orhun/rustypaste

Mitigating the effects of content discovery and fuzzer tools

開放

#28 建立於 2022年10月3日

 (0 則留言) (0 個反應) (0 位負責人)Rust (82 個分叉)auto 404
help wantedquestion

倉庫指標

星標
 (1,183 顆星)
PR 合併指標
 (平均合併 1天 8小時) (30 天內合併 13 個 PR)

描述

Even though the names of uploaded files are random, fuzzer utilities can be used to discover content on the server.

Related questions are:

  • How can rustypaste be affected by such situation?
    • Need a demonstration of fuzzing with rustbuster or a similar tool.
  • Should there be any precautions for preventing this?
    • Implement blocking user-agents for common fuzzer tools (?)
  • Should we do anything?

I think it is an interesting topic and needs some brainstorming for improving security.

貢獻者指南