thuban 0.4.3 → 0.4.6

package/dist/packages/crucible/seeds/ts/seed-024 2.ts

@@ -1,35 +1,35 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: critical
-// language: typescript
-// expected: command injection via execSync in typed file processing service
-
-import { execSync } from 'child_process';
-import * as path from 'path';
-
-interface ConversionOptions {
-  inputPath: string;  // user-controlled filename
-  outputFormat: 'pdf' | 'png' | 'jpg' | 'webp';
-  quality?: number;
-}
-
-export class FileConverter {
-  private readonly outputDir: string;
-
-  constructor(outputDir: string) {
-    this.outputDir = outputDir;
-  }
-
-  convert(opts: ConversionOptions): string {
-    const outputName = path.basename(opts.inputPath, path.extname(opts.inputPath));
-    const outputPath = path.join(this.outputDir, `${outputName}.${opts.outputFormat}`);
-    // opts.inputPath is user-controlled — no sanitization before execSync
-    const cmd = `convert "${opts.inputPath}" -quality ${opts.quality ?? 85} "${outputPath}"`;
-    execSync(cmd, { timeout: 30000 });
-    return outputPath;
-  }
-
-  extractText(pdfPath: string): string {
-    return execSync(`pdftotext ${pdfPath} -`, { encoding: 'utf8' });
-  }
-}
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: critical
+// language: typescript
+// expected: command injection via execSync in typed file processing service
+
+import { execSync } from 'child_process';
+import * as path from 'path';
+
+interface ConversionOptions {
+  inputPath: string;  // user-controlled filename
+  outputFormat: 'pdf' | 'png' | 'jpg' | 'webp';
+  quality?: number;
+}
+
+export class FileConverter {
+  private readonly outputDir: string;
+
+  constructor(outputDir: string) {
+    this.outputDir = outputDir;
+  }
+
+  convert(opts: ConversionOptions): string {
+    const outputName = path.basename(opts.inputPath, path.extname(opts.inputPath));
+    const outputPath = path.join(this.outputDir, `${outputName}.${opts.outputFormat}`);
+    // opts.inputPath is user-controlled — no sanitization before execSync
+    const cmd = `convert "${opts.inputPath}" -quality ${opts.quality ?? 85} "${outputPath}"`;
+    execSync(cmd, { timeout: 30000 });
+    return outputPath;
+  }
+
+  extractText(pdfPath: string): string {
+    return execSync(`pdftotext ${pdfPath} -`, { encoding: 'utf8' });
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-024.ts

@@ -1,35 +1,35 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: critical
-// language: typescript
-// expected: command injection via execSync in typed file processing service
-
-import { execSync } from 'child_process';
-import * as path from 'path';
-
-interface ConversionOptions {
-  inputPath: string;  // user-controlled filename
-  outputFormat: 'pdf' | 'png' | 'jpg' | 'webp';
-  quality?: number;
-}
-
-export class FileConverter {
-  private readonly outputDir: string;
-
-  constructor(outputDir: string) {
-    this.outputDir = outputDir;
-  }
-
-  convert(opts: ConversionOptions): string {
-    const outputName = path.basename(opts.inputPath, path.extname(opts.inputPath));
-    const outputPath = path.join(this.outputDir, `${outputName}.${opts.outputFormat}`);
-    // opts.inputPath is user-controlled — no sanitization before execSync
-    const cmd = `convert "${opts.inputPath}" -quality ${opts.quality ?? 85} "${outputPath}"`;
-    execSync(cmd, { timeout: 30000 });
-    return outputPath;
-  }
-
-  extractText(pdfPath: string): string {
-    return execSync(`pdftotext ${pdfPath} -`, { encoding: 'utf8' });
-  }
-}
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: critical
+// language: typescript
+// expected: command injection via execSync in typed file processing service
+
+import { execSync } from 'child_process';
+import * as path from 'path';
+
+interface ConversionOptions {
+  inputPath: string;  // user-controlled filename
+  outputFormat: 'pdf' | 'png' | 'jpg' | 'webp';
+  quality?: number;
+}
+
+export class FileConverter {
+  private readonly outputDir: string;
+
+  constructor(outputDir: string) {
+    this.outputDir = outputDir;
+  }
+
+  convert(opts: ConversionOptions): string {
+    const outputName = path.basename(opts.inputPath, path.extname(opts.inputPath));
+    const outputPath = path.join(this.outputDir, `${outputName}.${opts.outputFormat}`);
+    // opts.inputPath is user-controlled — no sanitization before execSync
+    const cmd = `convert "${opts.inputPath}" -quality ${opts.quality ?? 85} "${outputPath}"`;
+    execSync(cmd, { timeout: 30000 });
+    return outputPath;
+  }
+
+  extractText(pdfPath: string): string {
+    return execSync(`pdftotext ${pdfPath} -`, { encoding: 'utf8' });
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-025 2.ts

