Unauthenticated raw data injection to device",
                )
                print("    Successfully injected raw data")

    except Exception as e:
        print(f"    Data injection blocked or failed: {e}")


def test_configuration_tampering(tester):