mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
25 lines
572 B
Python
25 lines
572 B
Python
"""Phase 12 — Celery task, vulnerable.
|
|
|
|
Celery's `@app.task` decorator wraps the underlying function on a Task
|
|
object. Nyx harness reaches the inner callable via `.run` /
|
|
`.__wrapped__` so no broker is required.
|
|
"""
|
|
import subprocess
|
|
|
|
from celery import Celery
|
|
|
|
app = Celery("nyx_fixture")
|
|
|
|
|
|
@app.task
|
|
def run_job(host):
|
|
"""Vulnerable Celery task body."""
|
|
result = subprocess.run(
|
|
"ping -c 1 " + host,
|
|
shell=True,
|
|
capture_output=True,
|
|
text=True,
|
|
timeout=5,
|
|
)
|
|
print(result.stdout)
|
|
print(result.stderr, end="")
|