WebApp Sec mailing list archives

Re: Looking for coder.htm / ASCII encoder


From: Jason <security () brvenik com>
Date: Mon, 01 Sep 2003 22:35:35 -0400

I'd suggest checking out HttpChameleon for all of your http obfuscation needs.

http://www.idsresearch.org/http_evasions.html

Noam Eppel wrote:

The page you are looking for can be found here:
http://www.safecenter.net/liudieyu/codeNOW.htm
or http://clik.to/codenow

Regards,

Noam Eppel
Web Security Consultant
http://www.noameppel.com



-----Original Message-----
From: n30 [mailto:n30_lists () hotmail com] Sent: 29 August 2003 04:56 PM
To: webappsec () securityfocus com
Subject: Looking for coder.htm / ASCII encoder


Guys,

Need your help.

About an year back, I have send a mail on the list asking for a tool which
would help me
encode ASCII characters to unicode/HTML encode/etc...facilitate bypassing
input valdation routines...(perform xss & sql inj attacks stealthily)

Someone had personally sent me a link to an html page called 'coder.htm'
which did exactly that...Unfortunately i lost the link..

Anybody out there has the link? or even the file?

Google search lead me to
http://homepage1.nifty.com/3rdpage/us/display/coder.html but looks like the
file is taken off...

Also, any body out there has better tools/ ideas of how to accomplish that?/

Thanks a million in advnace
-N







Current thread: