Freemarker

Command execution

by YesWeHack
drag_indicator
info
drag_indicator
inputs
drag_indicator
inspect

Thanks to some features of Freemarker, it is possible to execute shell command.

Goal: Execute the id shell command

Hints

Solution

drag_indicator
waf
INPUT
OUTPUT
drag_indicator
code
drag_indicator
result