Combined
Too many tips, can't keep adding new subpages.
Last updated
Too many tips, can't keep adding new subpages.
Last updated
Apart from famoous alex blog
%00 is null character and it often leads to unexpected behavior in applications. Don't believe me? search for sam curry null byte overflow writeup. You will love it.
However if you send %00 in JSON data it might not be treated as null character by JSOn parser.
You should instead use \u0000 .
one more e.g https://medium.com/@0xold/null-byte-on-steroids-23f8104a25ec
Extra tip \u2063 is also a special space like character might be useful in fuzzing.
This tool can be useful for validation bypass checks
good resource for url validation scenarios.
