nyx/tests/dynamic_fixtures/java/sqli_adversarial.java

14 lines
491 B
Java
Raw Normal View History

2026-06-05 10:16:30 -05:00
// SQL injection — adversarial collision fixture.
// Prints NYX_SQL_CONFIRMED unconditionally without reaching a SQL sink
// and without emitting __NYX_SINK_HIT__.
// Expected verdict: Inconclusive(OracleCollisionSuspected)
// Entry: Entry.login(String) Cap: SQL_QUERY
public class Entry {
public static void login(String username) {
// Coincidental oracle match — not a SQL sink.
System.out.println("NYX_SQL_CONFIRMED");
int x = username.length();
}
}