diff --git a/docs/en/commonly-used-taint-config.adoc b/docs/en/commonly-used-taint-config.adoc deleted file mode 100644 index 87ba8358a..000000000 --- a/docs/en/commonly-used-taint-config.adoc +++ /dev/null @@ -1,90 +0,0 @@ -[[commonly-used-taint-config.adoc]] -include::attributes.adoc[] - -= Taint Configuration for Common Vulnerabilities - -_Taint Configuration for Common Vulnerabilities_ is a collection of `source`, `sink`, and `transfer` rules tailored for various common vulnerability types. -Currently, this collection contains 327 `source` , 920 `sink`, and 138 `transfer` rules, enabling users to adapt and extend them to detect 13 types of vulnerabilities. - - -== Organizational structure - -We have classified the rules by packages and vulnerability types to help users quickly locate the required ones. -The structure of this project is as follows: - -[source] ----- -taint-configuration -├── sink -│ ├── infoleak # contains 141 sinks -│ │ └── java-io -│ └── injection # contains 779 sinks -│ ├── android -│ │ └── sql-injection -│ ├── java -│ │ ├── crlf -│ │ ├── path-traversal -│ │ ├── rce -│ │ └── ... -│ └── ... -├── source -│ ├── infoleak # contains 158 sources -│ │ └── java -│ └── injection # contains 169 sources -│ ├── apache-struts2 -│ ├── javax -│ │ ├── javax-portlet -│ │ ├── javax-servlet -│ │ └── javax-swing -│ └── ... -└── transfer # contains 138 transfers about String ----- - -Specifically, this project firstly categorizes the configuration files into three main categories: sink, source, and transfer. - -* `sink` category: Contains `sink` configurations files related to information leakage and injection vulnerabilities, further subdivided into two subdirectories: - ** `infoleak`: Categorized by package name. - ** `injection`: Categorized by vulnerability type. - -* `source` category: Contains `source` configurations related to information leakage and injection vulnerabilities, further subdivided into two subdirectories: - ** `infoleak`: Categorized by package name. - ** `injection`: Categorized by package name. - -* `transfer` category: Contains commonly used `transfer` configurations. - -Additionally, each subdirectory contains a corresponding `README` file that provides a brief overview of the relevant vulnerability types. - -== How to Use it? (An Example) - - -Users can directly integrate the configuration files from this collection into the <>, -or modify and extend them as needed to better meet specific analysis requirements. - -Here is an example of how to use the configuration files from this collection. -If the user needs to detect an `RCE (Remote Code Execution)` injection vulnerability in a Java project using the `Jetty` software library, the following steps can be taken to modify the `taint-config.yml` file: - -1. Add the `source` rules related to the *Jetty software library* from the file `taint-configuration/source/injection/jetty/jetty-http/jetty-http.yml` to the `taint-config.yml`. -2. Add the `sink` rules related to the *RCE type injection vulnerability* from the file `taint-configuration/sink/injection/java/rce/command.yml` to the `taint-config.yml`. -3. Add the `transfer` rules related to *String type* from the file `taint-configuration/transfer/string-transfers.yml` to the `taint-config.yml`. - -Example `taint-config.yml` configuration: - -```YAML -source: - - { kind: call, method: "", index: result, type: "java.lang.String" } - - { kind: call, method: "", index: result, type: "java.lang.String" } - - { kind: call, method: "", index: result, type: "java.lang.String" } -#... - -sinks: - - { method: "", index: 0 } - - { method: "", index: 0 } - - { method: "", index: 0 } -#... - -transfer: - - { method: "", from: base, to: result } - - { method: "", from: base, to: result } -#... -``` - diff --git a/docs/en/index-single.adoc b/docs/en/index-single.adoc index a2fe416f7..f9e804d66 100644 --- a/docs/en/index-single.adoc +++ b/docs/en/index-single.adoc @@ -18,8 +18,6 @@ include::types-classes.adoc[leveloffset=+1] include::taint-analysis.adoc[leveloffset=+1] -include::commonly-used-taint-config.adoc[leveloffset=+1] - include::develop-new-analysis.adoc[leveloffset=+1] include::program-abstraction.adoc[leveloffset=+1] diff --git a/docs/en/index.adoc b/docs/en/index.adoc index d4361f9e8..ec8565712 100644 --- a/docs/en/index.adoc +++ b/docs/en/index.adoc @@ -11,7 +11,6 @@ The reference documentation consists of the following sections: * <> * <> * <> -** <> * <> * <> * <> diff --git a/docs/en/taint-analysis.adoc b/docs/en/taint-analysis.adoc index 26e290483..58ace8478 100644 --- a/docs/en/taint-analysis.adoc +++ b/docs/en/taint-analysis.adoc @@ -15,6 +15,7 @@ Taint analysis can be enabled in one of two ways, or both approaches together: * using the programmatic configuration provider. +[[yaml-configuration-file]] === YAML Configuration File In Tai-e, taint analysis is designed and implemented as a plugin of pointer analysis framework. @@ -513,3 +514,90 @@ then you can open the TFG with your web browser and examine it. NOTE: We plan to develop more user-friendly mechanisms for examining taint analysis results in the future. // TODO: == Troubleshooting + +== Pre-prepared Commonly Used Taint Configuration + +_Commonly Used Taint Configuration_ is a collection of _source_, _sink_, and _transfer_ rules tailored for various common vulnerability types. +Currently, this collection contains 327 source, 920 sink, and 138 transfer rules, enabling users to adapt and extend them to detect 13 types of vulnerabilities. + + +=== Organizational structure + +We have classified