Eswar Abisheak
Oct 31, 2020

--

evil config is just a script that executes in the web server you can build it on your own.

The web page is rendering on its server what ever you put in that blog page . So all you have to do is port forward from the server to your host pc. You just have to make the server do that when you visit the rendered page.

The nc command must be executed in the cmd so to achieve that I broke the whole command into three parts and commented its use.

If you still didn't get what is being done please refer to SSTI- Server Side Template Injection.

--

--

Eswar Abisheak
Eswar Abisheak

Written by Eswar Abisheak

DSCVIIT lead || https://eswar.dev || HTB player || Competitive Coding

No responses yet