Exploit Twig/PHP server-side template injection to achieve remote code execution.
npx skills add https://github.com/blacklanternsecurity/red-run --skill ssti-twig
Please help me install this Agent Skill. Skill: ssti-twig Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/web/ssti-twig Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill ssti-twig
This Skill helps penetration testers identify and exploit Server-Side Template Injection (SSTI) vulnerabilities in PHP applications utilizing Twig or similar templating engines, aiming to achieve code execution.
{{7*7}} as 49, this Skill can be used to confirm it's Twig and then attempt to execute commands like id on the server.Use the ssti-twig skill to attempt to execute the 'id' command on the target.
High-intent search queries and answers about installing and using this skill.
To exploit server-side template injection (SSTI) in Twig for remote code execution, you use version-specific payloads to evaluate template expressions and execute system commands. This involves confirming the vulnerability and applying tailored bypass techniques for modern PHP frameworks.
The best way to identify if a PHP web application uses Twig, Smarty, Blade, or Latte is by injecting template expressions like {{7*7}}. If the output evaluates to 49, the specific syntax and response can help differentiate the exact templating engine.
To perform blind SSTI exploitation when Twig template output is not visible, you can use specialized payloads designed for out-of-band interaction or time-based verification. This allows you to confirm code execution without direct visual feedback from the application.
Yes, this SSTI exploitation approach works with modern PHP frameworks by providing version-specific payloads and obfuscation techniques. It addresses bypass mechanisms to ensure remote code execution succeeds across various Twig configurations and restrictions.
You can bypass security restrictions during PHP template injection by applying specific obfuscation and bypass techniques tailored for Twig. These methods help evade modern PHP framework filters to successfully achieve remote code execution.
xijunwwCraft and analyze XSS, SQLi, SSTI, and command injection web vulnerability payloads.
blacklanternsecurityExploit Jinja2 server-side template injection to achieve remote code execution.
cmndcntrlcyberDetect and exploit server-side template injection vulnerabilities across template engines.
uphiagoDetect FastAPI-specific vulnerabilities including OpenAPI schema exposure and DI authorization gaps.