apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-15 20:05:13 +02:00
Code Issues Projects Releases Packages Wiki Activity

[pitboss/grind] deferred session-0001 (20260520T233019Z-6958)

Browse source
This commit is contained in:
pitboss 2026-05-20 19:26:01 -05:00
parent f9bd51c024
commit 3b49b4d4b5
5 changed files with 88 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

18
tests/xpath_corpus.rs
View file

@ -424,7 +424,8 @@ mod e2e_phase_07 {
Lang::Java => "java",
Lang::Python => "python3",
Lang::Php => "php",
_ => unreachable!("e2e_phase_07 covers Java/Python/PHP"),
Lang::JavaScript => "node",
_ => unreachable!("e2e_phase_07 covers Java/Python/PHP/JS"),
}
}
@ -433,6 +434,7 @@ mod e2e_phase_07 {
Lang::Java => "java",
Lang::Python => "python",
Lang::Php => "php",
Lang::JavaScript => "js",
_ => unreachable!(),
}
}
@ -549,4 +551,18 @@ mod e2e_phase_07 {
.expect("Confirmed run must carry a DifferentialOutcome");
assert_eq!(diff.verdict, DifferentialVerdict::Confirmed);
}
#[test]
fn javascript_vuln_confirms_via_run_spec() {
let Some(outcome) = run(Lang::JavaScript, "vuln.js", "run") else { return };
assert!(
outcome.triggered_by.is_some(),
"JavaScript XPath vuln must Confirm via run_spec; got {outcome:?}",
);
let diff = outcome
.differential
.as_ref()
.expect("Confirmed run must carry a DifferentialOutcome");
assert_eq!(diff.verdict, DifferentialVerdict::Confirmed);
}
}

18
tests/xxe_corpus.rs
View file

@ -354,7 +354,8 @@ mod e2e_phase_05 {
Lang::Python => "python3",
Lang::Php => "php",
Lang::Ruby => "ruby",
_ => unreachable!("e2e_phase_05 covers Java/Python/PHP/Ruby"),
Lang::Go => "go",
_ => unreachable!("e2e_phase_05 covers Java/Python/PHP/Ruby/Go"),
}
}
@ -364,6 +365,7 @@ mod e2e_phase_05 {
Lang::Python => "python",
Lang::Php => "php",
Lang::Ruby => "ruby",
Lang::Go => "go",
_ => unreachable!(),
}
}
@ -494,4 +496,18 @@ mod e2e_phase_05 {
.expect("Confirmed run must carry a DifferentialOutcome");
assert_eq!(diff.verdict, DifferentialVerdict::Confirmed);
}
#[test]
fn go_vuln_confirms_via_run_spec() {
let Some(outcome) = run(Lang::Go, "vuln.go", "run") else { return };
assert!(
outcome.triggered_by.is_some(),
"Go XXE vuln must Confirm via run_spec; got {outcome:?}",
);
let diff = outcome
.differential
.as_ref()
.expect("Confirmed run must carry a DifferentialOutcome");
assert_eq!(diff.verdict, DifferentialVerdict::Confirmed);
}
}