69 lines
2.1 KiB
JSON
69 lines
2.1 KiB
JSON
{
|
|
"schemaVersion": 1,
|
|
"task": "M12-04J",
|
|
"generator": "tools/web/generate-malicious-archive-fixtures.mjs",
|
|
"extractionAllowed": false,
|
|
"cases": [
|
|
{
|
|
"id": "ZIP_PATH_TRAVERSAL",
|
|
"format": "ZIP",
|
|
"file": "zip-path-traversal.zip",
|
|
"threat": "ARCHIVE_ROOT_ESCAPE",
|
|
"gate": "LINK_SAFETY",
|
|
"byteLength": 132,
|
|
"sha256": "284fe1612ca049ec73f083fc6550f64078e8115bf85adea5431402fb73621f43",
|
|
"expectedCode": "IO_ARCHIVE_UNSAFE"
|
|
},
|
|
{
|
|
"id": "ZIP_COMPRESSION_BOMB",
|
|
"format": "ZIP",
|
|
"file": "zip-compression-bomb.zip",
|
|
"threat": "COMPRESSION_RATIO",
|
|
"gate": "CONFLICTS",
|
|
"byteLength": 115,
|
|
"sha256": "8394d639dfdb04e94b9a2fe06d4d37e31f3bdbe47b6a581c6dc8238d7c98a8da",
|
|
"expectedCode": "IO_ARCHIVE_UNSAFE"
|
|
},
|
|
{
|
|
"id": "ZIP_DUPLICATE_PATH",
|
|
"format": "ZIP",
|
|
"file": "zip-duplicate-path.zip",
|
|
"threat": "DUPLICATE_PATH",
|
|
"gate": "LINK_SAFETY",
|
|
"byteLength": 212,
|
|
"sha256": "830441041ecc26c0ba327cd24e6d1e19f7f3afc78474e08659d5adb35d8236ab",
|
|
"expectedCode": "IO_ARCHIVE_UNSAFE"
|
|
},
|
|
{
|
|
"id": "TAR_PATH_TRAVERSAL",
|
|
"format": "TAR",
|
|
"file": "tar-path-traversal.tar",
|
|
"threat": "ARCHIVE_ROOT_ESCAPE",
|
|
"gate": "LINK_SAFETY",
|
|
"byteLength": 2048,
|
|
"sha256": "d21c2ea584e7e64b3d40c1742b7ae526f5cf4da7d16d0fce33a3323806092b85",
|
|
"expectedCode": "IO_ARCHIVE_UNSAFE"
|
|
},
|
|
{
|
|
"id": "TAR_SYMLINK_ESCAPE",
|
|
"format": "TAR",
|
|
"file": "tar-symlink-escape.tar",
|
|
"threat": "SYMLINK_ESCAPE",
|
|
"gate": "LINK_SAFETY",
|
|
"byteLength": 2048,
|
|
"sha256": "f7eeb00b0e602883f5afc7add357bda5755c33321f1d2faf470b52e9b158e6fb",
|
|
"expectedCode": "IO_ARCHIVE_UNSAFE"
|
|
},
|
|
{
|
|
"id": "TAR_PREFIX_CONFLICT",
|
|
"format": "TAR",
|
|
"file": "tar-prefix-conflict.tar",
|
|
"threat": "FILE_DIRECTORY_PREFIX_CONFLICT",
|
|
"gate": "CONFLICTS",
|
|
"byteLength": 3072,
|
|
"sha256": "5d5914636b4e7777068897b0c51f900863706dcb2e415c1e0ebb1022b84bd5fa",
|
|
"expectedCode": "IO_ARCHIVE_UNSAFE"
|
|
}
|
|
]
|
|
}
|