full-disclosure - Re: noise about full-width encoding bypass?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <242a0a8f0705211248m402cf234g932d5cdb1605d10@mail.gmail.com>
Date: Mon, 21 May 2007 15:48:09 -0400
From: "Brian Eaton" <eaton.lists@...il.com>
To: 3APA3A <3APA3A@...urity.nnov.ru>
Cc: Full-Disclosure <full-disclosure@...ts.grok.org.uk>,
	Web Security <websecurity@...appsec.org>
Subject: Re: noise about full-width encoding bypass?

On 5/21/07, 3APA3A <3APA3A@...urity.nnov.ru> wrote:
> It's not true, because it's quite convertible character. At least for IIS:
>
> http://example.com/test.asp?q=%uFF1Cscript>alert("Hello")</script>
>
> where test.asp is
>
> <%=Request.QueryString("q")%>
>
> launches javascript.

This does not work for me for IIS 6 and IE 7.  What platform did you test?

Regards,
Brian

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/