Merge pull request #209 from g0tmi1k/fixes

Improved on File-names payloads
2018-07-25 12:27:13 +01:00
parent cd9b3c6568 58f2b4db53
commit e708bec362
27 changed files with 28 additions and 1 deletions
--- a/Payloads/File-Names/Hello%00World.txt
+++ b/Payloads/File-Names/Hello%00World.txt
@@ -1 +0,0 @@
-%00
--- a/Payloads/File-Names/exec/Hello$(hostname)World.txt
+++ b/Payloads/File-Names/exec/Hello$(hostname)World.txt
--- a/Payloads/File-Names/exec/Hello`hostname`World.txt
+++ b/Payloads/File-Names/exec/Hello`hostname`World.txt
--- a/Payloads/File-Names/max-length/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+++ b/Payloads/File-Names/max-length/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
@@ -0,0 +1 @@
+python -c 'print "A" *232'
--- a/Payloads/File-Names/max-length/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.php.gif
+++ b/Payloads/File-Names/max-length/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.php.gif
@@ -0,0 +1,3 @@
+GIF8;
+<?php phpinfo(); ?>
+
--- a/Payloads/File-Names/max-length/Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag6Ag7Ag8Ag9Ah0Ah1Ah2Ah3Ah4Ah5Ah6Ah7Ah8Ah9Ai0Ai1Ai2Ai.gif
+++ b/Payloads/File-Names/max-length/Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag6Ag7Ag8Ag9Ah0Ah1Ah2Ah3Ah4Ah5Ah6Ah7Ah8Ah9Ai0Ai1Ai2Ai.gif
@@ -0,0 +1,2 @@
+GIF8;
+<?php phpinfo(); ?>
--- a/Payloads/File-Names/max-length/Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag6Ag7Ag8Ag9Ah0Ah1Ah2Ah3Ah4Ah5Ah6Ah7Ah8Ah9Ai0Ai1Ai2Ai.php
+++ b/Payloads/File-Names/max-length/Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag6Ag7Ag8Ag9Ah0Ah1Ah2Ah3Ah4Ah5Ah6Ah7Ah8Ah9Ai0Ai1Ai2Ai.php
@@ -0,0 +1 @@
+<?php phpinfo(); ?>
--- a/Payloads/File-Names/max-length/Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag6Ag7Ag8Ag9Ah0Ah1Ah2Ah3Ah4Ah5Ah6Ah7Ah8Ah9Ai0Ai1Ai2Ai3Ai4
+++ b/Payloads/File-Names/max-length/Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag6Ag7Ag8Ag9Ah0Ah1Ah2Ah3Ah4Ah5Ah6Ah7Ah8Ah9Ai0Ai1Ai2Ai3Ai4
@@ -0,0 +1 @@
+255
--- a/Payloads/File-Names/null-byte/Hello%00World.txt
+++ b/Payloads/File-Names/null-byte/Hello%00World.txt
@@ -0,0 +1 @@
+Hello%00
--- a/Payloads/File-Names/null-byte/Hello.php%00World.txt
+++ b/Payloads/File-Names/null-byte/Hello.php%00World.txt
@@ -0,0 +1,2 @@
+Hello.php%00
+<?php phpinfo(); ?>
--- a/Payloads/File-Names/traversal/..::..::;
+++ b/Payloads/File-Names/traversal/..::..::;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/..::;
+++ b/Payloads/File-Names/traversal/..::;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/..:;
+++ b/Payloads/File-Names/traversal/..:;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/..;
+++ b/Payloads/File-Names/traversal/..;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/..;:
+++ b/Payloads/File-Names/traversal/..;:
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/..\:;
+++ b/Payloads/File-Names/traversal/..\:;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/.:..:
+++ b/Payloads/File-Names/traversal/.:..:
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/.:..:;
+++ b/Payloads/File-Names/traversal/.:..:;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/.:;
+++ b/Payloads/File-Names/traversal/.:;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/.;
+++ b/Payloads/File-Names/traversal/.;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/.;:
+++ b/Payloads/File-Names/traversal/.;:
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/:..:;
+++ b/Payloads/File-Names/traversal/:..:;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/::..::;
+++ b/Payloads/File-Names/traversal/::..::;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/:;
+++ b/Payloads/File-Names/traversal/:;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/;
+++ b/Payloads/File-Names/traversal/;
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/;:
+++ b/Payloads/File-Names/traversal/;:
@@ -0,0 +1 @@
+Hello World
--- a/Payloads/File-Names/traversal/;\:
+++ b/Payloads/File-Names/traversal/;\:
@@ -0,0 +1 @@
+Hello World