Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Base64 encoded headers evade analysis for matching #125

Open
AP41000 opened this issue Apr 2, 2023 · 0 comments
Open

Base64 encoded headers evade analysis for matching #125

AP41000 opened this issue Apr 2, 2023 · 0 comments

Comments

@AP41000
Copy link

AP41000 commented Apr 2, 2023

Does fdm decode base64 and quoted printable strings in headers before any matching is done ? (NB : I didn't parse the code to confirm it.)

If not, could fdm implement some in-memory (the original content would be left as-read) unfolding (maybe already done) and decoding of quoted-printable and base64 encoded strings in headers ? Without that, regular expression matching misses things. I tried to implement a workaround with some temporary extra headers but I can't find anything to put the result of a pipe command into a new header.

To preserve compatibility with existing configurations, a "decoded"/"undecoded" directive could be added to fdm config syntax to explicitely tell rdm to parse a decoded or an undecoded header/body string.

PS : some info about my config...

  • fdm release : 2.2
  • OS : Arch linux
  • Arch package version : 2.2-2
  • Kernel : 6.2.9-arch1-1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant