orhun/rustypaste
Mitigating the effects of content discovery and fuzzer tools
オープン
#28 opened on 2022/10/03
help wantedquestion
Repository metrics
- Stars
- (1,183 個のスター)
- PR merge metrics
- (PR metrics pending)
説明
Even though the names of uploaded files are random, fuzzer utilities can be used to discover content on the server.
Related questions are:
- How can
rustypastebe affected by such situation?- Need a demonstration of fuzzing with rustbuster or a similar tool.
- Should there be any precautions for preventing this?
- Implement blocking user-agents for common fuzzer tools (?)
- Should we do anything?
I think it is an interesting topic and needs some brainstorming for improving security.