| Modifier and Type | Class and Description |
|---|---|
class |
ExternalConfigurationControlDetector
Detects External Control of System or Configuration Setting weakness
using setCatalog method of java.sql.Connection
|
class |
HttpResponseSplittingDetector
Detects HTTP Response splitting weakness
|
class |
PermissiveCORSDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
CipherDetector |
class |
DesUsageDetector
Cipher identify
DES/CBC/NoPadding (56 bit)
DES/CBC/PKCS5Padding (56 bit)
DES/ECB/NoPadding (56 bit)
DES/ECB/PKCS5Padding (56 bit)
Ref: Partial list of ciphers
|
class |
RsaNoPaddingDetector |
class |
TDesUsageDetector
Cipher identify
DESede/CBC/NoPadding (168 bit)
DESede/CBC/PKCS5Padding (168 bit)
DESede/ECB/NoPadding (168 bit)
DESede/ECB/PKCS5Padding (168 bit)
Ref: Partial list of ciphers
|
| Modifier and Type | Class and Description |
|---|---|
class |
PathTraversalDetector |
class |
SuspiciousCommandDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
LegacyInjectionDetector
Detector designed for extension to detect injection vulnerabilities using
the original mechanism with
InjectionSource class |
| Modifier and Type | Class and Description |
|---|---|
class |
AwsQueryInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
BeanInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
CommandInjectionDetector
Detect the usage of Runtime and ProcessBuilder to execute system command.
|
| Modifier and Type | Class and Description |
|---|---|
class |
CrlfLogInjectionDetector
Detects logging of tainted values - CRLF injection (or Improper Output Neutralization for Logs)
|
| Modifier and Type | Class and Description |
|---|---|
class |
CustomInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
FileDisclosureDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
FormatStringManipulationDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
HttpParameterPollutionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
LdapInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
UnvalidatedRedirectDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
OgnlInjectionDetector |
class |
ScriptInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
SmtpHeaderInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
AndroidSqlInjectionDetector |
class |
SqlInjectionDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
SSRFDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
TrustBoundaryViolationAttributeDetector
Trust Boundary Violation is fancy name to describe tainted value passed directly to session attribute.
|
class |
TrustBoundaryViolationValueDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
KotlinHardcodedPasswordEqualsDetector
Detect:
|
class |
KotlinHardcodePasswordInMapDetector
Detect hard-code password in settings map (key value configurations constructed at runtime)
|
| Modifier and Type | Class and Description |
|---|---|
class |
AbstractHardcodedPasswordEqualsDetector |
class |
AbstractHardcodePasswordInMapDetector
Detect hard-code password in settings map (key value configurations constructed at runtime)
|
class |
HardcodedPasswordEqualsDetector
Detect:
|
class |
HardcodePasswordInMapDetector
Detect hard-code password in settings map (key value configurations constructed at runtime)
|
class |
HashUnsafeEqualsDetector
Detect:
|
class |
IntuitiveHardcodePasswordDetector
This detector will find what look like password hardcode on unknown API.
|
| Modifier and Type | Class and Description |
|---|---|
class |
ScalaSensitiveDataExposureDetector |
class |
XssMvcApiDetector |
class |
XssTwirlDetector |
| Modifier and Type | Class and Description |
|---|---|
class |
JstlExpressionWhiteLister
This detector will set the return value of PageContextImpl.proprietaryEvaluate as safe for XSS is some very specific case.
|
class |
PotentialValueTracker
This class detect potential default value and set it to the Taint instance.
|
| Modifier and Type | Class and Description |
|---|---|
class |
StdXmlTransformDetector
Detect XSLT transformation.
|
| Modifier and Type | Class and Description |
|---|---|
class |
XPathInjectionDetector
Detector for XPath injection
|
| Modifier and Type | Class and Description |
|---|---|
class |
XssJspDetector |
class |
XssServletDetector |
Copyright © 2019. All rights reserved.