PayloadsAllTheThings/Server Side Template Injection/ASP.md

Server Side Template Injection - ASP.NET

Summary

• ASP.NET Razor
  • ASP.NET Razor - Basic injection
  • ASP.NET Razor - Command execution

ASP.NET Razor

Official website

Razor is a markup syntax that lets you embed server-based code (Visual Basic and C#) into web pages.

ASP.NET Razor - Basic injection

@(1+2)

ASP.NET Razor - Command execution

@{
  // C# code
}