apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-07-18 21:21:03 +02:00
Code Issues Projects Releases Packages Wiki Activity

refactor(dynamic): standardize shell commands across fixtures, add __NYX_SINK_HIT__ markers, improve PHP support

Browse source
This commit is contained in:
elipeter 2026-05-23 10:31:57 -05:00
parent ca075a7141
commit fe09986a25
32 changed files with 707 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/dynamic_fixtures/class_method/rust/benign.rs
View file

@ -5,7 +5,7 @@ pub struct UserService;
impl UserService {
pub fn run(&self, input: &str) -> String {
let out = std::process::Command::new("/bin/echo")
let out = std::process::Command::new("true")
.arg(input)
.output()
.expect("exec");

2
tests/dynamic_fixtures/class_method/rust/vuln.rs
View file

@ -10,7 +10,7 @@ pub struct UserService;
impl UserService {
pub fn run(&self, input: &str) -> String {
// SINK: tainted input → shell -c
let cmd = format!("echo {}", input);
let cmd = format!("true {}", input);
let out = std::process::Command::new("sh")
.arg("-c")
.arg(&cmd)