Other nomination
PHPIDS bypass
A PHPIDS filter bypass that reads as English prose to defeat the centrifuge detection, while backslash line continuations build the string 'alert' across lines to evade the regular expressions. The payload takes 'this' as the window and indexes it with the assembled string to reach the alert function. Mario Heiderich fixed it quickly.
Record
- Researcher
- Gareth Heyes
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host.