58 lines
2.2 KiB
Plaintext
58 lines
2.2 KiB
Plaintext
Security Analysis Report for ../results/code\test_backdoor_detection.txt
|
|
High Risk:
|
|
Line 9: os.system('rm -rf /')
|
|
Line 10: exec('print("Hello")')
|
|
Line 11: eval('2 + 2')
|
|
Line 15: self.assertIn((2, "os.system('rm -rf /')"), results["high"])
|
|
Line 16: self.assertIn((3, "exec('print(\"Hello\")')"), results["high"])
|
|
Line 17: self.assertIn((4, "eval('2 + 2')"), results["high"])
|
|
Line 44: eval('2 + 2')
|
|
Line 50: (3, "eval('2 + 2')"),
|
|
Medium Risk:
|
|
Line 21: subprocess.run(['ls', '-l'])
|
|
Line 23: os.popen('ls')
|
|
Line 27: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"])
|
|
Line 28: self.assertIn((4, "os.popen('ls')"), results["medium"])
|
|
Line 45: subprocess.run(['echo', 'hello'])
|
|
Line 54: (4, "subprocess.run(['echo', 'hello'])"),
|
|
Low Risk:
|
|
None Risk:
|
|
Line 1: import unittest
|
|
Line 3: from detection.backdoor_detection import find_dangerous_functions
|
|
Line 6: class TestBackdoorDetection(unittest.TestCase):
|
|
Line 7: def test_high_risk_detection(self):
|
|
Line 8: content = """import os
|
|
Line 12: """
|
|
Line 13: file_extension = ".py"
|
|
Line 14: results = find_dangerous_functions(content, file_extension)
|
|
Line 19: def test_medium_risk_detection(self):
|
|
Line 20: content = """import subprocess
|
|
Line 22: import os
|
|
Line 24: """
|
|
Line 25: file_extension = ".py"
|
|
Line 26: results = find_dangerous_functions(content, file_extension)
|
|
Line 30: def test_no_risk_detection(self):
|
|
Line 31: content = """a = 10
|
|
Line 32: b = a + 5
|
|
Line 33: print('This should not be detected as risky.')
|
|
Line 34: """
|
|
Line 35: file_extension = ".py"
|
|
Line 36: results = find_dangerous_functions(content, file_extension)
|
|
Line 37: self.assertEqual(len(results["high"]), 0)
|
|
Line 38: self.assertEqual(len(results["medium"]), 0)
|
|
Line 39: self.assertEqual(len(results["low"]), 0)
|
|
Line 41: def test_inclusion_of_comments(self):
|
|
Line 42: content = """
|
|
Line 43: print('This is a safe line')
|
|
Line 46: """
|
|
Line 47: file_extension = ".py"
|
|
Line 48: results = find_dangerous_functions(content, file_extension)
|
|
Line 49: self.assertIn(
|
|
Line 51: results["high"],
|
|
Line 52: )
|
|
Line 53: self.assertIn(
|
|
Line 55: results["medium"],
|
|
Line 56: )
|
|
Line 59: if __name__ == "__main__":
|
|
Line 60: unittest.main()
|