Skip to content

Checking regular expression denial of service (ReDoS) with various languages / regex engines

License

Notifications You must be signed in to change notification settings

spenserblack/redos-checks

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ReDoS Checks

This is a simple repository to check if a language / regex engine is vulnerable to ReDoS. If you've written a regular expression with catastrophic backtracking, you may be vulnerable to DoS via a text input that exploits that regular expression.

redos.json contains a collection of vulnerable regular expressions, and text inputs that exploits the vulnerabilities.

The "ReDoS Checks" action ReDoS Checks executes simple implementations to execute the vulnerable regular expression on the dangerous input, timing out if it takes too long.

About

Checking regular expression denial of service (ReDoS) with various languages / regex engines

Topics

Resources

License

Stars

Watchers

Forks