rohitnss

rules:
- id: SSRF
  message: |
    Generic SSRF Java
  metadata:
    cwe: "CWE-X"
    owasp: "A1: Injection"
  severity: ERROR
  patterns:
  - pattern-either:

rohitnss

rules:
- id: crypto
  message: |
    Insecure Cryptographic Functions being Used. Please investigate further
  severity: ERROR
  patterns:
  - pattern-either:
    - pattern: | #Identify any parameter value being equated to Strings using equals method
        $RETURN $METHOD(...,String $VAR, ...) {
          ...

rohitnss

rules:
- id: md5.crypto
  message: |
    Search for MD5
  severity: ERROR
  patterns:
  - pattern-either:
    - pattern-regex: 'MD5'
    - pattern-regex: 'Md5'
    - pattern-regex: 'md5'

rohitnss

rules:
- id: sql.injection
  message: |
    SQL Injection.
  metadata:
    owasp: "A1: Injection"
  severity: ERROR
  patterns:
  - pattern-either:
    - pattern: | #executeQuery

rohitnss

rules:
- id: sql.injection
  message: |
    SQL Injection.
  metadata:
    owasp: "A1: Injection"
  severity: ERROR
  patterns:
  - pattern: | #executeQuery
      $RETURN $METHOD(...,String $VAR, ...) {

rohitnss

rules:
- id: sql.injection
  message: |
    SQL Injection.
  metadata:
    owasp: "A1: Injection"
  severity: ERROR
  patterns:
    - pattern: $SQL = $X + $Y + $Z;
  languages: