Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Lightfuzz (Draft) #1817

Draft
wants to merge 360 commits into
base: dev
Choose a base branch
from
Draft

Add Lightfuzz (Draft) #1817

wants to merge 360 commits into from

Conversation

liquidsec
Copy link
Collaborator

@liquidsec liquidsec commented Oct 3, 2024

For now, a placeholder to assist in keeping the lightfuzz branch synced with changes to dev until it's ready

  • Body Parameters (new type, xml / JSON)
  • SSRF Submodule (on hold)
  • Documentation
  • Add comments to all lightfuzz submodules explaining detection logic, etc
  • override logging to automatically prepend lightfuzz submodule to messages
  • add portfilter module to all lightfuzz presets
  • Answer the question - deadly module or not?

Other TODOs:

  • Make lightfuzz into a folder
  • Reduce duplicate code in excavate (emission of WEB_PARAMETER)

@TheTechromancer follow up on:

  • Autogenerating documentation for lightfuzz modules based off their docstrings/metadata (similar to BBOT modules)
  • Necessity of using acorasick python library over yara

@liquidsec
Copy link
Collaborator Author

@TheTechromancer
"Necessity of using acorasick python library over yara"

As i've explained before, the overhead for building these using yara means for these small quick checks its actually MUCH faster. We really dont want to be compiling yara rules constantly. The existing stuff we do with yara involves compiling them once at the beginning of the scan, which is expensive but obviously well worth it as they are used for the life of the scan. This current string_scan implementation is working great.

Package overhead of ahocorasick is minuscule, if we're looking to lean things up there are much better choices.

@liquidsec liquidsec changed the title Draft Lightfuzz PR Add Lightfuzz (Draft) Jan 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants