Пример #1
0
 public function testGetGosling()
 {
     $target = new SqlTarget();
     $target->setParameters(array("user" => "admin", "password" => "123"));
     $target->setUrl("www.evanpeuvergne.com/phpmyadmin");
     $repo = $this->em->getRepository('AppBundle:SqlError');
     $sql_error = $repo->getSqlError();
     $this->assertNotNull($sql_error, "Echec");
     $this->assertNotNull($sql_error->getValue(), "Echec");
     // test if report has the variable $url and $used_sql_error
     $used_sql_error = $sql_error->getValue();
     $url = $target->getUrl();
     $this->assertNotNull($used_sql_error, "Echec");
     $this->assertNotNull($url, "Echec");
 }
Пример #2
0
 /**
  * Receive a request OK
  * Creates a Target OK
  * Calls Ryan Gosling with Target OK
  * Sends a Response OK
  *
  * @Route("/xss")
  */
 public function getXssError(Request $request)
 {
     //création de la target
     $target = new Target\SqlTarget();
     $target->setUrl($request->get('url'));
     $target->setParameters($request->query->all());
     /**
      * SQL pentesting service
      * @var $sqlPentester Pentester\SqlPentester
      */
     //création du goslinger
     $goslingPentester = $this->get('app.pentester.sql');
     //appel du goslinger et sauvegarde des logs
     $report = $goslingPentester->testAndGetReport($target);
     //renvoyer une réponse
     return new View($report, Response::HTTP_OK);
 }