thuban 0.4.3 → 0.4.6

package/dist/packages/crucible/seeds/csharp/seed-008.cs

@@ -1,23 +1,23 @@
-// [CRUCIBLE-SEED]
-// category: hardcoded_secret
-// severity: critical
-// language: csharp
-// expected: Hardcoded GitHub PAT and Slack webhook URL in integration service
-
-namespace App.Integrations
-{
-    public class IntegrationConfig
-    {
-        public const string GitHubToken       = "ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345";
-        public const string SlackWebhookUrl   = "https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX";
-        public const string PagerDutyApiKey   = "pdkey-u-AbCdEfGhIjKlMnOpQrStUv";
-
-        public static System.Net.Http.HttpClient CreateGitHubClient()
-        {
-            var client = new System.Net.Http.HttpClient();
-            client.DefaultRequestHeaders.Add("Authorization", $"token {GitHubToken}");
-            client.DefaultRequestHeaders.Add("User-Agent", "MyApp/1.0");
-            return client;
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: hardcoded_secret
+// severity: critical
+// language: csharp
+// expected: Hardcoded GitHub PAT and Slack webhook URL in integration service
+
+namespace App.Integrations
+{
+    public class IntegrationConfig
+    {
+        public const string GitHubToken       = "ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345";
+        public const string SlackWebhookUrl   = "https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX";
+        public const string PagerDutyApiKey   = "pdkey-u-AbCdEfGhIjKlMnOpQrStUv";
+
+        public static System.Net.Http.HttpClient CreateGitHubClient()
+        {
+            var client = new System.Net.Http.HttpClient();
+            client.DefaultRequestHeaders.Add("Authorization", $"token {GitHubToken}");
+            client.DefaultRequestHeaders.Add("User-Agent", "MyApp/1.0");
+            return client;
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-009.cs

@@ -1,27 +1,27 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection via string concatenation in SqlCommand
-
-using System.Data.SqlClient;
-
-namespace App.Data
-{
-    public class UserRepository
-    {
-        private readonly string _connectionString;
-
-        public UserRepository(string connectionString) => _connectionString = connectionString;
-
-        public SqlDataReader FindByUsername(string username)
-        {
-            var conn = new SqlConnection(_connectionString);
-            conn.Open();
-            // Vulnerable: direct string concatenation into SQL
-            var cmd = new SqlCommand(
-                "SELECT * FROM Users WHERE Username = '" + username + "'", conn);
-            return cmd.ExecuteReader();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection via string concatenation in SqlCommand
+
+using System.Data.SqlClient;
+
+namespace App.Data
+{
+    public class UserRepository
+    {
+        private readonly string _connectionString;
+
+        public UserRepository(string connectionString) => _connectionString = connectionString;
+
+        public SqlDataReader FindByUsername(string username)
+        {
+            var conn = new SqlConnection(_connectionString);
+            conn.Open();
+            // Vulnerable: direct string concatenation into SQL
+            var cmd = new SqlCommand(
+                "SELECT * FROM Users WHERE Username = '" + username + "'", conn);
+            return cmd.ExecuteReader();
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-010.cs

@@ -1,29 +1,29 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection via string.Format building WHERE clause
-
-using System;
-using System.Data.SqlClient;
-
-namespace App.Data
-{
-    public class ProductSearch
-    {
-        private readonly string _conn;
-
-        public ProductSearch(string conn) => _conn = conn;
-
-        public SqlDataReader Search(string keyword, string category)
-        {
-            // Vulnerable: string.Format with unsanitized inputs
-            string sql = string.Format(
-                "SELECT * FROM Products WHERE Name LIKE '%{0}%' AND Category = '{1}'",
-                keyword, category);
-            var connection = new SqlConnection(_conn);
-            connection.Open();
-            return new SqlCommand(sql, connection).ExecuteReader();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection via string.Format building WHERE clause
+
+using System;
+using System.Data.SqlClient;
+
+namespace App.Data
+{
+    public class ProductSearch
+    {
+        private readonly string _conn;
+
+        public ProductSearch(string conn) => _conn = conn;
+
+        public SqlDataReader Search(string keyword, string category)
+        {
+            // Vulnerable: string.Format with unsanitized inputs
+            string sql = string.Format(
+                "SELECT * FROM Products WHERE Name LIKE '%{0}%' AND Category = '{1}'",
+                keyword, category);
+            var connection = new SqlConnection(_conn);
+            connection.Open();
+            return new SqlCommand(sql, connection).ExecuteReader();
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-011.cs

