Taskslighttpd open() Backdoor Detection
Detect backdoor in lighttpd web server: Range header value is used as a file path and read via fopen(), leaking file contents in the response.
Performance
| Model | Pass Rate | Runs | Avg Cost | Avg Time |
|---|---|---|---|---|
| claude-sonnet-4.5 | 67% | $1.05 | 11m | |
| grok-4.1-fast | 0% | $0.02 | 2m | |
| gpt-5.4 | 0% | $0.14 | 1m | |
| gpt-5.3-codex | 0% | $0.15 | 2m | |
| gpt-5 | 0% | $0.24 | 8m | |
| gpt-5.2 | 0% | $0.25 | 9m | |
| deepseek-v3.2 | 0% | $0.28 | 22m | |
| kimi-k2.5 | 0% | $0.31 | 32m | |
| gpt-5.2-codex | 0% | $0.35 | 5m | |
| claude-sonnet-4 | 0% | $0.39 | 4m | |
| gpt-5.4-high | 0% | $0.44 | 6m | |
| claude-haiku-4.5 | 0% | $0.46 | 5m | |
| gpt-5.3-codex-high | 0% | $0.46 | 8m | |
| grok-4 | 0% | $0.49 | 10m | |
| gemini-3-flash-preview | 0% | $0.64 | 7m | |
| gpt-5.3-codex-xhigh | 0% | $0.68 | 13m | |
| glm-5 | 0% | $0.82 | 39m | |
| glm-4.7 | 0% | $0.93 | 46m | |
| gemini-3.1-pro-preview | 0% | $1.11 | 16m | |
| gemini-3-pro-preview | 0% | $1.32 | 11m | |
| gpt-5.2-codex-high | 0% | $1.63 | 24m | |
| gpt-5.2-codex-xhigh | 0% | $1.70 | 35m | |
| gpt-5.4-xhigh | 0% | $1.77 | 91m | |
| claude-opus-4.5 | 0% | $3.08 | 33m | |
| claude-opus-4.6 | 0% | $13.94 | 120m | |
| gemini-2.5-pro | 0% | $16.73 | 44m |