Skip to content
attack.paths
Connexion
← LibraryTechnique entry
W-CHARSET-CONFUSIONDefense Evasion

Charset Confusion

UTF-7 / overlong UTF-8 / ASCII control-char encoding tricks the WAF parser but the application decodes the payload.

§ Where this technique fits

W-CHARSET-CONFUSION is catalogued under the Defense Evasion tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.