Identify SSTI patterns in HTTP parameters across templating engines.
npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-ssti
Please help me install this Agent Skill. Skill: defensive-ssti Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Blue/Skills/defensive-ssti Command: npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-ssti
SSTI detection across common templating engines to identify unsafe template rendering and potential code execution surfaces in web applications.
Run SSTI detection against the latest web logs to surface template injection signals.
High-intent search queries and answers about installing and using this skill.
Detect SSTI vulnerabilities by scanning HTTP parameters for engine-agnostic injection patterns across Jinja2, Twig, Freemarker, Velocity, and ERB. The Skill generates Sigma rules and KQL queries to surface template injection signals in WAF logs and SIEM alerts.
The best way to write KQL or Sigma rules for server-side template injection is to map engine-specific syntax patterns to MITRE ATT&CK techniques. This provides SOC-focused triage guidance and identifies unsafe template rendering surfaces in web application logs.
Yes, you can detect Jinja2 and Twig template injection patterns in WAF logs. The Skill identifies unsafe template rendering across these engines, leveraging Sigma rules and KQL queries to alert on potential code execution surfaces.
You get hardening recommendations by running SSTI detection against your latest web logs. The Skill maps findings to MITRE ATT&CK and provides actionable hardening recommendations alongside SOC triage guidance to secure unsafe template rendering.
SSTI detection works for Freemarker and Velocity by scanning HTTP parameters for engine-agnostic template injection patterns. It applies Sigma and KQL-based detections to identify potential code execution surfaces across these specific templating engines.
DorianGalloIdentifies web application firewalls and selects generic evasion techniques for injection payloads.
hypnguyen1209Hunt threats across infrastructure and extract IOC data mapped to MITRE ATT&CK.
fatihkanDetect server-side template injection across multiple template engines.
jonnymuirStandardize design documentation, execution tasks, and architectural decisions across multi-specialist projects.
