hunt-ssti

Server-side template injection vulnerabilities are detected by injecting template syntax probes into target endpoints and analyzing application responses for template engine execution. This Skill automates detection across various template engines by testing user-specified endpoints.

Yes, server-side template injection can be escalated to remote code execution using engine-specific patterns. This Skill applies tailored exploitation payloads for template engines like Jinja2, Twig, Freemarker, and ERB to achieve RCE during security testing.

Email templates, PDF generators, CMS features, and error pages are common targets for SSTI vulnerabilities. You should test these components by specifying the relevant target endpoint and template engine to identify injection points during security assessments.

Yes, this SSTI detection supports template engines including Jinja2, Twig, Freemarker, and ERB. It applies engine-specific patterns to both identify injection vulnerabilities and escalate them to remote code execution across these frameworks.

To start testing for template injection, manually specify the target endpoint and the template engine used by the application. The Skill then probes the endpoint with template syntax to detect vulnerabilities and attempts RCE escalation.

Specifying the template engine manually is required because SSTI exploitation relies on engine-specific syntax and patterns to escalate to remote code execution. Accurate engine identification ensures the correct payloads are used during vulnerability detection.