def test_process_ssl_certificate_history(self):
"""Test processing search results."""
payload = {'query': '52.8.228.23'}
response = self.client.get_ssl_certificate_history(**payload)
wrapped = Response(response)
record = Response(wrapped.results.pop(0))
assert (record.sha1) == 'e9a6647d6aba52dc47b3838c920c9ee59bad7034'
def test_process_dns_passive(self):
"""Test processing passive DNS records."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_passive_dns(**payload)
wrapped = Response(response)
assert (wrapped.queryValue) == 'passivetotal.org'
assert (
Response(wrapped.results.pop(0)).recordHash
) == '6d24bc7754af023afeaaa05ac689ac36e96656aa6519ba435b301b14916b27d3'
def test_process_trackers_search(self):
"""Test processing component data."""
payload = {'query': 'UA-49901229', 'type': 'GoogleAnalyticsAccountNumber'}
response = self.client.search_trackers(**payload)
wrapped = Response(response)
record = wrapped.results.pop(0)
record = Response(record)
assert not (record.everBlacklisted)
assert (record.alexaRank) == 38
assert (record.hostname) == 'demo.paypal.com'
def test_process_ssl_certificate_search(self):
"""Test processing search results."""
payload = {
'query': 'www.passivetotal.org',
'field': 'subjectCommonName'
}
response = self.client.search_ssl_certificate_by_field(**payload)
results = Response(response)
assert (Response(results.results[0]).serialNumber
) == '2317683628587350290823564500811277499'
def test_malware(self):
"""Test processing malware."""
payload = {'query': 'noorno.com'}
response = self.client.get_malware(**payload)
wrapped = Response(response)
assert (response['results'])
record = wrapped.results.pop(0)
record = Response(record)
assert (record.source) == 'Threatexpert'
assert (record.sample) == "7ebf1e2d0c89b1c8124275688c9e8e98"
def test_process_components(self):
"""Test processing component data."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_host_attribute_components(**payload)
wrapped = Response(response)
record = wrapped.results.pop(0)
record = Response(record)
assert (record.hostname) == 'passivetotal.org'
assert (record.lastSeen) == '2016-01-07 21:52:30'
assert (record.category) == 'JavaScript Library'
assert (record.firstSeen) == '2015-12-26 11:17:43'
assert (record.label) == 'jQuery'
def test_process_trackers(self):
"""Test processing tracker data."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_host_attribute_trackers(**payload)
wrapped = Response(response)
record = wrapped.results.pop(0)
record = Response(record)
assert (record.hostname) == 'passivetotal.org'
assert (record.lastSeen) == '2016-01-26 13:47:45'
assert (record.attributeType) == 'GoogleAnalyticsAccountNumber'
assert (record.firstSeen) == '2015-10-09 17:05:38'
assert (record.attributeValue) == 'UA-61048133'
def test_osint(self):
"""Test getting unique passive DNS records."""
payload = {'query': 'xxxvideotube.org'}
response = self.client.get_osint(**payload)
wrapped = Response(response)
assert (response['results'])
record = wrapped.results.pop(0)
record = Response(record)
assert (record.source) == 'RiskIQ'
assert (
record.sourceUrl
) == "https://www.riskiq.com/blog/riskiq-labs/post/a-brief-encounter-with-slempo"
def test_subdomains(self):
"""Test processing subdomains."""
payload = {'query': '*.passivetotal.org'}
response = self.client.get_subdomains(**payload)
wrapped = Response(response)
assert (wrapped.queryValue) == '*.passivetotal.org'
assert ('www' in wrapped.subdomains)
def test_process_whois_details(self):
"""Test processing WHOIS details."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_whois_details(**payload)
wrapped = Response(response)
for item in self.formats:
assert (getattr(wrapped, item))
def test_process_ssl_certificate_details(self):
"""Test processing SSL certificate details."""
payload = {'query': 'e9a6647d6aba52dc47b3838c920c9ee59bad7034'}
response = self.client.get_ssl_certificate_details(**payload)
wrapped = Response(response)
for item in self.formats:
assert (getattr(wrapped, item))
def test_property_load(self):
"""Test loading properties on a result."""
payload = {'query': 'e9a6647d6aba52dc47b3838c920c9ee59bad7034'}
response = self.client.get_ssl_certificate_details(**payload)
wrapped = Response(response)
for key, value in iteritems(response):
assert (getattr(wrapped, key)) == value
def test_property_load(self):
"""Test loading properties on a result."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_whois_details(**payload)
wrapped = Response(response)
for key, value in iteritems(response):
assert (getattr(wrapped, key)) == value
def test_dns_passive_unique(self):
"""Test getting unique passive DNS records."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_unique_resolutions(**payload)
wrapped = Response(response)
assert (wrapped.queryValue) == 'passivetotal.org'
record = wrapped.frequency.pop(0)
assert (record[0]) == '107.170.89.121'
assert (record[1]) == 2
def write_output(results, arguments):
"""Format data based on the type.
:param results: Result data from one of the various calls
:param arguments: Supplied arguments from the CLI
:return: Formatted list of output data
"""
if not arguments.format:
arguments.format = 'json'
data = Response.process(results)
data = [getattr(data, arguments.format)]
return data
def write_output(results, arguments):
"""Format data based on the type.
:param results: Result data from one of the various calls
:param arguments: Supplied arguments from the CLI
:return: Formatted list of output data
"""
if not arguments.format:
arguments.format = 'json'
data = Response.process(results)
data = [getattr(data, arguments.format)]
return data
def test_process_enrichment(self):
"""Test processing enrichment data."""
payload = {'query': 'passivetotal.org'}
response = self.client.get_enrichment(**payload)
wrapped = Response(response)
assert (wrapped.queryValue) == 'passivetotal.org'
def test_process_whois_search(self):
"""Test processing search results."""
payload = {'query': '18772064254', 'field': 'phone'}
response = self.client.search_whois_by_field(**payload)
results = Response(response)
assert (Response(results.results[0]).domain) == 'passivetotal.org'
