Other nomination
Till REcollapse: : Fuzzing the web for mysterious bugs
REcollapse fuzzes single bytes at regex pivot positions - the start and end of an input, either side of separators, and characters that normalisation folds - to get past validation and sanitisation that a later transformation undoes. Bypasses found this way include open redirects, web application firewall evasion and zero-interaction account takeover through normalised email addresses.
Record
- Researcher
- 0xacb
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of 0xacb, first published at the original source. Preserved copies are kept so the citation survives its host.