 |
Post AvzqfgSwMPJYLB8TRo by [email protected] |
 |
More posts by [email protected] |
|
Post #AvznoRGZwOxFwbpw1Y by [email protected] |
|
0 likes, 1 repeats |
|
|
|
longest PCRE string I've had to do for a vuln yet:https://github.com/wudipj… |
|
|
|
Post #AvznvmQvdoaRcTB7pI by [email protected] |
|
0 likes, 1 repeats |
|
|
|
it catches on the assload of parameters than can trigger the buffer overflow, f… |
|
|
|
Post #Avzo3sAIDNYjiFFvai by [email protected] |
|
0 likes, 1 repeats |
|
|
|
might not be impressive to you, but I've come a long way on using PCRE in s… |
|
|
|
Post #AvzpGw0HM2sHKuMe7U by [email protected] |
|
0 likes, 1 repeats |
|
|
|
if you're curious how this rule ended up, here's the end-game:alert htt… |
|
|
|
Post #Avzq0hjOkbf4OOIEoy by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@da_667 you don't need to explicitly use the fast_pattern keyword? Suri is … |
|
|
|
Post #AvzqKPzGQsRZ9T7ACu by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@cyb3rslayer so, in some cases, yes, you need to define a fast_pattern if there… |
|
|
|
Post #AvzqQ5Bofc2gO2ge0G by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@cyb3rslayer in this case, you're correct that I do have to call the fast_p… |
|
|
|
Post #AvzqfgSwMPJYLB8TRo by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@da_667 |
|
|
|
Post #Aw09z3B22kJdPQhuiG by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@da_667 I didn't know you could do nested group matches! That or I can'… |
|
|
|
Post #Aw09z3I7cNzFlQ1ZlQ by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@daedalus as with all things, every programming language tries to do regex diff… |
|
|
|
Post #Aw0A2eB4vpr729RbFI by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@daedalus but yeah at least for Snort (which uses PCRE1 libraries and Suricata … |
