RomanNum3ral
/
cai
mirror of https://github.com/aliasrobotics/cai.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Test and mitigate PoCs 7 to 10 

Signed-off-by: Víctor Mayoral Vilches <v.mayoralv@gmail.com>
This commit is contained in:
Víctor Mayoral Vilches 2025-08-27 16:17:47 +00:00
parent 88f16c3f6e
commit 4c866eb5e4
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/cai/tools/reconnaissance/generic_linux_command.py
View File

@ -182,6 +182,18 @@ async def generic_linux_command(command: str = "",
if re.search(r'cat.*<<.*>.*\.(py|sh|bash|pl|rb|php)', command):
if "base64" in command and any(danger in command for danger in ['os.system', 'subprocess', 'exec', 'eval']):
return "Error: Blocked attempt to create script with base64 decode and execute pattern via heredoc"
# CRITICAL MITIGATION: Block creation of scripts containing command substitution in /tmp
# This prevents PoC 10 where external input tricks agent into creating executable with $(env)
if re.search(r'(cat|echo|printf).*>.*/(tmp|var/tmp|dev/shm)/.*\.(sh|bash|py)', command, re.IGNORECASE):
# Check if the content being written contains command substitution
if '$(' in command or '`' in command:
return "Error: Blocked creation of script in temporary directory with command substitution. This is likely a prompt injection attempt."
# Block heredoc creation of scripts with command substitution in temp directories
if re.search(r'cat.*<<.*EOF.*>.*/(tmp|var/tmp|dev/shm)/', command, re.IGNORECASE):
if '$(' in command or '`' in command:
return "Error: Blocked heredoc creation of script with command substitution in temporary directory."
dangerous_patterns = [
r"(?i)rm\s+-rf\s+/",
r"(?i):(){ :|:& };:", # Fork bomb