@@ -1,29 +1,29 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: critical
-// language: typescript
-// expected: command injection via spawn with shell:true and user-controlled arguments
-
-import { spawn } from 'child_process';
-import { Request, Response, Router } from 'express';
-
-const router = Router();
-
-function runCommand(cmd: string, args: string[]): Promise<string> {
-  return new Promise((resolve, reject) => {
-    // shell: true means the full command string is interpreted by /bin/sh
-    const proc = spawn(`${cmd} ${args.join(' ')}`, { shell: true, timeout: 15000 });
-    let output = '';
-    proc.stdout.on('data', (d: Buffer) => (output += d.toString()));
-    proc.stderr.on('data', (d: Buffer) => (output += d.toString()));
-    proc.on('close', (code: number) => (code === 0 ? resolve(output) : reject(new Error(output))));
-  });
-}
-
-router.post('/scripts/run', async (req: Request, res: Response) => {
-  const { script, params }: { script: string; params: string[] } = req.body;
-  const result = await runCommand(`node scripts/${script}`, params);
-  res.json({ output: result });
-});
-
-export default router;
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: critical
+// language: typescript
+// expected: command injection via spawn with shell:true and user-controlled arguments
+
+import { spawn } from 'child_process';
+import { Request, Response, Router } from 'express';
+
+const router = Router();
+
+function runCommand(cmd: string, args: string[]): Promise<string> {
+  return new Promise((resolve, reject) => {
+    // shell: true means the full command string is interpreted by /bin/sh
+    const proc = spawn(`${cmd} ${args.join(' ')}`, { shell: true, timeout: 15000 });
+    let output = '';
+    proc.stdout.on('data', (d: Buffer) => (output += d.toString()));
+    proc.stderr.on('data', (d: Buffer) => (output += d.toString()));
+    proc.on('close', (code: number) => (code === 0 ? resolve(output) : reject(new Error(output))));
+  });
+}
+
+router.post('/scripts/run', async (req: Request, res: Response) => {
+  const { script, params }: { script: string; params: string[] } = req.body;
+  const result = await runCommand(`node scripts/${script}`, params);
+  res.json({ output: result });
+});
+
+export default router;

