Fuzzying and encoding

HTML and Unicode Encoding

SymbolEntity NameNumericUnicode

"

"

" "

U+0022

'

'

' '

U+0027

`

`

` `

U+0060

/

/

/ /

U+002F

\

\

\ \

U+005C

;

;

&#59; &#X3B;

U+003B

:

:

: :

U+003A

,

,

, ,

U+002C

.

.

. .

U+002E

(

(

( (

U+0028

)

)

) )

U+0029

[

[

[ [

U+005B

]

]

] ]

U+005D

{

{

{ {

U+007B

}

}

} }

U+007D

<

&lt;

&#60; &#X3C;

U+003C

>

&gt;

&#62; &#X3E;

U+003E

*

&ast;

&#42; &#X2A;

U+002A

+

&plus;

&#43; &#X2B;

U+002B

-

NA

&#45; &#X2D;

U+002D

_

&lowbar;

&#95; &#X5F;

U+005F

&

&amp;

&#38; &#X26;

U+0026

|

&vert;

&#124; &#X7C;

U+007C

$

&dollar;

&#36; &#X24;

U+0024

#

&num;

&#35; &#X23;

U+0023

~

&tilde;

&#126; &#X7E;

U+007E

\0 (NULL)

NA

&#0; &#X0;

U+0000

\b (backspace)

NA

&#8; &#X8;

U+0008

\n (line feed)

NA

&#10; &#XA;

U+000A

\t (horizontal tab)

NA

&#9; &#X9;

U+0009

\v (vertical tab)

NA

&#11; &#XB;

U+000B

\f (form feed)

NA

&#12; &#XC;

U+000C

\r (carriage return often used as \n \r)

NA

&#13; &#XD;

U+000D

\e (escape)

NA

&#27; &#X1B;

U+001B

SPACE

NA

&#32; &#X20;

U+0020

Unicode format can be converted in URL encoding or CSS encoding as follows

U+0022 #full Unicode for double quote character
%22    #URL encoded char
\22    #CSS encoded char, can be used as part of a string
\u0022 #JavaScript Unicode notation

Url encoding reserved characters

URL Encoded

#

%23

Anchor point

?

%3F

Arguments start point

&

%24

Argument separator

%

%25

Character encoding prefix

/

%2F

URL separator

+

%2B

Alternative symbol for space

SPACE

%20 OR +

PreviousFilter EvasionNextFile Vulnerabilities

Last updated