aboutsummaryrefslogtreecommitdiff
path: root/sanitizers
AgeCommit message (Expand)Author
2023-04-12bazel: Run ktlint with BazelFabian Meumertzheim
2023-04-12tests: Disable new errorprone checks in testsFabian Meumertzheim
2023-03-24sanitizers: Reenable RCE reports for `readObject` callsFabian Meumertzheim
2023-02-27sanitizers: added XPathInjectionMaxim Schessler
2023-02-16Add foundations for Android support (#587)Cory Barker
2023-02-06Fix typo in message (#609)Kostiantyn Melnik
2023-02-05sanitizers: ensure deserialization payloads shorter than 64 bytesKhaled Yakdan
2023-02-05sanitizers: ensure EL exploit is shorter than 64 bytesKhaled Yakdan
2023-02-05sanitizers: improve expression language exploitKhaled Yakdan
2023-02-05jaz.Zer: do not throw a security exception for disabled sanitizersKhaled Yakdan
2023-02-05sanitizers: refactor the expression language injection testKhaled Yakdan
2023-01-26driver: Do not try to call onFuzzTargetReady before static initializersFabian Meumertzheim
2023-01-11sanitizers: Make list of sanitizers publicly visibleFabian Meumertzheim
2023-01-07bazel: Add missing dependencies to `repositories.bzl`Fabian Meumertzheim
2022-12-26sanitizers: Remove hook that has become a no-opFabian Meumertzheim
2022-12-24agent: check arguments size in all hooks without a method descriptorKhaled Yakdan
2022-12-22format: update scripts and docs, and rerun the scriptsKhaled Yakdan
2022-12-19all: Merge `//driver/...` and `//agent/...`Fabian Meumertzheim
2022-11-24Fix sanitizers not being loaded with jazzer_standalone_deploy.jarFabian Meumertzheim
2022-10-24sanitizers: Handle `JdbcSQLFeatureNotSupportedException`Fabian Meumertzheim
2022-10-18bazel: Replace agent deploy JAR with stand-alone Jazzer JARFabian Meumertzheim
2022-10-18tests: Simplify LDAP test setupsFabian Meumertzheim
2022-10-18sanitizers: Fix source file path of generated Constants classFabian Meumertzheim
2022-09-16Ignore regex pattern syntax exceptions caused by stack overflowsNorbert Schneider
2022-09-14sanitizers: Rewrite SqlInjection sanitizer in JavaFabian Meumertzheim
2022-09-14tests: Rename expected_findings to allowed_findings and improve docsFabian Meumertzheim
2022-09-14tests: Verify the stack traces printed in testsFabian Meumertzheim
2022-09-14tests: Disable noisy logging in EL Injection testFabian Meumertzheim
2022-08-29junit: Add @FuzzTest regression testFabian Meumertzheim
2022-08-25api: Make Jazzer class a part of the hooks APIFabian Meumertzheim
2022-08-25agent: Move unsafe_provider to utilsFabian Meumertzheim
2022-08-15api: Fix paragraphs and links in JavadocFabian Meumertzheim
2022-08-13Add support for Tomcat and Jakarta Expression Language Injection Bug Detector.henryrneh
2022-07-08Remove duplicated SQL statement hooksNorbert Schneider
2022-06-28Add hook to detect SQL injectionsSimon Resch
2022-05-05Move honeypot class to APINorbert Schneider
2022-04-08Add hooks for loading arbitrary librariesKhaled Yakdan
2022-03-23Slightly increase runs count on RegexRoadblocks testFabian Meumertzheim
2022-03-08Make crash reproducer verification more reproducibleFabian Meumertzheim
2022-03-08Report compares for regex literals and character rangesFabian Meumertzheim
2022-03-07Fix regex injection hook invocation for String functionsFabian Meumertzheim
2022-03-04Add a sanitizer for general regex injectionsFabian Meumertzheim
2022-03-04Simplify existing regex injection hookFabian Meumertzheim
2022-03-04Don't suppress LDAP exceptions in hooksNorbert Schneider
2022-03-03Report a finding whenever honeypot class is loadedNorbert Schneider
2022-03-03Hook ClassLoader methodsNorbert Schneider
2022-03-03Ignore specific windows exception in RegexCanonEqInjectionNorbert Schneider
2022-03-03Add missing Expression Language test dependencySimon Resch
2022-03-03Verify the precise exception reproduced by a reproducerFabian Meumertzheim
2022-02-28Support hooks on interfacesNorbert Schneider