ssti-jinja2

What problem does it solve?

This Skill helps penetration testers identify and exploit Server-Side Template Injection (SSTI) vulnerabilities in Python applications using Jinja2, Mako, Tornado, or Django templates.

Core Features & Use Cases

• Engine Identification: Differentiates between Jinja2, Mako, Tornado, and Django template engines.
• Information Extraction: Extracts configuration details, context variables, and file contents.
• Remote Code Execution (RCE): Achieves RCE through various payload techniques, including context-free and MRO chains.
• Filter Bypass: Provides methods to bypass common input filters like underscore, dot, and bracket restrictions.
• Blind SSTI: Handles scenarios where direct output is not visible using error-based, boolean-based, time-based, and OOB techniques.
• Use Case: A penetration tester encounters a web application that appears vulnerable to SSTI. They use this Skill to confirm the template engine, extract sensitive configuration data like the SECRET_KEY, and ultimately achieve remote code execution on the server.

Quick Start

Use the ssti-jinja2 skill to attempt remote code execution by exploiting a Jinja2 SSTI vulnerability on the target URL.