Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

Re: CGI security
From: buanzox () USA NET (Arturo Busleiman)
Date: Wed, 15 Sep 1999 00:13:11 -0300


But  there  is  EOL  character ('\0'.). If you will use something like
"/index.html?%00xxxxxxxxxxxxxxxxx" xxxxxxxxxxxxxxxxx propably will not
appear in any logs at all.

so, if I telnet localhost 80:
Trying 127.0.0.1
Connected to localhost
Escape character is '^]'.
GET /index.html?%00blabla

OK, I get index.html..... but....

# tail /var/log/messages/httpd.access_log
localhost - - [15/Sep/1999:00:09:30 -0300] "GET /usa.html?%00blabla" 200 8944

it does appear. did I missed something, or our assumptions were erroneous?

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]