Null Byte Injection

---

Null Byte Injection is an active exploitation technique used to bypass sanity checking filters in web infrastructure by adding URL-encoded null byte characters (i.e. %00, or 0x00 in hex) to the user-supplied data. This injection process can manipulate the intended logic and behavior of the application and allow malicious attackers to get unauthorized access to the system files.