the rules by packages and vulnerability types to help users quickly locate the required ones. +The structure of this project is as follows: + +[source] +---- +Tai-e/src/main/resources/commonly-used-taint-config +├── sink +│ ├── infoleak # contains 141 sinks +│ │ └── java-io +│ └── injection # contains 779 sinks +│ ├── android +│ │ └── sql-injection +│ ├── java +│ │ ├── crlf +│ │ ├── path-traversal +│ │ ├── rce +│ │ └── ... +│ └── ... +├── source +│ ├── infoleak # contains 158 sources +│ │ └── java +│ └── injection # contains 169 sources +│ ├── apache-struts2 +│ ├── javax +│ │ ├── javax-portlet +│ │ ├── javax-servlet +│ │ └── javax-swing +│ └── ... +└── transfer # contains 138 transfers about String +---- + +Specifically, this project firstly categorizes the configuration files into three main categories: sink, source, and transfer. + +* `sink` category: Contains sinks configurations files related to information leakage and injection vulnerabilities, further subdivided into two subdirectories: +** `infoleak`: Categorized by package name. +** `injection`: Categorized by vulnerability type. + +* `source` category: Contains sources configurations related to information leakage and injection vulnerabilities, further subdivided into two subdirectories: +** `infoleak`: Categorized by package name. +** `injection`: Categorized by package name. + +* `transfer` category: Contains transfers. + +Additionally, each subdirectory contains a corresponding `README` file that provides a brief overview of the relevant vulnerability types. + +=== How to Use it? (An Example) + +Users can directly integrate the configuration files from this collection into the <>, +or modify and extend them as needed to better meet specific analysis requirements. + +Here is an example of how to use the configuration files from this collection. +If the user needs to detect an RCE (Remote Code Execution) injection vulnerability in a Java project using the *Jetty software library*, the following steps can be taken to modify the taint configuration file: + +1. Add the source rules related to the *Jetty software library* from the file `source/injection/jetty/jetty-http/jetty-http.yml`. +2. Add the sink rules related to the *RCE type injection vulnerability* from the file `sink/injection/java/rce/command.yml`. +3. Add the transfer rules related to *String type* from the file `transfer/string-transfers.yml`. + +After these steps, the taint configuration file will be as follows: + +```YAML +source: + - { kind: call, method: "", index: result, type: "java.lang.String" } + - { kind: call, method: "", index: result, type: "java.lang.String" } + - { kind: call, method: "", index: result, type: "java.lang.String" } +#... + +sinks: + - { method: "", index: 0 } + - { method: "", index: 0 } + - { method: "", index: 0 } +#... + +transfer: + - { method: "", from: base, to: result } + - { method: "", from: base, to: result } +#... +``` + diff --git a/src/main/resources/taint-configuration/sink/infoleak/java-io/README.adoc b/src/main/resources/commonly-used-taint-config/sink/infoleak/java-io/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/infoleak/java-io/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/infoleak/java-io/README.adoc diff --git a/src/main/resources/taint-configuration/sink/infoleak/java-io/java-io.yml b/src/main/resources/commonly-used-taint-config/sink/infoleak/java-io/java-io.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/infoleak/java-io/java-io.yml rename to src/main/resources/commonly-used-taint-config/sink/infoleak/java-io/java-io.yml diff --git a/src/main/resources/taint-configuration/sink/injection/android/sql-injection/ContentProvider.yml b/src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/ContentProvider.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/android/sql-injection/ContentProvider.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/ContentProvider.yml diff --git a/src/main/resources/taint-configuration/sink/injection/android/sql-injection/DatabaseUtils.yml b/src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/DatabaseUtils.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/android/sql-injection/DatabaseUtils.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/DatabaseUtils.yml diff --git a/src/main/resources/taint-configuration/sink/injection/android/sql-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/android/sql-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/android/sql-injection/SQLiteDatabase.yml b/src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/SQLiteDatabase.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/android/sql-injection/SQLiteDatabase.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/SQLiteDatabase.yml diff --git a/src/main/resources/taint-configuration/sink/injection/android/sql-injection/SQLiteQueryBuilder.yml b/src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/SQLiteQueryBuilder.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/android/sql-injection/SQLiteQueryBuilder.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/android/sql-injection/SQLiteQueryBuilder.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-Xalan/xpath-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-Xalan/xpath-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-Xalan/xpath-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-Xalan/xpath-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-Xalan/xpath-injection/xpath.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-Xalan/xpath-injection/xpath.