domains / families / security / offensive-ssti

offensive-ssti

separate

Dense description covering Server-Side Template Injection across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty, Mako, Handlebars, ERB, Thymeleaf, EJS, Pug. Engine fingerprinting, filter bypass, blind exploitation, WAF evasion, SSTI-to-RCE chains. Tools: tplmap. CWE-1336. MITRE T1190. Use when testing template rendering endpoints or exploiting template injection for code execution.

When to use

• SSTI across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty, Mako, Handlebars, ERB, Thymeleaf, EJS, Pug
• Engine fingerprinting
• Filter bypass
• Blind exploitation
• WAF evasion
• SSTI-to-RCE chains
• Testing template rendering endpoints
• Exploiting template injection for code execution

When not to use

• Client-side template injection (AngularJS, Vue.js)

Skill page

Source