[Oisf-users] libinjection

Seth Hall seth at icir.org
Fri Jul 5 01:51:23 UTC 2013

On Jul 4, 2013, at 5:09 AM, Victor Julien <lists at inliniac.net> wrote:

> What data were you sending to it? I imagine we wouldn't use it to pass
> random data to in, but instead something like and URI or even URI-query
> values or something limited like this.

I wrote a Bro script that cut apart the request and I passed each argument from the URL into it separately (which is what the libinjection API is supposed to be accepting).  I used real network traffic too.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Oisf-users mailing list