Hands-on cybersecurity and CTF labs covering DNS and subdomain discovery, RCE, template injection, SSTI-to-root, authentication reconnaissance, credential trails, stream investigation, XXE file lea...

Professional TryHackMe SuperSecretTip walkthrough covering source-code disclosure, XOR secret reconstruction, SSTI, RCE, Linux lateral movement, PATH hijacking, cron abuse, and root-context curl co...

PoC for GHSA-pp25-4cg4-qcr9 — Serena Agent SSTI → RCE (serena-agent <= 1.6.1) - amagesh1/serena-ssti-poc

Intentionally vulnerable Node/Express injection training lab (SQLi, NoSQLi, cmd injection, XSS, SSTI, XXE, LDAP injection, CRLF injection) with matching fixed routes. Local use only. - VanishaParwa...

A deliberately vulnerable Flask web application built on Jinja2 to demonstrate SQL injection and Server-Side Template Injection (SSTI) via nmap, Gobuster, and tplmap to identify and exploit injecti...

A chained multi-service vulnerable web app: SSRF into an internal-trust bypass, leaked JWT secret, forged admin auth, and SSTI-to-RCE, fully automated end to end. - oxihash/vulnhub-web

sstiscan 是一个基于 Go 1.24+ 的服务端模板注入（SSTI，Server-Side Template Injection）检测引擎，面向 Flask/Jinja2 目标的授权安全测试。它通过「随机基线标记 + 动态算术探针 + 过滤绕过升级 + 上下文比对 + 证据评分」判断参数是否被模板引擎求值，并输出结构化结果；标准语法被 WAF/过滤规则拦截时，自动以无害语法变体逐层重...

Laboratorium Server-Side Template Injection (SSTI) to RCE untuk pembelajaran - Flask/Jinja2: direct render, WAF blacklist bypass, string concat injection, blind time-based oracle. Payload terverifi...

A multi-stage web exploitation CTF challenge combining session hijacking, SSTI, RCE and RSA cryptography. - sac-exe/GEARHEART-CTF

5h4d0wn1k cybersecurity tool - AUTHORIZED USE ONLY. Educational/own-lab. MIT. - 5h4d0wn1k/web8-ssti-scan

Contribute to fadilsyhptra/SSTI-VULNE development by creating an account on GitHub.

Operational research on the modern multi-stage chain - MalikHettige/desync-saml-orm-ssti-chain

Contribute to ShashankD210/SSTIMAP development by creating an account on GitHub.

PentestingHere Academy lab: unsandboxed Twig SSTI to RCE - pentestinghere-labs/noteforge-greeting-template-rce

Automatic SSTI detection tool with interactive interface - vladko312/SSTImap

AI-powered Burp Suite extension for automated web app penetration testing. DeepSeek-driven payload generation, vulnerability detection (SQLi, XSS, SSRF, SSTI, XXE, RCE), scope-aware traffic capture...

Contribute to ebrahimgh21/SSTI-CHECKER development by creating an account on GitHub.

PipePwned es un laboratorio que simula un entorno CI/CD vulnerable, donde se explota una cadena de vulnerabilidades que incluyen IDOR, SSTI, fuga de información y escalada de privilegios mediante P...

OSWE-style white-box web exploitation lab. A Flask monitoring app with chained RCE paths buried in normal business logic — practice source-code review. - JinBaiWansec/sentinelhub

Contribute to Caxtiq/ssti-labs development by creating an account on GitHub.