thuban 0.4.3 → 0.4.6

package/dist/packages/crucible/seeds/php/seed-007.php

@@ -1,18 +1,18 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: hardcoded_secret
-// severity: critical
-// language: php
-// expected: Hardcoded Twilio credentials and webhook tokens
-
-$twilio_account_sid  = 'ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';
-$twilio_auth_token   = 'your_auth_token_here_32chars_long!!';
-$twilio_phone_number = '+15005550006';
-$twilio_webhook_key  = 'twilio_webhook_secret_validation_key';
-
-function sendSms(string $to, string $message): array {
-    global $twilio_account_sid, $twilio_auth_token, $twilio_phone_number;
-    $url = "https://api.twilio.com/2010-04-01/Accounts/$twilio_account_sid/Messages.json";
-    echo "Sending via SID: $twilio_account_sid Token: $twilio_auth_token\n";
-    return ['status' => 'queued'];
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: hardcoded_secret
+// severity: critical
+// language: php
+// expected: Hardcoded Twilio credentials and webhook tokens
+
+$twilio_account_sid  = 'ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';
+$twilio_auth_token   = 'your_auth_token_here_32chars_long!!';
+$twilio_phone_number = '+15005550006';
+$twilio_webhook_key  = 'twilio_webhook_secret_validation_key';
+
+function sendSms(string $to, string $message): array {
+    global $twilio_account_sid, $twilio_auth_token, $twilio_phone_number;
+    $url = "https://api.twilio.com/2010-04-01/Accounts/$twilio_account_sid/Messages.json";
+    echo "Sending via SID: $twilio_account_sid Token: $twilio_auth_token\n";
+    return ['status' => 'queued'];
+}

package/dist/packages/crucible/seeds/php/seed-008.php

@@ -1,19 +1,19 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: hardcoded_secret
-// severity: critical
-// language: php
-// expected: Hardcoded Redis and session secret keys
-
-define('REDIS_HOST', 'redis.prod.internal');
-define('REDIS_PASSWORD', 'myR3d1sS3cret!2024');
-define('SESSION_SECRET', 'flask-session-secret-do-not-expose-xxxxx');
-define('CSRF_SECRET', 'csrf-token-secret-key-production-2024!!');
-
-function getRedisClient() {
-    $redis = new Redis();
-    $redis->connect(REDIS_HOST, 6379);
-    $redis->auth(REDIS_PASSWORD);
-    error_log("Connected to Redis with password: " . REDIS_PASSWORD);
-    return $redis;
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: hardcoded_secret
+// severity: critical
+// language: php
+// expected: Hardcoded Redis and session secret keys
+
+define('REDIS_HOST', 'redis.prod.internal');
+define('REDIS_PASSWORD', 'myR3d1sS3cret!2024');
+define('SESSION_SECRET', 'flask-session-secret-do-not-expose-xxxxx');
+define('CSRF_SECRET', 'csrf-token-secret-key-production-2024!!');
+
+function getRedisClient() {
+    $redis = new Redis();
+    $redis->connect(REDIS_HOST, 6379);
+    $redis->auth(REDIS_PASSWORD);
+    error_log("Connected to Redis with password: " . REDIS_PASSWORD);
+    return $redis;
+}

package/dist/packages/crucible/seeds/php/seed-009.php

@@ -1,24 +1,24 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: mysqli_query with string concatenation — no prepared statements
-
-function getUserByName(string $username): array {
-    $conn = getDbConnection();
-    $query = "SELECT * FROM users WHERE username = '" . $username . "'";
-    $result = mysqli_query($conn, $query);
-    return mysqli_fetch_assoc($result) ?: [];
-}
-
-function getUserPosts(string $userId): array {
-    $conn = getDbConnection();
-    $sql = "SELECT * FROM posts WHERE user_id = " . $userId . " ORDER BY created_at DESC";
-    $result = mysqli_query($conn, $sql);
-    $posts = [];
-    while ($row = mysqli_fetch_assoc($result)) {
-        $posts[] = $row;
-    }
-    return $posts;
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: mysqli_query with string concatenation — no prepared statements
+
+function getUserByName(string $username): array {
+    $conn = getDbConnection();
+    $query = "SELECT * FROM users WHERE username = '" . $username . "'";
+    $result = mysqli_query($conn, $query);
+    return mysqli_fetch_assoc($result) ?: [];
+}
+
+function getUserPosts(string $userId): array {
+    $conn = getDbConnection();
+    $sql = "SELECT * FROM posts WHERE user_id = " . $userId . " ORDER BY created_at DESC";
+    $result = mysqli_query($conn, $sql);
+    $posts = [];
+    while ($row = mysqli_fetch_assoc($result)) {
+        $posts[] = $row;
+    }
+    return $posts;
+}

