Mucomplex Diary

A cyber security enthusiasm. Learning is my passion. Currently working as Security Consultant at Firmus sdn bhd. I had experience in the penetration testing and reverse engineering skills. I am doing penetration testing for the web penetration testing and vulnerability assessment on servers and other infrastructure.

View on GitHub

Space Bypass,Concatenation

Date : 06 Oct 2019

Author: mucomplex

Today I will show some trick to bypass when you want to invade the target machine

Space Bypass

Curly braces the command and argument. eg: {command,arg1,arg2,..}

The output will result as image 1

Image 1

Define ${IFS} which mean “internal field separator”

Image 2

mysql space bypass

with “/**/”
Image 3

with “+”
Image 4

Concatenation

? Operator , this will subtitute alphabet as single wildcard.
Image 1

Quote
Image 2

Uninitialized variables
Image 3

WildCard
Image 4