This evasion plugin insert between dots shift-in and shift-out control characters which are cancelled each other when they are below so some “..” filters are bypassed Example: Input: ‘../../etc/passwd’ Output: ‘.%0E%0F./.%0E%0F./etc/passwd’
This plugin doesn’t have any user configured options.
For more information about this plugin and the associated tests, there’s always the source code to understand exactly what’s under the hood:
Plugin source code
Unittest source code
This plugin has no dependencies.