New answers tagged

7

Regex can become an incredibly slow operation in Python 3 because python's re module doesn't build a DFA in the background and instead uses recursive backtracking. This means that the regular expression will take exponential time rather than linear time when applied to a string. An attacker could construct a regular expression that takes the maximum amount ...


3

According to several of these answers: http://serverfault.com/questions/381393/can-the-ip-address-for-an-http-request-be-spoofed It is really unlikely that you could indeed spoof the IP address and send a full HTTP request to a server. TCP requires a three-way handshake, which means sending one packet back to the sender and expecting a very specific answer ...


2

The two major attack vectors that spring to mind are Non-Blind and Blind spoofing, which make use of spoofed IP's and TCP to take control of a IP/TCP session. Although the Non-Blind attack in particular may not be prevented by Source address validation. When on the same subnet as an attacker, hijacking of a legitimate TCP connection is possible by sniffing ...



Top 50 recent answers are included