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-Xalan/xpath-injection/xpath.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-Xalan/xpath-injection/xpath.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_1x/crlf/Category.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_1x/crlf/Category.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_1x/crlf/Category.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_1x/crlf/Category.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_1x/crlf/Logger.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_1x/crlf/Logger.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_1x/crlf/Logger.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_1x/crlf/Logger.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_1x/crlf/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_1x/crlf/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_1x/crlf/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_1x/crlf/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_2/crlf/Logger.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_2/crlf/Logger.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_2/crlf/Logger.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_2/crlf/Logger.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_2/crlf/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_2/crlf/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-log4j/log4j_2/crlf/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-log4j/log4j_2/crlf/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-santuario-xml-security/xpath/RAEDME.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-santuario-xml-security/xpath/RAEDME.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-santuario-xml-security/xpath/RAEDME.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-santuario-xml-security/xpath/RAEDME.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-santuario-xml-security/xpath/xpath.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-santuario-xml-security/xpath/xpath.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-santuario-xml-security/xpath/xpath.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-santuario-xml-security/xpath/xpath.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/file-disclosure/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/file-disclosure/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/file-disclosure/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/file-disclosure/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/file-disclosure/struts-file-disclosure.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/file-disclosure/struts-file-disclosure.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/file-disclosure/struts-file-disclosure.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/file-disclosure/struts-file-disclosure.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/OgnlUtil.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/OgnlUtil.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/OgnlUtil.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/OgnlUtil.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/TextParseUtil.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/TextParseUtil.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/TextParseUtil.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/TextParseUtil.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/reflection-relative.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/reflection-relative.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/ognl-injection/reflection-relative.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/ognl-injection/reflection-relative.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-struts/other/other.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/other/other.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-struts/other/other.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-struts/other/other.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apache-turbine/sql-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apache-turbine/sql-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-turbine/sql-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-turbine/sql-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apache-turbine/sql-injection/sql-turbine.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apache-turbine/sql-injection/sql-turbine.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apache-turbine/sql-injection/sql-turbine.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apache-turbine/sql-injection/sql-turbine.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apahce-commons/beanutils2/attribute-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/beanutils2/attribute-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apahce-commons/beanutils2/attribute-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/beanutils2/attribute-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apahce-commons/beanutils2/attribute-injection/beans.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/beanutils2/attribute-injection/beans.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apahce-commons/beanutils2/attribute-injection/beans.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/beanutils2/attribute-injection/beans.yml diff --git a/src/main/resources/taint-configuration/sink/injection/apahce-commons/logging/crlf/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/logging/crlf/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apahce-commons/logging/crlf/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/logging/crlf/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/apahce-commons/logging/crlf/crlf-logs.yml b/src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/logging/crlf/crlf-logs.