Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-15 01:17:36 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update formula-doc-latex-injection.md

Browse source 
Added wrapper hint from PayloadsAllTheThings
This commit is contained in:
0x4bit 2023-08-08 14:24:42 +02:00 committed by GitHub
parent 751055cd29
commit cf9b008f1b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pentesting-web/formula-doc-latex-injection.md
View file

@ -145,6 +145,8 @@ However, there are other ways to execute commands, so to avoid RCE it's very imp
### Read file <a href="#read-file" id="read-file"></a>
You might need to adjust injection with wrappers as \[ or $.
```bash
\input{/etc/passwd}
\include{password} # load .tex file