πŸ“‚ (incomplete) Argument Injection

Overview

Contents of this topic will revolve around vulnerabilities that allow malicious or dangerous arguments to be passed to a remote command. (Often ones that allow authentications bypass, etc.)


🧠 Techniques

TABLE creation_date AS "Created" 
FROM "05 - Content" 
WHERE contains(up, this.file.link) AND contains(tags, "🧠") 
SORT file.name ASC

πŸ› οΈ Tools

TABLE creation_date AS "Created"
FROM "05 - Content"
WHERE contains(up, this.file.link) AND contains(tags, "πŸ› οΈ")
SORT file.name ASC
TABLE status, difficulty
FROM "10_Operations"
WHERE contains(up, this.file.link) OR contains(tags, "🚩")
SORT creation_date DESC