OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] [OFFLISTDailydave] ASP.Net viewstate

From: Jeremy Kelley (jeremyaustin.ibm.com)
Date: Wed Sep 13 2006 - 09:10:34 CDT

Quoting Kartikeya Puri (kartikeya.purigmail.com):
> go to python prompt
>
> >>from base64 import *
> >>s="YOUR-VIEWSTATE-STRING-AFTER-REPLACING-URL-ENCODED-PARAMETERS"
> >>decodestring(s)
>
> I am sure there i a better way of doing it, but I am Python novice.
>
> May be someone can write a small script to replace url encoded chars
> (%2F,%2B,%3D) in the string automatically and then pass it to decodestring
> and a decent parser for decoded string.
>
> Regards,
> Kartik

import urllib
urllib.unquote("%41")

:)

--
Jeremy Kelley <jeremyaustin.ibm.com> Threat Assessment Analyst
gpg 1024D/E0DF8B2D 4BC3 B8B5 5B42 CC8E B6A9 2E85 32D3 C51C E0DF 8B2D
That's the problem with science. You've got a bunch of empiricists
trying to describe things of unimaginable wonder. -Bill Watterson
_______________________________________________
Dailydave mailing list
Dailydavelists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave