mirror of
https://git.jabber.space/devs/cproof.git
synced 2026-07-17 23:36:22 +00:00
Jabber Developer
c5dd0cf9df
Modify version responses to return a generic client name and omit version strings. Drop the "profanity." prefix from dynamically generated JID resources. Spoof the XEP-0115 capabilities node URI to prevent service discovery/presence fingerprinting. These adjustments reduce the client's attack surface by minimizing identifiable metadata.
95 lines
2.3 KiB
C
95 lines
2.3 KiB
C
#include <glib.h>
|
|
#include "prof_cmocka.h"
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
|
|
#include <stabber.h>
|
|
|
|
#include "proftest.h"
|
|
|
|
void
|
|
connect_jid_requests_roster(void **state)
|
|
{
|
|
prof_connect();
|
|
|
|
assert_true(stbbr_received(
|
|
"<iq id='*' type='get'><query xmlns='jabber:iq:roster'/></iq>"
|
|
));
|
|
}
|
|
|
|
void
|
|
connect_jid_sends_presence_after_receiving_roster(void **state)
|
|
{
|
|
prof_connect();
|
|
|
|
assert_true(stbbr_received(
|
|
"<presence id='*'>"
|
|
"<c hash='sha-1' xmlns='http://jabber.org/protocol/caps' ver='*' node='*'/>"
|
|
"</presence>"
|
|
));
|
|
}
|
|
|
|
void
|
|
connect_jid_requests_bookmarks(void **state)
|
|
{
|
|
prof_connect();
|
|
|
|
assert_true(stbbr_received(
|
|
"<iq id='*' type='get'>"
|
|
"<query xmlns='jabber:iq:private'>"
|
|
"<storage xmlns='storage:bookmarks'/>"
|
|
"</query>"
|
|
"</iq>"
|
|
));
|
|
}
|
|
|
|
void
|
|
connect_bad_password(void **state)
|
|
{
|
|
char connect_cmd[128];
|
|
snprintf(connect_cmd, sizeof(connect_cmd), "/connect stabber@localhost server 127.0.0.1 port %d tls allow", stub_port);
|
|
prof_input(connect_cmd);
|
|
prof_input("badpassword");
|
|
|
|
assert_true(prof_output_exact("Login failed."));
|
|
}
|
|
|
|
void
|
|
connect_shows_presence_updates(void **state)
|
|
{
|
|
prof_connect();
|
|
|
|
stbbr_send(
|
|
"<presence to='stabber@localhost' from='buddy1@localhost/mobile'>"
|
|
"<show>dnd</show>"
|
|
"<status>busy!</status>"
|
|
"</presence>"
|
|
);
|
|
assert_true(prof_output_exact("Buddy1 (mobile) is dnd, \"busy!\""));
|
|
|
|
stbbr_send(
|
|
"<presence to='stabber@localhost' from='buddy1@localhost/laptop'>"
|
|
"<show>chat</show>"
|
|
"<status>Talk to me!</status>"
|
|
"</presence>"
|
|
);
|
|
assert_true(prof_output_exact("Buddy1 (laptop) is chat, \"Talk to me!\""));
|
|
|
|
stbbr_send(
|
|
"<presence to='stabber@localhost' from='buddy2@localhost/work'>"
|
|
"<show>away</show>"
|
|
"<status>Out of office</status>"
|
|
"</presence>"
|
|
);
|
|
assert_true(prof_output_exact("Buddy2 (work) is away, \"Out of office\""));
|
|
|
|
stbbr_send(
|
|
"<presence to='stabber@localhost' from='buddy1@localhost/mobile'>"
|
|
"<show>xa</show>"
|
|
"<status>Gone :(</status>"
|
|
"</presence>"
|
|
);
|
|
assert_true(prof_output_exact("Buddy1 (mobile) is xa, \"Gone :(\""));
|
|
}
|