PyZMQ vulnerable server

[mr-mosi]

connected to this: google/tsunami-security-scanner-plugins#586

[giacomo-doyensec]

Hello @mr-mosi, thanks for your contribution!

While I was able to reproduce the issue using pyZMQ_exploit.py, I have a few suggestions to improve the testbed setup:

• The server setup should be declared in a docker-compose file. This should be straightforward and will allow for easier reproducibility. With that in place, you can remove both setupEnv.sh and RunZmqServer.sh.
• Please remove RunZmqExploit.sh and just document the commands to run the exploit under a Reproduction steps section in the README, together with an example payload command (could be a curl or just an echo to easily verify the issue).
• Finally, please state explicitly that there is currently no safe version of the software. For instance, I was able to reproduce the issue on pyzmq==26.4.0 installed via pip install pyzmq.

[giacomo-doyensec]

Hello @mr-mosi, do you have any update on this?

[mr-mosi]

hello @giacomo-doyensec
thank you for reminding me about this PR.
the docker compose setup is ready now.