package/dist/packages/crucible/seeds/ts/seed-025.ts

@@ -1,29 +1,29 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: critical
-// language: typescript
-// expected: command injection via spawn with shell:true and user-controlled arguments
-
-import { spawn } from 'child_process';
-import { Request, Response, Router } from 'express';
-
-const router = Router();
-
-function runCommand(cmd: string, args: string[]): Promise<string> {
-  return new Promise((resolve, reject) => {
-    // shell: true means the full command string is interpreted by /bin/sh
-    const proc = spawn(`${cmd} ${args.join(' ')}`, { shell: true, timeout: 15000 });
-    let output = '';
-    proc.stdout.on('data', (d: Buffer) => (output += d.toString()));
-    proc.stderr.on('data', (d: Buffer) => (output += d.toString()));
-    proc.on('close', (code: number) => (code === 0 ? resolve(output) : reject(new Error(output))));
-  });
-}
-
-router.post('/scripts/run', async (req: Request, res: Response) => {
-  const { script, params }: { script: string; params: string[] } = req.body;
-  const result = await runCommand(`node scripts/${script}`, params);
-  res.json({ output: result });
-});
-
-export default router;
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: critical
+// language: typescript
+// expected: command injection via spawn with shell:true and user-controlled arguments
+
+import { spawn } from 'child_process';
+import { Request, Response, Router } from 'express';
+
+const router = Router();
+
+function runCommand(cmd: string, args: string[]): Promise<string> {
+  return new Promise((resolve, reject) => {
+    // shell: true means the full command string is interpreted by /bin/sh
+    const proc = spawn(`${cmd} ${args.join(' ')}`, { shell: true, timeout: 15000 });
+    let output = '';
+    proc.stdout.on('data', (d: Buffer) => (output += d.toString()));
+    proc.stderr.on('data', (d: Buffer) => (output += d.toString()));
+    proc.on('close', (code: number) => (code === 0 ? resolve(output) : reject(new Error(output))));
+  });
+}
+
+router.post('/scripts/run', async (req: Request, res: Response) => {
+  const { script, params }: { script: string; params: string[] } = req.body;
+  const result = await runCommand(`node scripts/${script}`, params);
+  res.json({ output: result });
+});
+
+export default router;

package/dist/packages/crucible/seeds/ts/seed-026 2.ts

@@ -1,36 +1,36 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: high
-// language: typescript
-// expected: command injection via git operations with user-controlled branch/tag names
-
-import { execSync } from 'child_process';
-
-interface GitOptions {
-  repoPath: string;
-  branch: string;    // user-controlled
-  remote?: string;
-}
-
-export class GitService {
-  clone(repoUrl: string, targetDir: string): void {
-    // repoUrl from user — can include shell metacharacters
-    execSync(`git clone ${repoUrl} ${targetDir}`, { encoding: 'utf8', stdio: 'pipe' });
-  }
-
-  checkout(opts: GitOptions): string {
-    // opts.branch may be "main; cat /etc/shadow"
-    return execSync(`git -C ${opts.repoPath} checkout ${opts.branch}`, { encoding: 'utf8' });
-  }
-
-  createBranch(repoPath: string, branchName: string, fromBranch: string): string {
-    return execSync(
-      `git -C ${repoPath} checkout -b ${branchName} origin/${fromBranch}`,
-      { encoding: 'utf8' }
-    );
-  }
-
-  tag(repoPath: string, tagName: string, message: string): string {
-    return execSync(`git -C ${repoPath} tag -a ${tagName} -m "${message}"`, { encoding: 'utf8' });
-  }
-}
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: high
+// language: typescript
+// expected: command injection via git operations with user-controlled branch/tag names
+
+import { execSync } from 'child_process';
+
+interface GitOptions {
+  repoPath: string;
+  branch: string;    // user-controlled
+  remote?: string;
+}
+
+export class GitService {
+  clone(repoUrl: string, targetDir: string): void {
+    // repoUrl from user — can include shell metacharacters
+    execSync(`git clone ${repoUrl} ${targetDir}`, { encoding: 'utf8', stdio: 'pipe' });
+  }
+
+  checkout(opts: GitOptions): string {
+    // opts.branch may be "main; cat /etc/shadow"
+    return execSync(`git -C ${opts.repoPath} checkout ${opts.branch}`, { encoding: 'utf8' });
+  }
+
+  createBranch(repoPath: string, branchName: string, fromBranch: string): string {
+    return execSync(
+      `git -C ${repoPath} checkout -b ${branchName} origin/${fromBranch}`,
+      { encoding: 'utf8' }
+    );
+  }
+
+  tag(repoPath: string, tagName: string, message: string): string {
+    return execSync(`git -C ${repoPath} tag -a ${tagName} -m "${message}"`, { encoding: 'utf8' });
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-026.ts

