Merge pull request swisskyrepo#406 from pang9979/master

Update Table
ArtApp · Jul 31, 2021 · 38a209b · 38a209b
2 parents ce14006 + 7cb3596
commit 38a209b
Showing 1 changed file with 19 additions and 15 deletions.
diff --git a/HTTP Parameter Pollution/README.md b/HTTP Parameter Pollution/README.md
@@ -24,22 +24,26 @@ Attacker -- http://example.com?search=Beth&search=' OR 1=1;## --> WAF (reads fir
 
 ### Table of refence for which technology reads which parameter
 When ?par1=a&par1=b
-| Technology                                      | Parsing Result  |outcome (par1=)|
-| ------------------                              |---------------  |:-------------:|
-| ASP.NET/IIS                                     |All occurrences  |a,b            |
-| ASP/IIS                                         |All occurrences  |a,b            |
-| PHP/Apache                                      |Last occurrence  |b              |
-| PHP/Zues                                        |Last occurrence  |b              |
-| JSP,Servlet/Tomcat                              |First occurrence |a              |
-| Perl CGI/Apache                                 |First occurrence |a              |
-| Python Flask                                    |First occurrence |a              |
-| Python Django                                   |Last occurrence  |b              |
-| Nodejs                                          |All occurrences  |a,b            |
-| Golang net/http - `r.URL.Query().Get("param")`  |First occurrence |a              |
-| Golang net/http - `r.URL.Query()["param"]`      |All occurrences  |a,b            |
-
+| Technology                                      | Parsing Result          |outcome (par1=)|
+| ------------------                              |---------------          |:-------------:|
+| ASP.NET/IIS                                     |All occurrences          |a,b            |
+| ASP/IIS                                         |All occurrences          |a,b            |
+| PHP/Apache                                      |Last occurrence          |b              |
+| PHP/Zues                                        |Last occurrence          |b              |
+| JSP,Servlet/Tomcat                              |First occurrence         |a              |
+| Perl CGI/Apache                                 |First occurrence         |a              |
+| Python Flask                                    |First occurrence         |a              |
+| Python Django                                   |Last occurrence          |b              |
+| Nodejs                                          |All occurrences          |a,b            |
+| Golang net/http - `r.URL.Query().Get("param")`  |First occurrence         |a              |
+| Golang net/http - `r.URL.Query()["param"]`      |All occurrences          |a,b            |
+| IBM Lotus Domino                                |First occurrence         |a              |
+| IBM HTTP Server                                 |First occurrence         |a              |
+| Perl CGI/Apache                                 |First occurrence         |a              |
+| mod_wsgi (Python)/Apache                        |First occurrence         |a              |
+| Python/Zope                                     |All occurences in array  |['a','b']      |
 
 ## References
 - [HTTP Parameter Pollution - Imperva](https://www.imperva.com/learn/application-security/http-parameter-pollution/)
 - [HTTP Parameter Pollution in 11 minutes | Web Hacking - PwnFunction](https://www.youtube.com/watch?v=QVZBl8yxVX0&ab_channel=PwnFunction)
-- [How to Detect HTTP Parameter Pollution Attacks - Acunetix](https://www.acunetix.com/blog/whitepaper-http-parameter-pollution/)
+- [How to Detect HTTP Parameter Pollution Attacks - Acunetix](https://www.acunetix.com/blog/whitepaper-http-parameter-pollution/)