The Template Injection Learning Platform was made to introduce the topic of template injection to a new audience. The focus is to serve as a tool for visual and interactive learning.
The platform is also available on GitHub Pages to remove access barriers to the theory and tools within. The public page will not have any challenges available for security reasons. The full version is available in this repository and it will be necessary to download the repository and host it locally, to run a challenge.
This platform was developed as part of my bachelor's thesis and I aim to maintain it for the foreseeable future.
- Access Public Page for easy perusal.
- Access Public Page Repository.
- Fundamentals are explained in a simple, easy-to-understand manner with visual help.
- Tools are provided to deepen knowledge on template injection and apply the theory.
- Research results are shown in tables.
- An Interactive Decision Tree helps users apply research practically.
- Attack Labs offer (for now) simple challenges to practice learned basics in a safe environment.
- Install Docker Compose.
- Download or clone this repository.
- Build the servers (only needed at first launch or when changes have been made):
docker compose build - Start the servers and the playground:
docker compose upor use:sudo docker-compose up --build -d - Access the platform at http://127.0.0.1
- Close the platform:
docker compose down
- When there are permission errors upon starting or building the docker compose, try adjusting the rights:
chmod 755 -R ti_platform - Incorrect Docker Compose installations may cause errors when trying to start up the platform. Make sure to follow each step accurately.
- The Template Injection Learning Platform is licensed under the Apache License, Version 2.0.