Collaborate Disseminate
I see that some tools that have to match filenames only support regex and not globs. Would these tools be using globs to improve security?
Is there a security aspect to using globs over regex when matching filenames?
Continue reading Why should one use globs over regex when doing filename pattern matching?
I see that some tools that have to match filenames only support regex and not globs. Would these tools be using globs improve their security?
Is there a security aspect to using globs over regex when matching filenames?
Continue reading Why should one use globs over regex when doing filename pattern matching?
I have an API which is protected by AWS Cloudfront. I found a ReDos in one of my API Endpoints. The endpoint looks like this:
https://mywebsite.com/api/myendpoint?apikey=xxxx&namefilter=yyyy
The user specifies the apiKey and a namefilt… Continue reading ReDOS – Vulnerability found, but DOS not possible
“Please say it wasn’t a regex, please say it wasn’t a regex; aww, crap, it was a regex!” That seems to be the conclusion now that Crowdstrike has released a …read more Continue reading Hackaday Links: August 11, 2024
There are two types of people in the world: those who have no idea what a regular expression is, and those who not only know what they are but can …read more Continue reading Regular Expressions Finally Come to Microsoft Excel
I noticed that whenever someone tries to send XSS data, Cloudflare blocks it.
So I tested it and concluded the pattern.
I want to implement a Regex that detects any XSS pattern and block it.
Note: I already made sure that my client side e… Continue reading Is it a good idea to implement an XSS blocking middleware like cloudflare?
These days, you can’t throw a USB stick without hitting something that’s running Linux. It might be a phone, an embedded device, or your TV. Either way, it’s running Linux, …read more Continue reading Galvanize Your Grip On Grep With This Great Grep Guide
I was asked the following question at job interview recently.
You need to reach a web-server at the ip address 20.21.22.23 via browser using HTTP. Browser checks the ip address and blocks requests to the ips that match the regex ^http(s)?:… Continue reading How to bypass regex block of request?
I was asked the following question at a job interview recently:
You need to reach a web server at the IP address 20.21.22.23 via browser using HTTP. Browser checks the IP address and blocks requests to the IPs that match the regex ^http(s… Continue reading How to bypass regex block of request?
Is it possible to set a pattern for creating passwords or username just by simple regex? And it this a good idea?