About: Double encoding

An Entity of Type: topical concept, from Named Graph: http://dbpedia.org, within Data Space: dbpedia.org

Double encoding is the act of encoding data twice in a row using the same encoding scheme. It is usually used as an attack technique to bypass authorization schemes or security filters that intercept user input. In double encoding attacks against security filters, characters of the payload that are treated as illegal by those filters are replaced with their double-encoded form.

Property	Value
dbo:abstract	Double encoding is the act of encoding data twice in a row using the same encoding scheme. It is usually used as an attack technique to bypass authorization schemes or security filters that intercept user input. In double encoding attacks against security filters, characters of the payload that are treated as illegal by those filters are replaced with their double-encoded form. Double URI-encoding is a special type of double encoding in which data is URI-encoded twice in a row. It has been used to bypass authorization schemes and security filters against code injection, directory traversal, cross-site scripting (XSS) and SQL injection. (en)
dbo:wikiPageExternalLink	https://capec.mitre.org/data/definitions/120.html https://cwe.mitre.org/data/definitions/174.html https://docs.imperva.com/bundle/on-premises-knowledgebase-reference-guide/page/double_url_encoding.htm https://portswigger.net/web-security/reference/obfuscating-attacks-using-encodings https://subscription.packtpub.com/book/networking-&-servers/9781785284588/1/ch01lvl1sec11/double-encoding https://owasp.org/www-community/Double_Encoding https://www.php.net/manual/en/function.urldecode.php
dbo:wikiPageID	47655354 (xsd:integer)
dbo:wikiPageLength	14781 (xsd:nonNegativeInteger)
dbo:wikiPageRevisionID	1113874776 (xsd:integer)
dbo:wikiPageWikiLink	dbr:Hypertext_Transfer_Protocol dbr:Percent-encoding dbr:SQL_injection dbr:Cross-site_scripting dbr:Directory_traversal_attack dbc:Web_security_exploits dbr:Code_injection dbr:Authorization
dbp:wikiPageUsesTemplate	dbt:Cite_book dbt:Cite_web dbt:Reflist dbt:Short_description
dcterms:subject	dbc:Web_security_exploits
gold:hypernym	dbr:Technique
rdf:type	dbo:TopicalConcept
rdfs:comment	Double encoding is the act of encoding data twice in a row using the same encoding scheme. It is usually used as an attack technique to bypass authorization schemes or security filters that intercept user input. In double encoding attacks against security filters, characters of the payload that are treated as illegal by those filters are replaced with their double-encoded form. (en)
rdfs:label	Double encoding (en)
owl:sameAs	yago-res:Double encoding wikidata:Double encoding https://global.dbpedia.org/id/2AQJo
prov:wasDerivedFrom	wikipedia-en:Double_encoding?oldid=1113874776&ns=0
foaf:homepage	http://capec.mitre.org
foaf:isPrimaryTopicOf	wikipedia-en:Double_encoding
is dbo:wikiPageWikiLink of	dbr:Directory_traversal_attack
is foaf:primaryTopic of	wikipedia-en:Double_encoding