WebApp Sec mailing list archives

URL Decryption


From: Shyam Manohar <apptester2004 () yahoo com>
Date: 18 Jun 2004 11:03:24 -0000



Hi List,
I would like to know if there is any functionality provided by ASP to 
decrypt a URL within the web application? 
Looks like the application itself is using some API to encrypt the URL 
since there isn't any client side code that encrypts the URL. 
In the HTML that is rendered, I have encountered something like this
<div id="accmenu" style="display: none; height: 15;">
<table style="font-weight: bold" border=0>
 <tr>
   <td width='0'></td>
   <td class='down'>
    <a 
href='http://IPAddress:80/SRVR?&PARAM1=004Z45A4QR9j3/GgN8cnOoUifsLIrs4T8jy8/vKAkY/iO14s/EBVb35m//7NnKSt1zfBjuDJ4XT4C&IWP2=005Z137A4QR/j3PXt00wpzsM1m3RCUuXVVP8gRPDZF51ti1yhPQmV7taN5EXDpp74V6SAQamCzk9oWXsE20sAOrI/e0jcULXTneYtlpzadQGyzCOHIchapRl87eAqyz0+QW0dgDbKbtBs/Fm2y5PmFGYWp6WxnOudV1O0PMQVM&U1=004Z1066np3gzhNtT0dfI4P2vMUZNwmHQIEyLoAPslfwoM4cWnEock5k//sNc/ZsvzqEdvCZ/nX5/yJtwhEXIJTeYC+fql+JN89bIrhr5hbHiUMA0ZIlRu/9ebZnl/f/LZJiRjnN0L&apos;
 
    target="vkgbody" >MenuItemName</a>
   </td>
 
Thanks
Shyam


Current thread: