mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-30 20:39:39 +02:00
[pitboss] phase 20: Track M.2 — MessageHandler end-to-end (Kafka / SQS / Pub-Sub / NATS / RabbitMQ)
This commit is contained in:
parent
fedc507e6a
commit
bd0135e423
45 changed files with 3227 additions and 25 deletions
19
tests/dynamic_fixtures/message_handler/nats_go/benign.go
Normal file
19
tests/dynamic_fixtures/message_handler/nats_go/benign.go
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
// Phase 20 (Track M.2) — NATS Go benign control.
|
||||
package entry
|
||||
|
||||
import (
|
||||
"os"
|
||||
"os/exec"
|
||||
)
|
||||
|
||||
const _adapterMarker = "github.com/nats-io/nats.go"
|
||||
|
||||
func OnMessage(payload string) {
|
||||
cmd := exec.Command("echo", payload)
|
||||
out, _ := cmd.Output()
|
||||
os.Stdout.Write(out)
|
||||
}
|
||||
|
||||
var NyxHandlers = map[string]interface{}{
|
||||
"OnMessage": OnMessage,
|
||||
}
|
||||
22
tests/dynamic_fixtures/message_handler/nats_go/vuln.go
Normal file
22
tests/dynamic_fixtures/message_handler/nats_go/vuln.go
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
// Phase 20 (Track M.2) — NATS Go vuln fixture.
|
||||
//
|
||||
// Adapter source-marker: github.com/nats-io/nats.go (string-literal only).
|
||||
package entry
|
||||
|
||||
import (
|
||||
"os"
|
||||
"os/exec"
|
||||
)
|
||||
|
||||
const _adapterMarker = "github.com/nats-io/nats.go"
|
||||
|
||||
func OnMessage(payload string) {
|
||||
// SINK: tainted payload concatenated into shell command
|
||||
cmd := exec.Command("sh", "-c", "echo "+payload)
|
||||
out, _ := cmd.Output()
|
||||
os.Stdout.Write(out)
|
||||
}
|
||||
|
||||
var NyxHandlers = map[string]interface{}{
|
||||
"OnMessage": OnMessage,
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue