Collaborate Disseminate
I’m wondering if it is possible to detect 100% of the possible SQLi attacks using a simple regex.
In other words, using very simple PHP code as an example:
if (preg_match(“/select/i”, $input)) {
attack_log(“Possible SELECT SQLi detec… Continue reading Is it possible to detect 100% of SQLi with a simple regex?
There are various methods to find attack patterns for different types of attacks. Apache-scalp is one such tool, but the rule set is not available to find the brute-force attack pattern via regular expression. I would love to know the diff… Continue reading What are the common features to identify Brute-Force attack from Apache log file?
What is regular expression (regex) and what makes it vulnerable to attack? Learn how to use regex safely and avoid ReDoS attacks in the process.
Categories:
Business
Technology
Tags: ddosJavaScriptnode.jsredosregexsearchservervulnerability
I was in a mall a few days ago and I searched for a shop on an indication panel.
Out of curiosity, I tried a search with (.+) and was a bit surprised to get the list of all the shops in the mall.
I’ve read a bit about evil … Continue reading Is it safe to let a user type a regex as a search input?
I want to optimize the way I’m using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters.
First I tried using the –increment=ASCII o… Continue reading Brute force hex password with exactly two special characters using JohnTheRipper