SSTI Testing — ASHWATTHAMA

What problem does it solve?

ASHWATTHAMA identifies and classifies Server-Side Template Injection (SSTI) vulnerabilities in web applications. It analyzes the response to probe payloads and classifies potential vulnerabilities based on the response.

Core Features & Use Cases

• SSTI Detection: Identifies injection surfaces in web applications using template engines.
• Engine Identification: Determines the template engine in use, if applicable.
• Severity Classification: Assigns a severity rating based on the nature of the detected vulnerability.
• Advanced Detection: Uses timing-based detection and error-based fingerprinting to identify blind SSTI vulnerabilities.
• Use Case: ASHWATTHAMA can be used to test web applications for SSTI vulnerabilities during security audits or penetration testing.

Quick Start

Run ASHWATTHAMA on the web application at https://example.com to detect potential SSTI vulnerabilities.