thuban 0.4.2 → 0.4.5

package/dist/packages/crucible/seeds/java/seed-006.java

@@ -1,22 +1,22 @@
-// [CRUCIBLE-SEED]
-// category: hardcoded_secret
-// severity: high
-// language: java
-// expected: Hardcoded GitHub personal access token in repository client
-
-import java.net.HttpURLConnection;
-import java.net.URL;
-
-public class GitHubClient {
-    private static final String GITHUB_TOKEN = "ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345";
-    private static final String API_BASE     = "https://api.github.com";
-
-    public String getRepository(String owner, String repo) throws Exception {
-        URL url = new URL(API_BASE + "/repos/" + owner + "/" + repo);
-        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
-        conn.setRequestProperty("Authorization", "token " + GITHUB_TOKEN);
-        conn.setRequestProperty("Accept", "application/vnd.github.v3+json");
-        int status = conn.getResponseCode();
-        return "Status: " + status;
-    }
-}
+// [CRUCIBLE-SEED]
+// category: hardcoded_secret
+// severity: high
+// language: java
+// expected: Hardcoded GitHub personal access token in repository client
+
+import java.net.HttpURLConnection;
+import java.net.URL;
+
+public class GitHubClient {
+    private static final String GITHUB_TOKEN = "ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345";
+    private static final String API_BASE     = "https://api.github.com";
+
+    public String getRepository(String owner, String repo) throws Exception {
+        URL url = new URL(API_BASE + "/repos/" + owner + "/" + repo);
+        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
+        conn.setRequestProperty("Authorization", "token " + GITHUB_TOKEN);
+        conn.setRequestProperty("Accept", "application/vnd.github.v3+json");
+        int status = conn.getResponseCode();
+        return "Status: " + status;
+    }
+}

package/dist/packages/crucible/seeds/java/seed-007.java

@@ -1,21 +1,21 @@
-// [CRUCIBLE-SEED]
-// category: hardcoded_secret
-// severity: critical
-// language: java
-// expected: Hardcoded Redis password and encryption key in configuration class
-
-public class CacheConfig {
-    public static final String REDIS_HOST       = "redis.internal.prod";
-    public static final int    REDIS_PORT       = 6379;
-    public static final String REDIS_PASSWORD   = "RedisP@$$w0rd#Prod";
-    public static final String ENCRYPTION_KEY   = "AES256KeyForCacheEncryption9876!";
-    public static final String ENCRYPTION_SALT  = "SaltVal!2024";
-
-    public static String getRedisUri() {
-        return String.format("redis://:%s@%s:%d", REDIS_PASSWORD, REDIS_HOST, REDIS_PORT);
-    }
-
-    public static byte[] getEncryptionKeyBytes() {
-        return ENCRYPTION_KEY.getBytes();
-    }
-}
+// [CRUCIBLE-SEED]
+// category: hardcoded_secret
+// severity: critical
+// language: java
+// expected: Hardcoded Redis password and encryption key in configuration class
+
+public class CacheConfig {
+    public static final String REDIS_HOST       = "redis.internal.prod";
+    public static final int    REDIS_PORT       = 6379;
+    public static final String REDIS_PASSWORD   = "RedisP@$$w0rd#Prod";
+    public static final String ENCRYPTION_KEY   = "AES256KeyForCacheEncryption9876!";
+    public static final String ENCRYPTION_SALT  = "SaltVal!2024";
+
+    public static String getRedisUri() {
+        return String.format("redis://:%s@%s:%d", REDIS_PASSWORD, REDIS_HOST, REDIS_PORT);
+    }
+
+    public static byte[] getEncryptionKeyBytes() {
+        return ENCRYPTION_KEY.getBytes();
+    }
+}

package/dist/packages/crucible/seeds/java/seed-008.java

@@ -1,29 +1,29 @@
-// [CRUCIBLE-SEED]
-// category: hardcoded_secret
-// severity: critical
-// language: java
-// expected: Hardcoded OAuth2 client secret in Spring Security configuration
-
-import org.springframework.context.annotation.Bean;
-import org.springframework.context.annotation.Configuration;
-import org.springframework.security.oauth2.client.registration.ClientRegistration;
-import org.springframework.security.oauth2.core.AuthorizationGrantType;
-
-@Configuration
-public class OAuth2Config {
-    private static final String CLIENT_ID     = "my-app-client-id-prod";
-    private static final String CLIENT_SECRET = "oauth2-client-secret-xK9mP2qR7wZ4";
-
-    @Bean
-    public ClientRegistration googleClientRegistration() {
-        return ClientRegistration.withRegistrationId("google")
-            .clientId(CLIENT_ID)
-            .clientSecret(CLIENT_SECRET)
-            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
-            .redirectUri("{baseUrl}/login/oauth2/code/{registrationId}")
-            .scope("openid", "profile", "email")
-            .authorizationUri("https://accounts.google.com/o/oauth2/auth")
-            .tokenUri("https://oauth2.googleapis.com/token")
-            .build();
-    }
-}
+// [CRUCIBLE-SEED]
+// category: hardcoded_secret
+// severity: critical
+// language: java
+// expected: Hardcoded OAuth2 client secret in Spring Security configuration
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.oauth2.client.registration.ClientRegistration;
+import org.springframework.security.oauth2.core.AuthorizationGrantType;
+
+@Configuration
+public class OAuth2Config {
+    private static final String CLIENT_ID     = "my-app-client-id-prod";
+    private static final String CLIENT_SECRET = "oauth2-client-secret-xK9mP2qR7wZ4";
+
+    @Bean
+    public ClientRegistration googleClientRegistration() {
+        return ClientRegistration.withRegistrationId("google")
+            .clientId(CLIENT_ID)
+            .clientSecret(CLIENT_SECRET)
+            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
+            .redirectUri("{baseUrl}/login/oauth2/code/{registrationId}")
+            .scope("openid", "profile", "email")
+            .authorizationUri("https://accounts.google.com/o/oauth2/auth")
+            .tokenUri("https://oauth2.googleapis.com/token")
+            .build();
+    }
+}

package/dist/packages/crucible/seeds/java/seed-009.java

@@ -1,24 +1,24 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection via string concatenation in executeQuery
-
-import java.sql.*;
-
-public class UserRepository {
-    private Connection conn;
-
-    public ResultSet findByUsername(String username) throws SQLException {
-        // Vulnerable: direct string concatenation into SQL
-        String query = "SELECT * FROM users WHERE username = '" + username + "'";
-        Statement stmt = conn.createStatement();
-        return stmt.executeQuery(query);
-    }
-
-    public boolean deleteUser(String userId) throws SQLException {
-        String sql = "DELETE FROM users WHERE id = " + userId;
-        Statement stmt = conn.createStatement();
-        return stmt.executeUpdate(sql) > 0;
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection via string concatenation in executeQuery
+
+import java.sql.*;
+
+public class UserRepository {
+    private Connection conn;
+
+    public ResultSet findByUsername(String username) throws SQLException {
+        // Vulnerable: direct string concatenation into SQL
+        String query = "SELECT * FROM users WHERE username = '" + username + "'";
+        Statement stmt = conn.createStatement();
+        return stmt.executeQuery(query);
+    }
+
+    public boolean deleteUser(String userId) throws SQLException {
+        String sql = "DELETE FROM users WHERE id = " + userId;
+        Statement stmt = conn.createStatement();
+        return stmt.executeUpdate(sql) > 0;
+    }
+}

package/dist/packages/crucible/seeds/java/seed-010.java

@@ -1,30 +1,30 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection via string concatenation in login query
-
-import java.sql.*;
-import javax.servlet.http.*;
-
-public class LoginServlet extends HttpServlet {
-    private Connection conn;
-
-    protected void doPost(HttpServletRequest req, HttpServletResponse resp)
-            throws Exception {
-        String user = req.getParameter("username");
-        String pass = req.getParameter("password");
-
-        // Vulnerable: both parameters concatenated directly
-        String sql = "SELECT id FROM accounts WHERE username='" + user +
-                     "' AND password='" + pass + "'";
-        Statement st = conn.createStatement();
-        ResultSet rs = st.executeQuery(sql);
-        if (rs.next()) {
-            req.getSession().setAttribute("userId", rs.getInt("id"));
-            resp.sendRedirect("/dashboard");
-        } else {
-            resp.sendRedirect("/login?error=1");
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection via string concatenation in login query
+
+import java.sql.*;
+import javax.servlet.http.*;
+
+public class LoginServlet extends HttpServlet {
+    private Connection conn;
+
+    protected void doPost(HttpServletRequest req, HttpServletResponse resp)
+            throws Exception {
+        String user = req.getParameter("username");
+        String pass = req.getParameter("password");
+
+        // Vulnerable: both parameters concatenated directly
+        String sql = "SELECT id FROM accounts WHERE username='" + user +
+                     "' AND password='" + pass + "'";
+        Statement st = conn.createStatement();
+        ResultSet rs = st.executeQuery(sql);
+        if (rs.next()) {
+            req.getSession().setAttribute("userId", rs.getInt("id"));
+            resp.sendRedirect("/dashboard");
+        } else {
+            resp.sendRedirect("/login?error=1");
+        }
+    }
+}