@@ -1,32 +1,32 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection in login via string interpolation in SqlCommand
-
-using System.Data.SqlClient;
-using Microsoft.AspNetCore.Mvc;
-
-namespace App.Controllers
-{
-    [ApiController]
-    [Route("api/[controller]")]
-    public class AuthController : ControllerBase
-    {
-        private readonly string _conn;
-
-        public AuthController(string conn) => _conn = conn;
-
-        [HttpPost("login")]
-        public IActionResult Login(string username, string password)
-        {
-            // Vulnerable: C# interpolated string injected into SQL
-            string sql = $"SELECT Id FROM Users WHERE Username='{username}' AND Password='{password}'";
-            using var connection = new SqlConnection(_conn);
-            connection.Open();
-            using var cmd = new SqlCommand(sql, connection);
-            var result = cmd.ExecuteScalar();
-            return result != null ? Ok("Authenticated") : Unauthorized();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection in login via string interpolation in SqlCommand
+
+using System.Data.SqlClient;
+using Microsoft.AspNetCore.Mvc;
+
+namespace App.Controllers
+{
+    [ApiController]
+    [Route("api/[controller]")]
+    public class AuthController : ControllerBase
+    {
+        private readonly string _conn;
+
+        public AuthController(string conn) => _conn = conn;
+
+        [HttpPost("login")]
+        public IActionResult Login(string username, string password)
+        {
+            // Vulnerable: C# interpolated string injected into SQL
+            string sql = $"SELECT Id FROM Users WHERE Username='{username}' AND Password='{password}'";
+            using var connection = new SqlConnection(_conn);
+            connection.Open();
+            using var cmd = new SqlCommand(sql, connection);
+            var result = cmd.ExecuteScalar();
+            return result != null ? Ok("Authenticated") : Unauthorized();
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-012.cs

@@ -1,27 +1,27 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection via dynamic ORDER BY column from user input
-
-using System.Data.SqlClient;
-
-namespace App.Data
-{
-    public class ReportRepository
-    {
-        private readonly string _conn;
-
-        public ReportRepository(string conn) => _conn = conn;
-
-        public SqlDataReader GetSortedReport(string tableName, string sortColumn, string sortDir)
-        {
-            // Vulnerable: all three parameters injected without validation
-            string sql = "SELECT * FROM " + tableName +
-                         " ORDER BY " + sortColumn + " " + sortDir;
-            var connection = new SqlConnection(_conn);
-            connection.Open();
-            return new SqlCommand(sql, connection).ExecuteReader();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection via dynamic ORDER BY column from user input
+
+using System.Data.SqlClient;
+
+namespace App.Data
+{
+    public class ReportRepository
+    {
+        private readonly string _conn;
+
+        public ReportRepository(string conn) => _conn = conn;
+
+        public SqlDataReader GetSortedReport(string tableName, string sortColumn, string sortDir)
+        {
+            // Vulnerable: all three parameters injected without validation
+            string sql = "SELECT * FROM " + tableName +
+                         " ORDER BY " + sortColumn + " " + sortDir;
+            var connection = new SqlConnection(_conn);
+            connection.Open();
+            return new SqlCommand(sql, connection).ExecuteReader();
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-013.cs

@@ -1,27 +1,27 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection in stored procedure exec via string concatenation
-
-using System.Data;
-using System.Data.SqlClient;
-
-namespace App.Data
-{
-    public class AuditService
-    {
-        private readonly string _conn;
-
-        public AuditService(string conn) => _conn = conn;
-
-        public void LogEvent(string userId, string action)
-        {
-            // Vulnerable: building EXEC string manually
-            string sql = "EXEC sp_RecordAudit '" + userId + "', '" + action + "'";
-            using var connection = new SqlConnection(_conn);
-            connection.Open();
-            new SqlCommand(sql, connection).ExecuteNonQuery();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection in stored procedure exec via string concatenation
+
+using System.Data;
+using System.Data.SqlClient;
+
+namespace App.Data
+{
+    public class AuditService
+    {
+        private readonly string _conn;
+
+        public AuditService(string conn) => _conn = conn;
+
+        public void LogEvent(string userId, string action)
+        {
+            // Vulnerable: building EXEC string manually
+            string sql = "EXEC sp_RecordAudit '" + userId + "', '" + action + "'";
+            using var connection = new SqlConnection(_conn);
+            connection.Open();
+            new SqlCommand(sql, connection).ExecuteNonQuery();
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-014.cs

