Abstract: Disclosed is a method and system for verifying a regex sanitizer and a validator. The method comprises verifying of at least one of a regex sanitizer and a validator by applying the regex sanitizer and a validator over multiple predefined tainted inputs. An output obtained after applying at least one of the regex sanitizer is checked for one of a tainted output or a non-tainted output. The at least one of the regex sanitizer and validator may be qualified as a valid regex sanitizer and validator based upon the checking. The valid regex sanitizer may be tagged with a validation signature. The valid regex sanitizer is used for checking the tainted input in the user's input.

Abstract: Disclosed is a method and system for verifying a regex group. The method comprises verifying of a regex group by creating a flow id through a processor for the regex group when source reaches the sink. The flow id is used for tracking the flow of the regex group. The processor checks in case the flow id is a previously tested flow id. When the flow id is not the previously tested flow id, the processor passes one or more run tasks through a processor forming a queue. The processor tests for one or more vulnerabilities to be associated with the regex group based on the passing, wherein the testing is used to qualify the regex group as a valid regex group.

Abstract: Disclosed is a method and system for verifying a regex sanitizer and a validator. The method comprises verifying of at least one of a regex sanitizer and a validator by applying the regex sanitizer and a validator over multiple predefined tainted inputs. An output obtained after applying at least one of the regex sanitizer is checked for one of a tainted output or a non-tainted output. The at least one of the regex sanitizer and validator may be qualified as a valid regex sanitizer and validator based upon the checking. The valid regex sanitizer may be tagged with a validation signature. The valid regex sanitizer is used for checking the tainted input in the user's input.

Abstract: Disclosed is a method and system for verifying a regex group. The method comprises verifying of a regex group by creating a flow id through a processor for the regex group when source reaches the sink. The flow id is used for tracking the flow of the regex group. The processor checks in case the flow id is a previously tested flow id. When the flow id is not the previously tested flow id, the processor passes one or more run tasks through a processor forming a queue. The processor tests for one or more vulnerabilities to be associated with the regex group based on the passing, wherein the testing is used to qualify the regex group as a valid regex group.

Abstract: The present disclosure relates to system(s) and method(s) for loading an agent class. The method comprises creating an URL class loader by a servlet associated with an agent class. The URL class loader is configured to load an agent code associated with the agent class, and libraries associated with the agent code. The method further comprises loading a reference holder class into a bootstrap class loader. The reference holder class holds a reference of the URL class loader. Further, the method comprises loading the agent class in the web server environment based on the reference of the URL class loader directly from the bootstrap class loader.

Abstract: The present disclosure relates to system(s) and method(s) for deploying a java agent in runtime. The method creates a .WAR file associated with a java agent. The .WAR file corresponds to a servlet configured to run the java agent. The method further determines an existence of a reference holder class in a bootstrap class loader using the servlet. Based on the determination of the reference holder class, the method connects the servlet to a Java Virtual Machine (JVM). The servlet is connected to the JVM using an open source library. Further, the method deploys the java agent in real-time based on a deployment of a bootstrap class using the servlet. The bootstrap class holds a reference to the java agent. The bootstrap class acts as the reference holder class.