shieldfy/normalizer

This package is useful for the input normalization, before running hardcore IDS/IPS rules. It normalize the inputs to fight against WAF Bypassing techniques using obfuscation or other techniques to hide payloads.

Sunday, April 16, 2017
by shieldfy
Repository
8 Watchers
7 Stars
762 Installations

PHP
2 Dependents
0 Suggesters
2 Forks
1 Open issues
6 Versions
17 % Grown

The README.md

Shieldfy Normaizer

, _(*2)

Usage
Installation
Changelog
Support
Contributing & Protocols
Security Vulnerabilities
Credits
License

Usage

Usage is pretty easy and straightforward:, _(*3)

$value = "select/*!from*/information_schema.columns/*!where*/column_name%20/*!like*/char(37,%20112,%2097,%20115,%20115,%2037)";

// Run all normalizers
$result = (new \Shieldfy\Normalizer\Normalizer($value))->runAll();
echo $result;
// select from information_schema.columns where column_name like char(37, 112, 97, 115, 115, 37) %pass%

// Run single normalizer
$result = (new \Shieldfy\Normalizer\Normalizer($value))->run('comments');

Installation

Install the package via composer:, _(*4)

composer require shieldfy/normalizer

note about serialization

Serialize / Unserialize can be danger due to its ability to convert object and it can be used to preform object injection attack. So explicit normalization not allowed in php version before php 7 thats because php7 offered new options to prevent object serialization see here, _(*5)

Changelog

Refer to the Changelog for a full history of the project., _(*6)

Support

The following support channels are available at your fingertips:, _(*7)

Help on Email

Contributing & Protocols

Thank you for considering contributing to this project! The contribution guide can be found in CONTRIBUTING.md., _(*8)

Bug reports, feature requests, and pull requests are very welcome., _(*9)

Security Vulnerabilities

If you discover a security vulnerability within this project, please send an e-mail to security@shieldfy.com. All security vulnerabilities will be promptly addressed., _(*10)

Credits

This package is based on the original converters written by Mario Heiderich & Christian Matthies the creators of PHP IDS project with help from the generous security & opensource community., _(*11)