merge development

Author: thorinaboenke

.python-version

@@ -0,0 +1 @@
+cpython@3.12

README.md

@@ -45,13 +45,15 @@ Please take a look at our documentation for how to install and use attackmate:
 * [Documentation](https://ait-testbed.github.io/attackmate/main/index.html)
 * [Command Reference](https://ait-testbed.github.io/attackmate/main/playbook/commands/index.html)
 * [Example Playbooks](https://ait-testbed.github.io/attackmate/main/playbook/examples.html)
+* [Arxiv Paper](https://arxiv.org/pdf/2601.14108)
 
 ## Contribution
 
 We're happily taking patches and other contributions. Please see the following links for how to get started:
 
 - [Contribution Guide](https://ait-testbed.github.io/attackmate/main/developing/contribution.html)
 
+
 ## Disclaimer
 
 AttackMate is purely for educational and academic purposes. The software is provided "as is"

docs/source/playbook/commands/webserv.rst

@@ -3,8 +3,8 @@ webserv
 =======
 
 Start a http-server and share a file. This command
-will return after the first HTTP-request.
-
+will return after the first HTTP-request. To keep serving the file instead set keep_serving to True.
+The webserv command has to be run in background mode, otherwise the playbook execution will halt until a request is received.
 .. code-block:: yaml
 
    ###
@@ -35,3 +35,10 @@ will return after the first HTTP-request.
 
    :type: str
    :default: ``0.0.0.0``
+
+.. confval:: keep_servng
+
+   Keep serving even after a request has been processed
+
+   :type: bool
+   :default: False

src/attackmate/executors/http/webservexecutor.py

@@ -61,7 +61,14 @@ def _exec_cmd(self, command: WebServCommand) -> Result:
         address = (command.address, CmdVars.variable_to_int('Port', command.port))
         try:
             server = WebServe(address, WebRequestHandler, local_path=command.local_path)
-            server.handle_request()
+            if command.keep_serving:
+                self.logger.info('Keeping server alive to serve multiple requests')
+                try:
+                    server.serve_forever()
+                except KeyboardInterrupt:
+                    server.server_close()
+            else:
+                server.handle_request()
         except Exception as e:
             raise ExecException(e)
 

src/attackmate/schemas/http.py

@@ -10,6 +10,7 @@ class WebServCommand(BaseCommand):
     local_path: str
     port: StringNumber = '8000'
     address: str = '0.0.0.0'  # nosec
+    keep_serving: bool = False
 
 
 @CommandRegistry.register('http-client')

test/units/test_browserexecutor.py

@@ -193,7 +193,7 @@ def test_browser_executor_named_session(browser_executor):
     reuse_cmd = BrowserCommand(
         type='browser',
         cmd='click',
-        selector='#test-link',  # matches the anchor in DATA_URL_WITH_LINK
+        selector='a[href="http://www.iana.org/domains/example"]',
         session='my_session'
     )
     result2 = browser_executor._exec_cmd(reuse_cmd)