Visit Website

This repository sponsored by ScanFactory provides a comprehensive list of security vulnerabilities in regular expressions commonly used in Web Application Firewalls (WAFs), with a focus on bypass examples and high severity issues. It includes SAST tools to identify vulnerabilities in custom regular expressions, and was first introduced at BlackHat USA 2016.

ALTERNATIVES