Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

appsec: add SQLi RASP protection #2730

Merged
merged 27 commits into from
Jun 20, 2024
Merged

appsec: add SQLi RASP protection #2730

merged 27 commits into from
Jun 20, 2024

Commits on Jun 6, 2024

  1. appsec: add sqli ops skeleton

    @Hellzy
    Hellzy committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    63b4be6 View commit details
    Browse the repository at this point in the history

  2. emitter: add sqlsec

    @Hellzy
    Hellzy committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    d546698 View commit details
    Browse the repository at this point in the history

  3. listener: add sqlsec

    @Hellzy
    Hellzy committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    3d82b0e View commit details
    Browse the repository at this point in the history

  4. listener: register sql listener

    @Hellzy
    Hellzy committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    b362380 View commit details
    Browse the repository at this point in the history

  5. database/sql: adda appsec RASP protection

    @Hellzy
    Hellzy committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    362a8e6 View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2024

  1. database/sql: add RASP protection to QueryContext

    @Hellzy
    Hellzy committed Jun 7, 2024
    Configuration menu
    Copy the full SHA
    4b63c15 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2024

  1. listeners: add RAPS SQLi supported addresses

    @Hellzy
    Hellzy committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    6502c04 View commit details
    Browse the repository at this point in the history

  2. SQLi: add test in waf_test.go

    @Hellzy
    Hellzy committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    d6957db View commit details
    Browse the repository at this point in the history

Commits on Jun 12, 2024

  1. emitter: add operation arg comments

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    3a50d6b View commit details
    Browse the repository at this point in the history

  2. tests: remove weird extra lines

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    edfbb19 View commit details
    Browse the repository at this point in the history

  3. tests: explicitely check RASP trigges

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    75f010b View commit details
    Browse the repository at this point in the history

  4. contrib/database/sql: simplify enablement check

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    dc217c2 View commit details
    Browse the repository at this point in the history

  5. gci: close res body

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    7ed0e95 View commit details
    Browse the repository at this point in the history

  6. tests: add UPDATE injection

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    b85f352 View commit details
    Browse the repository at this point in the history

  7. tests: add EXEC query test

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    6e90335 View commit details
    Browse the repository at this point in the history

  8. Use sqlite3, go mod tidy

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    af70bb3 View commit details
    Browse the repository at this point in the history

  9. tests: remove unnecessary code

    @Hellzy
    Hellzy committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    871ba4f View commit details
    Browse the repository at this point in the history

Commits on Jun 18, 2024

  1. tests: review patch

    @Hellzy
    Hellzy committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    44a4d5e View commit details
    Browse the repository at this point in the history

  2. database/sql: don't prevent span creation in case of attack

    @Hellzy
    Hellzy committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    2cc796b View commit details
    Browse the repository at this point in the history

  3. tests: use go-sqlite

    @Hellzy
    Hellzy committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    01e792d View commit details
    Browse the repository at this point in the history

  4. tests: fix driver name

    @Hellzy
    Hellzy committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    190bf64 View commit details
    Browse the repository at this point in the history

  5. Remove unused span ID arg

    @Hellzy
    Hellzy committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    ce90381 View commit details
    Browse the repository at this point in the history

  6. Better error check

    @Hellzy
    Hellzy committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    aa9c24f View commit details
    Browse the repository at this point in the history

Commits on Jun 19, 2024

  1. make sure the security error is not report as a real error in the spa… 

    …n tags

Signed-off-by: Eliott Bouhana <[email protected]>
    @eliottness
    eliottness committed Jun 19, 2024
    Configuration menu
    Copy the full SHA
    ecf840b View commit details
    Browse the repository at this point in the history

  2. make SSRF ephemerals 

    Signed-off-by: Eliott Bouhana <[email protected]>
    @eliottness
    eliottness committed Jun 19, 2024
    Configuration menu
    Copy the full SHA
    514dc52 View commit details
    Browse the repository at this point in the history

Commits on Jun 20, 2024

  1. database/sql: refact appsec checks in its own function

    @Hellzy
    Hellzy committed Jun 20, 2024
    Configuration menu
    Copy the full SHA
    be265f7 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into francois.mazeau/sqli

    @Hellzy
    Hellzy authored Jun 20, 2024
    Configuration menu
    Copy the full SHA
    dd44ed3 View commit details
    Browse the repository at this point in the history