Ssti Category

blog
2+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Ssti blog

Filters

  • Twig SSTI and Sandbox Bypass: RCE in Twig, CMS and PHP Filters
    web hacking

    Twig SSTI and Sandbox Bypass: RCE in Twig, CMS and PHP Filters

    Twig SSTI ,detection, payload and RCE: fingerprint vs Jinja2, payload for Twig 2.x and 3.x, filter/map/reduce bypass, sandbox escape, Drupal/Craft CMS and mitigations

    Discover more Discover more
  • SSTI (Server-Side Template Injection): Detection, Payload, Twig, Jinja2 and RCE
    web hacking

    SSTI (Server-Side Template Injection): Detection, Payload, Twig, Jinja2 and RCE

    A practical guide to SSTI: detection, template engine fingerprinting, real payloads, Jinja2, Twig, FreeMarker, sandbox bypass, and RCE.

    Discover more Discover more