package/dist/packages/crucible/seeds/php/seed-010.php

@@ -1,24 +1,24 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: mysql_query with raw user input — deprecated and injectable
-
-function searchProducts(string $term, string $category): array {
-    $db = mysql_connect('localhost', 'root', 'password');
-    mysql_select_db('shop', $db);
-    $query = "SELECT * FROM products WHERE name LIKE '%" . $term . "%' AND category = '" . $category . "'";
-    $result = mysql_query($query, $db);
-    $items = [];
-    while ($row = mysql_fetch_assoc($result)) {
-        $items[] = $row;
-    }
-    return $items;
-}
-
-function deleteProduct(string $id): bool {
-    $db = mysql_connect('localhost', 'root', 'password');
-    mysql_select_db('shop', $db);
-    return mysql_query("DELETE FROM products WHERE id = " . $id, $db);
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: mysql_query with raw user input — deprecated and injectable
+
+function searchProducts(string $term, string $category): array {
+    $db = mysql_connect('localhost', 'root', 'password');
+    mysql_select_db('shop', $db);
+    $query = "SELECT * FROM products WHERE name LIKE '%" . $term . "%' AND category = '" . $category . "'";
+    $result = mysql_query($query, $db);
+    $items = [];
+    while ($row = mysql_fetch_assoc($result)) {
+        $items[] = $row;
+    }
+    return $items;
+}
+
+function deleteProduct(string $id): bool {
+    $db = mysql_connect('localhost', 'root', 'password');
+    mysql_select_db('shop', $db);
+    return mysql_query("DELETE FROM products WHERE id = " . $id, $db);
+}

package/dist/packages/crucible/seeds/php/seed-011.php

@@ -1,18 +1,18 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: PDO query with string interpolation instead of bound parameters
-
-function getOrdersByStatus(string $status, string $fromDate): array {
-    $pdo = new PDO('mysql:host=localhost;dbname=orders', 'app', 'pass');
-    $stmt = $pdo->query("SELECT * FROM orders WHERE status = '$status' AND created_at >= '$fromDate'");
-    return $stmt->fetchAll(PDO::FETCH_ASSOC);
-}
-
-function updateOrderStatus(string $orderId, string $newStatus): bool {
-    $pdo = new PDO('mysql:host=localhost;dbname=orders', 'app', 'pass');
-    $sql = "UPDATE orders SET status = '$newStatus' WHERE id = $orderId";
-    return $pdo->exec($sql) !== false;
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: PDO query with string interpolation instead of bound parameters
+
+function getOrdersByStatus(string $status, string $fromDate): array {
+    $pdo = new PDO('mysql:host=localhost;dbname=orders', 'app', 'pass');
+    $stmt = $pdo->query("SELECT * FROM orders WHERE status = '$status' AND created_at >= '$fromDate'");
+    return $stmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
+function updateOrderStatus(string $orderId, string $newStatus): bool {
+    $pdo = new PDO('mysql:host=localhost;dbname=orders', 'app', 'pass');
+    $sql = "UPDATE orders SET status = '$newStatus' WHERE id = $orderId";
+    return $pdo->exec($sql) !== false;
+}

