ssti

Here are 15 public repositories matching this topic...

six2dez / reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

scanner hacking xss subdomain sqli fuzzing raspberry recon nuclei vulnerabilities bugbounty pentest ssrf lfi ssti dorks

Updated Jul 30, 2021
Shell

DiogoMRSilva / websitesVulnerableToSSTI

Star

Simple websites vulnerable to Server Side Template Injections(SSTI)

security ssti

Updated Oct 2, 2020
PHP

payloadbox / ssti-payloads

Star

🎯 Server Side Template Injection Payloads

security security-audit web code injection source bounty bugbounty payload payloads websecurity source-code-analysis ssti server-side-template-injection code-security bugbountytips payloadbox

Updated Jul 23, 2021

Yt1g3r / CVE-2019-3396_EXP

Star

CVE-2019-3396 confluence SSTI RCE

confluence exp ssti cve-2019-3396

Updated Oct 1, 2020
Python

knassar702 / hacking-lab

Star

Small Vulnerable Web

python flask xss bugbounty ssrf sqlinjection hackable uploadfile openredirect hacking-lab ssti cmdinjection

Updated Aug 13, 2020
HTML

mpgn / CVE-2018-16341

Star

CVE-2018-16341 - Nuxeo Remote Code Execution without authentication using Server Side Template Injection

rce ssti

Updated Jun 5, 2019
Python

DEMON1A / Blinder

Star

A Tool Written In Python3 To Send Blind Payloads On The Request Headers Maybe Stored On The Logs.

automation tool xss python3 bugbounty ssti blinder bugbounty-tool xsshunter

Updated Jan 13, 2021
Python

jmlgomez73 / Templated-Challenge-HackTheBox

Star

Templated WEB Challenge of the webside Hack The Box (HTB) Walkthough Capture The Flag (CTF)

challenge flask web walkthrough writeup solved htb hackthebox ssti hackthebox-writeups

Updated Apr 25, 2021

muneebwanee / SubScanner

Star

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

open-source automation tool parameters domain injection xss scans ssrf ssti sub-domain assetfinder gau gf-patterns subjack

Updated Dec 11, 2020
Shell

jmlgomez73 / Baby-Ninja-Jinja-Challenge-HTB

Star

Baby Ninja Jinja WEB Challenge of the webside Hack The Box (HTB) Walkthough Capture The Flag (CTF)

web python3 walkthrough ssti hackthebox-writeups

Updated Apr 25, 2021
Python

TheSerialiZator / FlaskyCTF-2020

Star

The CTF requires an understanding of how Flask works in order to exploit an SSTI.

ctf ssti

Updated May 5, 2021
CSS

phanatagama / Web-CTF-Cheatsheet

Star

Web CTF CheatSheet 🐈

graphql php cheatsheet xss-exploitation sqlinjection csrf-attacks ssti ssrf-payload

Updated Feb 7, 2019
Ruby

Make-School-Labs / Jinja2-ExploitMe

Star

[BEW 2.3: Web Security] Clone this repo to begin the SSTI exploit activity.

exploit jinja2 python3 web-security ssti

Updated Apr 7, 2021
HTML

storenth / lazyParam

Star

A simple automation tool to detect LFI, RCE and SSTI vulnerability. Forked for PR and customization

ssti lfi-detection

Updated Feb 25, 2021
Python

RiteshPuvvada / riteshpuvvada.github.io

Star

Vulnerability Walkthrough

cybersecurity ssti sql-injection-exploitation bypassing-upload-filters cyber-security-awareness

Updated Jul 16, 2021
HTML

Improve this page

Add a description, image, and links to the ssti topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ssti topic, visit your repo's landing page and select "manage topics."

Learn more

Jul	AUG	Sep
	01
2020	2021	2022