DEV Community

Peppa
Peppa

Posted on

CBJS: Command Injection 4in1 level 2

Detail

  • Mục tiêu chiếm quyền điều khiển server và đọc một tập tin bí mật ở thư mục gốc (đường dẫn /)
  • Cũng sử dụng addslashes giống level 1 để loại bỏ các kí tự đặc biệt, bổ sung thêm chỉ chấp nhận độ dài 10 kí tự
    Image description

  • Có thể sử dụng wildcard * để matching a pattern
    Image description

  • Cũng có thể sử dụng trường hợp single quote giống level 1

Top comments (0)

Billboard image

The Next Generation Developer Platform

Coherence is the first Platform-as-a-Service you can control. Unlike "black-box" platforms that are opinionated about the infra you can deploy, Coherence is powered by CNC, the open-source IaC framework, which offers limitless customization.

Learn more

👋 Kindness is contagious

Explore a sea of insights with this enlightening post, highly esteemed within the nurturing DEV Community. Coders of all stripes are invited to participate and contribute to our shared knowledge.

Expressing gratitude with a simple "thank you" can make a big impact. Leave your thanks in the comments!

On DEV, exchanging ideas smooths our way and strengthens our community bonds. Found this useful? A quick note of thanks to the author can mean a lot.

Okay