apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-07-12 21:02:11 +02:00
Code Issues Projects Releases Packages Wiki Activity

feat(dynamic): remap command injection sink cap to CODE_EXEC, update corpus markers to NYX_PWN_791_CMDI, and enhance spec derivation strategies for wider coverage and consistency

Browse source
This commit is contained in:
elipeter 2026-06-01 15:58:11 -05:00
parent 738f1fedbc
commit 7027dbca0a
30 changed files with 524 additions and 130 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tests/message_handler_corpus.rs
View file

@ -1175,9 +1175,11 @@ mod e2e_phase_20 {
}
/// Python kafka vuln must Confirm: the synthetic Kafka loopback
/// delivers `; echo NYX_PWN_CMDI` to the handler's `os.system`
/// which prints `NYX_PWN_CMDI` to stdout and the differential
/// oracle reads it.
/// delivers `; echo NYX_PWN_$((113*7))_CMDI` to the handler's
/// `os.system`, which *executes* the injected `echo` and prints the
/// computed marker `NYX_PWN_791_CMDI` to stdout (corpus v16 — a benign
/// `shlex.quote` handler echoes the literal payload and never yields the
/// marker), and the differential oracle reads it.
#[test]
fn kafka_python_vuln_confirms_via_run_spec() {
let Some(outcome) = run(Lang::Python, "kafka_python", "vuln.py", "handler", "orders")