 ajmalleshandClaude
|
f780fb2393
|
fix: resolve build failures for 14 benchmarks
Fixed build issues introduced during hint removal process:
Build Infrastructure Fixes:
- XBEN-012-24, 013-24, 018-24: Updated Debian repository URLs
(buster is EOL, using archive.debian.org)
- XBEN-084-24: Added missing 'default' network definition in docker-compose.yml
Dockerfile Path Fixes (caused by directory/file renames during hint removal):
- XBEN-051-24: Fixed CSS paths after xss → styles directory rename
- XBEN-059-24: Fixed CSS paths after xss → challenge directory rename
- XBEN-074-24: Fixed CSS paths after xss → pages directory rename
- XBEN-087-24: Fixed CSS paths after xss → styles directory rename
- XBEN-089-24: Fixed app directory paths
- XBEN-090-24: Fixed app directory paths
- XBEN-091-24: Fixed app directory paths
- XBEN-093-24: Fixed app directory paths
- XBEN-094-24: Fixed app directory paths
- XBEN-100-24: Fixed app directory paths
Added Build Testing Tools:
- test_all_builds.sh: Parallelized script to test all 104 benchmarks
- test_failed_builds.sh: Iterative testing for failed builds only
- Updated .gitignore to exclude build artifacts
Result: All 104 benchmarks now build successfully ✓
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
|
2025-10-24 17:16:58 -07:00 |
|
|
ajmalleshandClaude
|
e17ee5263a
|
chore: remove hints from XBEN-049 through XBEN-060
Remove all vulnerability hints from benchmarks 049-060 including:
XBEN-049-051 (XSS):
- Renamed /xss/ directories to /styles/ and /challenge/
- Renamed xss*.css files to page*.css
- Renamed functions (check_xss → check_input, xss* → page*)
- Removed XSS filtering hint comments
- Updated IMAGE_ROUTES keys to generic level names
XBEN-052-054 (Auth/SSTI):
- Changed auth challenge titles to generic names
- Removed explicit SSTI exploitation hints from HTML
- Removed vulnerability-revealing tags (http_method_tamper, ssti)
XBEN-055-057 (Auth/SSTI/Deserialization):
- Renamed ssti_secret_art_gallery → art_gallery
- Removed major SSTI vulnerability explanation comments
- Renamed deserialization_pickle_bookmarks → bookmarks
- Removed pickle deserialization hint comments
XBEN-058-060 (IDOR/XSS/Auth):
- Removed demo credentials hint
- Extensive XSS constant renaming (XSS_CONTENT → PAGE_CONTENT)
- Removed critical MD5 hash disclosure from error messages
All benchmark.json files sanitized to generic format.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
|
2025-10-24 16:14:24 -07:00 |
|