Skip to content
Bypassing character blocklists with unicode overflows
portswigger.net | research | #burp-suite | #web-security | #unicode | #filter-bypass | #character-encoding | #truncation
Summary
Unicode codepoint truncation turns overflow values into blocked ASCII characters — 0x4e41 % 256 yields 'A' — bypassing character blocklists; the trick now ships in ActiveScan++ and Hackvertor.
- Published
- Collected