Skip to main content

RegEx

RegEx
--------------------------- REGULAR EXPRESSIONS -------------------------------------

/   regex     /

** dont use "/"  forward slash ..
inside your regular expression, should be used at the start and end

"Space" is also a regular expression

------------------------|
Literal Characters:     |
------------------------|

1. Regex --> /ohn/
test String --> ohn, john, mohn{only ohn is matched}

2. Regex -->  /color/
String --> color, colour {color is matched}

------------------------|
Modes: |
------------------------|
modes are placed after ending..  /

/regex/ mode

/regex/       {standard mode- nothing after ending forward slash}

/regex/g {global}
/regex/s {Single line mode}
/regex/i {Case INSensitive Mode}
/regex/m {multi line mode}


Global Mode: /regex/g
------------
global - more than one ; all of the matched strings are selected at once

Case Insensitive: /regex/i "or" /regex/gi
-----------------
color  can be found even when the string is COLOR

by default regex works as case sensitive


------------------------|
    Meta Characters     |
------------------------|
All about Operators

*+-={}()[]^$|?:\.

Wild card Meta Characters:
---------------------------

Any Character except newline : represented by . {dot}
where ever there is dot its takes up the before or after character and counts it in search


1. Regex -->   /.ohn/
Add any character before ohn --> to do that add "."
Example: /.ohn/ matches ohn,john and mohn

2. Regex --> /.ut/
Example: matches cut,put

  /Dr. Jazeb/gi --> drt jazeb can be searched
Pi value   /3.14/gi      --> 3414 3514 3-14 --> can be matched  // wrong
  /3\.14/gi --> 3.14 will only be searched




------------------------|
    Characters Set      |
------------------------|

Notation --> []
we use character set to define a set with certain characters.. RegEx will pick from that certain text

1. Regex --> /[cd]ash/
Example: cash, dash  --> will be matched

2. Regex -> /[vr]a[nd]ish/ Regex will pick v or r from 1st set, n or d from 2nd set
Example:vanish radish vadish ranish   // can be searched

/[abcdefghijklmnopqrstvuqxyz] team/ -- >matches like a team, b team ... z team



------------------------|
    Character Range     |
------------------------|
Notation:  -
Instead of writing all the alphabets just use /a-z/

1. Regex --> /[a-z] team/
Example: a team, b team .... z team


2. Regex --> /[A-Z] team/
Example: A team, B team .. Z team


3. Regex --> /[a-zA-Z] team/
Example: A team, a team,  B team, b team .. Z team, z team


4. Regex --> /[0-9] team/
Example: 1 team, 2 team .. 3 team
For  Digits only 0-9 can be used


5. Regex --> /5[0-9] team/
Example: 51 team, 52 team ... 59 team


Restrictimg Set with Not Symbol:
---------------------------------
Notation: ^

Matches expect anything thats with in the character set..

1. Regex --> /[^abcdef]/   //Doesnt search anything with abcdef
Matches every character expect abcdef

2. Regex --> /[^cd]ash/
Matches anything other than cash and dash

3. Regex --> /[^vr]a[nd]ish/
Matches every character expect vanish radish vadish ranish



------------------------------|
 Escaping Meta Characters     |
------------------------------|

we can not add forward slash in our regular expression, to escape such a string
we need to add "\/" back slash before it

1.Regex ==> D:\\Softwares\\Educational\\Splunk\.txt

to use a backslash in the string add "double back slash"

Search String-->   D:\Softwares\Educational\Splunk.txt

2. Regex ==> D:\\Softwares\\Educational\\Splunk\.txt\t\t
to get a tab space--> \t
Search String--> D:\Softwares\Educational\Splunk.txt

3. Regex ==> D:\\Softwares\\Educational\\Splunk\.txt\t\t\nbhanu
Matches 1 line return ...
Search String-->D:\Softwares\Educational\Splunk.txt
bhanu---------------------------------------(Another line )



