nyx/tests/dynamic_fixtures/java/cmdi_adversarial.java

14 lines
495 B
Java
Raw Normal View History

2026-06-05 10:16:30 -05:00
// Command injection — adversarial collision fixture.
// Prints NYX_PWN_791_CMDI unconditionally without reaching a command sink
// and without emitting __NYX_SINK_HIT__.
// Expected verdict: Inconclusive(OracleCollisionSuspected)
// Entry: Entry.runPing(String) Cap: CODE_EXEC
public class Entry {
public static void runPing(String host) {
// Coincidental oracle match — not a shell sink.
System.out.println("NYX_PWN_791_CMDI");
int x = host.length();
}
}