securingdev / custom-codeql-queries
Custom / Experimental CodeQL queries
☆37Updated 2 years ago
Alternatives and similar repositories for custom-codeql-queries:
Users that are interested in custom-codeql-queries are comparing it to the libraries listed below
- GreHack 2021 CodeQL for Java workshop☆75Updated 3 years ago
- Dependencies with Log4j2 Checklist☆35Updated 3 years ago
- A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692☆36Updated 2 years ago
- An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…☆25Updated 2 years ago
- Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK☆48Updated last year
- ☆70Updated 2 years ago
- CodeQL extractor for java, which don't need to compile java source☆10Updated last year
- Library for manually creating Java serialization data.☆28Updated last year
- My CodeQL queries collection☆96Updated last year
- 收集规则☆30Updated 2 years ago
- CodeQL model generation for Go.☆17Updated 3 years ago
- POC for leaking java version through file and ftp protocols☆24Updated 4 years ago
- 手把手教你写IAST系列☆24Updated last year
- ☆15Updated 3 years ago
- ☆22Updated 2 years ago
- Several XStream gadgets ported from ysoserial☆32Updated 3 years ago
- ☆73Updated 2 years ago
- Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…☆52Updated 3 years ago
- ☆28Updated 3 years ago
- PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.☆62Updated 2 years ago
- Additional materials for RootedCON 2015 Apache Struts talk☆30Updated 9 years ago
- ☆54Updated 3 years ago
- ☆33Updated 2 years ago
- CVE-2021-4204: Linux Kernel eBPF Local Privilege Escalation☆61Updated 2 years ago
- ☆14Updated 3 years ago
- [CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE☆15Updated 2 years ago
- CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…☆25Updated 4 years ago
- Scripts that can generate gopher payload.☆12Updated 4 years ago
- Template Injection in Email Templates leads to code execution on Jira Service Management Server☆47Updated 3 years ago
- https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet☆49Updated 3 years ago