github · kevinbackhouse · Nov 18, 2019 · Nov 16, 2019 · Nov 16, 2019 · Nov 16, 2019
diff --git a/ql_demos/.gitignore → CodeQL_Queries/.gitignore b/ql_demos/.gitignore → CodeQL_Queries/.gitignore
diff --git a/ql_demos/cpp/.project → CodeQL_Queries/cpp/.project b/ql_demos/cpp/.project → CodeQL_Queries/cpp/.project
diff --git a/ql_demos/cpp/.qlpath → CodeQL_Queries/cpp/.qlpath b/ql_demos/cpp/.qlpath → CodeQL_Queries/cpp/.qlpath
diff --git a/...re-bad-overflow-check/BadOverflowCheck.ql → ...re-bad-overflow-check/BadOverflowCheck.ql b/...re-bad-overflow-check/BadOverflowCheck.ql → ...re-bad-overflow-check/BadOverflowCheck.ql
diff --git a/...p/ChakraCore-bad-overflow-check/README.md → ...p/ChakraCore-bad-overflow-check/README.md b/...p/ChakraCore-bad-overflow-check/README.md → ...p/ChakraCore-bad-overflow-check/README.md
diff --git a/...verflow-check/steps/01_overflow_checks.ql → ...verflow-check/steps/01_overflow_checks.ql b/...verflow-check/steps/01_overflow_checks.ql → ...verflow-check/steps/01_overflow_checks.ql
diff --git a/...e-bad-overflow-check/steps/02_var_size.ql → ...e-bad-overflow-check/steps/02_var_size.ql b/...e-bad-overflow-check/steps/02_var_size.ql → ...e-bad-overflow-check/steps/02_var_size.ql
diff --git a/...flow-check/steps/03_bad_overflow_check.ql → ...flow-check/steps/03_bad_overflow_check.ql b/...flow-check/steps/03_bad_overflow_check.ql → ...flow-check/steps/03_bad_overflow_check.ql
diff --git a/...cebook_Fizz_CVE-2019-3560/FizzOverflow.ql → ...cebook_Fizz_CVE-2019-3560/FizzOverflow.ql b/...cebook_Fizz_CVE-2019-3560/FizzOverflow.ql → ...cebook_Fizz_CVE-2019-3560/FizzOverflow.ql
diff --git a/...cpp/Facebook_Fizz_CVE-2019-3560/README.md → ...cpp/Facebook_Fizz_CVE-2019-3560/README.md b/...cpp/Facebook_Fizz_CVE-2019-3560/README.md → ...cpp/Facebook_Fizz_CVE-2019-3560/README.md
diff --git a/...m-MSM-copy_from_user/00_copy_from_user.ql → ...m-MSM-copy_from_user/00_copy_from_user.ql b/...m-MSM-copy_from_user/00_copy_from_user.ql → ...m-MSM-copy_from_user/00_copy_from_user.ql
diff --git a/..._from_user/01_copy_from_user_annotated.ql → ..._from_user/01_copy_from_user_annotated.ql b/..._from_user/01_copy_from_user_annotated.ql → ..._from_user/01_copy_from_user_annotated.ql
diff --git a/...py_from_user/02_filter_with_upperbound.ql → ...py_from_user/02_filter_with_upperbound.ql b/...py_from_user/02_filter_with_upperbound.ql → ...py_from_user/02_filter_with_upperbound.ql
diff --git a/...py_from_user/03_filter_with_upperbound.ql → ...py_from_user/03_filter_with_upperbound.ql b/...py_from_user/03_filter_with_upperbound.ql → ...py_from_user/03_filter_with_upperbound.ql
diff --git a/...comm-MSM-copy_from_user/04_safe_malloc.ql → ...comm-MSM-copy_from_user/04_safe_malloc.ql b/...comm-MSM-copy_from_user/04_safe_malloc.ql → ...comm-MSM-copy_from_user/04_safe_malloc.ql
diff --git a/...filter_with_upperbound_and_safe_malloc.ql → ...filter_with_upperbound_and_safe_malloc.ql b/...filter_with_upperbound_and_safe_malloc.ql → ...filter_with_upperbound_and_safe_malloc.ql
