Real-World Bug Hunting

Index

Symbols and Numbers

; (semicolon), 110

-- (MySQL comment), 83, 84

<> (angle brackets), 53, 56

../ file path reference, 128

/ (forward slash), 99

| (pipe), 124

` (backtick), 122, 124

" (double quote), 56

' (single quote), 44–46, 56

# (hash), 44, 69

% (percent), 112

%00 (null byte), 99

%0A (line feed), 49

%0D (carriage return), 49

& (ampersand), 22–23, 110, 112

2FA (two-factor authentication), 183–184

32-bit processors, 133

64-bit processors, 133

127.0.0.1 (localhost), 102, 104–105

.docx file type, 113–114

!ELEMENT (XML), 110, 111–112

!ENTITY (XML), 110, 111–112

<img> tags, 32, 36–37, 63–65, 70, 171

<s> tag, 198

A

Abma, Jobert, 183–184, 198, 207–208

about:blank context, 57

Access-Control-Allow-Origin header, 34

access_denied parameter,