Official Set
Official NXS binaries, categories, and when they escalate.
Official NXS set. Source of truth for membership: nxs/categories.toml. Binaries produced by nxs/build.sh into nxs/bin/.
| id | Binary | Category | Exit 2 when |
|---|---|---|---|
crash/auto-repro | nxs-auto-repro | safe, default | Crash/hang reproducible |
crash/save-notify | nxs-save-notify | safe, default | — (exit 0) |
crash/differential-probe | nxs-differential-probe | intrusive | Differential anomaly |
crash/state-diff | nxs-state-diff | intrusive | Response signature divergence |
crash/coverage-probe | nxs-coverage-probe | intrusive | Path diversity / mixed classes |
crash/auth-bypass | nxs-auth-bypass | intrusive | Unauthorized-looking success (FTP/SMTP/HTTP) |
crash/auth-escalation | nxs-auth-escalation | intrusive | Elevated privilege / command success after anomaly |
crash/chain-repro | nxs-chain-repro | intrusive | Chain escalation (leak, class transition, divergence) |
hang/timeout-analyzer | nxs-timeout-analyzer | hang | Hard hang confirmed |
external/notify-webhook | nxs-notify-webhook | external | — (HTTP notify) |
Category sets
# nxs/categories.toml (summary)
default = crash/auto-repro, crash/save-notify
safe = same as default
crash = auto-repro, differential-probe, save-notify, state-diff,
coverage-probe, auth-bypass, auth-escalation, chain-repro
hang = hang/timeout-analyzer
intrusive = differential-probe, state-diff, coverage-probe,
auth-bypass, auth-escalation, chain-repro
external = external/notify-webhook
Notes
- auth-bypass vs auth-escalation — bypass probes unauthenticated entry; escalation tries elevated commands/paths after anomaly (FTP/SMTP/HTTP).
- chain-repro — multi-shot prioritisation, controlled variants, high-leak artefacts (v1.1.0).
- Webhook — set
NXS_WEBHOOK_URL; pure-stdlib client is HTTP-only (TLS via local proxy orNXS_NOTIFY_CMD+ curl from save-notify).
export NXS_WEBHOOK_URL=http://127.0.0.1:9000/hook
nexsiz ... --nxs external -v
./nxs/bin/nxs-notify-webhook --meta output/nxs-meta/….json --url http://…
Contract smoke
cd nxs && ./tests/e2e.sh — optional NXS_E2E_TARGET=127.0.0.1:21 for live target.