package/dist/packages/crucible/seeds/java/seed-011.java

@@ -1,25 +1,25 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection via String.format building ORDER BY clause
-
-import java.sql.*;
-import java.util.ArrayList;
-import java.util.List;
-
-public class ProductSearch {
-    private Connection conn;
-
-    public List<String> searchProducts(String keyword, String sortColumn) throws SQLException {
-        // Vulnerable: sortColumn injected into ORDER BY without validation
-        String sql = String.format(
-            "SELECT name FROM products WHERE name LIKE '%%%s%%' ORDER BY %s",
-            keyword, sortColumn);
-        Statement stmt = conn.createStatement();
-        ResultSet rs = stmt.executeQuery(sql);
-        List<String> results = new ArrayList<>();
-        while (rs.next()) results.add(rs.getString("name"));
-        return results;
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection via String.format building ORDER BY clause
+
+import java.sql.*;
+import java.util.ArrayList;
+import java.util.List;
+
+public class ProductSearch {
+    private Connection conn;
+
+    public List<String> searchProducts(String keyword, String sortColumn) throws SQLException {
+        // Vulnerable: sortColumn injected into ORDER BY without validation
+        String sql = String.format(
+            "SELECT name FROM products WHERE name LIKE '%%%s%%' ORDER BY %s",
+            keyword, sortColumn);
+        Statement stmt = conn.createStatement();
+        ResultSet rs = stmt.executeQuery(sql);
+        List<String> results = new ArrayList<>();
+        while (rs.next()) results.add(rs.getString("name"));
+        return results;
+    }
+}

package/dist/packages/crucible/seeds/java/seed-012.java

@@ -1,20 +1,20 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection through dynamic table name construction
-
-import java.sql.*;
-
-public class ReportGenerator {
-    private Connection conn;
-
-    public ResultSet generateReport(String reportType, String startDate, String endDate)
-            throws SQLException {
-        // Vulnerable: reportType used as table name without sanitization
-        String query = "SELECT * FROM " + reportType +
-                       " WHERE created_at BETWEEN '" + startDate + "' AND '" + endDate + "'";
-        Statement stmt = conn.createStatement();
-        return stmt.executeQuery(query);
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection through dynamic table name construction
+
+import java.sql.*;
+
+public class ReportGenerator {
+    private Connection conn;
+
+    public ResultSet generateReport(String reportType, String startDate, String endDate)
+            throws SQLException {
+        // Vulnerable: reportType used as table name without sanitization
+        String query = "SELECT * FROM " + reportType +
+                       " WHERE created_at BETWEEN '" + startDate + "' AND '" + endDate + "'";
+        Statement stmt = conn.createStatement();
+        return stmt.executeQuery(query);
+    }
+}

