exploitTarget.py

from selenium import webdriver
from time import sleep
import csv
from config import CONFIG
from selenium.webdriver.chrome.options import Options
from login import login
import sys, os
import logging
script = os.path.basename(sys.argv[0])
logging.basicConfig(filename='./files/test_logs/%s.log' % script, format='%(asctime)s - %(levelname)s - %(message)s', level=logging.INFO)
logger = logging.getLogger('test')


_chrome_options = Options()
if CONFIG.WEBDRIVER == "Chrome":
    _chrome_options = Options()
    _chrome_options.add_argument('--start-fullscreen')
    driver = webdriver.Chrome(chrome_options=_chrome_options)

elif CONFIG.WEBDRIVER == "Firefox":

    driver = webdriver.Firefox()

else:

    print('No valid Webdrive was provided. ')

# driver.set_window_size(1440, 1200)
driver.implicitly_wait(CONFIG.waittime)
# sleep(2)

host = CONFIG.HOST


def exploit_create(driver, exploitsname, exploitsource, exploitsdesc):

    """
    driver = webdriver
    host = string host url i.e. https://te-12257.threatq.com/
    exploitsname = string for ttp title
    exploitsdesc =  string description for ttp.  Can be very long and detailed.
    """

    success = False

    while success is False:
        try:

            driver.find_element_by_id("primary-nav-create").click()
            success = True

        except Exception as e:

            logger.critical("Button is not there, retry.")

    driver.find_element_by_xpath("(//li[@permissions='exploit_target'])").click()

    sleep(5)

    driver.find_element_by_id("modal_value").clear()

    driver.find_element_by_id("modal_value").send_keys(exploitsname)

    # change iframe to access description frame.
    driver.switch_to.frame(driver.find_elements_by_tag_name('iframe')[0])

    if len(exploitsdesc) == 0:

        driver.find_element_by_css_selector('body').send_keys(exploitsname)

    else:

        driver.find_element_by_css_selector('body').send_keys(exploitsdesc)

    # return to primary frame.
    driver.switch_to.default_content()

    # Add source
    driver.find_element_by_xpath("//span[@ng-show='!form.swapSourceOption']").click()
    sleep(1)
    driver.find_element_by_xpath("//sources-form/div/div/input").send_keys(exploitsource)

    driver.find_element_by_xpath("//DIV[@class='modal-footer ng-scope']//BUTTON[@type='submit']").click()

    sleep(7)

# Run test steps here

login(logger, host, driver, usr=CONFIG.USER[0], pssword=CONFIG.USER[1], SAML=CONFIG.SAML)
logger.info('Start Exploit Target create test.')
sleep(5)

"""
csv file format:  value, sources, alias 
we will use alias for the desc since there is no aliase field in the create UI.
"""
with open('files/ThreatQ-exploit.csv') as exploitfile:
    reader = csv.reader(exploitfile)
    exploits = list(reader)

for index in range(1, len(exploits)):

    exploit_create(driver, exploits[index][0], exploits[index][1], exploits[index][2])

    print (exploits[index])

    sleep(1)

logger.info('End Exploit Target create test.')

driver.quit()