News for hackers. Stuff that matters.

A comment on Ask HN: Is this weird folder name indication of attempted log4shell attack?. Parent comment

Re:Ask HN: Is this weird folder name indication of attempted... by pyuser583 on Monday December 27, 2021 @10:16PM (#29709912)
Nice! I was trying to figure out what the encoding was!

What’s the thinking behind a base64 encoding with double quotes?

Edit: “It is designed for use in environments where "case folding" occurs.”

That explains all the punctuation marks.

Still stupid. Directory names are not known for case folding.

[ Parent | on HN ]
Re:Ask HN: Is this weird folder name indication of attempted... by rolandog on Tuesday December 28, 2021 @07:42AM (#29713215)
Indeed. I was thinking that maybe it was trying to be compatible with WIN32 apps or something, but it seems that it's running against MS's conventions [0].

[0]: https://docs.microsoft.com/en-us/windows/win32/fileio/naming...

[ Parent | on HN ]