Category Server-Side Template Injection

blog
2+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Server-Side Template Injection blog

Filters

  • Injection Attack: A Complete Guide to Web Injections
    web hacking

    Injection Attack: A Complete Guide to Web Injections

    A complete guide to injection attacks: SQL injection, command injection, SSTI, XXE, LDAP, NoSQL, and other techniques, with examples, testing, and prevention.

    Discover more Discover more
  • Twig SSTI and Sandbox Bypass: RCE in Twig, CMS and PHP Filters
    web hacking

    Twig SSTI and Sandbox Bypass: RCE in Twig, CMS and PHP Filters

    Twig SSTI ,detection, payload and RCE: fingerprint vs Jinja2, payload for Twig 2.x and 3.x, filter/map/reduce bypass, sandbox escape, Drupal/Craft CMS and mitigations

    Discover more Discover more