WebApp Sec mailing list archives

Double Slashes


From: "Andres Molinetti" <andymolinetti () hotmail com>
Date: Thu, 04 Aug 2005 13:29:48 +0000

Is there anyway to encode a "//" in a GET request to an .ASP page in IIS 5.0 (patched up2date)

For example..

GET /dir1//dir2.asp HTTP/1.0

IIS seems to convert to a single slash the following ones:
//
\\
/./
/../
///////// ...

Not sure if it is some fix to old unicode and double enconding bugs.

Regards,

Andy

_________________________________________________________________
¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en MSN Motor. http://motor.msn.es/researchcentre/


Current thread: