Skip to content

A tool to measure the time a Regular Expression takes in order to illustrate ReDoS vulnerabilities

License

Notifications You must be signed in to change notification settings

philnash/regexp-timer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

15 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

RegExp Timer

The Regular expression Denial of Service (ReDoS) attack exploits the implementation of a regular expression engine causing them to run in exponential time related to the input size. This tool allows you to test various regular expressions against different input inside your browser to measure the time it takes to test an input against a regular expression in order to illustrate this attack.

Use the application

The application is available at https://philnash.github.io/regexp-timer.

Usage

Clone the repo from GitHub:

git clone https://github.com/philnash/regexp-timer.git

Install the dependencies:

npm install

Start the server:

npm start

You can now visit the application at http://localhost:3000.

License

MIT License Copyright (c) 2023 Phil Nash

About

A tool to measure the time a Regular Expression takes in order to illustrate ReDoS vulnerabilities

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Sponsor this project

 

Packages

No packages published