Forum Discussion
Russell_Moore_8
Nimbostratus
NimbostratusActiveSync Windows Phone query decode
I used the following rule to decode and locate the Windows Phone device ID for access control to an ActiveSync/OWA service. The AS protocol allows the query to be plain text or base64 encoded hex. ...
Russell_Moore_8Nimbostratus
NimbostratusAaron,
That's the ID I was sent too. I was provided a sample code that could be a work around but we are determining if we want to use it or wait for a patch to fix the leak.
This is the sample and reasoning I was given:
A base64 query string length should be always divisible by 4. So,
when HTTP_REQUEST {
catch {
if { ![expr [string length [HTTP::query]]%4] } {
b64decode [HTTP::query]
} else {
puts "Bad 64base input."
}
}
}
I'm not sure about the logic here as it would seem to read "if the query string length is NOT divisible by 4 then base64 decode". This seems to be reverse of what would be needed.