{"uuid": "36ff5dab-f4b2-43bf-adca-2e5777bdb352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27290", "type": "seen", "source": "https://t.me/hacking_Attack/17160", "content": "and browsing a website using an old version of ua-parser may cause the server to take a long time to process your request, probably ending in status 502. InstallationPython 3.8+ is required. To extract regexes from JavaScript / TypeScript code, NodeJS 12+ is also required.\n\nOptionally make a virtual environment python3 -m venv .env\nsource .env/bin/activateNow actually install with pip pip install regexploit UsageRegexploit with a list of regexesEnter regular expressions via stdin (one per line) into regexploit. regexploitor via a file cat myregexes.txt | regexploitExtract regexes automaticallyThere is built-in support for parsing regexes out of Python, JavaScript, TypeScript, C#, YAML and JSON. Python codeParses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS. regexploit-py my-project/\nregexploit-py \"my-project/**/*.py\" --globJavascript / TypescriptThis will use the bundled NodeJS package in regexploit/bin/javascriptwhich parses your JavaScript as an AST with eslint and prints out all regexes.\n\nThose regexes are fed into the python ReDoS finder. regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --globN.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want to write a JS regex AST! Python importsSearch for regexes in all the python modules currently installed in your path / env. This means you can pip installwhatever modules you are interested in and they will be analysed. Cpython code is included. regexploit-python-envN.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow JSON / YAMLYaml support requires pyyaml, which can be installed with pip install regexploit[yaml]. regexploit-json *.json\nregexploit-yaml *.yamlC# (.NET)regexploit-csharp something.csBugs reported* CVE-2020-5243: uap-core affecting uap-python, uap-ruby, etc. (User-Agent header parsing)\n* CVE-2020-8492: cpython's urllib.request (WWW-Authenticate header parsing)\n* CVE-2021-21236: CairoSVG (SVG parsing)\n* CVE-2021-21240: httplib2 (WWW-Authenticate header parsing)\n* CVE-2021-25292: python-pillow (PDF parsing)\n* CVE-2021-26813: python-markdown2 (Markdown parsing)\n* CVE-2021-27290: npm/ssri (SRI parsing)\n* CVE-2021-27291: pygments lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)\n* CVE-2021-27292: ua-parser-js (User-Agent header parsing)\n* CVE-2021-27293: RestSharp (JSON deserialisation in a .NET C# package)\n* bpo-38804: cpython's http.cookiejar (Set-Cookie header parsing)\n* SimpleCrawler (archived) (HTML parsing)\n* CVE-2021-28092: is-svg (SVG parsing)\n* nuget.org, NuGetGallery and NuGet.Client (Parsing NuGet package IDs)\n* markdown (python) (Markdown parsing)\n* ansi-html (nodejs) (ANSI parsing)\n* Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages CreditsThis tool has been created by Ben Caller of Doyensec LLC during research time. https://camo.githubusercontent.com/604dfb1a1bfac98d0048f363e0e6d65bd88b4fdbd57f5b001a8f76ea580c1097/68747470733a2f2f646f79656e7365632e636f6d2f696d616765732f6c6f676f2e737667 Download Regexploit\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:32.611548Z"}