mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-12 19:55:14 +02:00
Dynamic (#77)
This commit is contained in:
parent
55247b7fcd
commit
991c84a1eb
1464 changed files with 225448 additions and 1985 deletions
12
tests/dynamic_fixtures/python/cmdi_adversarial.py
Normal file
12
tests/dynamic_fixtures/python/cmdi_adversarial.py
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
"""Command injection — adversarial collision fixture.
|
||||
|
||||
Prints NYX_PWN_791_CMDI unconditionally without going through a shell sink.
|
||||
Expected verdict: Inconclusive(OracleCollisionSuspected).
|
||||
"""
|
||||
|
||||
|
||||
def process_input(user_input):
|
||||
"""Prints oracle marker without using a command execution sink."""
|
||||
# Coincidental oracle match — not a shell sink.
|
||||
print("NYX_PWN_791_CMDI")
|
||||
return user_input.upper()
|
||||
Loading…
Add table
Add a link
Reference in a new issue