Commits

Branch selector

 main

User selector

All users

Datepicker

All time

Commit History

Commits on Jan 14, 2025

• chore: rename id of old QLinspectorOld.ql

  hugo-syn

  committed
  86e2293

  Copy full SHA for 86e2293

• fix: add metadata to QLinspector.ql

  hugo-syn

  committed
  07d4c4a

  Copy full SHA for 07d4c4a

Commits on Dec 18, 2024

• feat: add CompiledScript (GHSL-2023-229)

  hugo-syn

  committed
  a9ef533

  Copy full SHA for a9ef533

Commits on Jul 26, 2024

• feat: add support for Serializable Lambda expressions based on the Scala1 gadget chain

  hugo-syn

  committed
  543b001

  Copy full SHA for 543b001

• fix: fix helpers import

  hugo-syn

  committed
  e116afd

  Copy full SHA for e116afd

Commits on Jul 16, 2024

• fix: add DataFlow::FeatureHasSourceCallContext to stop the flow analysis in the return step of a source method

  hugo-syn

  committed
  c990af9

  Copy full SHA for c990af9

Commits on Jul 12, 2024

• doc: update readme

  hugo-syn

  committed
  d145a59

  Copy full SHA for d145a59

• feat: introduce a new query based on the tainting model of CodeQL, this should find more advanced gadget chains

  hugo-syn

  committed
  e264ada

  Copy full SHA for e264ada

• feat: rewrite some part of the queries for simplicity

  hugo-syn

  committed
  0e21684

  Copy full SHA for 0e21684

• feat: remove QLinspectorSelf.ql

  hugo-syn

  committed
  8828eae

  Copy full SHA for 8828eae

• feat: add new sinks like ScriptEngine/freemarker and improve others

  hugo-syn

  committed
  7d0d5ad

  Copy full SHA for 7d0d5ad

• feat: add toString method to source

  hugo-syn

  committed
  df0516e

  Copy full SHA for df0516e

Commits on May 24, 2024

• feat(sink): add a lot of sinks (XXE, JDBC, bridge gadgets, JEXL expression language, Text4Shell) and other fix

  hugo-syn

  committed
  fdec9f0

  Copy full SHA for fdec9f0

Commits on May 13, 2024

• feat: add queries for JNDI gadgets / Apache BeanFactory and a query to find new ObjectFactories

  hugo-syn

  committed
  5296603

  Copy full SHA for 5296603

• feat: add H2 JdbcConnection sink

  hugo-syn

  committed
  dc593a0

  Copy full SHA for dc593a0

• refactor: code refactor, add gadget logic in a qll file

  hugo-syn

  committed
  8ab035b

  Copy full SHA for 8ab035b

Commits on May 3, 2024

• feat: add detection for gadgets when source == sink but I don't know how to merge it in the QLinspector.ql query

  hugo-syn

  committed
  6094cd8

  Copy full SHA for 6094cd8

• refactor: code refactor

  hugo-syn

  committed
  2c088b5

  Copy full SHA for 2c088b5

• feat: add JNDISource for JNDI based deserialization with org.apache.naming.factory.BeanFactory

  hugo-syn

  committed
  a06f089

  Copy full SHA for a06f089

• fix: fix DataSource JDBC it was not working

  hugo-syn

  committed
  fd551a8

  Copy full SHA for fd551a8

Commits on Mar 20, 2024

• chore: update README.md

  hugo-syn

  committed
  17eff3c

  Copy full SHA for 17eff3c

• feat: refacto files to create a codeql qlpack

  hugo-syn

  committed
  6cc43c4

  Copy full SHA for 6cc43c4

Commits on Mar 18, 2024

• chore: add .gitignore

  hugo-syn

  committed
  8d10be0

  Copy full SHA for 8d10be0

Commits on Jan 27, 2024

• Merge pull request #3 from nopnoping/main

  Show description for 73d2fd9
  hugo-syn

  authored
  73d2fd9

  Copy full SHA for 73d2fd9

Commits on Sep 11, 2023

• Optimize node edges

  nopnoping

  committed
  a5f9fc5

  Copy full SHA for a5f9fc5

Commits on Jul 27, 2022

• Add new sinks

  hugo-syn

  committed
  69d24dc

  Copy full SHA for 69d24dc

• Add URLConnection.connect()

  hugo-syn

  committed
  d43c005

  Copy full SHA for d43c005

Commits on Jul 11, 2022

• Merge pull request #2 from synacktiv/add-license-1

  Show description for a799fbb
  hugo-syn

  authored
  a799fbb

  Copy full SHA for a799fbb

• Create LICENSE

  hugo-syn

  authored
  8cd4a85

  Copy full SHA for 8cd4a85

Commits on Apr 7, 2022

• Fix the intermediate calls issue withe the edges predicate as demonstrated by iflody in the issue #1

  hugo-syn

  committed
  b8a37d5

  Copy full SHA for b8a37d5

Commits on Mar 9, 2022

• add article example

  hugo-syn

  committed
  2e75c80

  Copy full SHA for 2e75c80

Commits on Mar 8, 2022

• typos

  hugo-syn

  committed
  0eb9bc8

  Copy full SHA for 0eb9bc8

• QLinspector 1st commit

  hugo-syn

  committed
  07b74cd

  Copy full SHA for 07b74cd

• Initial commit

  hugo-syn

  authored
  51cea23

  Copy full SHA for 51cea23