@@ -1,36 +1,36 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: high
-// language: typescript
-// expected: command injection via git operations with user-controlled branch/tag names
-
-import { execSync } from 'child_process';
-
-interface GitOptions {
-  repoPath: string;
-  branch: string;    // user-controlled
-  remote?: string;
-}
-
-export class GitService {
-  clone(repoUrl: string, targetDir: string): void {
-    // repoUrl from user — can include shell metacharacters
-    execSync(`git clone ${repoUrl} ${targetDir}`, { encoding: 'utf8', stdio: 'pipe' });
-  }
-
-  checkout(opts: GitOptions): string {
-    // opts.branch may be "main; cat /etc/shadow"
-    return execSync(`git -C ${opts.repoPath} checkout ${opts.branch}`, { encoding: 'utf8' });
-  }
-
-  createBranch(repoPath: string, branchName: string, fromBranch: string): string {
-    return execSync(
-      `git -C ${repoPath} checkout -b ${branchName} origin/${fromBranch}`,
-      { encoding: 'utf8' }
-    );
-  }
-
-  tag(repoPath: string, tagName: string, message: string): string {
-    return execSync(`git -C ${repoPath} tag -a ${tagName} -m "${message}"`, { encoding: 'utf8' });
-  }
-}
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: high
+// language: typescript
+// expected: command injection via git operations with user-controlled branch/tag names
+
+import { execSync } from 'child_process';
+
+interface GitOptions {
+  repoPath: string;
+  branch: string;    // user-controlled
+  remote?: string;
+}
+
+export class GitService {
+  clone(repoUrl: string, targetDir: string): void {
+    // repoUrl from user — can include shell metacharacters
+    execSync(`git clone ${repoUrl} ${targetDir}`, { encoding: 'utf8', stdio: 'pipe' });
+  }
+
+  checkout(opts: GitOptions): string {
+    // opts.branch may be "main; cat /etc/shadow"
+    return execSync(`git -C ${opts.repoPath} checkout ${opts.branch}`, { encoding: 'utf8' });
+  }
+
+  createBranch(repoPath: string, branchName: string, fromBranch: string): string {
+    return execSync(
+      `git -C ${repoPath} checkout -b ${branchName} origin/${fromBranch}`,
+      { encoding: 'utf8' }
+    );
+  }
+
+  tag(repoPath: string, tagName: string, message: string): string {
+    return execSync(`git -C ${repoPath} tag -a ${tagName} -m "${message}"`, { encoding: 'utf8' });
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-027 2.ts

@@ -1,30 +1,30 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: high
-// language: typescript
-// expected: command injection in NestJS service using exec with user-provided report parameters
-
-import { Injectable } from '@nestjs/common';
-import { exec } from 'child_process';
-import { promisify } from 'util';
-
-const execAsync = promisify(exec);
-
-interface ReportParams {
-  format: string;       // user-controlled
-  dateRange: string;    // user-controlled
-  recipient: string;    // user-controlled email
-}
-
-@Injectable()
-export class ReportingService {
-  async generateAndSendReport(params: ReportParams): Promise<void> {
-    const { format, dateRange, recipient } = params;
-    // All three params go directly into shell command
-    const generateCmd = `python3 /scripts/gen_report.py --format ${format} --range ${dateRange}`;
-    const { stdout: reportPath } = await execAsync(generateCmd);
-
-    const sendCmd = `sendmail -s "Your Report" ${recipient.trim()} < ${reportPath.trim()}`;
-    await execAsync(sendCmd);
-  }
-}
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: high
+// language: typescript
+// expected: command injection in NestJS service using exec with user-provided report parameters
+
+import { Injectable } from '@nestjs/common';
+import { exec } from 'child_process';
+import { promisify } from 'util';
+
+const execAsync = promisify(exec);
+
+interface ReportParams {
+  format: string;       // user-controlled
+  dateRange: string;    // user-controlled
+  recipient: string;    // user-controlled email
+}
+
+@Injectable()
+export class ReportingService {
+  async generateAndSendReport(params: ReportParams): Promise<void> {
+    const { format, dateRange, recipient } = params;
+    // All three params go directly into shell command
+    const generateCmd = `python3 /scripts/gen_report.py --format ${format} --range ${dateRange}`;
+    const { stdout: reportPath } = await execAsync(generateCmd);
+
+    const sendCmd = `sendmail -s "Your Report" ${recipient.trim()} < ${reportPath.trim()}`;
+    await execAsync(sendCmd);
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-027.ts

