close
Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

README.md

<<<<<<< HEAD

Supplementary materials for vulnerable programs

This section contains the vulnerable sink function code of each programs we used and its vulnerabilities reports ('Report (POC)' column) including the proof of the concept. As we mentioned in the paper (Section 6. Program Selection), below programs are known recently as they have injection vulnerabilities (See Link).

ID Application Vulnerable sink function code Report (POC)
s1 WordPress Pointer Link
s2 Activity Monitor Pointer Link
s3 AVideo-Encoder Pointer Link
s4 Pepperminty-Wiki Pointer Link
s5 PHPSHE Pointer Link
s6 Pie Register Pointer Link
s7 Lighttpd Pointer Link
s8 Leptonica Pointer Link
s9 GNU-Patch Pointer Link
s10 Go-ahead Pointer Link
s11 Luci Pointer Link
s12 jison Pointer Link
s13 kill-port Pointer Link
s14 egg-scripts Pointer Link
s15 node-df Pointer Link
s16 PM2 Pointer Link
s17 fs-git Pointer Link
s18 Meta-git Pointer Link
s19 Listening-process Pointer Link
s20 NPM lsof Pointer Link
s21 NPM OpenCV Pointer Link
s22 logkitty Pointer Link
s23 gitpublish Pointer Link
s24 codecov Pointer Link
s25 pdfinfojs Pointer Link
s26 libnmap Pointer Link
s27 pdf-image Pointer Link
=======

Vulnerable programs (test cases)

This section contains the vulnerable code of each program we used and its report including POC (Proof of Concept) exploit ('Report (POC)' column). As we mentioned in the paper (Section 6. Program Selection), below programs have injection vulnerabilities (See Link).

ID Application Vulnerable code Report (POC)
s1 WordPress Link Link
s2 Activity Monitor Link Link
s3 AVideo-Encoder Link Link
s4 Pepperminty-Wiki Link Link
s5 PHPSHE Link Link
s6 Pie Register Link Link
s7 Lighttpd Link Link
s8 Leptonica Link Link
s9 GNU-Patch Link Link
s10 Go-ahead Link Link
s11 Luci Link Link
s12 jison Link Link
s13 kill-port Link Link
s14 egg-scripts Link Link
s15 node-df Link Link
s16 PM2 Link Link
s17 fs-git Link Link
s18 Meta-git Link Link
s19 Listening-process Link Link
s20 NPM lsof Link Link
s21 NPM OpenCV Link Link
s22 logkitty Link Link
s23 gitpublish Link Link
s24 codecov Link Link
s25 pdfinfojs Link Link
s26 libnmap Link Link
s27 pdf-image Link Link

f12236e5e9c6e4fb3e0b3e8f3dd917f73585f33b