Chris Campbell
114b694553
Remove @precision values, correct missing tags
2023-11-16 15:50:41 +00:00
erik-krogh
4bc4e0845d
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
Josh Brown
ad86e576a4
autoformat
2023-10-03 13:40:17 -07:00
Josh Brown
b683a3caf8
Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration
2023-10-04 07:24:29 +11:00
Benjamin Rodes
25203db4e7
Removing 'security' tags from all queries.
2023-09-27 12:43:51 -04:00
Josh Brown
7ad2932b3f
Update SymmetricEncryptionAlgorithms.ql
...
Changing metadata to under python namespace
2023-09-21 12:12:16 -07:00
Benjamin Rodes
5fed923af0
Changed python inventory subdirectory structure to add old and new inventory models. Added some example old models.
2023-09-21 12:12:15 -07:00
Benjamin Rodes
50db4fd63e
Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.
2023-09-21 12:12:15 -07:00
Rasmus Lerchedahl Petersen
55707d395e
Python: Make things compile in their new location
...
- Move NoSQL concepts to the non-experimental concepts file
- fix references
2023-09-07 09:28:30 +02:00
Rasmus Lerchedahl Petersen
60dc1afbc0
Python: prepare to promote NoSqlInjection
...
Mostly move files, preserving authourship.
This will not compile.
2023-09-07 09:28:29 +02:00
Rasmus Wriedt Larsen
e8e8d975e3
Python: Remove all usage of DataFlow2+TaintTracking2
...
(and any higher number as well)
2023-08-28 15:34:19 +02:00
Rasmus Wriedt Larsen
c665c21d83
Python: More style-guide renaming
...
Split it into multiple commits to make it easier to review.
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
996364d6ee
Python: Fix naming style guide violations
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
98538d237e
Python: Autoformat
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
5ba8e102eb
Python: Adopt tests to new DataflowQueryTest
...
Since we want to know the _sinks_ and not just the flow, we need to
expose the config as well :|
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
6961ca5234
Python: Rename to EmailXss
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
6d4491e0a9
Python: Modernize WebAppConstantSecretKey
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
852b01c65d
Python: Move SmtpMessageConfig to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
d5e2a30e5b
Python: Modernize py/azure-storage/unsafe-client-side-encryption-in-use a bit
...
To use consistent naming
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
bfcc194b85
Python: Move experimental paramiko to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
acd0f2a8fb
Python: Move experimental LDAPInsecureAuth to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
c6911c2ae0
Python: Move experimental UnicodeBypassValidation to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
2c06394bf3
Python: Move experimental CookieInjection to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
2c412707ab
Python: Move experimental CsvInjection to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
ace1e23c21
Python: Move experimental ClientSuppliedIpUsedInSecurityCheck to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
d948e103fa
Python: Move experimental HeaderInjection to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
53e57dad5c
Python: Move experimental InsecureRandomness to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
3bf2705668
Python: Move experimental TimingAttackAgainstHeaderValue to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
c88a0ccb7c
Python: Move experimental TimingAttackAgainstHash to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
a779547515
Python: Move experimental PossibleTimingAttackAgainstHash to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
8abd3430a2
Python: Move experimental TimingAttackAgainstSensitiveInfo to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
1a4e8d9464
Python: Move experimental PossibleTimingAttackAgainstSensitiveInfo to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
5fd3594f5f
Python: Move TimingAttack.qll to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
5d8329d9c8
Python: Move experimental ZipSlip to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
67cc3a3935
Python: Move experimental ReflectedXSS to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
a0d26741d0
Python: Move experimental TarSlipImprov to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
3cdd875e9f
Python: Move experimental UnsafeUnpack to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
3edb9d1011
Python: Move experimental TokenBuiltFromUUID to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
0f242475f2
Merge branch 'main' into experimental-cleanup
2023-08-28 11:01:22 +02:00
Rasmus Wriedt Larsen
0dca8a5d86
Python: Remove old points-to modeling file
...
Since all of this was ported already
2023-08-28 10:40:45 +02:00
Rasmus Wriedt Larsen
39e2b133e9
Python: Fix naming
2023-08-28 10:40:33 +02:00
Rasmus Wriedt Larsen
4c693b4fc3
Python: Port py/xslt-injection to new data-flow
2023-08-17 15:45:07 +02:00
Rasmus Wriedt Larsen
779fe6498c
Python: Rename to XsltInjection.ql
2023-08-17 15:45:07 +02:00
Rasmus Wriedt Larsen
91edde72c4
Python: Port py/template-injection to new data-flow
...
I kept all the modeling in _one_ file, since that makes it easy to work
with such an external contribution... and I would certainly propose this
file setup for the future 👍
2023-08-17 15:44:26 +02:00
Rasmus Wriedt Larsen
24f9f13790
Python: Fix tests
2023-08-17 10:15:36 +02:00
amammad
eb5529eac5
sanitize resutls exist in test/demo/example/sample directories
2023-08-14 23:48:03 +10:00
Rasmus Wriedt Larsen
1c3cc1fa29
Python: Remove flow through stdlib
...
This means tests can pass on any machine now 👍
2023-08-14 11:55:22 +02:00
Rasmus Wriedt Larsen
6e168ff7d8
Python: Only interested in StrConst
2023-08-14 11:46:21 +02:00
Rasmus Wriedt Larsen
eeefdc5dcd
Python: Fix formatting
2023-08-14 11:29:38 +02:00
amammad
bee8e6ff0d
remove unused saniter
2023-07-27 01:41:31 +10:00
