mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-15 20:05:13 +02:00
22 lines
485 B
Go
22 lines
485 B
Go
// Phase 20 (Track M.2) — NATS Go vuln fixture.
|
|
//
|
|
// Adapter source-marker: github.com/nats-io/nats.go (string-literal only).
|
|
package entry
|
|
|
|
import (
|
|
"os"
|
|
"os/exec"
|
|
)
|
|
|
|
const _adapterMarker = "github.com/nats-io/nats.go"
|
|
|
|
func OnMessage(payload string) {
|
|
// SINK: tainted payload concatenated into shell command
|
|
cmd := exec.Command("sh", "-c", "echo "+payload)
|
|
out, _ := cmd.Output()
|
|
os.Stdout.Write(out)
|
|
}
|
|
|
|
var NyxHandlers = map[string]interface{}{
|
|
"OnMessage": OnMessage,
|
|
}
|