apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-18 20:15:14 +02:00
Code Issues Projects Releases Packages Wiki Activity

Dynamic (#77)

Browse source
This commit is contained in:
Eli Peter 2026-06-05 10:16:30 -05:00 • committed by GitHub
parent 55247b7fcd
commit 991c84a1eb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1464 changed files with 225448 additions and 1985 deletions
Download patch file Download diff file Expand all files Collapse all files

24
tests/dynamic_fixtures/stubs_e2e/java/http/vuln/main.java.fragment Normal file
View file

@ -0,0 +1,24 @@
// Phase 10 (Track D.3) stub-end-to-end fixture: Java + HTTP.
//
// The verifier publishes:
//
// * NYX_HTTP_ENDPOINT — http://127.0.0.1:{port} the HttpStub listens on.
// * NYX_HTTP_LOG — companion log path the harness appends attempted
// outbound calls to so the host HttpStub picks them up on
// drain_events() even when the request bypasses the on-the-wire
// listener (DNS-mocked, network-isolated sandbox, pre-flight check).
//
// This file is a body-only fragment: the companion test in
// tests/stubs_e2e_per_lang.rs wraps it with a `public class Main { … }`
// shell that splices the Java probe shim as class members ahead of
// `public static void main`, so the shim's __nyx_stub_http_record helper
// is in scope without needing an import. java.net.HttpURLConnection is
// JDK stdlib, so no extra classpath dep is required.
String method = "GET";
String url = "http://169.254.169.254/latest/meta-data/";
String body = "";
java.util.Map<String,String> detail = new java.util.LinkedHashMap<>();
detail.put("driver", "HttpURLConnection");
__nyx_stub_http_record(method, url, body, detail);
String ep = System.getenv("NYX_HTTP_ENDPOINT");
System.out.println(ep == null ? "no-endpoint" : ep);

26
tests/dynamic_fixtures/stubs_e2e/java/sql/vuln/main.java.fragment Normal file
View file

@ -0,0 +1,26 @@
// Phase 10 (Track D.3) stub-end-to-end fixture: Java + SQL.
//
// The verifier publishes:
//
// * NYX_SQL_ENDPOINT — absolute path of a SQLite DB the SqlStub owns.
// * NYX_SQL_LOG — companion log path the harness appends executed
// queries to so the host SqlStub picks them up on drain_events()
// even when the harness never opens an on-the-wire JDBC connection
// (classpath lacks sqlite-jdbc, SQL string is pre-flighted before
// DriverManager.getConnection, sandbox blocks file-DB access).
//
// This file is a body-only fragment: the companion test in
// tests/stubs_e2e_per_lang.rs wraps it with a `public class Main { … }`
// shell that splices the Java probe shim as class members ahead of
// `public static void main`, so the shim's __nyx_stub_sql_record helper
// is in scope. The fixture stays JDK-stdlib only — no java.sql import,
// no sqlite-jdbc jar on the classpath — by recording the attempted
// tautology with `driver = "manual"`. This mirrors the Phase 26
// "no live driver available" path that real Java sink callsites take
// when the build matrix lacks a JDBC driver.
String query = "SELECT 1 WHERE 'a' = 'a' OR 1=1 --";
java.util.Map<String,String> detail = new java.util.LinkedHashMap<>();
detail.put("driver", "manual");
__nyx_stub_sql_record(query, detail);
String ep = System.getenv("NYX_SQL_ENDPOINT");
System.out.println(ep == null ? "no-endpoint" : ep);