Injection

Server-Side Template Injection (SSTI)

Learn how template engines become weapons when user input reaches the template renderer — from math expressions to full remote code execution.

Intermediate45 min9 lessons3 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Understand how server-side template engines process user input
✓Identify template injection sinks in Jinja2, Twig, Pug, and Freemarker
✓Escalate SSTI to remote code execution via template sandbox escapes
✓Fingerprint the template engine from error messages and responses

Lessons

1How a £10,000 Bug Bounty Was Won with a Template
2How Template Engines Work — and Where They Break
3Payloads — From Math to RCE
4Tools — Finding SSTI at Scale
5Mini Lab — Identify the SSTI Probe Result
6Your Turn: Make the Server ComputeHANDS-ON
7Level Up: Escalate to RCEHANDS-ON
8Module quiz
9Hands-on Lab: Exploit PageyHANDS-ON