Rasmus Wriedt Larsen
|
64aa503cc3
|
Python: Promote xml.etree modeling
|
2022-03-31 11:12:02 +02:00 |
|
Rasmus Wriedt Larsen
|
7f5f7679f8
|
Python: Promote xmltodict modeling
|
2022-03-31 10:28:34 +02:00 |
|
Rasmus Wriedt Larsen
|
80b5cde3a2
|
Python: Promote lxml parsing modeling
|
2022-03-31 10:19:08 +02:00 |
|
Rasmus Wriedt Larsen
|
1ea4bcc59f
|
Python: Make XMLParsing a Decoding subclass
|
2022-03-31 09:52:55 +02:00 |
|
Rasmus Wriedt Larsen
|
35ccba2ec1
|
Python: Promote XMLParsing concept test
|
2022-03-31 09:52:55 +02:00 |
|
Rasmus Wriedt Larsen
|
e45288e812
|
Python: => XMLParsingVulnerabilityKind
Since there are other XML vulnerabilities that are not about parsing,
this is more correct.
|
2022-03-31 09:52:55 +02:00 |
|
Rasmus Wriedt Larsen
|
e005a5c0ab
|
Python: Promote XMLParsing concept
|
2022-03-31 09:52:55 +02:00 |
|
Rasmus Wriedt Larsen
|
b00766b054
|
Python: Adjust XXE qhelp
and remove the old copy, we don't need it anymore :)
|
2022-03-31 09:52:55 +02:00 |
|
Rasmus Wriedt Larsen
|
57b9780428
|
Python: XXE: Add example of exfiltrating data through dtd-retrival
|
2022-03-31 09:52:54 +02:00 |
|
Rasmus Wriedt Larsen
|
a1d88e39a7
|
Python: Adjust XXE PoC for newer lxml versions
Which doesn't raise that syntax error (at least not on my laptop)
|
2022-03-31 09:52:54 +02:00 |
|
Rasmus Wriedt Larsen
|
1a9620a87a
|
Python: Add conditional assignment check for sax parser
|
2022-03-04 10:16:28 +01:00 |
|
Rasmus Wriedt Larsen
|
f0131afc54
|
Python: Fix huge_tree modeling
|
2022-03-04 10:16:28 +01:00 |
|
Rasmus Wriedt Larsen
|
d6cbfec434
|
Python: huge_tree tests were wrong
Nice spotted @jorgectf!
|
2022-03-04 10:16:28 +01:00 |
|
Rasmus Wriedt Larsen
|
3f6c55e8ae
|
Python: Rename vulnerable predicate => vulnerableTo
|
2022-03-03 22:09:31 +01:00 |
|
Rasmus Wriedt Larsen
|
c0a6f9f3fd
|
Python: Restructure lxml modeling
and handle parser being passed as positional argument
|
2022-03-03 22:00:55 +01:00 |
|
Rasmus Wriedt Larsen
|
c0a2c25f5a
|
Python: Restructure modeling of xml.etree parsers
|
2022-03-03 21:59:34 +01:00 |
|
Rasmus Wriedt Larsen
|
46238d5ea0
|
Python: Add test for XMLPullParser
But handling this in a nice way will require some restructuring
|
2022-03-03 21:28:46 +01:00 |
|
Rasmus Wriedt Larsen
|
33ebcdf437
|
Python: Support feed method of lxml/xml.etree Parsers
|
2022-03-03 21:26:24 +01:00 |
|
Rasmus Wriedt Larsen
|
3278793972
|
Python: Handle more functions and kw-args
|
2022-03-03 21:18:18 +01:00 |
|
Rasmus Wriedt Larsen
|
2451123c67
|
Python: Move XML PoC to new test dir
|
2022-03-03 21:18:18 +01:00 |
|
Rasmus Wriedt Larsen
|
c739ae40b6
|
Python: Port xmltodict tests
|
2022-03-03 21:18:18 +01:00 |
|
Rasmus Wriedt Larsen
|
0b12d91817
|
Python: Port xml.sax tests
|
2022-03-03 21:18:18 +01:00 |
|
Rasmus Wriedt Larsen
|
5fb4c4d152
|
Python: Port xml.etree tests
|
2022-03-03 20:51:02 +01:00 |
|
Rasmus Wriedt Larsen
|
a7134cac2e
|
Python: Port xml.dom tests
|
2022-03-03 20:39:56 +01:00 |
|
Rasmus Wriedt Larsen
|
faebaee141
|
Python: Use concept tests for XML Parsing
I was loosing my mind from looking through those .expected files
Just going to take it one file at time, to make reviewing easier
|
2022-03-03 20:36:51 +01:00 |
|