Infosec InstitutePublished
Spoof Using Right to Left Override (RTLO) Technique - InfoSec Resources
Excerpt
In this article we will learn about the one of the most overlooked spoofing mechanisms, known as right to left override (RTLO).
What is RTLO?
RIGHT TO LEFT OVERRIDE is a Unicode mainly used for the writing and the reading of Arabic or Hebrew text.
Unicode has a special character, U+202e, that tells computers to display the text that follows it in right-to-left order. This vulnerability is used to disguise the names of files and can be attached to the carrier like email. For example, the file name with ThisIsRTLOfileexe.doc is actually ThisIsRTLOfiledoc.exe, which is an executable file with a U+202e placed just before “doc.”
Ethical Hacking Training –…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Infosec Institute on resources.infosecinstitute.com.
More from Infosec Institute5
- Andromeda Bot Analysis part 2Infosec Institute · Published 28 Sep 2015
- Netwalker malware: What it is, how it works and how to prevent itInfosec Institute · Published 29 Jul 2020
- Jackpotting malwareInfosec Institute · Published 5 Mar 2020
- Fast Flux Networks Working and Detection, Part 2Infosec Institute · Published 23 Dec 2014
