regexp-security-cheatsheet

Regexp vulnerability guide

A resource for identifying and avoiding common security vulnerabilities in regular expressions used in web application security

GitHub

711 stars
35 watching
104 forks
Language: PHP
last commit: over 2 years ago
Linked from 2 awesome lists


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
sindresorhus/escape-string-regexp Escapes special characters in regular expressions to ensure safe string insertion 582
jagracey/regex-dos Scans Regular Expressions for potential performance issues that can be exploited for Denial of Service attacks 162
tc39/proposal-regex-escaping An ECMAScript standard proposal to improve regular expression escaping functionality. 369
niklongstone/regular-expression-cheat-sheet A comprehensive resource providing regular expression patterns and explanations for common use cases. 290
davisjam/vuln-regex-detector Detects vulnerable regexes in source code to prevent catastrophic backtracking and other security issues. 320
attackercan/burp-xss-sql-plugin Automated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications. 44
rundevelopment/regexp-ast-analysis A TypeScript library that parses and analyzes JavaScript regular expressions into abstract syntax tree nodes 3
chalk/ansi-regex A regular expression library for matching ANSI escape codes 185
a-n-t-h-o-n-y/regexplore A live regular expression testing environment built with curses. 8
jkutner/saferegex A tool to identify potential regular expression vulnerabilities in software 52
tc39/proposal-regexp-r-escape Proposes an escape sequence for matching Unicode line terminators in regular expressions 5
nasciiboy/recursiveregexpraptor-4 A C-language regular expression engine designed for speed and simplicity. 10
reider-roque/linpostexp Tools for analyzing and exploiting vulnerabilities in Linux systems 176
dmitrysoshnikov/regexp-tree Tools and APIs for parsing, manipulating, and executing regular expressions in JavaScript 401
ivan-sincek/penetration-testing-cheat-sheet A comprehensive resource for penetration testing and vulnerability assessment 660