[BEW 2.3: Web Security] Clone this repo to begin the SSTI exploit activity.

A mini-web app that captures cookies of HTTP requests sent to it

CS5331 Server-Side Template Injection Project

Serverside Template Injection (SSTI) RCE - THM challenge "whiterose"

SSTI exercises

🔐 [ACS 3230] SSTI Exploit Activity

Exploit against Grav CMS (versions below 1.7.45) that allows Remote Code Execution for an authenticated user - CVE-2024-28116

Java General Vulnerable Web Application

This script will prepare some tmux session precompiled to test command injection on some web page parameter (on a GET or POST request).

Server-side template injections (SSTI) are vulnerabilities that let the attacker inject code into such server-side templates. In simple terms, the attacker can introduce code that is actually processed by the server-side template. A sample cyber security project.

LightSSTICheck is a tool designed to find basic SSTI vulnerabilities

Express app with Pug templates demonstrating SSTI vulnerability and secure implementation for educational purposes.

An Intentionally Vulnerable SSTI application for a beginner to an experienced.

A simple automation tool to detect LFI, RCE and SSTI vulnerability. Forked for PR and customization

rudimentary checker/scanner for server side template injection

Simple ssti payload generator for java using concat technique

2022 网鼎杯 玄武 web ctf thymeleaf SSTI bypass and memshell