diff --git a/...opy_from_user/06_stackaddress_dataflow.ql → ...opy_from_user/06_stackaddress_dataflow.ql b/...opy_from_user/06_stackaddress_dataflow.ql → ...opy_from_user/06_stackaddress_dataflow.ql
diff --git a/...cpp/Qualcomm-MSM-copy_from_user/README.md → ...cpp/Qualcomm-MSM-copy_from_user/README.md b/...cpp/Qualcomm-MSM-copy_from_user/README.md → ...cpp/Qualcomm-MSM-copy_from_user/README.md
diff --git a/CodeQL_Queries/cpp/README.md b/CodeQL_Queries/cpp/README.md
@@ -0,0 +1,14 @@
+
+## Useful CodeQL Queries
+
+- [Chakra Code](ChakraCore-bad-overflow-check/)
+- [XNU NFS Boot vulnerability](XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/)	
+- [Facebook Fizz Denial of Service](Facebook_Fizz_CVE-2019-3560/)		
+- [XNU ICMP Denial of Service](XNU_icmp_error_CVE-2018-4407/) 
+- [Qualcomm MSM copy_from_user vulnerability](Qualcomm-MSM-copy_from_user/)
+- [XNU packet mangler](XNU_packet-mangler_CVE-2018-4249/)
+- [RSyslog](rsyslog_CVE-2018-1000140/)
+- [LibJPEG Turbo Out of Bound](libjpeg-turbo-oob)
+- [XNU DTrace](XNU_DTrace_CVE-2017-13782)
+- [libssh2](libssh2_eating_error_codes)
+
diff --git a/...Trace_CVE-2017-13782/DTraceUnsafeIndex.ql → ...Trace_CVE-2017-13782/DTraceUnsafeIndex.ql b/...Trace_CVE-2017-13782/DTraceUnsafeIndex.ql → ...Trace_CVE-2017-13782/DTraceUnsafeIndex.ql
diff --git a/...s/cpp/XNU_DTrace_CVE-2017-13782/README.md → ...s/cpp/XNU_DTrace_CVE-2017-13782/README.md b/...s/cpp/XNU_DTrace_CVE-2017-13782/README.md → ...s/cpp/XNU_DTrace_CVE-2017-13782/README.md
diff --git a/...8-4136_CVE-2018-4160/BCopyNegativeSize.ql → ...8-4136_CVE-2018-4160/BCopyNegativeSize.ql b/...8-4136_CVE-2018-4160/BCopyNegativeSize.ql → ...8-4136_CVE-2018-4160/BCopyNegativeSize.ql
diff --git a/...oot_CVE-2018-4136_CVE-2018-4160/README.md → ...oot_CVE-2018-4136_CVE-2018-4160/README.md b/...oot_CVE-2018-4136_CVE-2018-4160/README.md → ...oot_CVE-2018-4136_CVE-2018-4160/README.md
diff --git a/...018-4407/00_mbuf_copydata_tainted_size.ql → ...018-4407/00_mbuf_copydata_tainted_size.ql b/...018-4407/00_mbuf_copydata_tainted_size.ql → ...018-4407/00_mbuf_copydata_tainted_size.ql
diff --git a/...r_CVE-2018-4407/01_paths_to_icmp_error.ql → ...r_CVE-2018-4407/01_paths_to_icmp_error.ql b/...r_CVE-2018-4407/01_paths_to_icmp_error.ql → ...r_CVE-2018-4407/01_paths_to_icmp_error.ql
diff --git a/...r_CVE-2018-4407/02_paths_to_icmp_error.ql → ...r_CVE-2018-4407/02_paths_to_icmp_error.ql b/...r_CVE-2018-4407/02_paths_to_icmp_error.ql → ...r_CVE-2018-4407/02_paths_to_icmp_error.ql
diff --git a/...r_CVE-2018-4407/03_paths_to_icmp_error.ql → ...r_CVE-2018-4407/03_paths_to_icmp_error.ql b/...r_CVE-2018-4407/03_paths_to_icmp_error.ql → ...r_CVE-2018-4407/03_paths_to_icmp_error.ql
diff --git a/...pp/XNU_icmp_error_CVE-2018-4407/README.md → ...pp/XNU_icmp_error_CVE-2018-4407/README.md b/...pp/XNU_icmp_error_CVE-2018-4407/README.md → ...pp/XNU_icmp_error_CVE-2018-4407/README.md
