From 8d70f262ae768d3dadd01dde0300eef543981eb8 Mon Sep 17 00:00:00 2001 From: Wlayzz <34021743+wlayzz@users.noreply.github.com> Date: Fri, 19 Aug 2022 15:04:52 +0200 Subject: [PATCH] Update Java SSTI Adding variable expressions alternative for java injection --- Server Side Template Injection/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/Server Side Template Injection/README.md b/Server Side Template Injection/README.md index a9b4398..5b264ca 100644 --- a/Server Side Template Injection/README.md +++ b/Server Side Template Injection/README.md @@ -311,6 +311,7 @@ ${ new groovy.lang.GroovyClassLoader().parseClass("@groovy.transform.ASTTest(val ## Java ### Java - Basic injection +> Multiple variable expressions can be used, if `${...}` doesn't work try `#{...}`, `*{...}`, `@{...}` or `*{...}`. ```java ${7*7}