Backup_Repos/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings synced 2026-05-08 12:43:34 +02:00
Code Issues Projects Releases Wiki Activity

Add 'Bypass With An Alias' section to README

Browse source 
Added section on bypassing command injection using aliases.
This commit is contained in:
RelunSec 2025-12-24 10:42:19 -08:00 committed by GitHub
parent 39da0328b8
commit e14f249e62
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
Command Injection/README.md
View file

@ -13,6 +13,7 @@
* [Filter Bypasses](#filter-bypasses)
* [Bypass Without Space](#bypass-without-space)
* [Bypass With A Line Return](#bypass-with-a-line-return)
* [Bypass With An Alias](#bypass-with-alias)
* [Bypass With Backslash Newline](#bypass-with-backslash-newline)
* [Bypass With Tilde Expansion](#bypass-with-tilde-expansion)
* [Bypass With Brace Expansion](#bypass-with-brace-expansion)
@ -203,6 +204,17 @@ original_cmd_by_server
ls
```
### Bypass With An Alias
In shells you have the ~/.bashrc and ~/.zshrc it contain aliases you can also find custom one by combining with other vulns or just use builtin one like in the examples
```powershell
~$ la /var/www
~$ l /var/www
~$ ll /var/www
```
### Bypass With Backslash Newline
* Commands can be broken into parts by using backslash followed by a newline