Server-Side Template Injection (SSTI): Breaking Out of Templates

0Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

How attackers exploit template engines to achieve remote code execution by injecting malicious payloads into server-side templates

Comments

Nothing yet. Say the first thing.