Jump to content
u0m3

Abusing XML encoding to bypass WAFs

By u0m3, in Securitate web

Recommended Posts

u0m3 Newbie

u0m3

Posted
Posted

Synopsis: The specification tells parsers to be able to parse two encodings: UTF-8 and UTF-16. Many parsers support a little bit more, but for the demonstration these two are enough. In this article you will meet a variety of XML encodings, and learn how to bypass a WAF with them. WAFs see a white noise instead of the document!

Link: https://mohemiv.com/all/evil-xml/

Via:

 

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...