ssti
There are 3 repositories under ssti topic.
nemesida-waf / waf-bypass
Check your WAF before an attacker does
Language:Python 1247- SSTImapLanguage:Python 765
Marven11 / Fenjing
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
Language:Python 606payloadbox / ssti-payloads
🎯 Server Side Template Injection Payloads
Adamkadaban / CTFs
CTF Cheat Sheet + Writeups / Files for some of the Cyber CTFs that I've done
Language:C 540DiogoMRSilva / websitesVulnerableToSSTI
Simple websites vulnerable to Server Side Template Injections(SSTI)
Language:PHP 373- Language:Python 173
- Language:Python 65
- ronin-vulns
ronin-rb / ronin-vulns
Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
Language:Ruby 59 darklotuskdb / SSTI-XSS-Finder
XSS Finder Via SSTI
Language:Shell 54knassar702 / hacking-lab
Small Vulnerable Web App
Language:HTML 51cokeBeer / go-sec-code
Go-sec-code is a project for learning Go vulnerability code.
Language:Go 34- CVE-2018-16341
mpgn / CVE-2018-16341
CVE-2018-16341 - Nuxeo Remote Code Execution without authentication using Server Side Template Injection
Language:Python 24 - ssti-flask-hacking-playground
filipkarc / ssti-flask-hacking-playground
App with Server Side Template Injection (SSTI) vulnerability - possible RCE - in Flask. Free vulnerable app for ethical hacking / penetration testing training.
Language:Python 14 DEMON1A / Blinder
A script written in python3 to spread blind cross-site scripting payloads on HTTP requests headers
Language:Python 10muneebwanee / SubScanner
An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.
Language:Shell 9RiteshPuvvada / riteshpuvvada.github.io
Vulnerability Walkthrough
Language:HTML 8anger / voyager-js
Voyager.js is a Node.js script designed for testing URLs for template injection vulnerabilities. It automates the process of appending known injection strings to URLs and monitors the responses for signs of successful injection.
Language:JavaScript 6Acceis / exploit-CVE-2022-24780
iTop < 2.7.6 - (Authenticated) Remote command execution
Language:Ruby 5- WebSecurityEmpire
LOIC-only-one / WebSecurityEmpire
Concernant le projet WebSecurityEmpire : Il s'agit de scripts pour tester la sécurité de site internet, cette collection peut être utilisé pour faire des présentations.
Language:Python 4 phanatagama / Web-CTF-Cheatsheet
Web CTF CheatSheet 🐈
Language:Ruby 3- Language:Go 2
- Language:Python 2
RobinTrigon / ertssti
simple server site template injection scanner !
Language:Shell 2DanielAzulayy / FlaskyCTF-2020
The CTF requires an understanding of how Flask works in order to exploit an SSTI.
Language:CSS 1- Language:Python 1
dr34mhacks / Ginger-juice-shop
An Intentionally Vulnerable SSTI application for a beginner to an experienced.
Language:Python 1storenth / lazyParam
A simple automation tool to detect LFI, RCE and SSTI vulnerability. Forked for PR and customization
Language:Python 1TargetPackage / lazyParam
A simple automation tool to detect LFI, RCE and SSTI vulnerabilities.
Language:Python 1testivy / wangding_2022_ctf_findit
2022 网鼎杯 玄武 web ctf thymeleaf SSTI bypass and memshell
Language:Java 1TheWation / NodeJsSSTI
Express app with Pug templates demonstrating SSTI vulnerability and secure implementation for educational purposes.
Language:JavaScript 1TrueBad0ur / ssti_java_concat_payload_generator
Simple ssti payload generator for java using concat technique
Language:Python 1- Language:Java 0
gunzf0x / Grav-CMS-RCE-Authenticated
Exploit against Grav CMS (versions below 1.7.45) that allows Remote Code Execution for an authenticated user.
Language:Pythonhttp406 / ServerSide-Template-Injection
Server-side template injections (SSTI) are vulnerabilities that let the attacker inject code into such server-side templates. In simple terms, the attacker can introduce code that is actually processed by the server-side template. A sample cyber security project.
