Detect and exploit Server-Side Template Injection vulnerabilities across web frameworks.
npx skills add https://github.com/SnailSploit/Claude-Red --skill ssti
Please help me install this Agent Skill. Skill: ssti Source: https://github.com/SnailSploit/Claude-Red/tree/main/Skills/offensive-ssti Command: npx skills add https://github.com/SnailSploit/Claude-Red --skill ssti
This Skill helps security professionals identify and exploit Server-Side Template Injection (SSTI) vulnerabilities, a common web application flaw that can lead to remote code execution.
Use the ssti skill to test the input field 'comment' on the target URL 'http://example.com/vulnerable_app' for Server-Side Template Injection.
High-intent search queries and answers about installing and using this skill.
To test for Server-Side Template Injection, systematically probe user input points with common polyglots and engine-specific payloads to detect vulnerable patterns and identify the underlying template engine.
Server-Side Template Injection exploitation targets diverse web application frameworks and template engines like Jinja2, Twig, and FreeMarker, using specific payloads to achieve remote code execution.
You can bypass WAFs and character blacklists during template injection testing by utilizing specialized bypass techniques that circumvent filters while injecting engine-specific payloads for data exfiltration.
Yes, template injection facilitates payload generation for remote code execution, file exfiltration, and information disclosure by systematically probing user input fields with engine-specific syntax.
The best way to identify the template engine is by injecting common polyglot payloads into user input points and analyzing the application's response to map it to engines like Jinja2, Twig, or FreeMarker.
rahmatullahbossIdentify XSS vulnerabilities and craft payloads for stored, reflected, and DOM-based vectors.
utsavthakurDetect dangling markup injection to exfiltrate CSRF tokens and session data.
dapperdiversTest POST parameters for SQL injection, XSS, and command injection vulnerabilities.
ArianHobson333Detect and exploit SQL injection vulnerabilities in web applications.
