orhun/rustypaste

Mitigating the effects of content discovery and fuzzer tools

开放

#28 创建于 2022年10月3日

 (0 条评论) (0 个反应) (0 位负责人)Rust (82 个派生)auto 404
help wantedquestion

仓库指标

星标
 (1,183 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

Even though the names of uploaded files are random, fuzzer utilities can be used to discover content on the server.

Related questions are:

  • How can rustypaste be affected by such situation?
    • Need a demonstration of fuzzing with rustbuster or a similar tool.
  • Should there be any precautions for preventing this?
    • Implement blocking user-agents for common fuzzer tools (?)
  • Should we do anything?

I think it is an interesting topic and needs some brainstorming for improving security.

贡献者指南