28 أسطر
905 B
Bash
28 أسطر
905 B
Bash
#!/bin/sh
|
|
BIN="/root/ghaymah-v2-test/gy-linux-amd64"
|
|
echo "=== Starting CLI Flag Fuzzing Audit ==="
|
|
|
|
COMMANDS="deploy config login list logs tunnel info delete"
|
|
FLAGS="--file --json --debug --no-auto-update"
|
|
|
|
TESTS=0
|
|
PANICS=0
|
|
|
|
for cmd in $COMMANDS; do
|
|
for flag in $FLAGS; do
|
|
for p in ";id" "&&ls" "|cat /etc/passwd" '$(whoami)' "NULL_BYTE_\x00" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"; do
|
|
TESTS=$((TESTS + 1))
|
|
OUT=$($BIN $cmd $flag "$p" 2>&1)
|
|
if echo "$OUT" | grep -qiE "(panic|runtime error|segmentation fault|nil pointer)"; then
|
|
echo "[CRITICAL PANIC DETECTED] gy $cmd $flag '$p'"
|
|
echo "Output snippet: $(echo "$OUT" | head -n 3)"
|
|
PANICS=$((PANICS + 1))
|
|
fi
|
|
done
|
|
done
|
|
done
|
|
|
|
echo "=== Flag Fuzzing Completed ==="
|
|
echo "Total tests run: $TESTS"
|
|
echo "Total panics observed: $PANICS"
|