Useful Concepts - Ravi-Upadhyay/cyber-security-playground GitHub Wiki

This will contain all the generic concepts which will help to understand the problems and suggest robust solutions.

Index


Different Representations of IP Address

Some applications block input containing hostnames like 127.0.0.1 and localhost, or sensitive URLs like /admin. In this situation, you can often circumvent the filter using various techniques:

  • Using an alternative IP representation of 127.0.0.1, such as 2130706433, 017700000001, or 127.1.
  • Registering your own domain name that resolves to 127.0.0.1. You can use spoofed.burpcollaborator.net for this purpose.
  • Obfuscating blocked strings using URL encoding or case variation.