I found a command injection vulnerability in Linux. The system does not allow any white space characters meaning
The following command works:
But I want to provide command with space, like:
Since it does not allow spaces, it does not work. I tried with multiple options like Hexa for space, octal, using /NULL characters /a, /t, etc but nothing works.
In brief, is there any possibility to type multiple shell commands with no spaces in bash shell?
In more details, this is webapp which talks to Linux directly. What ever I enter in webapps - it will reflect in Linux command prompt. If I enter
;ls -a (it does not work due to space) ;ls;ifconfig; (it works and shows both commands)