Lightfuzz false positive reduction + crypto submodule improvements#2967

Open

liquidsec wants to merge 10 commits intoblasthttp-integration-cleanfrom

lightfuzz-improvements-mar-26

Commits on Apr 3, 2026

Add ECB mode detection and CBC bit-flipping detection to crypto submodule
liquidsec
committed
Reduce lightfuzz false positives: centralize WAF detection, blacklist CSRF tokens, remove generic error string
liquidsec
committed
Skip parameter extraction from out-of-scope redirect targets
liquidsec
committed
Fix lightfuzz false positives: crypto jitter stability, XSS context verification, SQLi WAF detection
liquidsec
committed
Remove duplicate get_waf_strings() definition
liquidsec
committed
Skip Error Resolution for non-standard HTTP status codes (>511)
liquidsec
committed
Fix excavate redirect test to use e.url instead of e.data
liquidsec
committed
Use YARA for WAF string detection instead of Python string-in loops
liquidsec
committed
Fix test module refs: httpx → http for blasthttp migration
liquidsec
committed
Compile serial error YARA rules in lightfuzz setup(), simplify sqli WAF guard
liquidsec
committed