Wednesday, August 16, 2006

Funny browser

Quick note solely for reminding myself....
www.google.com
dec:1113982819
hexdec:42660763
Hex:7777772E676F6F676C652E636F6D
md5:0a137b375cc3881a70e186ce2172c8d1
binary:
0111011101110111011101110010111001100111011011110110
111101100111011011000110010100101110011000110110111101101101
base64:d3d3Lmdvb2dsZS5jb20=

FireFox and IE have different response to each, and both accept dec...When binary input to firefox, it will auotmatically place: keyword:_binary_here_, I guess this might have something to do with it built in google as default search engine and load it up when it can resolve the string, or I all loaded up some third party library.
Anyway,it is funny and somehow exposed the mechanism of browsers....Different browser response differently, and crafted input or code can smash it is the lesson I learnt from. I should dig more later....

URL:http://www.technicalinfo.net/papers/URLEmbeddedAttacks.html
White paper about url encoding... To be read

No comments: