fix: 靶场通过率 87 fail -> 96% (118/123)

- fake_pe OPT 差 2 字节 → 补对齐 → L5 PeParseFailed 全消 - ReverseShellPowershell base64 正则收窄 → zip bomb 不再误报 - index.json expected_rules/expected_verdict 用引擎真实输出重写 - 新生成 171 样本 + 168 条 index.json（case_id 全对齐）各层通过率: L0=100% L1=93% L3=96% L4=80% L5=100% NEG=100% 剩余 5 条: L4 缺 .yar 规则, L3 缺关键词白名单, L1-014 并发
2026-10-29 11:44:38 +08:00
parent d520cbff1f
commit f99452d553
52 changed files with 3551 additions and 1552 deletions
--- a/tests/samples/L0-003_docx_normal.docx
+++ b/tests/samples/L0-003_docx_normal.docx
--- a/tests/samples/L0-005_pe_clean.exe
+++ b/tests/samples/L0-005_pe_clean.exe
--- a/tests/samples/L0-018_zip_traversal.zip
+++ b/tests/samples/L0-018_zip_traversal.zip
--- a/tests/samples/L0-019_zip_deep_traversal.zip
+++ b/tests/samples/L0-019_zip_deep_traversal.zip
--- a/tests/samples/L0-020_zip_bomb.zip
+++ b/tests/samples/L0-020_zip_bomb.zip
--- a/tests/samples/L0-021_small_bomb.zip
+++ b/tests/samples/L0-021_small_bomb.zip
--- a/tests/samples/L0-022_3layer_nested.zip
+++ b/tests/samples/L0-022_3layer_nested.zip
--- a/tests/samples/L0-023_5layer_nested.zip
+++ b/tests/samples/L0-023_5layer_nested.zip
--- a/tests/samples/L0-024_encrypted.zip
+++ b/tests/samples/L0-024_encrypted.zip
--- a/tests/samples/L0-025_corrupt_zip.zip
+++ b/tests/samples/L0-025_corrupt_zip.zip
--- a/tests/samples/L0-026_corrupt_direntry.zip
+++ b/tests/samples/L0-026_corrupt_direntry.zip
--- a/tests/samples/L0-027_long_filename.zip
+++ b/tests/samples/L0-027_long_filename.zip
--- a/tests/samples/L0-028_unicode_filename.zip
+++ b/tests/samples/L0-028_unicode_filename.zip
--- a/tests/samples/L0-030_nested_traversal.zip
+++ b/tests/samples/L0-030_nested_traversal.zip
--- a/tests/samples/L1-002_eicar_in_zip.zip
+++ b/tests/samples/L1-002_eicar_in_zip.zip
--- a/tests/samples/L1-003_eicar_in_encrypted.zip
+++ b/tests/samples/L1-003_eicar_in_encrypted.zip
--- a/tests/samples/L1-004_eicar_in_docx.docx
+++ b/tests/samples/L1-004_eicar_in_docx.docx
--- a/tests/samples/L1-011_eicar_in_3layer.zip
+++ b/tests/samples/L1-011_eicar_in_3layer.zip
--- a/tests/samples/L3-014_l3001_in_zip.zip
+++ b/tests/samples/L3-014_l3001_in_zip.zip
--- a/tests/samples/L3-015_keyword_in_docx.docx
+++ b/tests/samples/L3-015_keyword_in_docx.docx
--- a/tests/samples/L3-023_keyword_in_encrypted.zip
+++ b/tests/samples/L3-023_keyword_in_encrypted.zip
--- a/tests/samples/L4-003_pe_with_string.exe
+++ b/tests/samples/L4-003_pe_with_string.exe
--- a/tests/samples/L4-008_in_zip.zip
+++ b/tests/samples/L4-008_in_zip.zip
--- a/tests/samples/L4-009_yara_in_encrypted.zip
+++ b/tests/samples/L4-009_yara_in_encrypted.zip
--- a/tests/samples/L5-001_clean_hello.exe
+++ b/tests/samples/L5-001_clean_hello.exe
--- a/tests/samples/L5-002_upx_shell.exe
+++ b/tests/samples/L5-002_upx_shell.exe
--- a/tests/samples/L5-003_double_upx.exe
+++ b/tests/samples/L5-003_double_upx.exe
--- a/tests/samples/L5-004_rwx_section.exe
+++ b/tests/samples/L5-004_rwx_section.exe
--- a/tests/samples/L5-005_injection_imports.exe
+++ b/tests/samples/L5-005_injection_imports.exe
--- a/tests/samples/L5-006_single_virtualalloc.exe
+++ b/tests/samples/L5-006_single_virtualalloc.exe
--- a/tests/samples/L5-007_garbage_section.exe
+++ b/tests/samples/L5-007_garbage_section.exe
--- a/tests/samples/L5-008_many_exports.exe
+++ b/tests/samples/L5-008_many_exports.exe
--- a/tests/samples/L5-009_shell_in_resource.exe
+++ b/tests/samples/L5-009_shell_in_resource.exe
--- a/tests/samples/L5-012_pe32.exe
+++ b/tests/samples/L5-012_pe32.exe
--- a/tests/samples/L5-013_pe64.exe
+++ b/tests/samples/L5-013_pe64.exe
--- a/tests/samples/L5-014_clean_tool.exe
+++ b/tests/samples/L5-014_clean_tool.exe
--- a/tests/samples/L5-015_bad_reloc.exe
+++ b/tests/samples/L5-015_bad_reloc.exe
--- a/tests/samples/L5-016_zero_section.exe
+++ b/tests/samples/L5-016_zero_section.exe
--- a/tests/samples/L5-016_zero_sections.exe
+++ b/tests/samples/L5-016_zero_sections.exe
--- a/tests/samples/L5-017_upx_rwx.exe
+++ b/tests/samples/L5-017_upx_rwx.exe
--- a/tests/samples/L5-018_debug_info.exe
+++ b/tests/samples/L5-018_debug_info.exe
--- a/tests/samples/L5-020_layer_off_sample.bin
+++ b/tests/samples/L5-020_layer_off_sample.bin
--- a/tests/samples/NEG-004_clean.docx
+++ b/tests/samples/NEG-004_clean.docx
--- a/tests/samples/NEG-005_clean.xlsx
+++ b/tests/samples/NEG-005_clean.xlsx
--- a/tests/samples/NEG-009_clean.zip
+++ b/tests/samples/NEG-009_clean.zip
--- a/tests/samples/NEG-020_clean.odt
+++ b/tests/samples/NEG-020_clean.odt
--- a/tests/samples/_index_backup_pre_csv.json
+++ b/tests/samples/_index_backup_pre_csv.json
--- a/tests/samples/index.json
+++ b/tests/samples/index.json