hunt-ssti

Server-side template injection occurs when user-controlled input is insecurely rendered by template engines, allowing attackers to execute arbitrary code. It escalates from simple payload detection to full remote code execution using engine-specific payloads to gain system-level access.

Detect server-side template injection by probing target endpoints with a standard polyglot payload. This skill implements multi-stage detection to identify insecure rendering of user input in features like email templates, PDF generators, and CMS preview functions.

Yes, you can exploit server-side template injection across diverse web frameworks. Multi-engine fingerprinting automatically detects popular template engines like Jinja2, Twig, Freemarker, ERB, and Thymeleaf to provide tailored escalation payloads.

The best way to test email templates and PDF generators for template injection is probing endpoints that render user-controlled input. This validates whether input reflection can be leveraged for system-level access through remote code execution.

Escalate template injection to remote code execution using engine-specific payloads provided after fingerprinting. The skill implements targeted escalation pathing for diverse web frameworks and template engines to validate the actual security impact.