Fix vuln host bug

bbot/core/event/base.py

@@ -1032,8 +1032,8 @@ def __init__(self, *args, **kwargs):
                     self.data = self.data
                     break
         # die if we still haven't found a host
-        if not self.host:
-            raise ValueError("No host was found in event parents. Host must be specified!")
+        if not self.host and not self.data.get("path", ""):
+            raise ValueError(f"No host was found in event parents: {self.get_parents()}. Host must be specified!")
 
 
 class DictPathEvent(DictEvent):
@@ -1408,7 +1408,7 @@ def raw_response(self):
         """
         raw_header = self.data.get("raw_header", "")
         body = self.data.get("body", "")
-        return f'{raw_header}{body}'
+        return f"{raw_header}{body}"
 
     @property
     def http_status(self):

bbot/test/test_step_1/test_events.py

@@ -964,15 +964,25 @@ def test_event_closest_host():
     assert vuln.data["path"] == "/tmp/asdf.txt"
     assert vuln.host == "www.evilcorp.com"
 
-    # no host == not allowed
+    # no host and no path == not allowed
     event3 = scan.make_event("wat", "ASDF", parent=scan.root_event)
     assert not event3.host
     with pytest.raises(ValueError):
-        finding = scan.make_event({"path": "/tmp/asdf.txt", "description": "test"}, "FINDING", parent=event3)
+        finding = scan.make_event({"description": "test"}, "FINDING", parent=event3)
+    finding = scan.make_event({"path": "/tmp/asdf.txt", "description": "test"}, "FINDING", parent=event3)
+    assert finding is not None
+    finding = scan.make_event({"host": "evilcorp.com", "description": "test"}, "FINDING", parent=event3)
+    assert finding is not None
     with pytest.raises(ValueError):
-        vuln = scan.make_event(
-            {"path": "/tmp/asdf.txt", "description": "test", "severity": "HIGH"}, "VULNERABILITY", parent=event3
-        )
+        vuln = scan.make_event({"description": "test", "severity": "HIGH"}, "VULNERABILITY", parent=event3)
+    vuln = scan.make_event(
+        {"path": "/tmp/asdf.txt", "description": "test", "severity": "HIGH"}, "VULNERABILITY", parent=event3
+    )
+    assert vuln is not None
+    vuln = scan.make_event(
+        {"host": "evilcorp.com", "description": "test", "severity": "HIGH"}, "VULNERABILITY", parent=event3
+    )
+    assert vuln is not None
 
 
 def test_event_magic():