Commit Graph

66 Commits

Author SHA1 Message Date
Taus
55dc75615a Python: Add Peewee model 2023-11-13 13:56:00 +01:00
Taus
f0102be052 Python: Add Pydantic model 2023-11-13 13:56:00 +01:00
Taus
c2df81a838 Python: Add logging.Logger model 2023-11-13 13:56:00 +01:00
Taus
94e0bc06c7 Python: Add Urllib3 model 2023-11-13 13:56:00 +01:00
Taus
0844563523 Python: Add Tornado models 2023-11-13 13:56:00 +01:00
Taus
5016c5568c Python: add some stdlib models 2023-11-13 13:56:00 +01:00
Taus
359a162522 Python: Add starlette.requests.URL model 2023-11-13 13:56:00 +01:00
Taus
1c0af9d759 Python: Add SqlAlchemy model 2023-11-13 13:56:00 +01:00
Taus
84ba18cfc2 Python: Add rest_framework model 2023-11-13 13:56:00 +01:00
Taus
e060cfc554 Python: Add Pycurl model 2023-11-13 13:56:00 +01:00
Taus
ebd9802e74 Python: add MultiDict model 2023-11-13 13:55:59 +01:00
Taus
1178894ad4 Python: Add MarkupSafe model 2023-11-13 13:55:59 +01:00
Taus
c08587c84c Python: Add invoke model 2023-11-13 13:55:59 +01:00
Taus
4f75e5fa5c Python: Add httpx model 2023-11-13 13:55:59 +01:00
Taus
da01b95801 Python: Add Flask app and blueprint models 2023-11-13 13:55:59 +01:00
Taus
e1e4ec8936 Python: Add Django RawSQL and HttpRequest models 2023-11-13 13:55:59 +01:00
Taus
8500acd996 Python: Add fabric connection model 2023-11-13 13:55:59 +01:00
Taus
0d20a712fd Python: Add aiohttp.ClientSession model 2023-11-13 13:55:59 +01:00
Taus
7acf287c70 Python: Add clickhouse_driver model 2023-11-13 13:55:59 +01:00
Taus
71b9bd3f21 Python: Add starlette.websocket model 2023-11-13 13:55:59 +01:00
Rasmus Wriedt Larsen
215c954dea Python: Improve speed of process-mrva-results.py
Same trick as 'generate-code-scanning-query-list.py'
2023-11-13 13:55:59 +01:00
Taus
92b5ac8b6a Python: Add http.client.HTTPResponse model 2023-11-13 13:55:59 +01:00
Taus
e860d5e1e5 Python: Add Requests response model
This required making some of the relevant bits public, but they are marked as internal anyway.
2023-11-13 13:55:59 +01:00
Taus
e34e0a0426 Python: Add Flask response model 2023-11-13 13:55:58 +01:00
Taus
332423dd25 Python: Add Django response models 2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
3a1a8ad4fc Python: Enable auto-model for Django Model 2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
a15af39007 Python: Enable auto-model for cgi.FieldStorage 2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
ef6113c45c Python: Enable auto-model BaseHttpRequestHandler 2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
9fe02edf9a Python: Allow any results.bqrs file 2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
7949403bd8 Python: Automodel for WSGIServer 2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
a23fe366a1 Python: Automodel for tornado 2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
d4acc704a4 Python: Sort MaD rows
(makes future diffing much easier)
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
fd7de0ee92 FIXME already fixed 2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
8121debbd7 Python: Add script to process results from MRVA (bqrs files)
Also makes `empty.model.yml` empty once again
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
afc00567f0 Python: Add query metadata 2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
4d69cb33eb Python: Streamline what modules to allow for now 2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
a6a09b4a7a WIP rest of modeling done so far 2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
7d6d9a7420 WIP: Flask View class modeling for restplus
Based on some DBs I had that contained dependencies
2023-11-13 13:55:57 +01:00
yoff
dbecb1bd0f Merge pull request #14070 from yoff/python/promote-nosql-query
Python: promote nosql query
2023-09-29 14:21:22 +02:00
Rasmus Wriedt Larsen
d7ad5a0f23 Python: List NoSQL injection sinks 2023-09-29 13:54:21 +02:00
Rasmus Wriedt Larsen
16e1a00e88 Python: NoSQLInjection -> NoSqlInjection 2023-09-29 13:52:51 +02:00
Rasmus Lerchedahl Petersen
74d6f37467 Python: update meta query TaintSinks 2023-09-29 12:02:16 +02:00
Rasmus Wriedt Larsen
fd8d186b34 Python: Add debug queries
For manually debugging things, it's nice to be able to share debug
queries.

I had the DebugStats.ql lying around from way back, and thought it was
kinda cute. I've extended it with a bunch of things, not too sure if
they're all important, but I think it's kinda fun to see the
distribution of things 😊
2023-09-18 20:46:52 +02:00
Asger F
75fd20b3b8 Python: add meta-query for calls to summarized callables 2023-05-26 11:40:58 +02:00
Rasmus Wriedt Larsen
a3b7273844 Python: Fix duplicated meta query id 2023-01-16 20:33:28 +01:00
Rasmus Wriedt Larsen
a826c4f48b Merge branch 'main' into call-graph-code 2022-12-08 11:39:30 +01:00
Rasmus Wriedt Larsen
d47b3265c4 Python: Fix py/meta/points-to-call-graph 2022-12-01 14:56:10 +01:00
Rasmus Wriedt Larsen
607639c100 Python: restrict py/meta/points-to-call-graph to non-ignored files 2022-11-29 15:10:45 +01:00
Rasmus Wriedt Larsen
d7aea228ce Python: Add taint-sinks meta query
Inspired by the one they have in JS:
097d5189e9/javascript/ql/src/meta/alerts/TaintSinks.ql
2022-11-29 15:10:09 +01:00
Rasmus Wriedt Larsen
69b43f147a Python: Fix ql4ql alerts
The rest will be ignored.
2022-11-22 16:24:47 +01:00