redos-detector

A tool for detecting regular expression denial-of-service vulnerabilities in Android apps.

Dependencies

The tool requires a regular expression analyzer. Currently, the RXXR checker is included.

./compile.sh

./run.sh <apk_file>

Name		Name	Last commit message	Last commit date
Latest commit History 65 Commits
benchmarks		benchmarks
regex_checker/rxxr		regex_checker/rxxr
soot		soot
AndroidCallbacks.txt		AndroidCallbacks.txt
EasyTaintWrapperSource.txt		EasyTaintWrapperSource.txt
README.md		README.md
ReDoSDetector.java		ReDoSDetector.java
ReDoSSourcesAndSinks.txt		ReDoSSourcesAndSinks.txt
RegexAnalyzer.java		RegexAnalyzer.java
SootAndroidCallbacks.txt		SootAndroidCallbacks.txt
SootEasyTaintWrapperSource.txt		SootEasyTaintWrapperSource.txt
SootSourcesAndSinks.txt		SootSourcesAndSinks.txt
SourcesAndSinks.txt		SourcesAndSinks.txt
TaintWrapper.java		TaintWrapper.java
clean.sh		clean.sh
compile.sh		compile.sh
exp_regexp.txt		exp_regexp.txt
exploits.txt		exploits.txt
poly_regexps.txt		poly_regexps.txt
regexps.txt		regexps.txt
regular_expressions.txt		regular_expressions.txt
results.txt		results.txt
run.sh		run.sh
vulnerable_regular_expressions.txt		vulnerable_regular_expressions.txt