Function TestArpSpooferBanMode

modules/arp_spoof/arp_spoof_test.go:488–539

(t *testing.T)

}

func TestArpSpooferBanMode(t *testing.T) {
	mockSess, _, mockFirewall := createMockSession()
	mod := NewArpSpoofer(mockSess.Session)

	// Setup targets
	targetIP := "192.168.1.10"
	targetMAC, _ := net.ParseMAC("aa:aa:aa:aa:aa:aa")
	mockSess.Lan.AddIfNew(targetIP, targetMAC.String())
	mockSess.findMACResults[targetIP] = targetMAC

	// Configure
	mockSess.Env.Set("arp.spoof.targets", targetIP)

	// Find and execute the ban handler
	handlers := mod.Handlers()
	for _, h := range handlers {
		if h.Name == "arp.ban on" {
			err := h.Exec([]string{})
			if err != nil {
				t.Fatalf("Failed to start ban mode: %v", err)
			}
			break
		}
	}

	if !mod.ban {
		t.Error("Ban mode should be enabled")
	}

	// Check that forwarding was NOT enabled
	if mockFirewall.IsForwardingEnabled() {
		t.Error("Forwarding should NOT be enabled in ban mode")
	}

	// Let it run for a bit
	time.Sleep(100 * time.Millisecond)

	// Stop using ban off handler
	for _, h := range handlers {
		if h.Name == "arp.ban off" {
			err := h.Exec([]string{})
			if err != nil {
				t.Fatalf("Failed to stop ban mode: %v", err)
			}
			break
		}
	}

	if mod.ban {
		t.Error("Ban mode should be disabled after stop")
	}
}

func TestArpSpooferWhitelisting(t *testing.T) {
	mockSess, _, _ := createMockSession()