HTB CWEE Practice Questions - HTB Certified Web Exploitation Expert Exam

Access More Questions
In a Server-Side Template Injection (SSTI) attack against a Jinja2 application, which payload is used to enumerate the MRO (Method Resolution Order) and reach the 'os' module for Remote Code Execution?
Correct Answer:
{{''.__class__.__mro__[1].__subclasses__()}}

Access more questions from this quiz

Continue to HTB CWEE Practice Questions - HTB Certified Web Exploitation Expert Exam for more practice questions and the full quiz experience.

Access More Questions