Python library for detecting ReDoS (Regular Expression Denial of Service) vulnerabilities using hybrid static analysis and fuzzing

LAB-RED - Regular Expression DoS (2 tipe + flood test) - tugas kuliah keamanan web

Updating legacy code of a Node.js express server that hosts web pages consisting of various utilities. Finding and fixing vulnerabilities to improve overall security using defensive coding methods in Javascript.

This Python script demonstrates a Regular Expression Denial of Service (ReDOS) based timing attack to extract a secret value from a remote server. It exploits catastrophic backtracking in regex engines to create a measurable timing side-channel.