package/dist/packages/crucible/seeds/php/seed-012.php

@@ -1,24 +1,24 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: ORDER BY column name from user input without whitelist validation
-
-function getSortedUsers(string $sortCol, string $sortDir): array {
-    $conn = getDbConnection();
-    $query = "SELECT * FROM users ORDER BY " . $sortCol . " " . $sortDir;
-    $result = mysqli_query($conn, $query);
-    $users = [];
-    while ($row = mysqli_fetch_assoc($result)) {
-        $users[] = $row;
-    }
-    return $users;
-}
-
-function filterByColumn(string $column, string $value): array {
-    $conn = getDbConnection();
-    $sql = "SELECT * FROM records WHERE $column = '$value'";
-    $result = mysqli_query($conn, $sql);
-    return mysqli_fetch_all($result, MYSQLI_ASSOC);
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: ORDER BY column name from user input without whitelist validation
+
+function getSortedUsers(string $sortCol, string $sortDir): array {
+    $conn = getDbConnection();
+    $query = "SELECT * FROM users ORDER BY " . $sortCol . " " . $sortDir;
+    $result = mysqli_query($conn, $query);
+    $users = [];
+    while ($row = mysqli_fetch_assoc($result)) {
+        $users[] = $row;
+    }
+    return $users;
+}
+
+function filterByColumn(string $column, string $value): array {
+    $conn = getDbConnection();
+    $sql = "SELECT * FROM records WHERE $column = '$value'";
+    $result = mysqli_query($conn, $sql);
+    return mysqli_fetch_all($result, MYSQLI_ASSOC);
+}

package/dist/packages/crucible/seeds/php/seed-013.php

@@ -1,23 +1,23 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: SQL built from multiple GET parameters concatenated directly
-
-$id        = $_GET['id'];
-$category  = $_GET['category'];
-$published = $_GET['published'];
-
-$query = "SELECT title, body, author FROM articles
-          WHERE id = $id
-          AND category = '$category'
-          AND published = $published";
-
-$conn   = getDbConnection();
-$result = mysqli_query($conn, $query);
-
-while ($row = mysqli_fetch_assoc($result)) {
-    echo "<h2>" . $row['title'] . "</h2>";
-    echo "<p>"  . $row['body']  . "</p>";
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: SQL built from multiple GET parameters concatenated directly
+
+$id        = $_GET['id'];
+$category  = $_GET['category'];
+$published = $_GET['published'];
+
+$query = "SELECT title, body, author FROM articles
+          WHERE id = $id
+          AND category = '$category'
+          AND published = $published";
+
+$conn   = getDbConnection();
+$result = mysqli_query($conn, $query);
+
+while ($row = mysqli_fetch_assoc($result)) {
+    echo "<h2>" . $row['title'] . "</h2>";
+    echo "<p>"  . $row['body']  . "</p>";
+}

package/dist/packages/crucible/seeds/php/seed-014.php

@@ -1,20 +1,20 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: Table name from user input used in raw SQL query
-
-function queryTable(string $table, string $where): array {
-    $conn = getDbConnection();
-    $sql = "SELECT * FROM $table WHERE $where LIMIT 100";
-    $result = mysqli_query($conn, $sql);
-    return mysqli_fetch_all($result, MYSQLI_ASSOC);
-}
-
-function countRows(string $tableName, string $condition): int {
-    $conn = getDbConnection();
-    $result = mysqli_query($conn, "SELECT COUNT(*) as cnt FROM $tableName WHERE $condition");
-    $row = mysqli_fetch_assoc($result);
-    return (int) $row['cnt'];
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: Table name from user input used in raw SQL query
+
+function queryTable(string $table, string $where): array {
+    $conn = getDbConnection();
+    $sql = "SELECT * FROM $table WHERE $where LIMIT 100";
+    $result = mysqli_query($conn, $sql);
+    return mysqli_fetch_all($result, MYSQLI_ASSOC);
+}
+
+function countRows(string $tableName, string $condition): int {
+    $conn = getDbConnection();
+    $result = mysqli_query($conn, "SELECT COUNT(*) as cnt FROM $tableName WHERE $condition");
+    $row = mysqli_fetch_assoc($result);
+    return (int) $row['cnt'];
+}

