apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-07-03 20:41:00 +02:00
Code Issues Projects Releases Packages Wiki Activity

refactor(dynamic): expand Go framework support with updated route dispatch logic, enhance stub generation, and improve Go module management

Browse source
This commit is contained in:
elipeter 2026-05-26 09:18:20 -05:00
parent 68bdd30eca
commit 170d2028d0
9 changed files with 252 additions and 86 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tests/dynamic_fixtures/go_frameworks/chi/vuln.go
View file

@ -6,6 +6,7 @@
package main
import (
"fmt"
"net/http"
"os/exec"
@ -14,7 +15,9 @@ import (
func Run(w http.ResponseWriter, r *http.Request) {
cmd := r.URL.Query().Get("cmd")
_ = exec.Command("sh", "-c", cmd).Run()
fmt.Print("__NYX_SINK_HIT__\n")
out, _ := exec.Command("sh", "-c", cmd).CombinedOutput()
fmt.Print(string(out))
_, _ = w.Write([]byte("ok"))
}

6
tests/dynamic_fixtures/go_frameworks/echo/vuln.go
View file

@ -6,6 +6,7 @@
package main
import (
"fmt"
"os/exec"
"github.com/labstack/echo/v4"
@ -13,7 +14,10 @@ import (
func Run(c echo.Context) error {
cmd := c.QueryParam("cmd")
return exec.Command("sh", "-c", cmd).Run()
fmt.Print("__NYX_SINK_HIT__\n")
out, err := exec.Command("sh", "-c", cmd).CombinedOutput()
fmt.Print(string(out))
return err
}
func main() {

6
tests/dynamic_fixtures/go_frameworks/fiber/vuln.go
View file

@ -6,6 +6,7 @@
package main
import (
"fmt"
"os/exec"
"github.com/gofiber/fiber/v2"
@ -13,7 +14,10 @@ import (
func Run(c *fiber.Ctx) error {
cmd := c.Query("cmd")
return exec.Command("sh", "-c", cmd).Run()
fmt.Print("__NYX_SINK_HIT__\n")
out, err := exec.Command("sh", "-c", cmd).CombinedOutput()
fmt.Print(string(out))
return err
}
func main() {

5
tests/dynamic_fixtures/go_frameworks/gin/vuln.go
View file

@ -7,6 +7,7 @@
package main
import (
"fmt"
"os/exec"
"github.com/gin-gonic/gin"
@ -14,7 +15,9 @@ import (
func Run(c *gin.Context) {
cmd := c.Query("cmd")
_ = exec.Command("sh", "-c", cmd).Run()
fmt.Print("__NYX_SINK_HIT__\n")
out, _ := exec.Command("sh", "-c", cmd).CombinedOutput()
fmt.Print(string(out))
}
func main() {