@@ -1,30 +1,30 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: high
-// language: typescript
-// expected: command injection in NestJS service using exec with user-provided report parameters
-
-import { Injectable } from '@nestjs/common';
-import { exec } from 'child_process';
-import { promisify } from 'util';
-
-const execAsync = promisify(exec);
-
-interface ReportParams {
-  format: string;       // user-controlled
-  dateRange: string;    // user-controlled
-  recipient: string;    // user-controlled email
-}
-
-@Injectable()
-export class ReportingService {
-  async generateAndSendReport(params: ReportParams): Promise<void> {
-    const { format, dateRange, recipient } = params;
-    // All three params go directly into shell command
-    const generateCmd = `python3 /scripts/gen_report.py --format ${format} --range ${dateRange}`;
-    const { stdout: reportPath } = await execAsync(generateCmd);
-
-    const sendCmd = `sendmail -s "Your Report" ${recipient.trim()} < ${reportPath.trim()}`;
-    await execAsync(sendCmd);
-  }
-}
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: high
+// language: typescript
+// expected: command injection in NestJS service using exec with user-provided report parameters
+
+import { Injectable } from '@nestjs/common';
+import { exec } from 'child_process';
+import { promisify } from 'util';
+
+const execAsync = promisify(exec);
+
+interface ReportParams {
+  format: string;       // user-controlled
+  dateRange: string;    // user-controlled
+  recipient: string;    // user-controlled email
+}
+
+@Injectable()
+export class ReportingService {
+  async generateAndSendReport(params: ReportParams): Promise<void> {
+    const { format, dateRange, recipient } = params;
+    // All three params go directly into shell command
+    const generateCmd = `python3 /scripts/gen_report.py --format ${format} --range ${dateRange}`;
+    const { stdout: reportPath } = await execAsync(generateCmd);
+
+    const sendCmd = `sendmail -s "Your Report" ${recipient.trim()} < ${reportPath.trim()}`;
+    await execAsync(sendCmd);
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-028 2.ts

@@ -1,32 +1,32 @@
-// [CRUCIBLE-SEED]
-// category: command_injection
-// severity: critical
-// language: typescript
-// expected: command injection via execa with shell:true and template literal from user data
-
-import execa from 'execa';
-import { Request, Response, Router } from 'express';
-
-const router = Router();
-
-interface ScanRequest {
-  target: string;   // IP or hostname — user-controlled
-  ports?: string;   // port range — user-controlled
-  flags?: string;   // nmap flags — user-controlled
-}
-
-router.post('/security/scan', async (req: Request, res: Response) => {
-  const { target, ports = '1-1000', flags = '' } = req.body as ScanRequest;
-  try {
-    // All fields from user body — injection via shell metacharacters
-    const { stdout } = await execa.command(
-      `nmap ${flags} -p ${ports} ${target}`,
-      { shell: true, timeout: 60000 }
-    );
-    res.json({ results: stdout });
-  } catch (err: any) {
-    res.status(500).json({ error: err.message });
-  }
-});
-
-export default router;
+// [CRUCIBLE-SEED]
+// category: command_injection
+// severity: critical
+// language: typescript
+// expected: command injection via execa with shell:true and template literal from user data
+
+import execa from 'execa';
+import { Request, Response, Router } from 'express';
+
+const router = Router();
+
+interface ScanRequest {
+  target: string;   // IP or hostname — user-controlled
+  ports?: string;   // port range — user-controlled
+  flags?: string;   // nmap flags — user-controlled
+}
+
+router.post('/security/scan', async (req: Request, res: Response) => {
+  const { target, ports = '1-1000', flags = '' } = req.body as ScanRequest;
+  try {
+    // All fields from user body — injection via shell metacharacters
+    const { stdout } = await execa.command(
+      `nmap ${flags} -p ${ports} ${target}`,
+      { shell: true, timeout: 60000 }
+    );
+    res.json({ results: stdout });
+  } catch (err: any) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+export default router;