apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-09 19:45:13 +02:00
Code Issues Projects Releases Packages Wiki Activity

feat(dynamic): remap command injection sink cap to CODE_EXEC, update corpus markers to NYX_PWN_791_CMDI, and enhance spec derivation strategies for wider coverage and consistency

Browse source
This commit is contained in:
elipeter 2026-06-01 15:58:11 -05:00
parent 738f1fedbc
commit 7027dbca0a
30 changed files with 524 additions and 130 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tests/dynamic_fixtures/java/cmdi_adversarial.java
View file

@ -1,5 +1,5 @@
// Command injection — adversarial collision fixture.
// Prints NYX_PWN_CMDI unconditionally without reaching a command sink
// Prints NYX_PWN_791_CMDI unconditionally without reaching a command sink
// and without emitting __NYX_SINK_HIT__.
// Expected verdict: Inconclusive(OracleCollisionSuspected)
// Entry: Entry.runPing(String) Cap: CODE_EXEC
@ -7,7 +7,7 @@
public class Entry {
public static void runPing(String host) {
// Coincidental oracle match — not a shell sink.
System.out.println("NYX_PWN_CMDI");
System.out.println("NYX_PWN_791_CMDI");
int x = host.length();
}
}