Commits

Breadcrumbs

History for

on8a7fdfa

User selector

All users

All time

Commit History

Commits on Jun 18, 2024

• fix conflict

  am0o0

  committed
  8a7fdfa

  Copy full SHA for 8a7fdfa

Commits on May 29, 2024

• update id of the query file

  am0o0

  committed
  1f11246

  Copy full SHA for 1f11246

• rename secondary to remote :), complete the previous commit changes

  am0o0

  committed
  b9edcb7

  Copy full SHA for b9edcb7

• SecondaryCommandInjection to RemoteCommandExecution, change RemoteCommandExecution to module like SystemCommandExecution module

  am0o0

  committed
  52a8091

  Copy full SHA for 52a8091

• fix the docs of secondary server cmd injection

  am0o0

  committed
  fd9e6f4

  Copy full SHA for fd9e6f4

• Ssh2.qll: fix a typo

  am0o0

  committed
  1714866

  Copy full SHA for 1714866

• fix the qhelp of secondary server cmd injectino

  am0o0

  committed
  5299c4a

  Copy full SHA for 5299c4a

Commits on May 10, 2024

• fix actions reviews

  am0o0

  committed
  0e80e86

  Copy full SHA for 0e80e86

Commits on May 6, 2024

• update Twisted document link

  

  am0o0

  authored and

  tausbn

  committed
  6b9cc1a

  Copy full SHA for 6b9cc1a

• add twisted SSH client as secondary server command injection sinks, add proper test cases

  

  am0o0

  authored and

  tausbn

  committed
  c4a38d0

  Copy full SHA for c4a38d0

• add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases

  

  am0o0

  authored and

  tausbn

  committed
  0a765cc

  Copy full SHA for 0a765cc

• finalize Secondary server command injection queries and tests.

  

  am0o0

  authored and

  tausbn

  committed
  7e93102

  Copy full SHA for 7e93102

• add ssh client libraries, add SecondaryServerCmdInjectionCustomizations

  

  am0o0

  authored and

  tausbn

  committed
  ead2474

  Copy full SHA for ead2474

• continue to convert paramiko query to a more general query,

  Show description for 4df73f9
  

  am0o0

  authored and

  tausbn

  committed
  4df73f9

  Copy full SHA for 4df73f9

• convert paramiko query to SecondaryServerCmdInjection query, Add inline tests

  

  am0o0

  authored and

  tausbn

  committed
  5fea71e

  Copy full SHA for 5fea71e

Commits on Apr 24, 2024

• Update instances of experimental concept to the main one, and anotate missing experimental test results.

  joefarebrother

  committed
  cf8db4e

  Copy full SHA for cf8db4e

• Add documentation

  joefarebrother

  committed
  daa31b5

  Copy full SHA for daa31b5

• Fix qldoc + remove deprecation from experimental concepts (as they are still used in another experimental query)

  joefarebrother

  committed
  8636a50

  Copy full SHA for 8636a50

• Implemented sinks for bulk header updates, and added corresponding tests.

  joefarebrother

  committed
  a88ad62

  Copy full SHA for a88ad62

• Add to header write concept a specification of whether the name or value arg allows newlines.

  Show description for 68d9091
  joefarebrother

  committed
  68d9091

  Copy full SHA for 68d9091

• Move headers injection query and concept from experimental to main

  joefarebrother

  committed
  6021d92

  Copy full SHA for 6021d92

Commits on Apr 22, 2024

• Python: Autoformat everything

  Show description for b484aee
  tausbn

  committed
  b484aee

  Copy full SHA for b484aee

• Python: Change all remaining occurrences of `StrConst`

  Show description for 1c68c98
  tausbn

  committed
  1c68c98

  Copy full SHA for 1c68c98

Commits on Mar 15, 2024

• use of a single var "op" of type Cmpop

  

  Sim4n6

  authored and

  yoff

  committed
  26a16b7

  Copy full SHA for 26a16b7

• Fix p tag in UnicodeDoS.qhelp

  

  Sim4n6

  authored and

  yoff

  committed
  a717bf1

  Copy full SHA for a717bf1

• Fix UnicodeDoS vulnerability in CWE-770 code

  

  Sim4n6

  authored and

  yoff

  committed
  af19a03

  Copy full SHA for af19a03

• Fix UnicodeDoS vulnerability in CWE-770

  

  Sim4n6

  authored and

  yoff

  committed
  085d803

  Copy full SHA for 085d803

• Update request parameter name in good_1() function

  

  Sim4n6

  authored and

  yoff

  committed
  31dc542

  Copy full SHA for 31dc542

• Refactor Unicode normalization code

  

  Sim4n6

  authored and

  yoff

  committed
  70ebc58

  Copy full SHA for 70ebc58

• Update python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql

  Show description for 658b88e
  

  Sim4n6

  and

  yoff

  committed
  658b88e

  Copy full SHA for 658b88e

• Add some comments and docs

  

  Sim4n6

  authored and

  yoff

  committed
  1f767b8

  Copy full SHA for 1f767b8

• Add UnicodeDoS sink for werkzeug secure_filename

  

  Sim4n6

  authored and

  yoff

  committed
  5cc9170

  Copy full SHA for 5cc9170

• Add Unicode DoS (CWE-770)

  

  Sim4n6

  authored and

  yoff

  committed
  3424650

  Copy full SHA for 3424650

Commits on Feb 14, 2024

• Fix QLDoc issues

  am0o0

  committed
  09d8a75

  Copy full SHA for 09d8a75

• Python: Fix test exclusion for stdlib Python 3.12

  RasmusWL

  committed
  eb401a2

  Copy full SHA for eb401a2