Collaborate Disseminate
How do I bypass a regex filter that filters all html to avoid xss? I’ve tried using things like <img src="aa" onerror="alert(1)"> but still no luck. This is for a CTF challenge btw.
The regex is: <[\s\S… Continue reading How do I bypass a regex filter that filters all html to avoid xss?
I’m currently working on a website and want to prevent characters being inputted, i am using following code
if (!preg_match("/^[a-zA-Z0-9_!,()& -\/]*$/"
is it possible to exploit this and if so how? would like to know ways t… Continue reading Is it possible to exploit preg_match similar to preg_replace PHP?
I’m using Fail2ban on a Mailcleaner server which works pretty good, but I want to update it to ban hosts who want to spoof our addresses. I’m using the "original" mc-exim-filter, but I don’t really understand how regular expressi… Continue reading Mailcleaner – Fail2ban – mc-exim-filter configuration
I would like to verify that the input from the user complies to the format of email address (in Java application).
On the following page there is verbose regex that should properly validate the email http://emailregex.com/ (RFC 5322 Offici… Continue reading Email pattern ReDoS
Being an editor is a job that seems deceptively easy until you are hauled over the coals for letting a textual howler go to print (or website). Most publications have style guides to ensure that their individual voice is preserved, …read more
Continue reading 13,000 Regular Expressions Make An Editor’s Life Easier
I hope everyone had a wonderful Thanksgiving last week. My household celebrated by welcoming a 4th member to the family. My daughter was born on Wednesday morning, November 25th. And thus explains what I did last week instead of writing the normal Hackaday column. Never fear, we shall catch up …read more
Continue reading This Week in Security: iOS Wifi Incantations, Ghosts, and Bad Regex
In the Star Wars universe, not everyone uses a lightsabe, and those who do wield them had to build them themselves. There’s something to be said about that strategy. Building a car or a radio is a great way to learn how those things work. That’s what [Low Level JavaScript] …read more
I am trying some regex code into /etc/fail2ban/filter.d/guacamole.conf and can’t grep the syslog errors.
For example
\bAuthentication attempt from \[<HOST>(?:,.*)?\] for user ".*" failed\.
datepattern = ^%%b %%d, %%ExY %%I:… Continue reading Guacamole Fail2Ban Regex [migrated]
Where can I find RegEx that can pattern match common secret strings?
I have a product that scans repos and commits and in case a developer tries to commit a secret (i.e. passwords, keys). It scans for roughly 30 patterns by default which s… Continue reading Source of RegEx examples of Secret Detection patterns in repositories?
When testing for XSS, is it at all possible to bypass the below regex? I doubt it because it only accepts uppercase and lowercase letters, but maybe?
/^[A-Za-z]+$/