Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Python: New command execution sinks #15715

Merged
merged 50 commits into from
Jun 21, 2024
Merged

Python: New command execution sinks #15715

merged 50 commits into from
Jun 21, 2024
+1,272 −153

Commits on Feb 24, 2024

  1. add panas code execution sinks, add proper tests

    @am0o0
    am0o0 committed Feb 24, 2024
    Configuration menu
    Copy the full SHA
    3d7db0e View commit details
    Browse the repository at this point in the history

  2. add pyTorch :) code execution sinks, add proper tests

    @am0o0
    am0o0 committed Feb 24, 2024
    Configuration menu
    Copy the full SHA
    076faa3 View commit details
    Browse the repository at this point in the history

  3. update Fabric models, add new sink to Fabric, add proper test cases

    @am0o0
    am0o0 committed Feb 24, 2024
    Configuration menu
    Copy the full SHA
    d234a53 View commit details
    Browse the repository at this point in the history

  4. convert paramiko query to SecondaryServerCmdInjection query, Add inli… 

    …ne tests
    @am0o0
    am0o0 committed Feb 24, 2024
    Configuration menu
    Copy the full SHA
    70282f9 View commit details
    Browse the repository at this point in the history

  5. continue to convert paramiko query to a more general query, 

    the proxy command is not a secondary command execution
so we can add proxy command to SystemCommandExecution::Range, update QLDocs,
add a proper Paramiko test case
fix a typo
    @am0o0
    am0o0 committed Feb 24, 2024
    Configuration menu
    Copy the full SHA
    385c3ba View commit details
    Browse the repository at this point in the history

Commits on Feb 25, 2024

  1. add ssh client libraries, add SecondaryServerCmdInjectionCustomizations

    @am0o0
    am0o0 committed Feb 25, 2024
    Configuration menu
    Copy the full SHA
    95c9a3f View commit details
    Browse the repository at this point in the history

  2. finalize Secondary server command injection queries and tests.

    @am0o0
    am0o0 committed Feb 25, 2024
    Configuration menu
    Copy the full SHA
    3e6b4a1 View commit details
    Browse the repository at this point in the history

  3. add jsonpickle and pexpect libs in case of unsafe decoding and second… 

    …ary command execution, add proper test cases
    @am0o0
    am0o0 committed Feb 25, 2024
    Configuration menu
    Copy the full SHA
    ab21990 View commit details
    Browse the repository at this point in the history

  4. add twisted SSH client as secondary server command injection sinks, a… 

    …dd proper test cases
    @am0o0
    am0o0 committed Feb 25, 2024
    Configuration menu
    Copy the full SHA
    7dd1389 View commit details
    Browse the repository at this point in the history

  5. update Twisted document link

    @am0o0
    am0o0 committed Feb 25, 2024
    Configuration menu
    Copy the full SHA
    4321c5c View commit details
    Browse the repository at this point in the history

  6. minor test cases change: remove unused dict

    @am0o0
    am0o0 committed Feb 25, 2024
    Configuration menu
    Copy the full SHA
    a636c47 View commit details
    Browse the repository at this point in the history

Commits on Feb 27, 2024

  1. better structure for pandas DataFrame, it is now much better readable… 

    … and also we can find much more DataFrame objects
    @am0o0
    am0o0 committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    b20b733 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. add panas code execution sinks, add proper tests

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    cffdc5b View commit details
    Browse the repository at this point in the history

  2. add pyTorch :) code execution sinks, add proper tests

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    2708e57 View commit details
    Browse the repository at this point in the history

  3. update Fabric models, add new sink to Fabric, add proper test cases

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    6520e2f View commit details
    Browse the repository at this point in the history

  4. convert paramiko query to SecondaryServerCmdInjection query, Add inli… 

    …ne tests
    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    5fea71e View commit details
    Browse the repository at this point in the history

  5. continue to convert paramiko query to a more general query, 

    the proxy command is not a secondary command execution
so we can add proxy command to SystemCommandExecution::Range, update QLDocs,
add a proper Paramiko test case
fix a typo
    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    4df73f9 View commit details
    Browse the repository at this point in the history

  6. add ssh client libraries, add SecondaryServerCmdInjectionCustomizations

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    ead2474 View commit details
    Browse the repository at this point in the history

  7. finalize Secondary server command injection queries and tests.