@@ -1,26 +1,26 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection via string concatenation in WHERE IN clause
-
-using System.Data.SqlClient;
-
-namespace App.Data
-{
-    public class BatchOrderService
-    {
-        private readonly string _conn;
-
-        public BatchOrderService(string conn) => _conn = conn;
-
-        public SqlDataReader GetOrdersByIds(string rawIds)
-        {
-            // Vulnerable: rawIds like "1,2,3" injected into IN clause
-            string sql = $"SELECT * FROM Orders WHERE Id IN ({rawIds})";
-            var connection = new SqlConnection(_conn);
-            connection.Open();
-            return new SqlCommand(sql, connection).ExecuteReader();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection via string concatenation in WHERE IN clause
+
+using System.Data.SqlClient;
+
+namespace App.Data
+{
+    public class BatchOrderService
+    {
+        private readonly string _conn;
+
+        public BatchOrderService(string conn) => _conn = conn;
+
+        public SqlDataReader GetOrdersByIds(string rawIds)
+        {
+            // Vulnerable: rawIds like "1,2,3" injected into IN clause
+            string sql = $"SELECT * FROM Orders WHERE Id IN ({rawIds})";
+            var connection = new SqlConnection(_conn);
+            connection.Open();
+            return new SqlCommand(sql, connection).ExecuteReader();
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-015.cs

@@ -1,33 +1,33 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: csharp
-// expected: SQL injection via ADO.NET command text built with user search parameters
-
-using System;
-using System.Data.SqlClient;
-using Microsoft.AspNetCore.Mvc;
-
-namespace App.Controllers
-{
-    [ApiController]
-    [Route("api/[controller]")]
-    public class SearchController : ControllerBase
-    {
-        private readonly string _conn;
-
-        public SearchController(string conn) => _conn = conn;
-
-        [HttpGet]
-        public IActionResult Search([FromQuery] string name, [FromQuery] string dept)
-        {
-            // Vulnerable: both query params concatenated into SQL
-            string sql = "SELECT * FROM Employees WHERE Name LIKE '%" + name
-                         + "%' AND Department = '" + dept + "'";
-            using var connection = new SqlConnection(_conn);
-            connection.Open();
-            using var reader = new SqlCommand(sql, connection).ExecuteReader();
-            return Ok("Results fetched");
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: csharp
+// expected: SQL injection via ADO.NET command text built with user search parameters
+
+using System;
+using System.Data.SqlClient;
+using Microsoft.AspNetCore.Mvc;
+
+namespace App.Controllers
+{
+    [ApiController]
+    [Route("api/[controller]")]
+    public class SearchController : ControllerBase
+    {
+        private readonly string _conn;
+
+        public SearchController(string conn) => _conn = conn;
+
+        [HttpGet]
+        public IActionResult Search([FromQuery] string name, [FromQuery] string dept)
+        {
+            // Vulnerable: both query params concatenated into SQL
+            string sql = "SELECT * FROM Employees WHERE Name LIKE '%" + name
+                         + "%' AND Department = '" + dept + "'";
+            using var connection = new SqlConnection(_conn);
+            connection.Open();
+            using var reader = new SqlCommand(sql, connection).ExecuteReader();
+            return Ok("Results fetched");
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-016.cs

@@ -1,25 +1,25 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: csharp
-// expected: XSS via Response.Write with unescaped user input from query string
-
-using System.Web;
-
-namespace App.Handlers
-{
-    public class GreetingHandler : IHttpHandler
-    {
-        public bool IsReusable => false;
-
-        public void ProcessRequest(HttpContext context)
-        {
-            string name = context.Request.QueryString["name"];
-            context.Response.ContentType = "text/html";
-            // Vulnerable: name reflected without HtmlEncode
-            context.Response.Write("<html><body>");
-            context.Response.Write("<h1>Welcome, " + name + "!</h1>");
-            context.Response.Write("</body></html>");
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: csharp
+// expected: XSS via Response.Write with unescaped user input from query string
+
+using System.Web;
+
+namespace App.Handlers
+{
+    public class GreetingHandler : IHttpHandler
+    {
+        public bool IsReusable => false;
+
+        public void ProcessRequest(HttpContext context)
+        {
+            string name = context.Request.QueryString["name"];
+            context.Response.ContentType = "text/html";
+            // Vulnerable: name reflected without HtmlEncode
+            context.Response.Write("<html><body>");
+            context.Response.Write("<h1>Welcome, " + name + "!</h1>");
+            context.Response.Write("</body></html>");
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-017.cs

