Path Traversal + CSV Injection

This commit is contained in:
Swissky
2024-11-28 21:36:01 +01:00
parent 57f7c8ddad
commit a16f8a6de1
8 changed files with 345 additions and 245 deletions

View File

@@ -19,6 +19,11 @@
Look for `npm`, `pip`, `gem` packages, the methodology is the same : you register a public package with the same name of private one used by the company and then you wait for it to be used.
* DockerHub: Dockerfile image
* JavaScript (npm): package.json
* MVN (maven): pom.xml
* PHP (composer): composer.json
* Python (pypi): requirements.txt
### NPM Example