Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

webappsec logo WebApp Sec mailing list archives

Double Slashes
From: "Andres Molinetti" <andymolinetti () hotmail com>
Date: Thu, 04 Aug 2005 13:29:48 +0000
Is there anyway to encode a "//" in a GET request to an .ASP page in IIS 5.0 (patched up2date) 

For example..

GET /dir1//dir2.asp HTTP/1.0

IIS seems to convert to a single slash the following ones:
//
\\
/./
/../
///////// ...

Not sure if it is some fix to old unicode and double enconding bugs.

Regards,

Andy

_________________________________________________________________
¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en MSN Motor. http://motor.msn.es/researchcentre/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]