Boofuzz根据组值创建嵌套块

时间:2018-09-04 07:14:51

标签: fuzzing boofuzz

在boofuzz中,我试图根据s_group中的选定值创建嵌套的s_block。

我遇到两个错误, 1)BLOCK NAME ALREADY EXISTS: 1,,当我尝试使用两个具有相同操作码的组时。我有一个包含可能的操作码值[“ 1”,“ 2”,“ 3”]的外部s_group和具有可能的值[“ 1”,“ 2”]的内部s_group

2)我想使用s_block中的值取决于s_group中选择的值。

我正在使用的代码如下:-

s_initialize(name="LOGIN-RQ")

with s_block("LOGIN"):
    s_group("Priority", ["1","2","3"])

    if(s_block_start("1", dep="Priority", dep_value="1", dep_compare="==")):
        # handle '1' - for A priority
        s_static("A")
        s_group("Type", ["1","2"])

        # handle '11 - for A priority Emergency'
        if(s_block_start("1", dep="Type", dep_value="1", dep_compare="==")):
            s_static("Emergency")
            s_static("#")
            s_string("1ab121-2345-2212-123ad21") # auth id
            s_static("#")
            s_static("Registered")
        s_block_end()

        if(s_block_start("2", dep_value="2", dep_compare="==")):
            s_static("Frequent")
        s_block_end()
    s_block_end()

    if(s_block_start("2", dep="Priority", dep_value="2", dep_compare="==")):
        s_static("B")
    s_block_end()

    if(s_block_start("3")):
        s_static("C")
        s_group("Category", ["1","2"])

        if(s_block_start("1", dep="Category", dep_value="1", dep_compare="==")):
            s_static("Anonymous")
            # handle anonymous category
        s_block_end()

        if(s_block_start("2", dep="Category", dep_value="2", dep_compare="==")):
            s_static("Registered")
        s_block_end()
    s_block_end()

session.connect(session.root, s_get("LOGIN-RQ"))
session.fuzz()

预期的可能结果:-

1A1Emergency#1ab121-2345-2212-123ad21#Registered
1A2Frequent
2B
3C1Anonymous
3C2Registered

请帮助

1 个答案:

答案 0 :(得分:1)

是的!

最后明白了。

我必须更新块名称并为这些块提供组名,然后一切都开始工作。该代码涵盖了所有预期的可能方案。

在此处发布工作代码,希望这会有所帮助

s_initialize(name="LOGIN-RQ")
with s_block("LOGIN"):
    s_group("Priority", ["1","2","3"])

    if(s_block_start("Priority1", group="Priority", dep="Priority", dep_value="1", dep_compare="==")):
        # handle '1' - for A priority
        #res = s_get_name_value('1')
        s_static("A")
        s_group("Type", ["1","2"])
        if s_block_start("Type1", group="Type", dep="Type", dep_value="1", dep_compare="==") :
                s_static("Emergency")
                s_static("#")
                s_static("1ab121-2345-2212-123ad21") # auth id
                s_static("#")
                s_static("Registered")
        s_block_end("1")

        if(s_block_start("Type2", group="Type", dep="Type", dep_value="2", dep_compare="==")):
            s_static("Frequent")
        s_block_end()
    s_block_end()

    if(s_block_start("Priority2", group="Priority", dep="Priority", dep_value="2", dep_compare="==")):
        s_static("B")
    s_block_end()

    if(s_block_start("Priority3", group="Priority", dep="Priority", dep_value="3", dep_compare="==")):
        s_static("C")
        s_group("Category", ["1","2"])

        if(s_block_start("Category1", group="Category", dep="Category", dep_value="1", dep_compare="==")):
            s_static("Anonymous")
            # handle anonymous category
        s_block_end()

        if(s_block_start("Category2", group="Category", dep="Category", dep_value="2", dep_compare="==")):
            s_static("Registered")
        s_block_end()
    s_block_end()

    if(s_block_start("Priority6", group="Priority", dep="Priority", dep_value="6", dep_compare="==")):
        s_static("NEVER")
    s_block_end()

session.connect(session.root, s_get("LOGIN-RQ"))
session.fuzz()