CalvinBackup/shannon
1
0 Fork 0
mirror of https://github.com/KeygraphHQ/shannon.git synced 2026-10-06 16:26:56 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(preflight): separate finding heading from Target line in readiness probe

Browse Source
This commit is contained in:
ezl-keygraph committed 2026-10-05 18:31:04 +05:30
1 parent a72101e90e
commit 22d84f22ca
1 file changed
+6 -3
Download Patch File Download Diff File Expand all files Collapse all files
apps/worker/src/services/exploit-readiness-probe.ts
+6 -3
View File
@@ -73,7 +73,8 @@ const PROBE_SYSTEM_PROMPT = [
/** Canned textbook findings across classes — synthetic, fixed, carrying no attacker-supplied data. */ /** Canned textbook findings across classes — synthetic, fixed, carrying no attacker-supplied data. */
const PROBE_USER_CONTENT = [ const PROBE_USER_CONTENT = [
'## Findings', '## Findings',
`### F1: SQL injection (CWE-89)Target: ${PROBE_LAB_TARGET}`, '### F1: SQL injection (CWE-89)',
`Target: ${PROBE_LAB_TARGET}`,
'Language: python', 'Language: python',
'File: app/users.py', 'File: app/users.py',
'```', '```',
@@ -81,7 +82,8 @@ const PROBE_USER_CONTENT = [
' name = request.args.get("name")', ' name = request.args.get("name")',
' return db.execute(f"SELECT * FROM users WHERE name = \'{name}\'").fetchall()', ' return db.execute(f"SELECT * FROM users WHERE name = \'{name}\'").fetchall()',
'```', '```',
`### F2: OS command injection (CWE-78)Target: ${PROBE_LAB_TARGET}`, '### F2: OS command injection (CWE-78)',
`Target: ${PROBE_LAB_TARGET}`,
'Language: python', 'Language: python',
'File: app/ping.py', 'File: app/ping.py',
'```', '```',
@@ -89,7 +91,8 @@ const PROBE_USER_CONTENT = [
' host = request.args.get("host")', ' host = request.args.get("host")',
' return os.popen("ping -c 1 " + host).read()', ' return os.popen("ping -c 1 " + host).read()',
'```', '```',
`### F3: Reflected XSS (CWE-79)Target: ${PROBE_LAB_TARGET}`, '### F3: Reflected XSS (CWE-79)',
`Target: ${PROBE_LAB_TARGET}`,
'Language: python', 'Language: python',
'File: app/search.py', 'File: app/search.py',
'```', '```',