package/dist/packages/crucible/seeds/php/seed-015.php

@@ -1,18 +1,18 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: php
-// expected: Login form vulnerable to SQL injection via username field
-
-function authenticateUser(string $username, string $password): ?array {
-    $conn = getDbConnection();
-    $hashed = md5($password);
-    $query = "SELECT * FROM users
-              WHERE username = '$username'
-              AND password = '$hashed'
-              AND active = 1
-              LIMIT 1";
-    $result = mysqli_query($conn, $query);
-    return mysqli_fetch_assoc($result) ?: null;
-}
+<?php
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: php
+// expected: Login form vulnerable to SQL injection via username field
+
+function authenticateUser(string $username, string $password): ?array {
+    $conn = getDbConnection();
+    $hashed = md5($password);
+    $query = "SELECT * FROM users
+              WHERE username = '$username'
+              AND password = '$hashed'
+              AND active = 1
+              LIMIT 1";
+    $result = mysqli_query($conn, $query);
+    return mysqli_fetch_assoc($result) ?: null;
+}

package/dist/packages/crucible/seeds/php/seed-016.php

@@ -1,18 +1,18 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: php
-// expected: echo $_GET without htmlspecialchars — reflected XSS
-
-$name  = $_GET['name'];
-$query = $_GET['q'];
-$page  = $_GET['page'] ?? 1;
-$sort  = $_GET['sort'] ?? 'relevance';
-
-echo "<h1>Hello, " . $name . "!</h1>";
-echo "<p>You searched for: " . $query . "</p>";
-echo "<meta name='description' content='" . $query . "'>";
-echo "<p>Showing page " . $page . " sorted by " . $sort . "</p>";
-echo "<input type='hidden' name='last_query' value='" . $query . "'>";
-echo "<script>var searchQuery = '" . $query . "';</script>";
+<?php
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: php
+// expected: echo $_GET without htmlspecialchars — reflected XSS
+
+$name  = $_GET['name'];
+$query = $_GET['q'];
+$page  = $_GET['page'] ?? 1;
+$sort  = $_GET['sort'] ?? 'relevance';
+
+echo "<h1>Hello, " . $name . "!</h1>";
+echo "<p>You searched for: " . $query . "</p>";
+echo "<meta name='description' content='" . $query . "'>";
+echo "<p>Showing page " . $page . " sorted by " . $sort . "</p>";
+echo "<input type='hidden' name='last_query' value='" . $query . "'>";
+echo "<script>var searchQuery = '" . $query . "';</script>";

package/dist/packages/crucible/seeds/php/seed-017.php

@@ -1,18 +1,18 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: php
-// expected: $_POST values echoed directly into HTML form — stored XSS vector
-
-$comment  = $_POST['comment'] ?? '';
-$username = $_POST['username'] ?? '';
-
-// Save to DB then render...
-echo "<div class='comment'>";
-echo "  <strong>" . $username . "</strong>";
-echo "  <p>" . $comment . "</p>";
-echo "</div>";
-
-echo "<input type='hidden' name='user' value='" . $username . "'>";
-echo "<script>var user = '" . $username . "';</script>";
+<?php
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: php
+// expected: $_POST values echoed directly into HTML form — stored XSS vector
+
+$comment  = $_POST['comment'] ?? '';
+$username = $_POST['username'] ?? '';
+
+// Save to DB then render...
+echo "<div class='comment'>";
+echo "  <strong>" . $username . "</strong>";
+echo "  <p>" . $comment . "</p>";
+echo "</div>";
+
+echo "<input type='hidden' name='user' value='" . $username . "'>";
+echo "<script>var user = '" . $username . "';</script>";

