2.1 Introduction to Regex Structures - RX
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
Already have an account? Sign In »
welcome back to the introduction course to read tricks. I'm hearing structure Kevin Hernandez
on a prior lesson. We went over when to use rednecks.
As you remember. It was not always the best option.
Sometimes Raj ICS might break things right. And just because you can use it doesn't mean you shoot. If there's no patterns, you might as well better off right. The complex it's intact itself. No rejects, no nothing. Just the string of characters to stop. Drink the payload, a tinkerer.
Always remember. Simple. It's better. It's always better to write
multiple simple Reddick's is over a complex one.
Now let's move on to model to Lesson one.
The reject structure
for it is a lesson, as we have in prior lessons, will be using magic, sir.
one of the things I like from rejects her issue have different options here,
right that you can start using for creating your Reg X right.
And one of those is cheap.
Now you can use a cheat cheat like looking here in the side, and you're gonna actually click on them and ask them here
on the expression, as you can see,
or you can actually highlight
whatever its written, and he will actually be telling you
what each of these perimeters ISS
now if you see print is your capture group, and you can see that if you go down here, capture group. The press square bracket is a character said. As you can see here,
um, here from A to C Capital A to Capital C. It's character between us. You can see in this expression over here
the slash W. It's basically where any often American character or on their score right,
and the plus means it's one or more, you know, from first in instant you think. Oh, so this is detecting a word that starts with a capital letter. But
if you evolve it a little more
you can see that it's not necessarily
Missing what happens is
as long as they're one character is capitalized. It doesn't really matter what is following in ah,
or prior to the character. It will still detective right?
now what is it looking for?
If you remember, there's also a capture group, so it's not detective, even though it's detecting the whole word.
It's not capturing the whole word. If you're using this into s I am, for example, or any
coating, it will actually go towards Differs Letter on the group from this case, it will cover the are in here we capture the E and here it will capture the l
appeared a the eye
Right now what happens if you do? For example,
Well, the red bricks works from left to right, so
it will capture the first, eh?
Now it's confusing because obviously I choose the same letter to three times. But if I do a b. C, you will pick a
Now what if I want to do capture the whole word? Well, if that's the case, then the capture group right, we'll have to go.
In the end,
he will capture the hole where that starts with a to Z.
Now what if I want to capture whole words
that don't start with capital? Then you have to change the capture routine. Non capitalize,
if you notice this little minus sign here, it's specially arranged. So if I eliminate that right, let's go back to a Z capital.
You can see that now it only detects if the word starts with a capital E
Couple Z and apologize, not starts with contains the capital Z
not. What does this mean is
You gotta be careful because you cannot just take assumptions and pretend it's gonna work.
You have to be careful when you're building this, especially if you're gonna put it in a production system.
One of the things I like to do is test my radic sis. Here I will test them in extraction, putting an expression pain.
And after that I will, for example, right into payload, a copy pace of payload from my application. Let's let s I and the deal p and then I'll test it here and see if it works. After that,
some tools offer a red X test.
You're building them. I will test him in there. And the reason being like extent in the prior lesson, just because it works here on this website doesn't mean it's gonna work in your tool. Okay,
there's different parameters here, for example, like you said, the S W. It's often Merrick ditty. It's only digits and assets, white spaces
from there, obviously the opposite. It's not words not did just not white spaces.
You have special characters to escape him. So any character that could be, ah, wild card or a, uh,
sheer orm or or again
a slash right he will have to break the character. Otherwise, for example, from trying to take,
slash W you actually comes again the perimeter. Any work character.
However, if I want to capture, let's see
D's, for example, if a subdirectory path right,
then I will have to break
all right, I'm not sure. Let me write it
And that's why you have to be careful, not It's not written
little by little exact match. You have to understand that that parameter right
now what they will learn today, we went over a brief overview of what the parameters are always putting slash w capture grooves all the different things that will explain in more detail in future lessons. We also work with the default projects that it's built in, reject, sir
and basically stated that east detecting or capturing
the first capital letter in the word
or in a set of characters again. If you do a one, for example, it will be capturing the A in a one.
On our next lesson, we will start going over the character. Sir, it's
composing word. Digit in space is right. The first letter and the cheat cheat. I hope to see you soon. Have a great day.
2.2 Character Classes: Words, Digits, and Spaces - RX
2.3 Character Classes: Character Range, “Any of”, and Wild Cards - RX
2.4 Quantifiers: Length of Queries and Some Digit Based Examples - RX
2.5 Length of Queries and Mixed Examples Continued - RX
3.1 Words with Small Variants and Letter Manipulation - RX