Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Security by obscurity is underrated. Parent comment
https://www.giac.org/paper/gcih/115/iis-unicode-exploit/1011...
You could basically encode DOS commands in the URL bar for a site running IIS and it would run remotely.
The automated attack basically replaced the index.html pages. But if you didn’t use the default pages. It didn’t have any effect.
There are no comments on this comment yet.
https://www.giac.org/paper/gcih/115/iis-unicode-exploit/1011...
You could basically encode DOS commands in the URL bar for a site running IIS and it would run remotely.
The automated attack basically replaced the index.html pages. But if you didn’t use the default pages. It didn’t have any effect.