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/apahce-commons/logging/crlf/crlf-logs.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/apahce-commons/logging/crlf/crlf-logs.yml diff --git a/src/main/resources/taint-configuration/sink/injection/java/crlf/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/java/crlf/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/crlf/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/java/crlf/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/java/crlf/crlf-logs.yml b/src/main/resources/commonly-used-taint-config/sink/injection/java/crlf/crlf-logs.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/crlf/crlf-logs.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/java/crlf/crlf-logs.yml diff --git a/src/main/resources/taint-configuration/sink/injection/java/path-traversal/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/java/path-traversal/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/path-traversal/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/java/path-traversal/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/java/path-traversal/path-traversal.yml b/src/main/resources/commonly-used-taint-config/sink/injection/java/path-traversal/path-traversal.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/path-traversal/path-traversal.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/java/path-traversal/path-traversal.yml diff --git a/src/main/resources/taint-configuration/sink/injection/java/rce/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/java/rce/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/rce/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/java/rce/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/java/rce/command.yml b/src/main/resources/commonly-used-taint-config/sink/injection/java/rce/command.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/rce/command.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/java/rce/command.yml diff --git a/src/main/resources/taint-configuration/sink/injection/java/xpath-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/java/xpath-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/xpath-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/java/xpath-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/java/xpath-injection/xpath.yml b/src/main/resources/commonly-used-taint-config/sink/injection/java/xpath-injection/xpath.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/xpath-injection/xpath.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/java/xpath-injection/xpath.yml diff --git a/src/main/resources/taint-configuration/sink/injection/java/xss/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/java/xss/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/xss/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/java/xss/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/java/xss/formatter.yml b/src/main/resources/commonly-used-taint-config/sink/injection/java/xss/formatter.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/xss/formatter.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/java/xss/formatter.yml diff --git a/src/main/resources/taint-configuration/sink/injection/java/xss/output.yml b/src/main/resources/commonly-used-taint-config/sink/injection/java/xss/output.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/java/xss/output.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/java/xss/output.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/ldap-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/javax/ldap-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/ldap-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/ldap-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/javax/ldap-injection/ldap.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/ldap-injection/ldap.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/ldap-injection/ldap.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/ldap-injection/ldap.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/other/el.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/other/el.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/other/el.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/other/el.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/other/response-splitting.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/other/response-splitting.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/other/response-splitting.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/other/response-splitting.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/other/script-engine.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/other/script-engine.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/other/script-engine.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/other/script-engine.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/other/smtp.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/other/smtp.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/other/smtp.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/other/smtp.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/other/trust-boundary-violation.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/other/trust-boundary-violation.