@@ -1,22 +1,22 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: csharp
-// expected: XSS via Response.Write with search query reflected into HTML
-
-using System.Web;
-using System.Web.UI;
-
-namespace App.Pages
-{
-    public class SearchPage : Page
-    {
-        protected void Page_Load(object sender, System.EventArgs e)
-        {
-            string q = Request.QueryString["q"];
-            // Vulnerable: writing raw query parameter into page output
-            Response.Write("<h2>Results for: " + q + "</h2>");
-            Response.Write("<meta name=\"description\" content=\"" + q + "\">");
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: csharp
+// expected: XSS via Response.Write with search query reflected into HTML
+
+using System.Web;
+using System.Web.UI;
+
+namespace App.Pages
+{
+    public class SearchPage : Page
+    {
+        protected void Page_Load(object sender, System.EventArgs e)
+        {
+            string q = Request.QueryString["q"];
+            // Vulnerable: writing raw query parameter into page output
+            Response.Write("<h2>Results for: " + q + "</h2>");
+            Response.Write("<meta name=\"description\" content=\"" + q + "\">");
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-018.cs

@@ -1,26 +1,26 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: csharp
-// expected: XSS via MVC action returning raw HTML with user input embedded
-
-using Microsoft.AspNetCore.Mvc;
-
-namespace App.Controllers
-{
-    public class ProfileController : Controller
-    {
-        [HttpGet("profile")]
-        public ContentResult ShowProfile(string username, string bio)
-        {
-            // Vulnerable: username and bio embedded without encoding
-            string html = $@"
-<html><body>
-  <h1>{username}</h1>
-  <p>{bio}</p>
-  <script>var user = ""{username}"";</script>
-</body></html>";
-            return Content(html, "text/html");
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: csharp
+// expected: XSS via MVC action returning raw HTML with user input embedded
+
+using Microsoft.AspNetCore.Mvc;
+
+namespace App.Controllers
+{
+    public class ProfileController : Controller
+    {
+        [HttpGet("profile")]
+        public ContentResult ShowProfile(string username, string bio)
+        {
+            // Vulnerable: username and bio embedded without encoding
+            string html = $@"
+<html><body>
+  <h1>{username}</h1>
+  <p>{bio}</p>
+  <script>var user = ""{username}"";</script>
+</body></html>";
+            return Content(html, "text/html");
+        }
+    }
+}

package/dist/packages/crucible/seeds/csharp/seed-019.cs

@@ -1,25 +1,25 @@
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: csharp
-// expected: XSS via HtmlHelper.Raw embedding user-supplied comment content
-
-using Microsoft.AspNetCore.Html;
-using Microsoft.AspNetCore.Mvc;
-using Microsoft.AspNetCore.Mvc.Rendering;
-
-namespace App.Controllers
-{
-    public class CommentController : Controller
-    {
-        [HttpGet("comments")]
-        public IActionResult Index(string comment, string author)
-        {
-            // Vulnerable: Html.Raw allows unsanitized input to render as HTML
-            var rawComment = new HtmlString(
-                $"<div class=\"comment\"><b>{author}</b>: {comment}</div>");
-            ViewBag.Comment = rawComment;
-            return View();
-        }
-    }
-}
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: csharp
+// expected: XSS via HtmlHelper.Raw embedding user-supplied comment content
+
+using Microsoft.AspNetCore.Html;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Rendering;
+
+namespace App.Controllers
+{
+    public class CommentController : Controller
+    {
+        [HttpGet("comments")]
+        public IActionResult Index(string comment, string author)
+        {
+            // Vulnerable: Html.Raw allows unsanitized input to render as HTML
+            var rawComment = new HtmlString(
+                $"<div class=\"comment\"><b>{author}</b>: {comment}</div>");
+            ViewBag.Comment = rawComment;
+            return View();
+        }
+    }
+}