About this project
Description from the program archive
This project addresses the challenge of enhancing Glutton's protocol parsing capabilities by implementing HTTP and DNS parsers using Spicy, a specialized domain-specific language for robust protocol parsing. The existing Go-based protocol handlers in Glutton will be reimagined through Spicy's grammar-based approach, creating parsers that precisely match the current implementation's behavior, including special case handling for attack vectors like Ethereum RPC exploits and Hadoop YARN vulnerabilities. The project involves the creation of a Go wrapper framework to integrate these Spicy-generated parsers with Glutton's architecture and the delivery of fully functional HTTP and DNS parsers. This work will demonstrate how specialized grammar-based protocol parsing can enhance Glutton's maintainability and extensibility while maintaining its effectiveness as a protocol-agnostic honeypot for security research.