[ale] Data encoding in a web page

[Geoffrey]

Looks like it's trying to encode your '%' char.  You should encode it 
before sending it.  Special characters have to be encoded.  I don't know 
the actual encoding for the '%', but you should be able to find it in 
any decent html/cgi book.

Christopher Fowler wrote:
> 
> I'm trying to send data that looks like this
> 
> "dDwyMTQxMjc4NDIxO3Q8O2w8aTwxPjs%2BO2w8dDw7bDxpPDA%2BOz47bDx0PDtsPGk8MT47Pjts"
> 
> But when I sniff the connection it gets sent like this:
> "dDwyMTQxMjc4NDIxO3Q8O2w8aTwxPjs%252BO2w8dDw7bDxpPDA%252BOz47bDx0PDtsPGk8MT47Pjts"
> 
> 
> I'm doing this in Java so my HTTPClient is converting the data.  My main issue
> is that the tag in the form looks like this:
> 
> <input type="hidden" name="__VIEWSTATE" value="dDwyMTQxMjc4NDIxO3Q8O2w8aTwxPjs+O2w8dDw7bDxpPDA+Oz47bDx0PDtsPGk8MT47PjtsPHQ8O2w8aTwxPjs+O2w8dDw7bDxpPDE+Oz47bDx0PDtsPGk8Mj47aTwzPjtpPDk+O2k8MTI+Oz47bDx0PDtsPGk8MT47PjtsPHQ8O2w8aTwwPjs+O2w8dDx0PDs7bDxpPDA+Oz4+Ozs+Oz4+Oz4+O3Q8O2w8aTwxPjs+O2w8dDw7bDxpPDA+Oz47bDx0PHQ8OztsPGk8MD47Pj47Oz47Pj47Pj47dDw7bDxpPDE+Oz47bDx0PDtsPGk8MD47PjtsPHQ8dDw7O2w8aTwwPjs+Pjs7Pjs+Pjs+Pjt0PDtsPGk8MT47PjtsPHQ8O2w8aTwwPjs+O2w8dDx0PDs7bDxpPDA+Oz4+Ozs+Oz4+Oz4+Oz4+Oz4+Oz4+Oz4+Oz4+Oz4+Oz5ZeStnfajPMQ9tQDyvFfTUkgUDJg==" />
> 
> 
> It is not very long.  But when I submit the web page using netscape the
> data value sent in __VIEWSTATE is much bigger.  What is netscape doing
> to that string?
> 
> The page I'm trying to automate in Java is at:
> https://secure.sos.state.ga.us/myverification/
> 
> Thanks,
> Chris Fowler
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
> 
> 

-- 
Until later, Geoffrey	esoteric at 3times25.net

Building secure systems inspite of Microsoft