MSQL UDF sys_exec + SSRF IP: 127.1 and 127.0.1

This commit is contained in:
Swissky
2019-04-20 20:23:40 +02:00
parent 271cc269b6
commit 49b9d0aff7
2 changed files with 27 additions and 1 deletions

View File

@@ -136,10 +136,12 @@ localhost:+11211aaa
localhost:00011211aaaa
```
Bypass using rare address
Bypass using rare address, you can short-hand IP addresses by dropping the zeros
```powershell
http://0/
http://127.1
http://127.0.1
```
Bypass using bash variables (curl only)