[pitboss] phase 20: Track M.2 — MessageHandler end-to-end (Kafka / SQS / Pub-Sub / NATS / RabbitMQ)

tests/dynamic_fixtures/message_handler/kafka_java/Benign.java

@@ -0,0 +1,9 @@
+// Phase 20 (Track M.2) — Kafka Java benign control.
+// `org.springframework.kafka` adapter marker preserved.
+public class Benign {
+    public Benign() {}
+
+    public void onMessage(String body) throws Exception {
+        new ProcessBuilder("echo", body).inheritIO().start().waitFor();
+    }
+}

tests/dynamic_fixtures/message_handler/kafka_java/Vuln.java

@@ -0,0 +1,15 @@
+// Phase 20 (Track M.2) — Kafka Java vuln fixture.
+//
+// Marker line so the kafka-java framework adapter binds:
+// `org.springframework.kafka` consumer entry point.  Annotation is
+// elided so javac compiles without the Spring jar; the dynamic harness
+// invokes onMessage reflectively.
+
+public class Vuln {
+    public Vuln() {}
+
+    public void onMessage(String body) throws Exception {
+        // SINK: tainted body concatenated into shell command
+        new ProcessBuilder("sh", "-c", "echo " + body).inheritIO().start().waitFor();
+    }
+}