一个国家级数字身份系统上线前，测试团队用3天挖出127个致命漏洞_千锋教育

import jwt
import requests

# 尝试伪造JWT令牌
payload = {"user_id": "123456", "role": "admin"}
fake_token = jwt.encode(payload, "weak_secret", algorithm="HS256")

response = requests.get(
    "https://id-system.gov/api/admin/users",
    headers={"Authorization": f"Bearer {fake_token}"}
)

if response.status_code == 200:
    print("致命漏洞：JWT密钥可被暴力破解")

import requests

# 测试用户信息接口是否泄露过多数据
response = requests.get(
    "https://id-system.gov/api/users/current",
    headers={"Authorization": "Bearer valid_token"}
)

user_data = response.json()
# 检查是否返回了不必要的字段
sensitive_fields = ["id_card_number", "fingerprint_hash", "face_feature_vector"]
for field in sensitive_fields:
    if field in user_data:
        print(f"隐私漏洞：接口泄露了{field}")

# 模拟数据库主库故障
import time
import psycopg2

def test_database_failover():
    # 连接主库
    conn = psycopg2.connect(
        host="primary-db.id-system.gov",
        dbname="id_system",
        user="test_user",
        password="test_pass"
    )
    
    # 模拟主库宕机（通过防火墙规则）
    disable_primary_db()
    
    start_time = time.time()
    try:
        # 尝试执行查询，期望自动切换到备库
        cursor = conn.cursor()
        cursor.execute("SELECT 1")
        failover_time = time.time() - start_time
        print(f"故障切换时间：{failover_time}秒")
        assert failover_time < 10, "故障切换超时"
    except Exception as e:
        print(f"故障切换失败：{str(e)}")

from locust import HttpUser, task, between

class IdentitySystemUser(HttpUser):
    wait_time = between(1, 3)
    
    @task(3)
    def verify_identity(self):
        """身份验证接口，权重最高"""
        self.client.post(
            "/api/verify",
            json={
                "id_card": "110101199001011234",
                "name": "张三",
                "biometric_hash": "abc123def456"
            }
        )
    
    @task(1)
    def query_user_info(self):
        """用户信息查询"""
        self.client.get("/api/users/current")
    
    @task(1)
    def sign_document(self):
        """电子签名"""
        self.client.post(
            "/api/sign",
            json={"document_id": "doc_12345"}
        )

import subprocess
import json

def run_regression_test():
    """自动化执行回归测试"""
    # 运行安全测试套件
    result = subprocess.run(
        ["pytest", "tests/security/", "-v", "--json-report"],
        capture_output=True, text=True
    )
    
    report = json.loads(result.stdout)
    failed_tests = [t for t in report["tests"] if t["outcome"] == "failed"]
    
    if failed_tests:
        print(f"回归测试失败：{len(failed_tests)}个测试用例")
        for test in failed_tests:
            print(f"  - {test['nodeid']}")
        return False
    else:
        print("所有回归测试通过")
        return True