blob: 309c77b2c76695ebe1940de69cf6478f12fe62f3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
#!/usr/bin/ruby1.8
require 'socket'
require 'timeout'
#
# Test that we can receive a ping response from the remote host.
#
class PINGTest
#
# Data passed from the JSON hash.
#
attr_reader :test_data
#
# The error text we return on failure.
#
attr_reader :error
#
# Save the data away.
#
def initialize( data )
@test_data = data
end
#
# Run the test.
#
# Return "true" on success
#
# Return "false" on failure.
#
# If the test fails the details should be retrieved from "error()".
#
def run_test
#
# Reset state from previous test.
#
@error = nil
#
# Find the binary we're going to invoke.
#
binary = nil
binary = "/usr/bin/multi-ping" if ( File.exists?( "/usr/bin/multi-ping" ) )
if ( binary.nil? )
@error = "Failed to find 'multi-ping'"
return false
end
#
# Get the hostname to test against.
#
host = @test_data['target_host']
#
# Sanity check the hostname for ping-tests, to
# avoid this security hole:
#
# $(/tmp/exploit.sh) must run ping ..
#
raise ArgumentError, "Invalid hostname for ping-test: #{host}" unless( host =~ /^([a-zA-Z0-9:\-\.]+)$/ )
#
# Show the hostname.
#
puts "ping testing host #{host}" if ( @test_data['verbose'] )
if ( system( "#{binary} #{host}" ) == true )
puts "PING OK" if ( @test_data['verbose'] )
return true
else
@error = "Ping failed. TODO: Mtr"
return false
end
end
#
# Return the error text for why this test failed.
#
def error()
return @error
end
end
#
# Sample test, for testing.
#
if __FILE__ == $0 then
#
# Sample data.
#
test = {
"target_host" => "upload.ns.bytemark.co.uk",
"test_type" => "ping",
"verbose" => 1,
"timeout" => 5,
"test_alert" => "Pingly faily",
}
#
# Run the test.
#
obj = PINGTest.new( test )
if ( obj.run_test )
puts "TEST OK"
else
puts "TEST FAILED"
puts obj.error()
end
end
|