wrdn-data-exfil

Detect data-exfiltration paths by tracing untrusted input from sources to sinks across HTTP clients, file I/O, raw queries, and export pipelines. Analyzing code diffs maps the end-to-end data flow to reveal potential leakage vectors.

A data-leak path connects untrusted input sources to data exfiltration sinks. Tracing this path across code libraries and frameworks identifies how malicious data flows to HTTP clients, raw queries, or XML parsing endpoints.

Trace untrusted data flow across HTTP clients and file I/O by analyzing code diffs to map the source-to-sink path. Applying framework-specific guidance validates how data moves through response serializers and error handlers.

Yes, this data-exfiltration analysis is framework-agnostic. It traces untrusted inputs to sinks using included references for data-leak patterns and framework-specific guidance to validate leakage scenarios across varied libraries.

Yes, you can analyze raw queries and XML parsing for data leakage. The analysis scope explicitly covers tracing untrusted input through these sinks within code diffs to identify exfiltration vulnerabilities.

Tracing data-exfiltration paths is limited to the scope of provided code diffs. Analysis requires diffs touching HTTP clients, file I/O, raw queries, XML parsing, response serializers, error handlers, or export pipelines to map data flow.