none
Using SDL Tools for .NET applications hosted in Linux

    Pergunta

  • I just have a thought about the applicability of MS SDL tools like Regex Fuzzer, SDL BinScope for the .NET applications hosted in Linux etc. environments.

    Please confirm and can we do it?

    Thanks

     

    segunda-feira, 23 de janeiro de 2012 07:49

Respostas

  • Regex Fuzzer is not a problem since it works directly on regular expressions that are pulled out of the code.

    BinScope runs on applications binaries, so I don't see an issue with hosting environment. Please explain in more detail the approach to hosting these applications in Linux or other environments.

    segunda-feira, 23 de janeiro de 2012 19:02
    Moderador

Todas as Respostas

  • Regex Fuzzer is not a problem since it works directly on regular expressions that are pulled out of the code.

    BinScope runs on applications binaries, so I don't see an issue with hosting environment. Please explain in more detail the approach to hosting these applications in Linux or other environments.

    segunda-feira, 23 de janeiro de 2012 19:02
    Moderador
  • Hi,

    i want to ask that how can we use Regex Fuzzer functionality in our .net application (Asp.net & C#) to validate that is user input regular expression non vulnerable and will not cause application denial of service?

    any other options for user input regular expression validation w.r.t ReDos..

    Any plans for a command line interface so large numbers of regular expressions can be evaluated in a batch?

    Regards,

    Amjad

    sexta-feira, 1 de janeiro de 2016 10:00