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    7e93102 View commit details
    Browse the repository at this point in the history

  8. add jsonpickle and pexpect libs in case of unsafe decoding and second… 

    …ary command execution, add proper test cases
    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    0a765cc View commit details
    Browse the repository at this point in the history

  9. add twisted SSH client as secondary server command injection sinks, a… 

    …dd proper test cases
    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    c4a38d0 View commit details
    Browse the repository at this point in the history

  10. update Twisted document link

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    6b9cc1a View commit details
    Browse the repository at this point in the history

  11. minor test cases change: remove unused dict

    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    8b93e81 View commit details
    Browse the repository at this point in the history

  12. better structure for pandas DataFrame, it is now much better readable… 

    … and also we can find much more DataFrame objects
    @am0o0 @tausbn
    am0o0 authored and tausbn committed May 6, 2024
    Configuration menu
    Copy the full SHA
    4a2ab49 View commit details
    Browse the repository at this point in the history

Commits on May 9, 2024

  1. Merge branch 'am0o0-python-codeExec' of https://github.com/amammad/co… 

    …deql into am0o0-python-codeExec
    @am0o0
    am0o0 committed May 9, 2024
    Configuration menu
    Copy the full SHA
    9b4ea88 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'github:main' into am0o0-python-codeExec

    @am0o0
    am0o0 committed May 9, 2024
    Configuration menu
    Copy the full SHA
    0043d93 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'am0o0-python-codeExec' of https://github.com/amammad/co… 

    …deql into am0o0-python-codeExec
    @am0o0
    am0o0 committed May 9, 2024
    Configuration menu
    Copy the full SHA
    3a52cd1 View commit details
    Browse the repository at this point in the history

  4. fix Fabric query library

    @am0o0
    am0o0 committed May 9, 2024
    Configuration menu
    Copy the full SHA
    f93d4a0 View commit details
    Browse the repository at this point in the history

Commits on May 10, 2024

  1. fix actions reviews

    @am0o0
    am0o0 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    0e80e86 View commit details
    Browse the repository at this point in the history

  2. revert vscode settings.json file

    @am0o0
    am0o0 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    9435a62 View commit details
    Browse the repository at this point in the history

  3. revert vscode settings.json file

    @am0o0
    am0o0 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    a87d27b View commit details
    Browse the repository at this point in the history

  4. fix tests, chore on Find.ql

    @am0o0
    am0o0 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    90da071 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2024

  1. format Torch.qll

    @am0o0
    am0o0 committed May 13, 2024
    Configuration menu
    Copy the full SHA
    fb3d34c View commit details
    Browse the repository at this point in the history

  2. revert classRef deletion, fix secondaryserverCmdInjection expected te… 

    …st results
    @am0o0
    am0o0 committed May 13, 2024
    Configuration menu
    Copy the full SHA
    37d3318 View commit details
    Browse the repository at this point in the history

Commits on May 14, 2024

  1. simply replace duplicate class references with classRef() in Fabric… 

    ….qll
    @am0o0
    am0o0 committed May 14, 2024
    Configuration menu
    Copy the full SHA
    c7adb32 View commit details
    Browse the repository at this point in the history

Commits on May 29, 2024

  1. fabic.qll: remove test predicate and apply review changes

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    fcd2bd6 View commit details
    Browse the repository at this point in the history

  2. Pandas.qll: remove unnecessary exists, fix class naming

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    b1242e4 View commit details
    Browse the repository at this point in the history

  3. Paramiko.qll: improve docs

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    8c3994b View commit details
    Browse the repository at this point in the history

  4. Torch.qll: use better alternative instead of exists

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    66cba89 View commit details
    Browse the repository at this point in the history

  5. fix the qhelp of secondary server cmd injectino

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    5299c4a View commit details
    Browse the repository at this point in the history

  6. Ssh2.qll: fix a typo

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    1714866 View commit details
    Browse the repository at this point in the history

  7. fix the docs of secondary server cmd injection

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    fd9e6f4 View commit details
    Browse the repository at this point in the history

  8. SecondaryCommandInjection to RemoteCommandExecution, change RemoteCom… 

    …mandExecution to module like SystemCommandExecution module
    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    52a8091 View commit details
    Browse the repository at this point in the history

  9. rename secondary to remote :), complete the previous commit changes

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    b9edcb7 View commit details
    Browse the repository at this point in the history

  10. update id of the query file

    @am0o0
    am0o0 committed May 29, 2024
    Configuration menu
    Copy the full SHA
    1f11246 View commit details
    Browse the repository at this point in the history

Commits on Jun 18, 2024

  1. fix conflict

    @am0o0
    am0o0 committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    8a7fdfa View commit details
    Browse the repository at this point in the history

  2. revert .vscode/settings.json

    @am0o0
    am0o0 committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    cb39ae7 View commit details
    Browse the repository at this point in the history

  3. Revert "update id of the query file" 

    This reverts commit 1f11246.
    @am0o0
    am0o0 committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    1f99559 View commit details
    Browse the repository at this point in the history

  4. fix formatting

    @am0o0
    am0o0 committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    ccb923a View commit details
    Browse the repository at this point in the history

  5. revert .vscode/settings.json :((

    @am0o0
    am0o0 committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    eb1999f View commit details
    Browse the repository at this point in the history