DoS & Resource Exhaustion Audit

Purpose

Identify denial of service vulnerabilities including resource exhaustion, algorithmic complexity attacks (ReDoS), memory exhaustion, and unbounded operations.

Focus Areas

• ReDoS: Regular expressions with catastrophic backtracking
• Memory Exhaustion: Unbounded allocations, missing limits
• CPU Exhaustion: Algorithmic complexity, nested loops
• File Descriptor Exhaustion: Unclosed handles, connection leaks
• Zip Bombs: Decompression bombs, XML bombs

Critical Patterns