Bugtraq mailing list archives
RE: Bypassing of web filters by using ASCII
From: RSnake <rsnake () shocking com>
Date: Fri, 23 Jun 2006 15:12:27 -0700 (PDT)
Both of those would work in the case where the charset has already been set by the server. The problem is that most servers set a charset by default. The other bigger problem is that both of those (and the META one) require that you inject HTML into the page to get it to work. If you can inject a style tag into a page you can embed XSS See http://ha.ckers.org/xss.html On Fri, 23 Jun 2006, James C. Slora Jr. wrote:
Amit Klein wrote Thursday, June 22, 2006 3:47 AMSo in order to exploit this in HTML over HTTP, the attacker needs toeither add/modify the Content-Type response header, or to add/modify the META tag in the HTML page. There are other ways that might carry a bigger injection threat: Style sheet: http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml /reference/properties/charset_1.asp Object property: http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml /reference/properties/charset.asp By extension, it should also work for inline styles.
-RSnake http://ha.ckers.org/ http://ha.ckers.org/blog/feed/
Current thread:
- Bypassing of web filters by using ASCII k . huwig (Jun 21)
- Re: Bypassing of web filters by using ASCII Fixer (Jun 21)
- Re: Bypassing of web filters by using ASCII Paul (Jun 21)
- Re: Bypassing of web filters by using ASCII Kurt Huwig (Jun 22)
- Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 22)
- RE: Bypassing of web filters by using ASCII James C. Slora Jr. (Jun 23)
- RE: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 26)
- RE: Bypassing of web filters by using ASCII RSnake (Jun 26)
- Re: Bypassing of web filters by using ASCII Hubert Seiwert (Jun 27)
- RE: Bypassing of web filters by using ASCII James C. Slora Jr. (Jun 26)
- Re: Bypassing of web filters by using ASCII Paul (Jun 21)
- Re: Bypassing of web filters by using ASCII Fixer (Jun 21)
- Re: Bypassing of web filters by using ASCII Thor (Hammer of God) (Jun 23)
- Re: Bypassing of web filters by using ASCII Kurt Huwig (Jun 22)
- Re: Bypassing of web filters by using ASCII David Huecking (Jun 26)
- Message not available
- Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 23)
- Re: Bypassing of web filters by using ASCII Vincent Archer (Jun 26)