Skip to content

Lightfuzz FP Tuning - #3165

Merged
liquidsec merged 1 commit into
devfrom
lightfuzz-tuning
Jun 13, 2026
Merged

Lightfuzz FP Tuning#3165
liquidsec merged 1 commit into
devfrom
lightfuzz-tuning

Conversation

@liquidsec

Copy link
Copy Markdown
Collaborator

Summary

  • Crypto keystream-reuse: skip digit-only values that are valid hex but are plain decimal IDs (account numbers, zip codes). Their decoded bytes XOR to small values that trivially pass the ascii_score threshold.
  • Add nlbi_ (Incapsula/Imperva NGINX load balancer) to parameter_blacklist_prefixes alongside existing incap_ and visid_incap_ entries.

- Crypto: skip digit-only values in keystream-reuse detection (they're
  decimal IDs misread as hex, not ciphertexts)
- Add nlbi_ (Incapsula load balancer) to parameter_blacklist_prefixes
@liquidsec liquidsec changed the title Fix lightfuzz false positives on decimal IDs and CDN cookies Lightfuzz FP Tuning Jun 12, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Performance Benchmark Report

⚠️ No current benchmark data available

This might be because:

  • Benchmarks failed to run
  • No benchmark tests found
  • Dependencies missing

@codecov

codecov Bot commented Jun 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91%. Comparing base (23b2563) to head (b87e5ae).

Additional details and impacted files
@@          Coverage Diff          @@
##             dev   #3165   +/-   ##
=====================================
+ Coverage     91%     91%   +1%     
=====================================
  Files        448     448           
  Lines      42654   42660    +6     
=====================================
+ Hits       38397   38407   +10     
+ Misses      4257    4253    -4     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@ausmaster
ausmaster self-requested a review June 13, 2026 01:26
@liquidsec
liquidsec merged commit d096437 into dev Jun 13, 2026
20 checks passed
@liquidsec
liquidsec deleted the lightfuzz-tuning branch June 13, 2026 01:27
@ausmaster ausmaster added this to the BBOT 3.0 - blazed_elijah milestone Jun 15, 2026
@liquidsec liquidsec mentioned this pull request Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants