Skip to content

ascanrules: Enhanced CommandInjectionScanRule with URL-encoded bypass… #6542

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 12 commits into
base: main
Choose a base branch
from
Open

ascanrules: Enhanced CommandInjectionScanRule with URL-encoded bypass… #6542

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
ac23476
ascanrules: Enhanced CommandInjectionScanRule with URL-encoded bypass…
cx-nir-cohen Jun 27, 2025
b2e2da0
Fix: Restore critical null byte payloads that were accidentally removed
cx-nir-cohen Jun 27, 2025
2284a11
Fix: Remove duplicate insertedCMD variable declaration
cx-nir-cohen Jun 27, 2025
18b147f
Fix: Apply Spotless code formatting
cx-nir-cohen Jun 27, 2025
0b57487
Fix: Update max requests per param limits for new payloads
cx-nir-cohen Jun 27, 2025
dedfa94
Clean up: Remove unnecessary comments from test code
cx-nir-cohen Jun 27, 2025
f7b7a28
Enhance CommandInjectionScanRule for VulnerableApp detection
cx-nir-cohen Jun 27, 2025
541c166
Clean up code: combine adaptive timeout calculation and remove excess…
cx-nir-cohen Jun 27, 2025
4e5cc95
Enhance CommandInjectionScanRule with optimized payload strategy
cx-nir-cohen Jun 27, 2025
b001509
Update CommandInjectionScanRuleUnitTest with refined request expectat…
cx-nir-cohen Jun 27, 2025
535cfb2
Apply spotless code formatting to CommandInjectionScanRule
cx-nir-cohen Jun 27, 2025
567b8eb
Add JavaDoc documentation to testCommandInjection method
cx-nir-cohen Jun 27, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions addOns/ascanrules/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
### Changed
- Maintenance changes.
- Depends on an updated version of the Common Library add-on.
- ascanrules: Enhanced the Remote OS Command Injection scan rule with URL-encoded bypass payloads and adaptive timing detection for improved container/cloud environment compatibility.

### Added
- Rules (as applicable) have been tagged in relation to HIPAA and PCI DSS.
Expand Down
Loading