diff --git a/..._CVE-2018-4249/ArrayIndexMightOverflow.ql → ..._CVE-2018-4249/ArrayIndexMightOverflow.ql b/..._CVE-2018-4249/ArrayIndexMightOverflow.ql → ..._CVE-2018-4249/ArrayIndexMightOverflow.ql
diff --git a/...ket-mangler_CVE-2018-4249/InfiniteLoop.ql → ...ket-mangler_CVE-2018-4249/InfiniteLoop.ql b/...ket-mangler_CVE-2018-4249/InfiniteLoop.ql → ...ket-mangler_CVE-2018-4249/InfiniteLoop.ql
diff --git a/...NU_packet-mangler_CVE-2018-4249/README.md → ...NU_packet-mangler_CVE-2018-4249/README.md b/...NU_packet-mangler_CVE-2018-4249/README.md → ...NU_packet-mangler_CVE-2018-4249/README.md
diff --git a/...ler_CVE-2018-4249/tcphdr_mbuf_copydata.ql → ...ler_CVE-2018-4249/tcphdr_mbuf_copydata.ql b/...ler_CVE-2018-4249/tcphdr_mbuf_copydata.ql → ...ler_CVE-2018-4249/tcphdr_mbuf_copydata.ql
diff --git a/...bjpeg-turbo-oob/01_find_colormap_index.ql → ...bjpeg-turbo-oob/01_find_colormap_index.ql b/...bjpeg-turbo-oob/01_find_colormap_index.ql → ...bjpeg-turbo-oob/01_find_colormap_index.ql
diff --git a/...bo-oob/02a_find_guarded_colormap_index.ql → ...bo-oob/02a_find_guarded_colormap_index.ql b/...bo-oob/02a_find_guarded_colormap_index.ql → ...bo-oob/02a_find_guarded_colormap_index.ql
diff --git a/...2b_find_guarded_colormap_index_working.ql → ...2b_find_guarded_colormap_index_working.ql b/...2b_find_guarded_colormap_index_working.ql → ...2b_find_guarded_colormap_index_working.ql
diff --git a/...o-oob/03_find_unguarded_colormap_index.ql → ...o-oob/03_find_unguarded_colormap_index.ql b/...o-oob/03_find_unguarded_colormap_index.ql → ...o-oob/03_find_unguarded_colormap_index.ql
diff --git a/...-oob/04_find_unguarded_colormap_no_fps.ql → ...-oob/04_find_unguarded_colormap_no_fps.ql b/...-oob/04_find_unguarded_colormap_no_fps.ql → ...-oob/04_find_unguarded_colormap_no_fps.ql
diff --git a/...05_find_unguarded_colormap_generalised.ql → ...05_find_unguarded_colormap_generalised.ql b/...05_find_unguarded_colormap_generalised.ql → ...05_find_unguarded_colormap_generalised.ql
diff --git a/ql_demos/cpp/libjpeg-turbo-oob/README.md → ...L_Queries/cpp/libjpeg-turbo-oob/README.md b/ql_demos/cpp/libjpeg-turbo-oob/README.md → ...L_Queries/cpp/libjpeg-turbo-oob/README.md
diff --git a/...ssh2_eating_error_codes/00_error_codes.ql → ...ssh2_eating_error_codes/00_error_codes.ql b/...ssh2_eating_error_codes/00_error_codes.ql → ...ssh2_eating_error_codes/00_error_codes.ql
diff --git a/...eating_error_codes/01_error_codes_call.ql → ...eating_error_codes/01_error_codes_call.ql b/...eating_error_codes/01_error_codes_call.ql → ...eating_error_codes/01_error_codes_call.ql
diff --git a/...ting_error_codes/02_eating_error_codes.ql → ...ting_error_codes/02_eating_error_codes.ql b/...ting_error_codes/02_eating_error_codes.ql → ...ting_error_codes/02_eating_error_codes.ql
diff --git a/..._codes/03_eating_error_codes_localflow.ql → ..._codes/03_eating_error_codes_localflow.ql b/..._codes/03_eating_error_codes_localflow.ql → ..._codes/03_eating_error_codes_localflow.ql
diff --git a/...ng_error_codes_localflow_rangeanalysis.ql → ...ng_error_codes_localflow_rangeanalysis.ql b/...ng_error_codes_localflow_rangeanalysis.ql → ...ng_error_codes_localflow_rangeanalysis.ql
diff --git a/.../cpp/libssh2_eating_error_codes/README.md → .../cpp/libssh2_eating_error_codes/README.md b/.../cpp/libssh2_eating_error_codes/README.md → .../cpp/libssh2_eating_error_codes/README.md
diff --git a/ql_demos/cpp/qlpack.yml → CodeQL_Queries/cpp/qlpack.yml b/ql_demos/cpp/qlpack.yml → CodeQL_Queries/cpp/qlpack.yml
diff --git a/ql_demos/cpp/queries.xml → CodeQL_Queries/cpp/queries.xml b/ql_demos/cpp/queries.xml → CodeQL_Queries/cpp/queries.xml
diff --git a/...slog_CVE-2018-1000140/01_find_snprintf.ql → ...slog_CVE-2018-1000140/01_find_snprintf.ql b/...slog_CVE-2018-1000140/01_find_snprintf.ql → ...slog_CVE-2018-1000140/01_find_snprintf.ql
diff --git a/...8-1000140/02_find_snprintf_with_result.ql → ...8-1000140/02_find_snprintf_with_result.ql b/...8-1000140/02_find_snprintf_with_result.ql → ...8-1000140/02_find_snprintf_with_result.ql
diff --git a/...3_find_snprintf_with_result_and_string.ql → ...3_find_snprintf_with_result_and_string.ql b/...3_find_snprintf_with_result_and_string.ql → ...3_find_snprintf_with_result_and_string.ql
diff --git a/...with_result_and_string_and_local_taint.ql → ...with_result_and_string_and_local_taint.ql b/...with_result_and_string_and_local_taint.ql → ...with_result_and_string_and_local_taint.ql
diff --git a/...h_result_and_string_and_local_taint_ub.ql → ...h_result_and_string_and_local_taint_ub.ql b/...h_result_and_string_and_local_taint_ub.ql → ...h_result_and_string_and_local_taint_ub.ql
diff --git a/...os/cpp/rsyslog_CVE-2018-1000140/README.md → ...es/cpp/rsyslog_CVE-2018-1000140/README.md b/...os/cpp/rsyslog_CVE-2018-1000140/README.md → ...es/cpp/rsyslog_CVE-2018-1000140/README.md
diff --git a/.../rsyslog_CVE-2018-1000140/Video/README.md → .../rsyslog_CVE-2018-1000140/Video/README.md b/.../rsyslog_CVE-2018-1000140/Video/README.md → .../rsyslog_CVE-2018-1000140/Video/README.md
diff --git a/...syslog_CVE-2018-1000140/Video/rsyslog.srt → ...syslog_CVE-2018-1000140/Video/rsyslog.srt b/...syslog_CVE-2018-1000140/Video/rsyslog.srt → ...syslog_CVE-2018-1000140/Video/rsyslog.srt
diff --git a/ql_demos/csharp/.project → CodeQL_Queries/csharp/.project b/ql_demos/csharp/.project → CodeQL_Queries/csharp/.project
diff --git a/ql_demos/csharp/.qlpath → CodeQL_Queries/csharp/.qlpath b/ql_demos/csharp/.qlpath → CodeQL_Queries/csharp/.qlpath
diff --git a/ql_demos/csharp/ZipSlip/01_Sources.ql → CodeQL_Queries/csharp/ZipSlip/01_Sources.ql b/ql_demos/csharp/ZipSlip/01_Sources.ql → CodeQL_Queries/csharp/ZipSlip/01_Sources.ql
diff --git a/ql_demos/csharp/ZipSlip/02_Sources.ql → CodeQL_Queries/csharp/ZipSlip/02_Sources.ql b/ql_demos/csharp/ZipSlip/02_Sources.ql → CodeQL_Queries/csharp/ZipSlip/02_Sources.ql
