Function main

tests/security/test_api_vulnerabilities.py:627–666

Run all security tests

()

def main():
    """Run all security tests"""
    print("=" * 80)
    print("Serial Studio API Security Test Suite")
    print("=" * 80)
    print("\nWARNING: This will attempt to exploit the Serial Studio API.")
    print("Only run this against a test instance!")
    print()

    tester = SecurityTester()

    try:
        # Check if server is running
        with SerialStudioClient() as client:
            print("[+] Connected to Serial Studio API\n")

        # Run all attack categories
        test_json_parsing_exploits(tester)
        test_command_injection(tester)
        test_buffer_exhaustion(tester)
        test_batch_abuse(tester)
        test_connection_exhaustion(tester)
        test_raw_data_injection(tester)
        test_parameter_validation(tester)
        test_information_disclosure(tester)
        test_state_manipulation(tester)

    except ConnectionError as e:
        print(f"[ERROR] Cannot connect to Serial Studio API: {e}")
        print("Make sure Serial Studio is running with API Server enabled.")
        return 1

    except KeyboardInterrupt:
        print("\n\n[!] Tests interrupted by user")

    finally:
        # Generate report
        tester.report()

    return 0


if __name__ == "__main__":