-
-
Notifications
You must be signed in to change notification settings - Fork 583
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add Lightfuzz (Draft) #1817
base: dev
Are you sure you want to change the base?
Add Lightfuzz (Draft) #1817
Conversation
…alooza lightfuzz - Add many comments
Add Portfilter to Lightfuzz Presets
…nal-encoding adding conditional url-encoding, fixing xml parameter extraction bug
…ize-fp-fix Reduce lightfuzz serial submodule False Positives
@TheTechromancer As i've explained before, the overhead for building these using yara means for these small quick checks its actually MUCH faster. We really dont want to be compiling yara rules constantly. The existing stuff we do with yara involves compiling them once at the beginning of the scan, which is expensive but obviously well worth it as they are used for the life of the scan. This current string_scan implementation is working great. Package overhead of ahocorasick is minuscule, if we're looking to lean things up there are much better choices. |
…ttpcompare-error correctly handling HttpCompare errors
…al-params-fix fixing additional params bug + adding tests
For now, a placeholder to assist in keeping the lightfuzz branch synced with changes to dev until it's ready
Other TODOs:
@TheTechromancer follow up on: