yume/yume-post-smtp-proto
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SMTP smuggling tests

Browse source
This commit is contained in:
mdecimus 2023-12-28 09:44:12 +01:00
parent d5949da111
commit 5785ea1ab4
1 changed files with 61 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

61
src/request/receiver.rs
View file

@ -261,6 +261,67 @@ mod tests {
vec!["\r\na\rb\nc\r\n.d\r\n..\r\n", "\r\n.\r\n"],
"\r\na\rb\nc\r\nd\r\n.\r\n",
),
// Test SMTP smuggling attempts
(
vec![
"\n.\r\n",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
"\r\n.\r\n",
],
concat!(
"\n.\r\n",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
),
),
(
vec![
"\n.\n",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
"\r\n.\r\n",
],
concat!(
"\n.\n",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
),
),
(
vec![
"\r.\r\n",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
"\r\n.\r\n",
],
concat!(
"\r.\r\n",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
),
),
(
vec![
"\r.\r",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
"\r\n.\r\n",
],
concat!(
"\r.\r",
"MAIL FROM:<hello@world.com>\r\n",
"RCPT TO:<test@domain.com\r\n",
"DATA\r\n",
),
),
] {
let mut r = DataReceiver::new();
let mut buf = Vec::new();