[pitboss] phase 16: Track L.14 — Laravel / Symfony / CodeIgniter adapters

tests/dynamic_fixtures/php_frameworks/symfony/benign.php

@@ -0,0 +1,21 @@
+<?php
+// Phase 16 — Symfony-style route via `#[Route]` attribute,
+// benign sanitised payload.
+
+namespace App\Controller;
+
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Annotation\Route;
+
+class UserController
+{
+    #[Route('/run', methods: ['GET'])]
+    public function run($payload)
+    {
+        echo "__NYX_SINK_HIT__\n";
+        $cmd = "echo hello " . escapeshellarg($payload);
+        $out = shell_exec($cmd);
+        echo $out;
+        return new Response($out);
+    }
+}

tests/dynamic_fixtures/php_frameworks/symfony/composer.json

@@ -0,0 +1,9 @@
+{
+  "name": "nyx/fixture-symfony",
+  "require": {
+    "php": ">=8.1",
+    "symfony/framework-bundle": "^7.0",
+    "symfony/routing": "^7.0",
+    "symfony/http-kernel": "^7.0"
+  }
+}

tests/dynamic_fixtures/php_frameworks/symfony/vuln.php

@@ -0,0 +1,21 @@
+<?php
+// Phase 16 — Symfony-style route via `#[Route]` attribute,
+// vulnerable.
+
+namespace App\Controller;
+
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Annotation\Route;
+
+class UserController
+{
+    #[Route('/run', methods: ['GET'])]
+    public function run($payload)
+    {
+        echo "__NYX_SINK_HIT__\n";
+        $cmd = "echo hello " . $payload;
+        $out = shell_exec($cmd);
+        echo $out;
+        return new Response($out);
+    }
+}