Re: Finding Bad Characters?

[Tasos Laskos <tasos.laskos () gmail com>]

Hi,

I don't have much experience in low level exploit development but
going through all available characters using a simple script and then 
logging results seems the way to go.

Of course, detecting which characters aren't allowed will have to be 
application specific.
If the latter is the problem you're facing then I don't think that 
there's a universal way to know.

Cheers,
Tasos L.

On 02/17/2011 04:35 PM, John Nash wrote:
> Hello All,
>
> Just dived into exploit research and finding bad characters is killing me!
>
> Can someone point me to a good document / methodology / automated way
> to find bad characters?
>
> Any help will be greatly appreciated!
>
> Rgds,
>
> JN
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework