gen_batchB.py

import sys, os, subprocess, time
sys.path.insert(0, r"D:\0projects\bountykimi\tmp")
from harness import Call, build, check_stream, ART, MARKDIR, run_modelscan, clean_markers

cands = []

# B1: zipfile.ZipFile(mode='w') overwrite-existing = TRUNCATE/DELETE+CREATE (HIGH)
cands.append(("B1_zipfile_trunc", [
    Call("zipfile", "ZipFile", os.path.join(MARKDIR, "b1_target_PWN.zip"), "w"),
]))

# B2: tarfile.TarFile(mode='w') truncation? tarfile.TarFile already in dupes. But truncation angle = overwrite. skip, listed.

# B3: open via io.open existing file mode 'w' truncates -> io.open done (generic). skip.

# B4: fileinput with inplace? destructive edit done? fileinput done. skip.

# B5: shelve writeback destructive? shelve done.

# B6: dbm.open existing file 'w' truncates -> dbm done.

# B7: logging.FileHandler mode 'w' truncation? FileHandler done.

# B8: bz2.BZ2File? bz2.open done.

# B9: xml.etree include? skip.

# B10: http.server.ThreadingHTTPServer bind (distinct class from HTTPServer, listen)
cands.append(("B10_threadinghttpserver", [
    Call("http.server", "ThreadingHTTPServer", ("127.0.0.1", 18993), Call("http.server", "SimpleHTTPRequestHandler")),
]))

# B11: socketserver.UDPServer bind (UDP listen - distinct from TCPServer h7)
cands.append(("B11_udpserver_bind", [
    Call("socketserver", "UDPServer", ("127.0.0.1", 18994), Call("socketserver", "DatagramRequestHandler")),
]))

# B12: http.server.ThreadingHTTPServer with CGIHTTPRequestHandler? CGI handler is cgi-exec capable but only on request. skip.

# B13: tempfile.SpooledTemporaryFile? in-memory then disk; TemporaryFile done A16. skip.

# B14: numpy.memmap fixed - file CREATE via memmap mode w+
cands.append(("B14_numpy_memmap", [
    Call("numpy", "memmap", os.path.join(MARKDIR, "b14mm_PWN.bin"), "float32", "w+", 0, (10,)),
]))

# B15: mmap.mmap requires fd. skip.

# B16: csv.DictWriter builds writer only. skip.

# B17: zipfile.PyZipFile write mode (create pyz) distinct from ZipFile? Marginal. skip.

# B18: zipapp done.

# B19: compileall done.

# B20: py_compile done.

# B21: configparser write needs fp. configparser already has PWN from earlier (configparser_PWN.ini exists) but is it in dupes? Not listed! configparser.RawConfigParser().write needs fp. How was it done? Probably .read? Whatever - configparser.ConfigParser().read(path) = file READ (MEDIUM, distinct class).
cands.append(("B21_configparser_read", [
    Call("configparser", "ConfigParser"),
]))
# .read is method. skip B21.

# B22: fileinput.input(inplace=1) destructive in-place edit of existing file (HIGH delete/write, distinct from fileinput read?)
# fileinput.input(files, inplace=True) -> on iteration writes. Iteration doesn't happen on load. skip.

# B23: linecache done.

# B24: getpass? no.

# B25: cgitb? no.

# B26: traceback done.

# B27: code module done.

# B28: pydoc done.

# B29: turtle? no.

# B30: uuid? no.

# B31: ipaddress? no.

# B32: sched? done (evil_sched). skip.

# B33: queue? no.

# B34: secrets? no.

# B35: stat? no.

# B36: fnmatch? no.

# B37: glob? read-only listing. glob.glob path - read dir listing (LOW). skip.

# B38: tempfile done enough.

# B39: signal? no.

# B40: resource? unix.

# B41: syslog? unix.

# B42: xmlrpc.server done h7.

# B43: xml.sax done. xml.dom.minidom.parse read (MEDIUM) distinct from sax?
cands.append(("B43_minidom_parse", [
    Call("xml.dom.minidom", "parse", os.path.join(MARKDIR, "b43.xml")),
]))

# B44: xml.etree.ElementTree.parse read (MEDIUM)
cands.append(("B44_etree_parse", [
    Call("xml.etree.ElementTree", "parse", os.path.join(MARKDIR, "b44.xml")),
]))

# B45: plistlib.load read (MEDIUM) - plistlib.dump done; load is read distinct
cands.append(("B45_plistlib_load", [
    Call("plistlib", "load", Call("io", "open", os.path.join(MARKDIR, "b45.plist"), "rb")),
]))

# B46: json.load read (MEDIUM) via io.open
cands.append(("B46_json_load", [
    Call("json", "load", Call("io", "open", os.path.join(MARKDIR, "b46.json"), "r")),
]))

# B47: marshal.load read (MEDIUM) via io.open
cands.append(("B47_marshal_load", [
    Call("marshal", "load", Call("io", "open", os.path.join(MARKDIR, "b47.bin"), "rb")),
]))

# B48: csv.reader read via io.open (MEDIUM) - builds reader only, no read. skip.

# B49: filecmp done.

# B50: hmac? no.

# B51: sqlite3 executescript done (evil_sqliteexec). skip.

# B52: numpy.fromregex? read MEDIUM meh. skip.

# B53: array.array('i').fromfile method. skip.

# B54: pprint done.

# B55: reprlib? no.

# B56: dis? no.

# B57: pickletools? pickletools.dis reads pickle file arg? pickletools.dis(pickle_bytes) in-memory. skip.

# B58: doctest done.

# B59: unittest discover done.

# B60: importlib.machinery.SourceFileLoader.load_module? execs py file = RCE but load_module is method. SourceFileLoader(name, path) ctor then needs method. skip.

# B61: runpy blocked.

# B62: modulefinder done f62.

# B63: setuptools done.

# B64: pip done.

# B65: ensurepip.bootsstrap? ensurepip._main() installs pip -> writes files/exec? ensurepip.bootstrap() module-level, installs pip into env = file write. Marginal, slow. skip.

# B66: venv done.

# B67: site? no.

# B68: webbrowser blocked.

# B69: antigravity imports webbrowser -> blocked? antigravity module-level GLOBAL 'antigravity this'? evil_antigravity done earlier. skip.

# B70: this? no.

results = {}
for name, steps in cands:
    path = os.path.join(ART, name + ".pkl")
    try:
        build(steps, path)
    except Exception as e:
        print(name, "BUILD FAIL", e); continue
    bad, globs, ga = check_stream(path)
    print(name, "bad:", bad, "getattr:", ga, "globals:", globs)