hunt-ssti

To detect server-side template injection (SSTI), scan web application inputs like email templates, PDF generators, and error pages for specific patterns. This process identifies SSTI vulnerabilities across template engines and checks for potential remote code execution vectors.

Server-side template injection (SSTI) is a vulnerability where user input is unsafely embedded into template engines. Exploiting SSTI can lead to remote code execution (RCE) by allowing attackers to execute arbitrary commands through the template engine's functionality.

Yes, SSTI detection works with Jinja2, Twig, Freemarker, ERB, Spring, Velocity, Mako, Thymeleaf, and Smarty templates. The scanner identifies specific patterns indicative of SSTI across these various template engines during security auditing.

Scan for SSTI vulnerabilities in specific targets by providing the web application endpoint or file to the scanner. It checks CMS preview features, PDF generators, email templates, and error pages with user input for remote code execution vectors.

The best way to escalate server-side template injection (SSTI) to remote code execution is by identifying template engine-specific payloads. Security auditors ascertain if the SSTI can be leveraged for RCE by testing injection patterns against the target template engine.