package/dist/packages/crucible/seeds/php/seed-018.php

@@ -1,17 +1,17 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: php
-// expected: print_r or var_dump of user input rendered in HTML context
-
-$data = $_REQUEST['debug'];
-echo "<pre>";
-print_r($data);
-echo "</pre>";
-
-$error = $_GET['error'];
-echo "<div class='error'>" . $error . "</div>";
-
-$redirect = $_GET['next'];
-echo "<a href='" . $redirect . "'>Continue</a>";
+<?php
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: php
+// expected: print_r or var_dump of user input rendered in HTML context
+
+$data = $_REQUEST['debug'];
+echo "<pre>";
+print_r($data);
+echo "</pre>";
+
+$error = $_GET['error'];
+echo "<div class='error'>" . $error . "</div>";
+
+$redirect = $_GET['next'];
+echo "<a href='" . $redirect . "'>Continue</a>";

package/dist/packages/crucible/seeds/php/seed-019.php

@@ -1,24 +1,24 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: medium
-// language: php
-// expected: JSON-encoded user input in JavaScript block — breaks out of string context
-
-$username = $_GET['user'];
-$profile  = $_GET['bio'];
-?>
-<html>
-<head><title>Profile</title></head>
-<body>
-<h1><?= $username ?></h1>
-<p><?= $profile ?></p>
-<script>
-    var userData = {
-        name: "<?= $username ?>",
-        bio: "<?= $profile ?>"
-    };
-    console.log(userData);
-</script>
-</body>
-</html>
+<?php
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: medium
+// language: php
+// expected: JSON-encoded user input in JavaScript block — breaks out of string context
+
+$username = $_GET['user'];
+$profile  = $_GET['bio'];
+?>
+<html>
+<head><title>Profile</title></head>
+<body>
+<h1><?= $username ?></h1>
+<p><?= $profile ?></p>
+<script>
+    var userData = {
+        name: "<?= $username ?>",
+        bio: "<?= $profile ?>"
+    };
+    console.log(userData);
+</script>
+</body>
+</html>

package/dist/packages/crucible/seeds/php/seed-020.php

@@ -1,19 +1,19 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: php
-// expected: header Location redirect with user input reflected in HTML fallback
-
-$url = $_GET['url'] ?? '/';
-header("Refresh: 0; url=" . $url);
-
-$message = $_GET['msg'];
-?>
-<!DOCTYPE html>
-<html>
-<body>
-<p>Redirecting to: <a href="<?= $url ?>"><?= $url ?></a></p>
-<div class="flash"><?= $message ?></div>
-</body>
-</html>
+<?php
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: php
+// expected: header Location redirect with user input reflected in HTML fallback
+
+$url = $_GET['url'] ?? '/';
+header("Refresh: 0; url=" . $url);
+
+$message = $_GET['msg'];
+?>
+<!DOCTYPE html>
+<html>
+<body>
+<p>Redirecting to: <a href="<?= $url ?>"><?= $url ?></a></p>
+<div class="flash"><?= $message ?></div>
+</body>
+</html>

package/dist/packages/crucible/seeds/php/seed-021.php

@@ -1,22 +1,22 @@
-<?php
-// [CRUCIBLE-SEED]
-// category: xss
-// severity: high
-// language: php
-// expected: User-controlled CSS class or style injected into page template
-
-$theme  = $_GET['theme'];
-$color  = $_GET['color'];
-$font   = $_GET['font'];
-?>
-<!DOCTYPE html>
-<html>
-<head>
-<style>
-    body { background-color: <?= $color ?>; font-family: <?= $font ?>; }
-</style>
-</head>
-<body class="theme-<?= $theme ?>">
-    <p style="color: <?= $color ?>">Welcome!</p>
-</body>
-</html>
+<?php
+// [CRUCIBLE-SEED]
+// category: xss
+// severity: high
+// language: php
+// expected: User-controlled CSS class or style injected into page template
+
+$theme  = $_GET['theme'];
+$color  = $_GET['color'];
+$font   = $_GET['font'];
+?>
+<!DOCTYPE html>
+<html>
+<head>
+<style>
+    body { background-color: <?= $color ?>; font-family: <?= $font ?>; }
+</style>
+</head>
+<body class="theme-<?= $theme ?>">
+    <p style="color: <?= $color ?>">Welcome!</p>
+</body>
+</html>