mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-06 19:35:13 +02:00
58f1794a4e
* feat: Enhance data exfiltration detection with source sensitivity gating for cookies and headers * feat: Implement cross-file data exfiltration detection with parameter-specific gate filters * feat: Add calibration tests and refine DATA_EXFIL severity scoring logic * feat: Introduce per-detector configuration for data exfiltration suppression * feat: Enhance DATA_EXFIL findings with destination field tracking in diagnostics and SARIF output * feat: Add tainted body and URL handling for data exfiltration detection * feat: Add integration tests and fixtures for DATA_EXFIL and SSRF detection in Go * feat: Add Java integration tests and fixtures for DATA_EXFIL detection across multiple HTTP clients * feat: Add synthetic externals handling for closure-captured variables in SSA * feat: Implement closure-based suppression for resource leak findings * feat: Add regression guards for shell-injection and taint propagation in for-of destructure patterns * feat: Implement constructor cap narrowing for data exfiltration detection in HTTP request builders * feat: Add gated sinks for data exfiltration detection in C and C++ using curl_easy_setopt * feat: Implement DATA_EXFIL cap parity for backwards analysis and add integration tests * feat: Add data exfiltration sinks for various languages and enhance documentation * refactor: Simplify formatting and improve readability in various files * refactor: Improve readability by simplifying conditional statements and adding clippy linting * docs: Update CHANGELOG and comments for data exfiltration features and configuration * docs: Clarify configuration instructions for data exfiltration trusted destinations * docs: Enhance comments for evidence routing logic in data exfiltration |
||
|---|---|---|
| .. | ||
| async_promise_chain_js | ||
| async_python | ||
| async_rust | ||
| auth_analysis | ||
| auth_analysis_admin_multilang_integration | ||
| auth_analysis_frameworks_integration | ||
| auth_analysis_go_java_frameworks_integration | ||
| auth_analysis_integration | ||
| auth_analysis_noise_frameworks | ||
| auth_analysis_ownership_multilang_integration | ||
| auth_analysis_python_frameworks_integration | ||
| auth_analysis_ruby_frameworks_integration | ||
| auth_analysis_rust_frameworks_integration | ||
| c_utils | ||
| closure_capture_js | ||
| closure_capture_py | ||
| closure_capture_ts | ||
| container_taint_js | ||
| container_taint_py | ||
| cross_file_abstract_bounded_index | ||
| cross_file_abstract_port_range | ||
| cross_file_abstract_url_prefix_lock | ||
| cross_file_alias_bounded_graph | ||
| cross_file_alias_mutating_helper | ||
| cross_file_alias_returned_alias | ||
| cross_file_callback_alias | ||
| cross_file_container_factory | ||
| cross_file_context_callback | ||
| cross_file_context_deep_chain | ||
| cross_file_context_sanitizer | ||
| cross_file_context_two_call_sites | ||
| cross_file_data_exfil_split | ||
| cross_file_go_data_exfil | ||
| cross_file_go_handler_exec | ||
| cross_file_go_int_validated | ||
| cross_file_info_leak | ||
| cross_file_java_sqli | ||
| cross_file_js_aliased_import | ||
| cross_file_js_html_sanitized | ||
| cross_file_js_redirect | ||
| cross_file_js_sqli | ||
| cross_file_mixed_cap_sink | ||
| cross_file_near_miss_field_isolation | ||
| cross_file_near_miss_wrong_sanitizer | ||
| cross_file_param_sink_precision | ||
| cross_file_phi_both_branches_safe | ||
| cross_file_phi_partial_sanitiser | ||
| cross_file_phi_validated_branch | ||
| cross_file_py_const_passthrough | ||
| cross_file_py_nested_chain | ||
| cross_file_py_object_field | ||
| cross_file_py_shlex_sanitizer | ||
| cross_file_python_data_exfil | ||
| cross_file_scc_8cycle | ||
| cross_file_scc_16cycle | ||
| cross_file_scc_convergence | ||
| cross_file_scc_deep_cycle | ||
| cross_file_scc_mutual_recursion | ||
| cross_file_scc_recursive_with_sanitiser | ||
| cross_file_scc_ssa | ||
| cross_file_scc_three_way_cycle | ||
| cross_file_ssa_propagation | ||
| cross_file_ssa_sanitizer | ||
| cross_file_ssa_source | ||
| cross_file_symex_body | ||
| cross_file_symex_js | ||
| cross_file_taint | ||
| cross_file_ts_ssrf | ||
| debug_endpoint | ||
| dedup_alternative_paths | ||
| dedup_same_line_different_sinks | ||
| demand_driven_catch_new_fn | ||
| demand_driven_data_exfil | ||
| demand_driven_no_source | ||
| demand_driven_prove_infeasible | ||
| demand_driven_reach_source | ||
| dynamic_dispatch_ssrf | ||
| ejs_xss | ||
| error_throw_terminates | ||
| exec_async_wrapper | ||
| express_app | ||
| fastify_app | ||
| flask_app | ||
| fp_guards | ||
| gated_sink_dynamic_activation | ||
| go | ||
| go_server | ||
| hardcoded_secret | ||
| inline_cache_origin_attribution | ||
| insecure_session_config | ||
| internal_redirect_taint | ||
| java | ||
| java_service | ||
| js | ||
| js_ts_pass2_deep_chain | ||
| koa_app | ||
| large_switch_go | ||
| migration_script_sql | ||
| mixed_project | ||
| path_traversal_download | ||
| patterns | ||
| phase_c_auth_taint | ||
| predicate_multi_arg_validator_tainted | ||
| predicate_multi_arg_validator_wrong | ||
| python_subprocess_shell_default_safe | ||
| python_subprocess_shell_false_safe | ||
| python_subprocess_shell_true | ||
| real_world | ||
| receiver_chain_taint_java | ||
| route_registration_noise | ||
| route_registration_noise_frameworks | ||
| rust_framework_rules | ||
| rust_module_path_resolution | ||
| rust_web_app | ||
| same_name_collisions_js | ||
| state | ||
| switch_fall_through_c | ||
| symex | ||
| taint_termination | ||
| weak_hash_password | ||