[Oisf-users] libinjection

[Seth Hall]

On Jul 4, 2013, at 5:09 AM, Victor Julien <lists at inliniac.net> wrote:

> What data were you sending to it? I imagine we wouldn't use it to pass
> random data to in, but instead something like and URI or even URI-query
> values or something limited like this.


I wrote a Bro script that cut apart the request and I passed each argument from the URL into it separately (which is what the libinjection API is supposed to be accepting).  I used real network traffic too.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/