mschwager

Multiple AddressSanitizer memory violations

3

Hi there, I've been working on a new fuzzer for Ruby, and I used your library as a test harness. I've found a number of AddressSanitizer memory violations occurring when...

Editing SAMLResponse does not re-sign

1

Hi there, Thanks for the great Burp extension, I use it frequently. I'm running into some trouble performing custom modifications of SAML responses. Here's what I'd like to do: modify...

Move OSS-Fuzz target file under tests

2

Hi again! I'm back working on fuzzing and trying to learn more about OSS-Fuzz. After my initial research into this project, I'm now hoping to promote it to OSS-Fuzz's ["initial...

Add OpenAPI/Swagger JSON output subcommand

1

E.g. https://swagger.io/specification/ It'd be helpful to have a subcommand that can turn Semgrep JSON results into an OpenAPI/Swagger JSON spec. This spec file could then be used in DAST scanners...

Add support for Java Play Framework

2

https://www.playframework.com/

Ruby Rails support for route detection and authn/authz detection is currently limited. This is primarily due to two factors: - [Convention over configuration](https://stackoverflow.com/questions/71985512/convention-over-configuration-in-rails). This means Rails' connection between a route...

Include things like what node colors mean, etc.

https://pkg.go.dev/net/http#example-ServeMux.Handle

https://docs.pylonsproject.org/projects/pyramid/en/latest/index.html

https://vuejs.org/