
www.syngress.com
The Dark Side of the Web • Chapter 5 235
Figure 5.7 Heavy-Duty Filtering
This proves that Bank of America is definitely adhering to the rules of input
validation specifically on the 404’s, but is the company doing it elsewhere? The
search engine is pretty solid; it eliminates the unnecessary characters when it pro-
cesses the query. So is there any way to get past the site filters? Well, remember
that in Chapter 4 we discussed that ad trackers are always a fun thing to pick on?
Let’s scan the Bank of America front page with our mouse and see what we find
(see Figure 5.8).
335_PH_EXP_05.qxd 10/7/05 6:02 PM Page 235