Skip to content

Instantly share code, notes, and snippets.

@inkz
inkz / inputset.txt
Created December 26, 2024 15:35
nestjs-sg-inputset
incetarik/nestjs-graphql-zod
MarcinMiler/tinder-clone
meta-d/ocap
mnfst/manifest
haiweilian/vivy-nest-admin
87789771/meimei-nestjs-admin
opengovsg/ts-template
island-is/island.is
narval-xyz/armory
TriPSs/nx-extend
@inkz
inkz / inputset.txt
Last active February 9, 2025 17:20
express-big-inputset
NodeBB/nodebb-plugin-write-api
sisense/compose-sdk-monorepo
volumio/volumio3-backend
spryker/docker-sdk
hbkabir004/Mrittik-Server
apu52/METAVERSE
NUWCDIVNPT/stig-manager
debloper/xplex
cedalo/management-center
Sunny-117/mini-anything
0xPolygon/auto-claim-service
0xPolygon/chain-indexer-framework
0xPolygon/lxly
0xPolygon/proof-generation-api
0xPolygon/static
18f/federalist
18f/federalist-builder
18f/federalist-docker-build
18f/federalist-proxy
18f/identity-idp
rules:
- id: allowed-unsecure-commands
languages:
- yaml
severity: WARNING
message: smth found
patterns:
- pattern-either:
- patterns:
- pattern-inside: "{on: ...}"
import express from 'express'
import mongoose from 'mongoose'
const app = express()
const port = 3000
// const { BlogPost } = require('./models')
import {BlogPost} from './models'
async function main() {
/*
* Copyright (c) 2014-2022 Bjoern Kimminich & the OWASP Juice Shop contributors.
* SPDX-License-Identifier: MIT
*/
import {
Model,
InferAttributes,
InferCreationAttributes,
DataTypes,
rules:
- id: lambda-tainted-func-go
languages: [go]
severity: WARNING
message: >-
Tainted func found
mode: taint
pattern-sources:
- patterns:
- pattern-either:
rules:
- id: java-spring-sink-source
mode: taint
pattern-sinks:
- pattern: |
$SINK(...)
pattern-sources:
- patterns:
- pattern: $VAR
- pattern-either:
rules:
- id: rails-sink-source
mode: taint
pattern-sources:
- pattern: params[$X]
pattern-sinks:
- pattern: $WHATEVER(...)
message: |
sink for RoR found
languages:
rules:
- id: expressjs-source-sink-research
mode: taint
languages:
- js
- typescript
message: >-
Found a sink for Express.js app
severity: WARNING
pattern-sinks: