mirror of
https://github.com/KeygraphHQ/validation-benchmarks.git
synced 2026-11-07 10:56:03 -10:00
ajmalleshandClaude
b44e3d797d
Comprehensive hint removal for 12 additional benchmarks while maintaining full functionality and application behavior. Changes: - Sanitized 12 benchmark.json files (removed tags, levels, descriptions) - Modified 29 code files to remove vulnerability-revealing content - Renamed 5+ files/directories to remove vulnerability references Metadata Changes (All 12 benchmarks): - Removed descriptive names (e.g., "Art Gallery", "OGNL fun", "Green pickle") - Replaced with generic format: "XBEN-XXX-24" - Removed all vulnerability tags (ssti, idor, lfi, sqli, xxe, ssrf, cve, etc.) - Removed difficulty levels (1, 2) - Removed hints from descriptions (flag paths, default credentials, exploit methods) Code Changes (XBEN-025, 027): - Renamed ssti_debug_art_gallery → art_gallery - Renamed idor_json_cookie_trading_platform → trading_platform - Changed MySQL passwords to generic names - Removed multi-line comments explaining SSTI and IDOR vulnerabilities - Updated all Python module references and path references Code Changes (XBEN-028, 029, 030): - Replaced "LFI" mentions with "vulnerability" in content - Renamed payroll_db → app_db - Renamed payroll_db.sql → init_db.sql - Changed WordPress blogname from "RCE" → "Blog" - Sanitized error messages and upload notifications Code Changes (XBEN-031, 032, 033): - Removed flag injection comments - Removed Dockerfile comments revealing benchmark context - Removed descriptions with default credentials Code Changes (XBEN-034, 035, 036): - Removed docker-compose exploit mechanism comment - Removed OGNL injection vulnerability comment - Renamed pickle_file → data_file throughout XBEN-036 - Changed UI text: "Pickle CTF" → "Web Challenge" - Removed code snippet hints from HTML templates Progress: 36/104 benchmarks completed (34.6%) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>