Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/testing/btest/scripts/base/protocols/ldap
History
Arne Welzel 0cab87c185 ldap: Harden parsing a bit 
ASN1Message(True) may go off parsing arbitrary input data as
"something ASN.1" This could be GBs of octet strings or just very
long sequences. Avoid this by open-coding some top-level types expected.

This also tries to avoid some of the &parse-from usages that result
in unnecessary copies of data.

Adds a locally generated PCAP with addRequest/addResponse that we
don't currently handle.
2024-07-17 15:27:14 +02:00
..
add.zeek ldap: Harden parsing a bit 2024-07-17 15:27:14 +02:00
attributes.zeek Fix LDAP analyzer setup for when Spicy analyzers are disabled 2023-10-10 09:21:57 +02:00
availability.zeek Fix LDAP analyzer setup for when Spicy analyzers are disabled 2023-10-10 09:21:57 +02:00
basic.zeek Fix LDAP analyzer setup for when Spicy analyzers are disabled 2023-10-10 09:21:57 +02:00
diff_port.zeek Fix LDAP analyzer setup for when Spicy analyzers are disabled 2023-10-10 09:21:57 +02:00
functions.spicy Fix LDAP analyzer setup for when Spicy analyzers are disabled 2023-10-10 09:21:57 +02:00
ldap_substring_search.zeek ldap: Fix substring filter parsing and rendering 2024-01-05 16:06:23 +01:00
log_policy.zeek Name LDAP::Message and LDAP::Search *Info 2023-10-10 18:28:13 +02:00
sasl-encrypted.zeek Fix LDAP analyzer setup for when Spicy analyzers are disabled 2023-10-10 09:21:57 +02:00
sasl-signed-clear-2.zeek ldap: Handle integrity-only KRB wrap tokens 2024-07-17 15:26:30 +02:00
sasl-signed-clear.zeek ldap: Handle integrity-only KRB wrap tokens 2024-07-17 15:26:30 +02:00
search_filter_extended.zeek ldap: Use scalar values in logs where appropriate 2024-01-03 11:57:31 +01:00