Tutorials

SSTI Explaination

What is SSTI?  Web applications commonly use server-side templating technologies Jinja2, Twig, FreeMaker, etc. to generate dynamic HTML responses. As quoted by OWASP, Server Side Template Injection vu

#exploitation#web

What is SSTI? 

Web applications commonly use server-side templating technologies (Jinja2, Twig, FreeMaker, etc.) to generate dynamic HTML responses. As quoted by OWASP, Server Side Template Injection vulnerabilities (SSTI) occur when user input is embedded in a template in an unsafe manner and results in remote code execution on the server.