Commits

Breadcrumbs

History for

on1590633

User selector

All users

All time

Commit History

Commits on Aug 15, 2022

• Merge pull request #9923 from michaelnebel/csharp/webgoat

  Show description for 1590633
  michaelnebel

  authored
  1590633

  Copy full SHA for 1590633

Commits on Aug 11, 2022

• C#: Fix unsafe deserialization with `JsonConvert.DeserializeObject`

  Show description for 7a406d8
  tamasvajk

  committed
  7a406d8

  Copy full SHA for 7a406d8

• C#: Add test case for `JsonConvert.DeserializeObject` in unsafe deserialization tests

  tamasvajk

  committed
  6e6bd20

  Copy full SHA for 6e6bd20

Commits on Aug 10, 2022

• C#: Update SQL Injection with testcase with found vulnerability.

  michaelnebel

  committed
  c3adb99

  Copy full SHA for c3adb99

• C#: Update expected file for Sql injection and Second Order sql injection (note that this is already a second order sql injection).

  michaelnebel

  committed
  504160f

  Copy full SHA for 504160f

• C#: Add testcase for unsanitized filename used in Filestream.

  michaelnebel

  committed
  5c47ae3

  Copy full SHA for 5c47ae3

• C#: Update SecondOrder SQL Injection test case expected output with vulnerability from test case.

  michaelnebel

  committed
  1355931

  Copy full SHA for 1355931

• C#: Add SecondOrder SQL injection example, where reading from a file.

  michaelnebel

  committed
  2b51e03

  Copy full SHA for 2b51e03

• C#: Update Sqlinjection test query output with new results.

  michaelnebel

  committed
  344770f

  Copy full SHA for 344770f

• C#: Add some examples where adapter is used in conjunction with a tainted command.

  michaelnebel

  committed
  78cfb22

  Copy full SHA for 78cfb22

• C#: Update SqlInjection query tests with new results.

  michaelnebel

  committed
  86000f3

  Copy full SHA for 86000f3

• C#: Add SQLiteDataAdapter examples.

  michaelnebel

  committed
  1fb2099

  Copy full SHA for 1fb2099

• C#: Update SQLInjection query test output.

  michaelnebel

  committed
  ce9baaa

  Copy full SHA for ce9baaa

• C#: Add SQLCommand examples.

  michaelnebel

  committed
  d427527

  Copy full SHA for d427527

• Merge pull request #9988 from michaelnebel/csharp/updatestubs

  Show description for 7fc95fb
  michaelnebel

  authored
  7fc95fb

  Copy full SHA for 7fc95fb

Commits on Aug 9, 2022

• C#: Remove System.Data.SqlClient 4.8.2 stub.

  michaelnebel

  committed
  3ba893d

  Copy full SHA for 3ba893d

• C#: Use ASP.NET Core stub instead of Microsoft.Extensions.Primitives and manual written ASP.NET Core stubs.

  michaelnebel

  committed
  6d96da1

  Copy full SHA for 6d96da1

Commits on Jul 18, 2022

• C#: Fix typo.

  michaelnebel

  committed
  66232a8

  Copy full SHA for 66232a8

• C#: Update test with Decrypt example.

  michaelnebel

  committed
  e6e82ef

  Copy full SHA for e6e82ef

• C#: Add test for decrypt.

  michaelnebel

  committed
  52a9fb0

  Copy full SHA for 52a9fb0

Commits on Jun 16, 2022

• C#: Move ASP Net Core stubs into stubs folder.

  michaelnebel

  committed
  93007f8

  Copy full SHA for 93007f8

Commits on May 25, 2022

• C#: Update XML Injectiont test output after rebase (query has been turned into a path-problem and the output is now affected by the added summaries for NameValueCollection).

  michaelnebel

  committed
  ba7238d

  Copy full SHA for ba7238d

• C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception…

  Show description for c8ede58
  michaelnebel

  committed
  c8ede58

  Copy full SHA for c8ede58

• C#: Since NameValueCollection now has a flow summary for the string indexer it is no longer consider an unsafe external api, which is why it has disappared from the result.

  michaelnebel

  committed
  4d6d1c8

  Copy full SHA for 4d6d1c8

• C#: Since NameValueCollection now has a flow summary for the indexer it is considered a SafeExternalApiCallable and will thus not be included in the result of the test.

  michaelnebel

  committed
  ee027f8

  Copy full SHA for ee027f8

• C#: Update tests due to new summaries for ProcessStartInfo.

  michaelnebel

  committed
  e2d6cd2

  Copy full SHA for e2d6cd2

• C#: Update test because we now have a flow summary the string indexer for NameValueCollection.

  michaelnebel

  committed
  9b8636a

  Copy full SHA for 9b8636a

Commits on May 5, 2022

• C#: Update test output to reflect that the query is now a path-problem query.

  michaelnebel

  committed
  3c347ca

  Copy full SHA for 3c347ca

Commits on Jan 5, 2022

• C#: Update the XSS expected file.

  michaelnebel

  committed
  53000cf

  Copy full SHA for 53000cf

• C#: Only use stubs for XSS test.

  michaelnebel

  committed
  7e6d88d

  Copy full SHA for 7e6d88d

• C#: Update the UrlRedirect expected file.

  michaelnebel

  committed
  24543a2

  Copy full SHA for 24543a2

• C#: Replace StringValues stub from stubs.cs with the stub in Microsoft.Extensions.Primitives.

  michaelnebel

  committed
  47ab206

  Copy full SHA for 47ab206

Commits on Nov 30, 2021

• C#: Use stubs for the CWE-601 testcase.

  michaelnebel

  committed
  59b71df

  Copy full SHA for 59b71df

• C#: Use stubs for the CWE-838 testcase

  michaelnebel

  committed
  0b4d0d2

  Copy full SHA for 0b4d0d2

Commits on Sep 20, 2021

• C#: Add `subpaths` predicate to XSS queries

  hvitved

  committed
  6d315a5

  Copy full SHA for 6d315a5