null byte injection
Posted: Sat Sep 05, 2020 3:19 pm
I've find out "interesting" these readings today:
http://www.madirish.net/401
https://www.php.net/manual/en/security ... lbytes.php
https://resources.infosecinstitute.com/ ... ction-php/
http://www.madirish.net/401
https://www.php.net/manual/en/security ... lbytes.php
https://resources.infosecinstitute.com/ ... ction-php/
Code: Select all
$input = str_replace(chr(0), '', $input); // remember ever to remove null bytes from input