apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-07-12 21:02:11 +02:00
Code Issues Projects Releases Packages Wiki Activity

Dynamic (#77)

Browse source
This commit is contained in:
Eli Peter 2026-06-05 10:16:30 -05:00 • committed by GitHub
parent 55247b7fcd
commit 991c84a1eb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1464 changed files with 225448 additions and 1985 deletions
Download patch file Download diff file Expand all files Collapse all files

19
tests/dynamic_fixtures/message_handler/pubsub_go/benign.go Normal file
View file

@ -0,0 +1,19 @@
// Phase 20 (Track M.2) — Google Pub/Sub Go benign control.
package entry
import (
"os"
"os/exec"
)
const _adapterMarker = "cloud.google.com/go/pubsub"
func OnMessage(payload string) {
cmd := exec.Command("echo", payload)
out, _ := cmd.Output()
os.Stdout.Write(out)
}
var NyxHandlers = map[string]interface{}{
"OnMessage": OnMessage,
}

24
tests/dynamic_fixtures/message_handler/pubsub_go/vuln.go Normal file
View file

@ -0,0 +1,24 @@
// Phase 20 (Track M.2) — Google Pub/Sub Go vuln fixture.
//
// Adapter source-marker: cloud.google.com/go/pubsub (string-literal only).
// The handler signature accepts a string so the Phase 20 harness
// dispatch falls through to the NYX_PAYLOAD env var.
package entry
import (
"os"
"os/exec"
)
const _adapterMarker = "cloud.google.com/go/pubsub"
func OnMessage(payload string) {
// SINK: tainted payload concatenated into shell command
cmd := exec.Command("sh", "-c", "echo "+payload)
out, _ := cmd.Output()
os.Stdout.Write(out)
}
var NyxHandlers = map[string]interface{}{
"OnMessage": OnMessage,
}