null byte injection

User avatar
axew3
w3all User
w3all User
Posts: 2689
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

null byte injection

Post by axew3 »

I've find out "interesting" these readings today:

http://www.madirish.net/401

https://www.php.net/manual/en/security ... lbytes.php
https://resources.infosecinstitute.com/ ... ction-php/

Code: Select all

$input = str_replace(chr(0), '', $input); // remember ever to remove null bytes from input