Tutorials
SSTI Explaination
What is SSTI? Web applications commonly use server-side templating technologies Jinja2, Twig, FreeMaker, etc. to generate dynamic HTML responses. As quoted by OWASP, Server Side Template Injection vu
#exploitation#web
What is SSTI?
Web applications commonly use server-side templating technologies (Jinja2, Twig, FreeMaker, etc.) to generate dynamic HTML responses. As quoted by OWASP, Server Side Template Injection vulnerabilities (SSTI) occur when user input is embedded in a template in an unsafe manner and results in remote code execution on the server.