Skip to content

Update Plugin for CWE 200: Sensitive Data Exposure - #80

Merged
Carter-Chew merged 6 commits into
mainfrom
carter/update_sensitive_data_exposure_plugin
Aug 8, 2025
Merged

Update Plugin for CWE 200: Sensitive Data Exposure#80
Carter-Chew merged 6 commits into
mainfrom
carter/update_sensitive_data_exposure_plugin

Conversation

@Carter-Chew

Copy link
Copy Markdown
Collaborator
  • Edited Plugin for CWE 200 to use new TaintMonkey Plugin format
  • Edited Corpus to have multiple types of sensitive data
  • Edited Generalize Test Cases to allow fuzzing from updated corpus

First commit only includes Generalize Logging test case
Monkey Patching via the TaintMonkey function needs to be fixed: automatic patching of sanitizers and sinks doesn't work yet; manually patched both sanitizer and sink to (temporarily) work around this issue

@Carter-Chew
Carter-Chew requested a review from bliutech August 2, 2025 02:19
@Carter-Chew
Carter-Chew force-pushed the carter/update_sensitive_data_exposure_plugin branch from e00291c to 03cdb1c Compare August 8, 2025 02:08

@SeabassMarket SeabassMarket left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Ur GMI

@Carter-Chew
Carter-Chew merged commit 4f60c0b into main Aug 8, 2025
1 check passed
@Carter-Chew
Carter-Chew deleted the carter/update_sensitive_data_exposure_plugin branch August 8, 2025 02:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants