Skip to main content

Questions tagged [rust]

Rust is a memory-safe programming language.

Filter by
Sorted by
Tagged with
2 votes
2 answers
152 views

Can and should a penetration test report include an informational note about not having used a (by-design) memory-safe programming language?

Firstly, a quote from a good article about the importance of memory safety by memorysafety.org: How common are memory safety vulnerabilities? Extremely. A recent study found that 60-70% of ...
Bob Ortiz's user avatar
  • 6,715
11 votes
3 answers
4k views

Filter arbitrary code for blacklisted keywords except on commented lines

I have a Rust-app executing Python-scripts using PyO3. The Python-scripts are uploaded by users, so I need to check for unsafe code before executing it. The scripts should only be able to do ...
O'Niel's user avatar
  • 2,916
0 votes
0 answers
101 views

Securing arbitrary code execution in Rust

I have a Rust application receiving a lot of data. The programmer can make different Python files to test different algorithms on that same data. He uploads the Python file and in Rust the Python-file ...
O'Niel's user avatar
  • 2,916
1 vote
1 answer
229 views

Does rust's Cargo provide cryptographic authentication and integrity validation?

Does rust's cargo package manager cryptographically validate its payload's authentication and integrity for all packages after downloading them and before installing them? I see a lot of guides ...
Michael Altfield's user avatar
0 votes
0 answers
177 views

how to resolve initiating errors while running scripts with Rustscan Scripting Engine?

I wrote a one-liner shell script for rustscan which runs gobuster if port 80 is open. I have added the script to /home/$USER/.rustscan_scripts directory. The script looks like: #!/bin/bash #tags=[&...
Gaurav Purswani's user avatar
0 votes
1 answer
209 views

How to get gain the knowledge to be a beginner penetration tester on my own? [closed]

I want to apply for a job as a penetration tester in a good company. I have a fairly good knowledge of programming and have experience as a back-end developer. I started to work with Burpsuite, ZAP, ...
chameleon123's user avatar
54 votes
3 answers
7k views

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

I recently read the Rust language documentation and saw this: By default, HashMap uses a cryptographically secure hashing function that can provide resistance to Denial of Service (DoS) attacks. ...
Greaka's user avatar
  • 643
9 votes
1 answer
493 views

Is it worth it to fuzz Rust-written software?

If a program is written in C, then it is worth it to fuzz it with something like afl since it might have memory-related bugs. But how about software written in Rust? Would a fuzzer still find bugs? Or ...
user164700's user avatar
3 votes
2 answers
396 views

Would the Cloudbleed have been prevented if Rust was used?

Would the Cloudbleed have been prevented if Rust was used? I know it is not the same as Heartbleed, but Rust would probably have prevented Heartbleed.
Marina Ala's user avatar