Commits

Branch selector

 main

User selector

All users

All time

Commit History

Commits on Nov 18, 2022

• Create semgrep.yml

  ralfmarto

  authored
  fac3d01

  Copy full SHA for fac3d01

• Delete fortify.yml

  ralfmarto

  authored
  90b7e03

  Copy full SHA for 90b7e03

• SameGrap

  ralfmarto

  authored
  d5f85a6

  Copy full SHA for d5f85a6

• Create fortify.yml

  ralfmarto

  authored
  ac2f349

  Copy full SHA for ac2f349

• Create CodeQL

  ralfmarto

  authored
  6a53683

  Copy full SHA for 6a53683

Commits on Nov 17, 2022

• semgrep

  

  kali

  authored and

  kali

  committed
  d775a57

  Copy full SHA for d775a57

Commits on Nov 3, 2022

• SOnarCloud

  ralfmarto

  committed
  e4524ff

  Copy full SHA for e4524ff

Commits on Nov 2, 2022

• Merge pull request #16 from ralfmarto/ralfmarto-patch-5

  Show description for 8ed9149
  ralfmarto

  authored
  8ed9149

  Copy full SHA for 8ed9149

• Update hellowordAction.yml

  ralfmarto

  authored
  c5257f6

  Copy full SHA for c5257f6

• Merge pull request #5 from ralfmarto/ralfmarto-patch-3

  Show description for 66d2fa5
  ralfmarto

  authored
  66d2fa5

  Copy full SHA for 66d2fa5

• Merge pull request #6 from ralfmarto/dependabot/maven/todolist-goof/todolist-web-struts/org.zeroturnaround-zt-zip-1.13

  Show description for 1b11086
  ralfmarto

  authored
  1b11086

  Copy full SHA for 1b11086

• Merge pull request #7 from ralfmarto/dependabot/maven/todolist-goof/todolist-web-struts/org.apache.logging.log4j-log4j-core-2.17.1

  Show description for 31984ef
  ralfmarto

  authored
  31984ef

  Copy full SHA for 31984ef

• Merge pull request #8 from ralfmarto/ralfmarto-patch-2

  Show description for 67c00ac
  ralfmarto

  authored
  67c00ac

  Copy full SHA for 67c00ac

• Create hellowordAction.yml

  ralfmarto

  authored
  cfdf6de

  Copy full SHA for cfdf6de

• Bump log4j-core from 2.7 to 2.17.1 in /todolist-goof/todolist-web-struts

  Show description for 08d2d32
  dependabot[bot]

  authored
  08d2d32

  Copy full SHA for 08d2d32

• Merge branch 'main' into ralfmarto-patch-3

  ralfmarto

  authored
  2fdb63b

  Copy full SHA for 2fdb63b

• Bump zt-zip from 1.12 to 1.13 in /todolist-goof/todolist-web-struts

  Show description for a462340
  dependabot[bot]

  authored
  a462340

  Copy full SHA for a462340

• Merge pull request #4 from ralfmarto/dependabot/maven/todolist-goof/todolist-core/junit-junit-4.13.1

  Show description for 49cc07d
  ralfmarto

  authored
  49cc07d

  Copy full SHA for 49cc07d

• Create dependabot.yml

  ralfmarto

  authored
  b7862ac

  Copy full SHA for b7862ac

Commits on Nov 1, 2022

• Bump junit from 4.12 to 4.13.1 in /todolist-goof/todolist-core

  Show description for 87c9aae
  dependabot[bot]

  authored
  87c9aae

  Copy full SHA for 87c9aae

Commits on Feb 22, 2022

• Merge pull request #385 from snyk-labs/license_update

  Show description for 6d52cb9
  dogeared

  authored
  6d52cb9

  Copy full SHA for 6d52cb9

• minor mod to license: http to https

  dogeared

  committed
  dcc3743

  Copy full SHA for dcc3743

Commits on Jan 31, 2022

• Merge pull request #383 from ericsmalling/main

  Show description for a61efa0
  ericsmalling

  authored
  a61efa0

  Copy full SHA for a61efa0

• Adding k8s tests

  

  Eric

  committed
  d144e01

  Copy full SHA for d144e01

• Merge pull request #382 from ericsmalling/main

  Show description for c11f55a
  ericsmalling

  authored
  c11f55a

  Copy full SHA for c11f55a

• Split tests and add smoke for log4shell-goof-server

  

  Eric

  committed
  50edd00

  Copy full SHA for 50edd00

• Add basic smoke test

  Show description for 7cf8304
  

  ericsmalling

  authored and

  Eric

  committed
  7cf8304

  Copy full SHA for 7cf8304

Commits on Jan 27, 2022

• Merge pull request #379 from ericsmalling/workflow

  Show description for 0d2b9a0
  ericsmalling

  authored
  0d2b9a0

  Copy full SHA for 0d2b9a0

Commits on Jan 25, 2022

• Initial workflows

  

  Eric

  committed
  24f4144

  Copy full SHA for 24f4144

• Merge pull request #378 from ericsmalling/main

  Show description for 3849cf7
  ericsmalling

  authored
  3849cf7

  Copy full SHA for 3849cf7

Commits on Jan 21, 2022

• Dockerfile changes to work with new mvn assembly configuration for log4shell-server

  Show description for fb904b6
  

  Eric

  committed
  fb904b6

  Copy full SHA for fb904b6

Commits on Jan 10, 2022

• updated the log4shell hacks with a howto

  bmvermeer

  committed
  be674dd

  Copy full SHA for be674dd

Commits on Jan 6, 2022

• Changed logger to lo4j, log invalid login with username (log4shell input). Added commons-collection to do a deserialization RCE on newer java version based on log4shell.

  bmvermeer

  committed
  186ff5c

  Copy full SHA for 186ff5c

• add secondary command to LDAP server. This creates an attack based deserialization of the commons collection library. This RCE works on all Java versions

  bmvermeer

  committed
  4625d86

  Copy full SHA for 4625d86

Commits on Jan 4, 2022

• Merge pull request #375 from snyk-labs/optimise_mvn_exec

  Show description for 4e4ca88
  dogeared

  authored
  4e4ca88

  Copy full SHA for 4e4ca88