sk Skill · PentesterFlow
ssti
Server-Side Template Injection — fingerprint the engine first (Jinja2 / Twig / Velocity / Freemarker / ERB / Smarty / Mako / Handlebars / Pug), then escalate the engine-specific primitive to RCE or sandbox escape. Use when user input is reflected through a template engine (Jinja2/Twig/Velocity/Freemarker/ERB/Smarty/Mako/Handlebars/Pug) or {{7*7}} evaluates to 49.
Open on skills.sh ↗read 2026-09-18
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 4
TypeScript
- Host repository
- PentesterFlow/agent
- Allowed tools
- http, shell, read_payloads, file_write
- Host stars
- 1,362
- Host language
- TypeScript