diff --git a/ql_demos/csharp/ZipSlip/03_Sinks.ql → CodeQL_Queries/csharp/ZipSlip/03_Sinks.ql b/ql_demos/csharp/ZipSlip/03_Sinks.ql → CodeQL_Queries/csharp/ZipSlip/03_Sinks.ql
diff --git a/ql_demos/csharp/ZipSlip/04_SinkArgument.ql → ...Queries/csharp/ZipSlip/04_SinkArgument.ql b/ql_demos/csharp/ZipSlip/04_SinkArgument.ql → ...Queries/csharp/ZipSlip/04_SinkArgument.ql
diff --git a/ql_demos/csharp/ZipSlip/05_LocalFlow.ql → ...QL_Queries/csharp/ZipSlip/05_LocalFlow.ql b/ql_demos/csharp/ZipSlip/05_LocalFlow.ql → ...QL_Queries/csharp/ZipSlip/05_LocalFlow.ql
diff --git a/ql_demos/csharp/ZipSlip/06_GlobalFlow.ql → ...L_Queries/csharp/ZipSlip/06_GlobalFlow.ql b/ql_demos/csharp/ZipSlip/06_GlobalFlow.ql → ...L_Queries/csharp/ZipSlip/06_GlobalFlow.ql
diff --git a/ql_demos/csharp/ZipSlip/README.md → CodeQL_Queries/csharp/ZipSlip/README.md b/ql_demos/csharp/ZipSlip/README.md → CodeQL_Queries/csharp/ZipSlip/README.md
diff --git a/ql_demos/csharp/qlpack.yml → CodeQL_Queries/csharp/qlpack.yml b/ql_demos/csharp/qlpack.yml → CodeQL_Queries/csharp/qlpack.yml
diff --git a/ql_demos/csharp/queries.xml → CodeQL_Queries/csharp/queries.xml b/ql_demos/csharp/queries.xml → CodeQL_Queries/csharp/queries.xml
diff --git a/ql_demos/java/.project → CodeQL_Queries/java/.project b/ql_demos/java/.project → CodeQL_Queries/java/.project
diff --git a/ql_demos/java/.qlpath → CodeQL_Queries/java/.qlpath b/ql_demos/java/.qlpath → CodeQL_Queries/java/.qlpath
diff --git a/...ava/Apache_Struts_CVE-2017-9805/README.md → ...ava/Apache_Struts_CVE-2017-9805/README.md b/...ava/Apache_Struts_CVE-2017-9805/README.md → ...ava/Apache_Struts_CVE-2017-9805/README.md
diff --git a/...s_CVE-2017-9805/UnsafeDeserialization.qll → ...s_CVE-2017-9805/UnsafeDeserialization.qll b/...s_CVE-2017-9805/UnsafeDeserialization.qll → ...s_CVE-2017-9805/UnsafeDeserialization.qll
diff --git a/...-2017-9805/UnsafeDeserializationStruts.ql → ...-2017-9805/UnsafeDeserializationStruts.ql b/...-2017-9805/UnsafeDeserializationStruts.ql → ...-2017-9805/UnsafeDeserializationStruts.ql
diff --git a/...ts_CVE-2018-11776/01_compileAndExecute.ql → ...ts_CVE-2018-11776/01_compileAndExecute.ql b/...ts_CVE-2018-11776/01_compileAndExecute.ql → ...ts_CVE-2018-11776/01_compileAndExecute.ql
diff --git a/...ts_CVE-2018-11776/02_compileAndExecute.ql → ...ts_CVE-2018-11776/02_compileAndExecute.ql b/...ts_CVE-2018-11776/02_compileAndExecute.ql → ...ts_CVE-2018-11776/02_compileAndExecute.ql
diff --git a/...ts_CVE-2018-11776/03_compileAndExecute.ql → ...ts_CVE-2018-11776/03_compileAndExecute.ql b/...ts_CVE-2018-11776/03_compileAndExecute.ql → ...ts_CVE-2018-11776/03_compileAndExecute.ql
diff --git a/...ts_CVE-2018-11776/04_compileAndExecute.ql → ...ts_CVE-2018-11776/04_compileAndExecute.ql b/...ts_CVE-2018-11776/04_compileAndExecute.ql → ...ts_CVE-2018-11776/04_compileAndExecute.ql
