bugbounty-cheatsheet/cheatsheets/template-injection.md

24 lines
196 B
Markdown
Raw Normal View History

2017-07-14 14:35:52 +00:00
## Template Injection
**Ruby**
```ruby
<%=`id`%>
2017-09-12 15:23:23 +00:00
```
**Twig**
The following payload should output `49`.
```
{{7*'7'}}
```
**Jinja**
This payload should output `7777777`.
```
{{7*'7'}}
```