added addslashes bypass

This commit is contained in:
Stefan Friese 2023-02-16 23:15:47 +01:00
parent 1f7ac58e3f
commit 2ea19b21c9
3 changed files with 20 additions and 1 deletions

View File

@ -129,3 +129,14 @@ openssl aes-256-cbc -pbkdf2 -iter 128000 -e -in $PLAIN_TEXT -out $CIPHER
```sh
openssl aes-256-cbc -pbkdf2 -iter 128000 -d -in $CIPHER -out $PLAIN_TEXT
```
## ECPoint (EC)
* RFC5480
### Read PEM Public Key
```sh
openssl ec -pubin -in publickey.pem -noout -text
```

View File

@ -7,12 +7,13 @@
### Online Tools
* [cryptool](https://cryptool.org)
* [quipquip](https://quipquip.com)
* [cryptii](https://cryptii.com/)
* [Boxentriq](https://www.boxentriq.com)
* [dcode](https://www.dcode.fr)
* [factordb](http://factordb.com)
## Encryption Standards
* [AES](https://csrc.nist.gov/publications/detail/fips/197/final)

View File

@ -0,0 +1,7 @@
# Bypass addslashes()
The function `addslashes()` can be bypassed by using complex variables like `${VARIABLE}`, for example `${phpinfo()}` or using a second HTTP parameter for input via
```sh
${system($_GET[q])}&q=ls+/
```
* https://www.programmersought.com/article/30723400042/