mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-28 07:15:26 +00:00
Updated unicode normalization issue
Added helpful tools to 'Account takeover due to unicode normalization issue'
This commit is contained in:
parent
5190829ab4
commit
b7df4cb6e8
@ -122,9 +122,13 @@ See: [CVE-2020-7245](https://nvd.nist.gov/vuln/detail/CVE-2020-7245)
|
|||||||
|
|
||||||
### Account takeover due to unicode normalization issue
|
### Account takeover due to unicode normalization issue
|
||||||
|
|
||||||
|
When processing user input involving unicode for case mapping or normalisation, unexcepted behavior can occur.
|
||||||
|
|
||||||
- Victim account: `demo@gmail.com`
|
- Victim account: `demo@gmail.com`
|
||||||
- Attacker account: `demⓞ@gmail.com`
|
- Attacker account: `demⓞ@gmail.com`
|
||||||
|
|
||||||
|
- [Unisub - is a tool that can suggest potential unicode characters that may be converted to a given character!](https://github.com/tomnomnom/hacks/tree/master/unisub)
|
||||||
|
- [Unicode pentester cheatsheet!](https://gosecure.github.io/unicode-pentester-cheatsheet/) can be used to find list of suitable unicode characters based on platform
|
||||||
|
|
||||||
## Account Takeover Via Cross Site Scripting
|
## Account Takeover Via Cross Site Scripting
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user