New answers tagged remote-code-execution
1
Based on comments, I am assuming this is a LAMP stack (and will have to make a few more assumptions as well). I'll nudge you and others who find themselves here in the right direction :D
How do I open a shell/what does that mean?
In general, a shell (as described here) is a way to send arbitrary commands to the operating system and obtain output (results ...
0
This looks more like a bug in the application which is ignored or handled by the server rather than something exploitable.
This code (in c#)
List<string> list = new List<string>();
list.Add("Hello");
list.Add("World");
Console.WriteLine(list.ToString());
Outputs:
System.Collections.Generic.List`1[System.String]
So it would appear that while ...
3
Tl,DR: Yes. But beware that you misunderstand what's going on and this may be a source of vulnerabilities.
An argument of a program can be an arbitrary byte string that doesn't contain a null byte. The limitation with null bytes comes from the operating system. Depending on your programming language and its standard library, a null byte may be rejected, or ...
answered Nov 21 at 0:04
Gilles 'SO- stop being evil'
43k13 gold badges103 silver badges157 bronze badges
2
Yes, it is safe form an error-free perspective.
As long as they are not special characters they should not influence anything.
Take a look at the special characters listed here.
If you do not use any of them in your string there should be no problem whatsoever.
1
This boils down to a basic networking problem: if the exploit requires you to connect to a listening network service on the target (e.g. exploiting BlueKeep requires you to connect to the RDP service running on the target), you need a way to connect to the target by IP address. You mention the target is behind a NAT, and that port forwarding is not ...
Top 50 recent answers are included
