WorstFit
Author: ssokolowCreated Jan 26, 2025Updated Jan 26, 2025
As explained here, the "Best Fit" transformation that Windows performs to approximate Unicode strings when retrieved via legacy codepage-based/ANSI APIs is exploitable.
https://blog.orange.tw/posts/2025-01-worstfit-unveiling-hidden-transformers-in-windows-ansi/
It'd be a good idea to have test strings for the various types of exploits detailed there.
Source: minimaxir/big-list-of-naughty-strings