diff --git a/..._Struts_CVE-2018-11776/05_getNamespace.ql → ..._Struts_CVE-2018-11776/05_getNamespace.ql b/..._Struts_CVE-2018-11776/05_getNamespace.ql → ..._Struts_CVE-2018-11776/05_getNamespace.ql
diff --git a/..._Struts_CVE-2018-11776/06_getNamespace.ql → ..._Struts_CVE-2018-11776/06_getNamespace.ql b/..._Struts_CVE-2018-11776/06_getNamespace.ql → ..._Struts_CVE-2018-11776/06_getNamespace.ql
diff --git a/..._Struts_CVE-2018-11776/07_getNamespace.ql → ..._Struts_CVE-2018-11776/07_getNamespace.ql b/..._Struts_CVE-2018-11776/07_getNamespace.ql → ..._Struts_CVE-2018-11776/07_getNamespace.ql
diff --git a/..._Struts_CVE-2018-11776/08_getNamespace.ql → ..._Struts_CVE-2018-11776/08_getNamespace.ql b/..._Struts_CVE-2018-11776/08_getNamespace.ql → ..._Struts_CVE-2018-11776/08_getNamespace.ql
diff --git a/...ache_Struts_CVE-2018-11776/09_dataflow.ql → ...ache_Struts_CVE-2018-11776/09_dataflow.ql b/...ache_Struts_CVE-2018-11776/09_dataflow.ql → ...ache_Struts_CVE-2018-11776/09_dataflow.ql
diff --git a/...VE-2018-11776/10_dataflow_with_barrier.ql → ...VE-2018-11776/10_dataflow_with_barrier.ql b/...VE-2018-11776/10_dataflow_with_barrier.ql → ...VE-2018-11776/10_dataflow_with_barrier.ql
diff --git a/.../11_dataflow_with_additional_flow_step.ql → .../11_dataflow_with_additional_flow_step.ql b/.../11_dataflow_with_additional_flow_step.ql → .../11_dataflow_with_additional_flow_step.ql
diff --git a/...va/Apache_Struts_CVE-2018-11776/README.md → ...va/Apache_Struts_CVE-2018-11776/README.md b/...va/Apache_Struts_CVE-2018-11776/README.md → ...va/Apache_Struts_CVE-2018-11776/README.md
diff --git a/ql_demos/java/qlpack.yml → CodeQL_Queries/java/qlpack.yml b/ql_demos/java/qlpack.yml → CodeQL_Queries/java/qlpack.yml
diff --git a/ql_demos/java/queries.xml → CodeQL_Queries/java/queries.xml b/ql_demos/java/queries.xml → CodeQL_Queries/java/queries.xml
diff --git a/ql_demos/javascript/.project → CodeQL_Queries/javascript/.project b/ql_demos/javascript/.project → CodeQL_Queries/javascript/.project
diff --git a/ql_demos/javascript/.qlpath → CodeQL_Queries/javascript/.qlpath b/ql_demos/javascript/.qlpath → CodeQL_Queries/javascript/.qlpath
diff --git a/...therpad_CVE-2018-6835/01_HTTP_handlers.ql → ...therpad_CVE-2018-6835/01_HTTP_handlers.ql b/...therpad_CVE-2018-6835/01_HTTP_handlers.ql → ...therpad_CVE-2018-6835/01_HTTP_handlers.ql
diff --git a/...ad_CVE-2018-6835/02_getASendMethodCall.ql → ...ad_CVE-2018-6835/02_getASendMethodCall.ql b/...ad_CVE-2018-6835/02_getASendMethodCall.ql → ...ad_CVE-2018-6835/02_getASendMethodCall.ql
diff --git a/...ad_CVE-2018-6835/03_LikelySendArgument.ql → ...ad_CVE-2018-6835/03_LikelySendArgument.ql b/...ad_CVE-2018-6835/03_LikelySendArgument.ql → ...ad_CVE-2018-6835/03_LikelySendArgument.ql
diff --git a/...VE-2018-6835/04_LikelyRequestParameter.ql → ...VE-2018-6835/04_LikelyRequestParameter.ql b/...VE-2018-6835/04_LikelyRequestParameter.ql → ...VE-2018-6835/04_LikelyRequestParameter.ql
