Tag

#server-side-template-injection

7 posts0 followers

Explore Hashnode

Alternatives

TryHackMe : Do Not Disturb Writeup

TL;DR Byte Lotus Poolside is a Node.js/Express booking app. A NoSQL injection in the login endpoint bypasses authentication entirely and lands directly in the staff role. The staff console's booking-c

exploitnotes.hashnode.dev

Yogeshwar PeelaJul 14 · 9 min read

HackTheBox : JinjaCare

Summary JinjaCare is a Flask-based COVID-19 vaccination verification web app. The intended path chains wkhtmltopdf HTML/local-file injection (via the certificate-generation feature) to disclose the Fl

exploitnotes.hashnode.dev

Yogeshwar PeelaJun 10 · 5 min read

TryHackMe — VulnNet: dotpy Writeup

Field Details Platform TryHackMe Room VulnNet: dotpy Difficulty Medium OS Linux Web Stack Python / Flask (Werkzeug 1.0.1) Reconnaissance Port Scan nmap -sCV -A MACHINE-IP -oA output Onl

exploitnotes.hashnode.dev

Mr EliteApr 28 · 5 min read

SSTI Bug Bounty 2026 — Server-Side Template Injection to RCE on 5 Template Engines | BB Day 26

📰 Originally published on SecurityElites — the canonical, fully-updated version of this article. 🎯 BUG BOUNTY COURSE FREE Part of the Bug Bounty Course — 60 Days Day 26 of 60 · 43% complete ⚠️ Legal Disclaimer: Every SSTI technique, payload, and ...

securityelites.hashnode.dev

JebitokMar 14 · 11 min read

SSTI (TryHackMe)

Server-Side Template Injection (SSTI) is one of those vulnerabilities that looks deceptively simple on the surface but can escalate to full remote code execution faster than most people expect. In thi

sharonjebitok.com

Abishek KafleOct 18, 2024 · 2 min read

SSTI Code Review Lab 2

Lab Setup Create a folder for the challenge. mkdir ssti_ctf2_challenge cd ssti_ctf2_challenge Set up the environment python3 -m venv venv source venv/bin/activate pip install Flask Create app.py from flask import Flask, request, rend...

abisec.hashnode.dev

Atharv PatilOct 3, 2024 · 5 min read

Understanding Server-Side Template Injection (SSTI)

Server-Side Template Injection (SSTI) is a significant vulnerability in modern web applications, enabling attackers to inject malicious code into server-side templates. This flaw arises when user inputs are improperly handled and directly embedded in...

atharvpatil.hashnode.dev

Search Hashnode

Explore Hashnode

Trending tags this week

TryHackMe : Do Not Disturb Writeup

HackTheBox : JinjaCare

TryHackMe — VulnNet: dotpy Writeup

SSTI Bug Bounty 2026 — Server-Side Template Injection to RCE on 5 Template Engines | BB Day 26

SSTI (TryHackMe)

SSTI Code Review Lab 2

Understanding Server-Side Template Injection (SSTI)