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/other/trust-boundary-violation.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/other/trust-boundary-violation.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/other/xslt.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/other/xslt.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/other/xslt.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/other/xslt.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/xss/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/javax/xss/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/xss/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/xss/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/javax/xss/output.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/xss/output.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/xss/output.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/xss/output.yml diff --git a/src/main/resources/taint-configuration/sink/injection/javax/xss/request-dispatcher.yml b/src/main/resources/commonly-used-taint-config/sink/injection/javax/xss/request-dispatcher.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/javax/xss/request-dispatcher.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/javax/xss/request-dispatcher.yml diff --git a/src/main/resources/taint-configuration/sink/injection/slf4j/crlf/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/slf4j/crlf/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/slf4j/crlf/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/slf4j/crlf/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/slf4j/crlf/crlf-logs.yml b/src/main/resources/commonly-used-taint-config/sink/injection/slf4j/crlf/crlf-logs.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/slf4j/crlf/crlf-logs.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/slf4j/crlf/crlf-logs.yml diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/beans/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/beans/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/beans/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/beans/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/beans/beans.yml b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/beans/beans.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/beans/beans.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/beans/beans.yml diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/file-disclosure/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/file-disclosure/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/file-disclosure/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/file-disclosure/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/file-disclosure/spring-file-disclosure.yml b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/file-disclosure/spring-file-disclosure.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/file-disclosure/spring-file-disclosure.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/file-disclosure/spring-file-disclosure.yml diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/ldap-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/ldap-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/ldap-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/ldap-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/ldap-injection/ldap.yml b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/ldap-injection/ldap.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/ldap-injection/ldap.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/ldap-injection/ldap.yml diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/spel-inejction/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/spel-inejction/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/spel-inejction/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/spel-inejction/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/spel-inejction/spring-expression.yml b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/spel-inejction/spring-expression.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/spel-inejction/spring-expression.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/spel-inejction/spring-expression.yml diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/sql-injection/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/sql-injection/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/sql-injection/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/sql-injection/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/spring-framework/sql-injection/sql-spring.yml b/src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/sql-injection/sql-spring.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/spring-framework/sql-injection/sql-spring.