-----------------------------|
Escaping Characters Set      |
-----------------------------|

there are only 4 meta characters that you need to espace inside character set
[-/*]]  --> these need to escape from character set

1. Regex ==>  [\-\/\*\]]   // for - ==> \-
// for / ==> \/
// for * ==> \*
// for ] ==> \]

Matched String: [-/*]]


========================================================
Easy way to write Sets
========================================================

\w same as --> /[a-zA-Z0-9_]/ --> word characters and underscore
\W same as --> /[^a-zA-Z0-9_]/ --> No word characters and underscore

























Comments

Popular posts from this blog

SQL DB & SQL Injection Pentest Cheat Sheet

1) MSSQL Injection Cheat Sheet | pentestmonkey 2) xp_cmdshell | Red Team tales 3) PentesterMonkey SQL Injection Cheatsheet Use dbeaver for GUI Access 4) SQL Injection Explanation | Graceful Security Common Ports Microsoft SQL: 1433/TCP (default listener) 1434/UDP (browser service) 4022/TCP (service broker) 5022/TCP (AlwaysOn High Availability default) 135/TCP (Transaction SQL Debugger) 2383/TCP (Analysis Services) 2382/TCP (SQL Server Browser Service) 500,4500/UDP (IPSec) 137-138/UDP (NetBios / CIFS) 139/TCP (NetBios CIFS) 445/TCP (CIFS) Oracle SQL: 1521/TCP 1630/TCP 3938/HTTP MongoDB : 27017,27018,27019/TCP PostgreSQL: 8432/TCP MySQL: 3306/TCP SQL DB Enum with nmap: nmap -p 1433 —script ms-sql-info —script-args mssql.instance-port=1433 IP_ADDRESS nmap -Pn -n -sS —script=ms-sql-xp-cmdshell.nse IP_ADDRESS -p1433 —script-args mssql.username=sa,mssql.password=password,ms-sql-xp-cmdshell.cmd="net user bhanu bhanu123 /add" nmap -Pn -n -sS —script=ms-sql-xp-cmds...

Host and Application locally and access it over the internet via ngrock

 ngrock creates a tunnel from your local machine to ngrock server and host it on the internet via their HTTPS url  Resister an account on ngrock and login #Download the client curl -sSL https://ngrok-agent.s3.amazonaws.com/ngrok.asc \ | sudo tee /etc/apt/trusted.gpg.d/ngrok.asc >/dev/null \ && echo "deb https://ngrok-agent.s3.amazonaws.com buster main" \ | sudo tee /etc/apt/sources.list.d/ngrok.list \ && sudo apt update \ && sudo apt install ngrok #add the authToken ngrok config add-authtoken 2p7Oc #start a python server on your application python -m http.server 3000 #start the server - use the same port as the python server (3000 in below example) ngrok http http://localhost:3000 --request-header-add "ngrok-skip-browser-warning: true" Setting up a Request Header - Login to the application --> Univeral Gateway --> Edges - Create an Edge --> Request Headers --> `ngrok-skip-browser-warning :12 - go back to overv...

Cloud Pentest Cheatsheet - Azure

Azure Cloud offers a comprehensive ecosystem of tools and services. Among its core components are: Azure Active Directory (AAD) Azure Resource Manager (ARM) Office 365 (O365) Initial Access Try to get a user credential via OSINT/Social engineering or try to comprise a web application hosted on Azure VM. Enumerate the roles attached to the VM and try to escalate your privileges.  Entra ID Directory Role Entra ID directory roles are predefined roles that grant permissions to perform specific tasks within an Azure AD tenant. These roles are essential for managing administrative tasks in Entra ID. Types of Roles: Built-in Directory Roles Global Administrator Application Administrator User Administrator Custom Directory Roles Accessing APIs in Azure Entra ID - Access via Microsoft Graph API Endpoint {HTTP method} https://graph.microsoft.com/{version}/{resource}?{query-parameters} Azure Resource Manager API Endpoint (ARM-specific) {HTTP method} https://management.azure.com/{...