package/dist/packages/crucible/seeds/java/seed-013.java

@@ -1,26 +1,26 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection in search with multiple concatenated parameters
-
-import java.sql.*;
-import javax.servlet.http.*;
-
-public class SearchServlet extends HttpServlet {
-    private Connection conn;
-
-    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
-            throws Exception {
-        String name  = req.getParameter("name");
-        String email = req.getParameter("email");
-        String role  = req.getParameter("role");
-
-        // Vulnerable: three user params concatenated
-        String query = "SELECT * FROM employees WHERE name LIKE '%" + name +
-                       "%' AND email = '" + email + "' AND role = '" + role + "'";
-        Statement stmt = conn.createStatement();
-        ResultSet rs = stmt.executeQuery(query);
-        // ... render results
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection in search with multiple concatenated parameters
+
+import java.sql.*;
+import javax.servlet.http.*;
+
+public class SearchServlet extends HttpServlet {
+    private Connection conn;
+
+    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+            throws Exception {
+        String name  = req.getParameter("name");
+        String email = req.getParameter("email");
+        String role  = req.getParameter("role");
+
+        // Vulnerable: three user params concatenated
+        String query = "SELECT * FROM employees WHERE name LIKE '%" + name +
+                       "%' AND email = '" + email + "' AND role = '" + role + "'";
+        Statement stmt = conn.createStatement();
+        ResultSet rs = stmt.executeQuery(query);
+        // ... render results
+    }
+}

package/dist/packages/crucible/seeds/java/seed-014.java

@@ -1,23 +1,23 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection via stored procedure call with string concatenation
-
-import java.sql.*;
-
-public class AuditLogger {
-    private Connection conn;
-
-    public void logEvent(String userId, String action, String detail) throws SQLException {
-        // Vulnerable: detail field concatenated into EXEC call
-        String sql = "EXEC sp_log_audit '" + userId + "', '" + action + "', '" + detail + "'";
-        Statement stmt = conn.createStatement();
-        stmt.execute(sql);
-    }
-
-    public ResultSet getAuditTrail(String fromDate) throws SQLException {
-        String query = "SELECT * FROM audit_log WHERE event_time >= '" + fromDate + "'";
-        return conn.createStatement().executeQuery(query);
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection via stored procedure call with string concatenation
+
+import java.sql.*;
+
+public class AuditLogger {
+    private Connection conn;
+
+    public void logEvent(String userId, String action, String detail) throws SQLException {
+        // Vulnerable: detail field concatenated into EXEC call
+        String sql = "EXEC sp_log_audit '" + userId + "', '" + action + "', '" + detail + "'";
+        Statement stmt = conn.createStatement();
+        stmt.execute(sql);
+    }
+
+    public ResultSet getAuditTrail(String fromDate) throws SQLException {
+        String query = "SELECT * FROM audit_log WHERE event_time >= '" + fromDate + "'";
+        return conn.createStatement().executeQuery(query);
+    }
+}

package/dist/packages/crucible/seeds/java/seed-015.java

@@ -1,25 +1,25 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: java
-// expected: SQL injection via IN clause built with user-supplied comma-separated IDs
-
-import java.sql.*;
-import java.util.List;
-
-public class BatchProcessor {
-    private Connection conn;
-
-    public ResultSet getOrdersByIds(String rawIds) throws SQLException {
-        // Vulnerable: rawIds (e.g. "1,2,3") injected directly into IN clause
-        String sql = "SELECT * FROM orders WHERE id IN (" + rawIds + ")";
-        Statement stmt = conn.createStatement();
-        return stmt.executeQuery(sql);
-    }
-
-    public int bulkUpdateStatus(String idList, String status) throws SQLException {
-        String sql = "UPDATE orders SET status='" + status +
-                     "' WHERE id IN (" + idList + ")";
-        return conn.createStatement().executeUpdate(sql);
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: java
+// expected: SQL injection via IN clause built with user-supplied comma-separated IDs
+
+import java.sql.*;
+import java.util.List;
+
+public class BatchProcessor {
+    private Connection conn;
+
+    public ResultSet getOrdersByIds(String rawIds) throws SQLException {
+        // Vulnerable: rawIds (e.g. "1,2,3") injected directly into IN clause
+        String sql = "SELECT * FROM orders WHERE id IN (" + rawIds + ")";
+        Statement stmt = conn.createStatement();
+        return stmt.executeQuery(sql);
+    }
+
+    public int bulkUpdateStatus(String idList, String status) throws SQLException {
+        String sql = "UPDATE orders SET status='" + status +
+                     "' WHERE id IN (" + idList + ")";
+        return conn.createStatement().executeUpdate(sql);
+    }
+}