diff --git a/...ipt/Etherpad_CVE-2018-6835/05_DataFlow.ql → ...ipt/Etherpad_CVE-2018-6835/05_DataFlow.ql b/...ipt/Etherpad_CVE-2018-6835/05_DataFlow.ql → ...ipt/Etherpad_CVE-2018-6835/05_DataFlow.ql
diff --git a/...E-2018-6835/06_DataFlow_With_Sanitizer.ql → ...E-2018-6835/06_DataFlow_With_Sanitizer.ql b/...E-2018-6835/06_DataFlow_With_Sanitizer.ql → ...E-2018-6835/06_DataFlow_With_Sanitizer.ql
diff --git a/...vascript/Etherpad_CVE-2018-6835/README.md → ...vascript/Etherpad_CVE-2018-6835/README.md b/...vascript/Etherpad_CVE-2018-6835/README.md → ...vascript/Etherpad_CVE-2018-6835/README.md
diff --git a/...-2018-6835/alternative/01_ReflectedXss.ql → ...-2018-6835/alternative/01_ReflectedXss.ql b/...-2018-6835/alternative/01_ReflectedXss.ql → ...-2018-6835/alternative/01_ReflectedXss.ql
diff --git a/...835/alternative/02_SwaggerRouteHandler.ql → ...835/alternative/02_SwaggerRouteHandler.ql b/...835/alternative/02_SwaggerRouteHandler.ql → ...835/alternative/02_SwaggerRouteHandler.ql
diff --git a/...35/alternative/03_ResponseSendArgument.ql → ...35/alternative/03_ResponseSendArgument.ql b/...35/alternative/03_ResponseSendArgument.ql → ...35/alternative/03_ResponseSendArgument.ql
diff --git a/...6835/alternative/04_ResponseSendAccess.ql → ...6835/alternative/04_ResponseSendAccess.ql b/...6835/alternative/04_ResponseSendAccess.ql → ...6835/alternative/04_ResponseSendAccess.ql
diff --git a/...ve/05_ResponseSendArgumentWithAliasing.ql → ...ve/05_ResponseSendArgumentWithAliasing.ql b/...ve/05_ResponseSendArgumentWithAliasing.ql → ...ve/05_ResponseSendArgumentWithAliasing.ql
diff --git a/...-2018-6835/alternative/06_ReflectedXss.ql → ...-2018-6835/alternative/06_ReflectedXss.ql b/...-2018-6835/alternative/06_ReflectedXss.ql → ...-2018-6835/alternative/06_ReflectedXss.ql
diff --git a/...ternative/07_ReflectedXssWithSanitizer.ql → ...ternative/07_ReflectedXssWithSanitizer.ql b/...ternative/07_ReflectedXssWithSanitizer.ql → ...ternative/07_ReflectedXssWithSanitizer.ql
diff --git a/...erpad_CVE-2018-6835/alternative/README.md → ...erpad_CVE-2018-6835/alternative/README.md b/...erpad_CVE-2018-6835/alternative/README.md → ...erpad_CVE-2018-6835/alternative/README.md
diff --git a/ql_demos/javascript/qlpack.yml → CodeQL_Queries/javascript/qlpack.yml b/ql_demos/javascript/qlpack.yml → CodeQL_Queries/javascript/qlpack.yml
diff --git a/ql_demos/javascript/queries.xml → CodeQL_Queries/javascript/queries.xml b/ql_demos/javascript/queries.xml → CodeQL_Queries/javascript/queries.xml
diff --git a/README.md b/README.md
@@ -1,3 +1,9 @@
 # GitHub Security Lab
 
+## CodeQL Queries
+ [Security related Queries](CodeQL_Queries)
+
+## Proof of Concepts
+[Check some Exploits and POC for bugs found by the Lab](SecurityExploits/)
+
 Resources related to [GitHub Security Lab](https://securitylab.github.com).
diff --git a/ql_demos/cpp/README.md b/ql_demos/cpp/README.md