43 ms·
At least one log parsing tool I've seen in years past was vulnerable to log injection attacks. Hilarious proof of concept to own a box by way of PTR record. I
by KB1JWQ 10y ago
At least one log parsing tool I've seen in years past was vulnerable to log injection attacks. Hilarious proof of concept to own a box by way of PTR record.
I haven't checked to see whether fail2ban suffers from this model or not.