Null Byte Injection
Variants:
Direct Persistent Session
Also Known As:
Poison Null Byte, Embedding Null Code
Vector Type:
Attack
Relevance:
Generic
Layer:
Application-Level
Platforms:
Any
Target Type:
Application
Affected Mechanisms:
Input Validation
Invented In:
26/10/2000
Added In:
08/12/2014
Quick Introduction to the Topic:
Vector Operation Method:
Null inputs can affect the structure of server-side strings, enabling attackers to bypass restrictions and cause unexpected application behaviors.
