Function test_logic_bombs

tests/security/test_exploit_techniques.py:508–551

Exploit state machine logic errors

(exploiter)

def test_logic_bombs(exploiter):
    """Exploit state machine logic errors"""
    print("\n[*] Testing logic bomb exploits...")

    # Attack 1: Invalid state transitions
    print("  - Forcing invalid state transitions...")

    try:
        with SerialStudioClient() as client:
            # Try to export before connecting
            client.command("csvExport.setEnabled", {"enabled": True})

            # Try to disconnect before connecting
            client.command("io.disconnect")

            # Try to write data without device
            import base64

            data = base64.b64encode(b"INJECT").decode()
            sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
            sock.connect((exploiter.host, exploiter.port))
            msg = {"type": "raw", "id": str(uuid.uuid4()), "data": data}
            sock.sendall(json.dumps(msg).encode() + b"\n")
            sock.settimeout(2.0)
            response = sock.recv(4096)
            sock.close()

    except Exception as e:
        print(f"    State validation: {e}")

    # Attack 2: Rapid mode switching
    print("  - Rapid operation mode switching...")

    try:
        with SerialStudioClient() as client:
            for i in range(500):
                mode = i % 3
                client.configure_frame_parser(
                    start_sequence="/*",
                    end_sequence="*/",
                    operation_mode=mode,
                )
    except Exception as e:
        print(f"    Mode switching: {e}")


def test_compression_bomb(exploiter):