Vulnerability field guide
Server-Side Template Injection
When user input is stitched into a server-side template, the template engine becomes an interpreter for the attacker. Here is how a harmless-looking arithmetic probe escalates to full server compromise, and how to design the bug out entirely.
1 articles6 min totalOverview to advanced techniques
Start here
{{7*7}}Step 01 · Start with the overview
Server-Side Template Injection6 min read
Server-Side Template Injection: From {{7*7}} to Remote Code Execution
When user input is stitched into a server-side template, the template engine becomes an interpreter for the attacker. Here is how a harmless-looking arithmetic probe escalates to full server compromise, and how to design the bug out entirely.
Read the overview