![]() ![]() Another trick to send a whole directory to a local machine with no SSH access in either direction is to pipe a tarball into base64, then transport the base64 data as text (via nc or clipboard). It’s also cross platform as well so great to hop between *nixes and say a Mac. In most cases the anchors \A for beginning of text and \z for end of text should be used instead of ^ and $. ![]() Ultimately this leads to a shell command injection in ping -c 4 # by using newlines in params. However this restriction can be easily bypassed as the Regex anchors ^ and $ are being used. ![]() Here params should not contain anything else but numbers and dots.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |