Analyzing the 800,000-Character RCE in maccms v8
0x01 Preface I encountered a vulnerability that pads input with 800,000 junk characters, exceeding the regex backtracking limit and bypassing the 360 module. This article explains regex backtracking and analyzes the maccms v8 RCE. 0x02 Regex Backtracking 1. Regex Engines We all know the 'regex' in 'regex backtracking,' but what is backtracking? Before that, consider regex engines…