regexp-security-cheatsheet

Regexp vulnerability guide

A resource for identifying and avoiding common security vulnerabilities in regular expressions used in web application security

GitHub

707 stars
35 watching
105 forks
Language: PHP
last commit: about 4 years ago
Linked from 2 awesome lists


Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
sindresorhus/escape-string-regexpEscapes special characters in regular expressions to ensure safe string insertion584
jagracey/regex-dosScans Regular Expressions for potential performance issues that can be exploited for Denial of Service attacks163
tc39/proposal-regex-escapingStandardizes escaping of string characters for use in regular expressions.375
niklongstone/regular-expression-cheat-sheetA comprehensive resource providing regular expression patterns and explanations for common use cases.289
davisjam/vuln-regex-detectorDetects vulnerable regexes in source code to prevent catastrophic backtracking and other security issues.320
attackercan/burp-xss-sql-pluginAutomated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications.44
rundevelopment/regexp-ast-analysisA TypeScript library that parses and analyzes JavaScript regular expressions into abstract syntax tree nodes3
chalk/ansi-regexA regular expression library for matching ANSI escape codes188
a-n-t-h-o-n-y/regexploreA live regular expression testing environment built with curses.8
jkutner/saferegexA tool to identify potential regular expression vulnerabilities in software52
tc39/proposal-regexp-r-escapeProposes an escape sequence for matching Unicode line terminators in regular expressions5
nasciiboy/recursiveregexpraptor-4A C-language regular expression engine designed for speed and simplicity.10
reider-roque/linpostexpTools for analyzing and exploiting vulnerabilities in Linux systems176
dmitrysoshnikov/regexp-treeTools and APIs for parsing, manipulating, and executing regular expressions in JavaScript401
ivan-sincek/penetration-testing-cheat-sheetA comprehensive resource for penetration testing and vulnerability assessment669