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/spring-framework/sql-injection/sql-spring.yml diff --git a/src/main/resources/taint-configuration/sink/injection/tinylog/crlf/README.adoc b/src/main/resources/commonly-used-taint-config/sink/injection/tinylog/crlf/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/tinylog/crlf/README.adoc rename to src/main/resources/commonly-used-taint-config/sink/injection/tinylog/crlf/README.adoc diff --git a/src/main/resources/taint-configuration/sink/injection/tinylog/crlf/crlf-logs.yml b/src/main/resources/commonly-used-taint-config/sink/injection/tinylog/crlf/crlf-logs.yml similarity index 100% rename from src/main/resources/taint-configuration/sink/injection/tinylog/crlf/crlf-logs.yml rename to src/main/resources/commonly-used-taint-config/sink/injection/tinylog/crlf/crlf-logs.yml diff --git a/src/main/resources/taint-configuration/source/infoleak/java/README.adoc b/src/main/resources/commonly-used-taint-config/source/infoleak/java/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/infoleak/java/README.adoc rename to src/main/resources/commonly-used-taint-config/source/infoleak/java/README.adoc diff --git a/src/main/resources/taint-configuration/source/infoleak/java/java-io.yml b/src/main/resources/commonly-used-taint-config/source/infoleak/java/java-io.yml similarity index 100% rename from src/main/resources/taint-configuration/source/infoleak/java/java-io.yml rename to src/main/resources/commonly-used-taint-config/source/infoleak/java/java-io.yml diff --git a/src/main/resources/taint-configuration/source/infoleak/java/java-lang-system.yml b/src/main/resources/commonly-used-taint-config/source/infoleak/java/java-lang-system.yml similarity index 100% rename from src/main/resources/taint-configuration/source/infoleak/java/java-lang-system.yml rename to src/main/resources/commonly-used-taint-config/source/infoleak/java/java-lang-system.yml diff --git a/src/main/resources/taint-configuration/source/infoleak/java/java-net.yml b/src/main/resources/commonly-used-taint-config/source/infoleak/java/java-net.yml similarity index 100% rename from src/main/resources/taint-configuration/source/infoleak/java/java-net.yml rename to src/main/resources/commonly-used-taint-config/source/infoleak/java/java-net.yml diff --git a/src/main/resources/taint-configuration/source/infoleak/java/java-sql.yml b/src/main/resources/commonly-used-taint-config/source/infoleak/java/java-sql.yml similarity index 100% rename from src/main/resources/taint-configuration/source/infoleak/java/java-sql.yml rename to src/main/resources/commonly-used-taint-config/source/infoleak/java/java-sql.yml diff --git a/src/main/resources/taint-configuration/source/injection/apache-struts2/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/apache-struts2/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/apache-struts2/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/apache-struts2/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/apache-struts2/struts2.yml b/src/main/resources/commonly-used-taint-config/source/injection/apache-struts2/struts2.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/apache-struts2/struts2.yml rename to src/main/resources/commonly-used-taint-config/source/injection/apache-struts2/struts2.yml diff --git a/src/main/resources/taint-configuration/source/injection/apache-wicket/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/apache-wicket/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/apache-wicket/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/apache-wicket/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/apache-wicket/wicket.yml b/src/main/resources/commonly-used-taint-config/source/injection/apache-wicket/wicket.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/apache-wicket/wicket.yml rename to src/main/resources/commonly-used-taint-config/source/injection/apache-wicket/wicket.yml diff --git a/src/main/resources/taint-configuration/source/injection/dropwizard/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/dropwizard/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/dropwizard/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/dropwizard/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/dropwizard/dropwizard-jersey/dropwizard-jersey.yml b/src/main/resources/commonly-used-taint-config/source/injection/dropwizard/dropwizard-jersey/dropwizard-jersey.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/dropwizard/dropwizard-jersey/dropwizard-jersey.yml rename to src/main/resources/commonly-used-taint-config/source/injection/dropwizard/dropwizard-jersey/dropwizard-jersey.yml diff --git a/src/main/resources/taint-configuration/source/injection/dropwizard/dropwizard-servlets/dropwizard-servlet.yml b/src/main/resources/commonly-used-taint-config/source/injection/dropwizard/dropwizard-servlets/dropwizard-servlet.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/dropwizard/dropwizard-servlets/dropwizard-servlet.yml rename to src/main/resources/commonly-used-taint-config/source/injection/dropwizard/dropwizard-servlets/dropwizard-servlet.yml diff --git a/src/main/resources/taint-configuration/source/injection/java/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/java/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/java/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/java/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/java/java-awt.yml b/src/main/resources/commonly-used-taint-config/source/injection/java/java-awt.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/java/java-awt.yml rename to src/main/resources/commonly-used-taint-config/source/injection/java/java-awt.yml diff --git a/src/main/resources/taint-configuration/source/injection/java/java-io.yml b/src/main/resources/commonly-used-taint-config/source/injection/java/java-io.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/java/java-io.yml rename to src/main/resources/commonly-used-taint-config/source/injection/java/java-io.yml diff --git a/src/main/resources/taint-configuration/source/injection/java/java-net.yml b/src/main/resources/commonly-used-taint-config/source/injection/java/java-net.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/java/java-net.yml rename to src/main/resources/commonly-used-taint-config/source/injection/java/java-net.yml diff --git a/src/main/resources/taint-configuration/source/injection/java/java-util-Scanner.yml b/src/main/resources/commonly-used-taint-config/source/injection/java/java-util-Scanner.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/java/java-util-Scanner.yml rename to src/main/resources/commonly-used-taint-config/source/injection/java/java-util-Scanner.yml diff --git a/src/main/resources/taint-configuration/source/injection/javax/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/javax/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/javax/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/javax/javax-portlet/PortletRequest.yml b/src/main/resources/commonly-used-taint-config/source/injection/javax/javax-portlet/PortletRequest.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/javax-portlet/PortletRequest.yml rename to src/main/resources/commonly-used-taint-config/source/injection/javax/javax-portlet/PortletRequest.yml diff --git a/src/main/resources/taint-configuration/source/injection/javax/javax-portlet/portlet-other.yml b/src/main/resources/commonly-used-taint-config/source/injection/javax/javax-portlet/portlet-other.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/javax-portlet/portlet-other.yml rename to src/main/resources/commonly-used-taint-config/source/injection/javax/javax-portlet/portlet-other.yml diff --git a/src/main/resources/taint-configuration/source/injection/javax/javax-servlet/Cookie.yml b/src/main/resources/commonly-used-taint-config/source/injection/javax/javax-servlet/Cookie.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/javax-servlet/Cookie.yml rename to src/main/resources/commonly-used-taint-config/source/injection/javax/javax-servlet/Cookie.yml diff --git a/src/main/resources/taint-configuration/source/injection/javax/javax-servlet/HttpServletRequestWrapper.yml b/src/main/resources/commonly-used-taint-config/source/injection/javax/javax-servlet/HttpServletRequestWrapper.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/javax-servlet/HttpServletRequestWrapper.yml rename to src/main/resources/commonly-used-taint-config/source/injection/javax/javax-servlet/HttpServletRequestWrapper.yml diff --git a/src/main/resources/taint-configuration/source/injection/javax/javax-servlet/ServletRequestWrapper.yml b/src/main/resources/commonly-used-taint-config/source/injection/javax/javax-servlet/ServletRequestWrapper.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/javax-servlet/ServletRequestWrapper.yml rename to src/main/resources/commonly-used-taint-config/source/injection/javax/javax-servlet/ServletRequestWrapper.yml diff --git a/src/main/resources/taint-configuration/source/injection/javax/javax-swing/swing.yml b/src/main/resources/commonly-used-taint-config/source/injection/javax/javax-swing/swing.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/javax/javax-swing/swing.yml rename to src/main/resources/commonly-used-taint-config/source/injection/javax/javax-swing/swing.yml diff --git a/src/main/resources/taint-configuration/source/injection/jetty/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/jetty/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/jetty/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/jetty/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/jetty/jetty-http/jetty-http.yml b/src/main/resources/commonly-used-taint-config/source/injection/jetty/jetty-http/jetty-http.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/jetty/jetty-http/jetty-http.yml rename to src/main/resources/commonly-used-taint-config/source/injection/jetty/jetty-http/jetty-http.yml diff --git a/src/main/resources/taint-configuration/source/injection/jetty/jetty-server/jetty-server.yml b/src/main/resources/commonly-used-taint-config/source/injection/jetty/jetty-server/jetty-server.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/jetty/jetty-server/jetty-server.yml rename to src/main/resources/commonly-used-taint-config/source/injection/jetty/jetty-server/jetty-server.yml diff --git a/src/main/resources/taint-configuration/source/injection/jetty/jetty-session/jetty-session.yml b/src/main/resources/commonly-used-taint-config/source/injection/jetty/jetty-session/jetty-session.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/jetty/jetty-session/jetty-session.yml rename to src/main/resources/commonly-used-taint-config/source/injection/jetty/jetty-session/jetty-session.yml diff --git a/src/main/resources/taint-configuration/source/injection/sonarqube/README.adoc b/src/main/resources/commonly-used-taint-config/source/injection/sonarqube/README.adoc similarity index 100% rename from src/main/resources/taint-configuration/source/injection/sonarqube/README.adoc rename to src/main/resources/commonly-used-taint-config/source/injection/sonarqube/README.adoc diff --git a/src/main/resources/taint-configuration/source/injection/sonarqube/sonarqube-ws/sonarqube-ws.yml b/src/main/resources/commonly-used-taint-config/source/injection/sonarqube/sonarqube-ws/sonarqube-ws.yml similarity index 100% rename from src/main/resources/taint-configuration/source/injection/sonarqube/sonarqube-ws/sonarqube-ws.yml rename to src/main/resources/commonly-used-taint-config/source/injection/sonarqube/sonarqube-ws/sonarqube-ws.yml diff --git a/src/main/resources/taint-configuration/transfer/string-transfers.yml b/src/main/resources/commonly-used-taint-config/transfer/string-transfers.yml similarity index 100% rename from src/main/resources/taint-configuration/transfer/string-transfers.yml rename to src/main/resources/commonly-used-taint-config/transfer/string-transfers.yml