Detect backdoor in dnsmasq DNS server: DHCP option 224 triggers shell command execution with /bin/sh path built char-by-char to evade string detection.
Performance
| Model | Pass Rate | Runs | Avg Cost | Avg Time |
|---|---|---|---|---|
| glm-4.7 | 100% | | $0.07 | 5m |
| kimi-k2.5 | 100% | | $0.10 | 9m |
| gemini-3-flash-preview | 100% | | $0.18 | 5m |
| deepseek-v3.2 | 67% | | $0.06 | 8m |
| gemini-3-pro-preview | 67% | | $0.30 | 3m |
| claude-sonnet-4.5 | 67% | | $0.58 | 7m |
| gpt-5.2 | 67% | | $0.71 | 22m |
| claude-opus-4.5 | 67% | | $2.54 | 28m |
| claude-opus-4.6 | 67% | | $5.80 | 62m |
| gemini-2.5-pro | 33% | | $0.44 | 9m |
| grok-4.1-fast | 0% | | $0.02 | 3m |
| claude-haiku-4.5 | 0% | | $0.28 | 4m |
| gpt-5 | 0% | | $0.31 | 10m |
| gpt-5.2-codex | 0% | | $0.39 | 5m |
| grok-4 | 0% | | $0.44 | 8m |
| claude-sonnet-4 | 0% | | $0.45 | 4m |
All product names, logos, and brands (™/®) are the property of their respective owners; they're used here solely for identification and comparison, and their use does not imply affiliation, endorsement, or sponsorship.