asm capabilities encoded request

Hi Zafer,

 

 

ASM doesn't currently provide an option to base64 decode request components. But most web servers won't do this either so it's not a problem. If the web application does base64 decode whatever request component you're putting the base64 encoded attack string in, then you'd have a potential issue.

 

 

What kind of app are you testing?

 

 

Aaron