Nora Dimitrijević
20030d56a5
[DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash
2025-07-17 14:40:31 +02:00
Asger F
15c2ccb880
Python: ignore experimental for now
2025-02-06 10:27:43 +01:00
Asger F
e4a1847dad
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
Rasmus Wriedt Larsen
996364d6ee
Python: Fix naming style guide violations
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
98538d237e
Python: Autoformat
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
3bf2705668
Python: Move experimental TimingAttackAgainstHeaderValue to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
c88a0ccb7c
Python: Move experimental TimingAttackAgainstHash to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
a779547515
Python: Move experimental PossibleTimingAttackAgainstHash to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
8abd3430a2
Python: Move experimental TimingAttackAgainstSensitiveInfo to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
1a4e8d9464
Python: Move experimental PossibleTimingAttackAgainstSensitiveInfo to new dataflow API
2023-08-28 15:31:07 +02:00
Taus
a3c40a3ae4
Python: Add experimental tags
2023-03-27 14:23:36 +00:00
Taus
700eb04487
Python: Lower precision of non-header queries
...
cf. https://github.com/github/securitylab/issues/691#issuecomment-1387391014
2023-03-27 12:22:17 +00:00
Ahmed Farid
a421e3a3a3
Update TimingAttackAgainstHeaderValue.ql
2023-02-16 14:14:43 +01:00
Ahmed Farid
f70f5c7935
Update TimingAttackAgainstHeaderValue.ql
2023-02-16 14:03:26 +01:00
Ahmed Farid
b8f9b2b424
Update TimingAttackAgainstHeaderValue.ql
2023-02-16 01:11:41 +01:00
Ahmed Farid
13d1a4fdc1
Update TimingAttackAgainstHeaderValue.ql
2022-08-31 12:46:17 +01:00
Ahmed Farid
f2688c4a02
Update select statement
2022-08-31 12:39:00 +01:00
Ahmed Farid
275ed0d6e5
Update select statement
2022-08-31 12:37:36 +01:00
Ahmed Farid
141b65fea8
Fix typo
2022-08-29 18:18:19 +01:00
Ahmed Farid
199e3d9462
Rename the query ID
2022-08-29 18:13:45 +01:00
Ahmed Farid
66fb420d00
Update PossibleTimingAttackAgainstHash.ql
2022-08-29 18:08:09 +01:00
Taus
bd45ea94d0
Python: Fix TimingAttackAgainstHash.ql select
2022-08-19 12:31:12 +00:00
Taus
3d17989107
Python: Fix broken select statement
...
Based on the alert description, "message" seemed like a suitable word to
use here.
2022-08-17 17:09:18 +00:00
Taus
76de2f4203
Python: Remove trailing newlines
...
These were causing the autoformatting check to fail. I'm not really sure
how these newlines got introduced. Possibly some editor option or
`git-commit` hook?
2022-08-17 15:12:51 +00:00
Ahmed Farid
313dbc9120
Autoformat PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-17 12:59:09 +01:00
Ahmed Farid
9f3de035c7
Autoformat PossibleTimingAttackAgainstHash.ql
2022-08-17 12:57:57 +01:00
Ahmed Farid
cb5331bdd8
Autoformat TimingAttackAgainstHeaderValue.ql
2022-08-17 12:54:34 +01:00
Ahmed Farid
a7dcf96f55
Autoformat TimingAttackAgainstSensitiveInfo.ql
2022-08-17 12:53:07 +01:00
Ahmed Farid
9b4d1789b1
Autoformat TimingAttackAgainstHash.ql
2022-08-17 12:49:58 +01:00
Ahmed Farid
5daeea7aeb
Adjust the @id property
2022-08-17 12:24:40 +01:00
Ahmed Farid
01828936e2
fix qhelp
2022-08-17 12:19:44 +01:00
Ahmed Farid
10d5ab20f5
fix qhelp
2022-08-17 12:19:02 +01:00
Ahmed Farid
169d27951a
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 15:19:13 +01:00
Ahmed Farid
dbd6076725
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:18:09 +01:00
Ahmed Farid
8ebf428078
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:15:24 +01:00
Ahmed Farid
054e0726b0
Update UnsafeComparisonOfHeaderValue.py
2022-08-15 15:13:17 +01:00
Ahmed Farid
c578a34892
Update SafeComparisonOfHeaderValue.py
2022-08-15 15:12:38 +01:00
Ahmed Farid
773bb5fffd
Update SafeComparisonOfHeaderValue.py
2022-08-15 14:43:32 +01:00
Ahmed Farid
a724bd1e32
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 14:42:17 +01:00
Ahmed Farid
21f9ee449a
Delete UnSafeComparison.py
2022-08-05 12:49:00 +01:00
Ahmed Farid
d9e85a9064
Delete SafeComparison.py
2022-08-05 12:48:51 +01:00
Ahmed Farid
c7828bf9b4
Create UnSafeComparisonOfSensitiveInfo.py
2022-08-05 12:47:58 +01:00
Ahmed Farid
dd61383469
Create SafeComparisonOfSensitiveInfo.py
2022-08-05 12:46:46 +01:00
Ahmed Farid
5eef14a0a9
Update SafeComparisonOfHeaderValue.py
2022-08-04 12:51:30 +01:00
Ahmed Farid
a6af455eae
Create UnsafeComparisonOfHeaderValue.py
2022-08-04 12:50:55 +01:00
Ahmed Farid
a98a77ad40
Create SafeComparisonOfHeaderValue.py
2022-08-04 12:48:19 +01:00
Ahmed Farid
e1435afea9
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.qhelp
2022-08-04 12:45:01 +01:00
Ahmed Farid
76c8e7d2e8
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.ql
2022-08-04 12:44:45 +01:00
Ahmed Farid
428132a58e
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:44:10 +01:00
Ahmed Farid
a34478d58f
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:43:53 +01:00