package/dist/packages/crucible/seeds/java/seed-016.java

@@ -1,22 +1,22 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: java
-// expected: XSS via PrintWriter writing unescaped request parameter to response
-
-import java.io.*;
-import javax.servlet.http.*;
-
-public class GreetingServlet extends HttpServlet {
-    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
-            throws IOException {
-        resp.setContentType("text/html");
-        PrintWriter out = resp.getWriter();
-        String name = req.getParameter("name");
-        // Vulnerable: name reflected directly into HTML without encoding
-        out.println("<html><body>");
-        out.println("<h1>Hello, " + name + "!</h1>");
-        out.println("<p>Welcome back to our portal.</p>");
-        out.println("</body></html>");
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: java
+// expected: XSS via PrintWriter writing unescaped request parameter to response
+
+import java.io.*;
+import javax.servlet.http.*;
+
+public class GreetingServlet extends HttpServlet {
+    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+            throws IOException {
+        resp.setContentType("text/html");
+        PrintWriter out = resp.getWriter();
+        String name = req.getParameter("name");
+        // Vulnerable: name reflected directly into HTML without encoding
+        out.println("<html><body>");
+        out.println("<h1>Hello, " + name + "!</h1>");
+        out.println("<p>Welcome back to our portal.</p>");
+        out.println("</body></html>");
+    }
+}

package/dist/packages/crucible/seeds/java/seed-017.java

@@ -1,24 +1,24 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: java
-// expected: XSS via response.getWriter writing unescaped search query into page
-
-import java.io.*;
-import javax.servlet.http.*;
-
-public class SearchResultsServlet extends HttpServlet {
-    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
-            throws IOException {
-        String query = req.getParameter("q");
-        PrintWriter pw = resp.getWriter();
-        resp.setContentType("text/html; charset=UTF-8");
-        // Vulnerable: raw query injected into meta and visible output
-        pw.write("<!DOCTYPE html><html><head>");
-        pw.write("<meta name=\"description\" content=\"Results for: " + query + "\">");
-        pw.write("</head><body>");
-        pw.write("<h2>Search results for: <em>" + query + "</em></h2>");
-        pw.write("<div id=\"results\"><!-- results here --></div>");
-        pw.write("</body></html>");
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: java
+// expected: XSS via response.getWriter writing unescaped search query into page
+
+import java.io.*;
+import javax.servlet.http.*;
+
+public class SearchResultsServlet extends HttpServlet {
+    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+            throws IOException {
+        String query = req.getParameter("q");
+        PrintWriter pw = resp.getWriter();
+        resp.setContentType("text/html; charset=UTF-8");
+        // Vulnerable: raw query injected into meta and visible output
+        pw.write("<!DOCTYPE html><html><head>");
+        pw.write("<meta name=\"description\" content=\"Results for: " + query + "\">");
+        pw.write("</head><body>");
+        pw.write("<h2>Search results for: <em>" + query + "</em></h2>");
+        pw.write("<div id=\"results\"><!-- results here --></div>");
+        pw.write("</body></html>");
+    }
+}

package/dist/packages/crucible/seeds/java/seed-018.java

@@ -1,24 +1,24 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: java
-// expected: XSS via JSP-style out.print with unescaped error message from request
-
-import java.io.*;
-import javax.servlet.http.*;
-import javax.servlet.*;
-
-public class ErrorPageServlet extends HttpServlet {
-    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
-            throws IOException, ServletException {
-        String errorMsg = req.getParameter("message");
-        String code     = req.getParameter("code");
-        resp.setContentType("text/html");
-        PrintWriter out = resp.getWriter();
-        // Vulnerable: both parameters written without sanitization
-        out.print("<div class=\"alert alert-danger\">");
-        out.print("Error " + code + ": " + errorMsg);
-        out.print("</div>");
-        out.print("<a href=\"/\">Return home</a>");
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: java
+// expected: XSS via JSP-style out.print with unescaped error message from request
+
+import java.io.*;
+import javax.servlet.http.*;
+import javax.servlet.*;
+
+public class ErrorPageServlet extends HttpServlet {
+    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+            throws IOException, ServletException {
+        String errorMsg = req.getParameter("message");
+        String code     = req.getParameter("code");
+        resp.setContentType("text/html");
+        PrintWriter out = resp.getWriter();
+        // Vulnerable: both parameters written without sanitization
+        out.print("<div class=\"alert alert-danger\">");
+        out.print("Error " + code + ": " + errorMsg);
+        out.print("</div>");
+        out.print("<a href=\"/\">Return home</a>");
+    }
+}