Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-11-13 00:17:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Formatting changes

Browse source 
Formatting changes to Account takeover due to unicode normalization issue
This commit is contained in:
DotDotSlash 2023-01-04 21:06:36 +05:30 committed by GitHub
parent b7df4cb6e8
commit 418ff228d0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
Account Takeover/README.md
View file

@ -127,8 +127,9 @@ When processing user input involving unicode for case mapping or normalisation,
- Victim account: `demo@gmail.com` - Victim account: `demo@gmail.com`
- Attacker account: `demⓞ@gmail.com` - Attacker account: `demⓞ@gmail.com`
- [Unisub - is a tool that can suggest potential unicode characters that may be converted to a given character!](https://github.com/tomnomnom/hacks/tree/master/unisub) [Unisub - is a tool that can suggest potential unicode characters that may be converted to a given character](https://github.com/tomnomnom/hacks/tree/master/unisub).
- [Unicode pentester cheatsheet!](https://gosecure.github.io/unicode-pentester-cheatsheet/) can be used to find list of suitable unicode characters based on platform
[Unicode pentester cheatsheet](https://gosecure.github.io/unicode-pentester-cheatsheet/) can be used to find list of suitable unicode characters based on platform.
## Account Takeover Via Cross Site Scripting ## Account Takeover Via Cross Site Scripting