Z‑Vuln‑Lab is an intentionally vulnerable CTF-style lab designed for practicing real‑world web exploitation techniques, including SSTI, middleware authentication bypass, remote code execution, and ...

ssti靶场，后续会考虑持续更新. Contribute to LSP1025923/SSTI_labs_E development by creating an account on GitHub.

Critical SSTI on NASA URS earthdata server. Contribute to Vulndisclosure/Cosmicstrike-vuln development by creating an account on GitHub.

Offline educational model of CVE-2026-104851 (fsspec ReferenceFileSystem Jinja SSTI) - federiconbaez/cortex9-fsspec-reference-jinja-ssti-model

Technical Writeup. Contribute to mnvm823/Broken-Access-Control-to-Unathorized-S3-File-modification-to-SSTI-to-RCE development by creating an account on GitHub.

Contribute to hjjj3/Server-Side-Template-Injection-SSTI- development by creating an account on GitHub.

Contribute to 6Sharky9/TicketFlow-Pro-SSTI-RCE-CTF-Challenge-Ethical-Hacking-Web-Security- development by creating an account on GitHub.

Intentionally vulnerable Flask app for the talk "Breaking Python: AppSec vs. OffSec — From Code to Exploit". 9 classic web vulns (SQLi, command injection, LFI, XXE, XSS, SSTI, ins...

A drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation - YSaxon/pyrocms-ssti-fix

Halcyon Protocol Case File 5 (Expert) — a three-host CTF box: SSTI RCE, LDAP enumeration, lateral movement, writable /etc/passwd privesc. 10 flags, no decoys. - A3lxq/synnefo-expert-the-annex

Contribute to zetawi38-oss/ssti-template-injection development by creating an account on GitHub.

Autonomous parameter discovery and triage for bug bounty recon. Harvests params from archives, JS, forms and API schemas, then probes each one against a clean baseline and keeps only what misbehave...

PoC: appleboy/telegram-action message template injection (authorized test) - PDFtoMark/gab-poc-telegram-ssti

PabloCybersec: o SSTI Scanner, feita em Python do zero pra automatizar a etapa de detecção de Server-Side Template Injection. - Deepaudit/PabloCybersec-SSTI-Scanner

A curated, searchable index of hands-on CTF labs covering OS Command Injection, SSTI, Expression Language Injection, GraphQL Query Abuse, CRLF/Header Splitting, and CSV Formula Injection from Learn...

Web Application Security CTF Write-up: Step-by-step exploitation of SQLi and SSTI vulnerabilities leading to full system compromise (RCE). Includes technical analysis and mitigation strategies. - m...

HDU Network Security Work 1: secure Flask REST API (JWT+bcrypt+SQLi/XSS protection), GitHub Actions SAST/SCA pipeline, Vulhub SSTI reproduction with root cause analysis and fix - ChenYiming-aaa/net...

Contribute to Pytech04/ssti-ctf-feedback-form development by creating an account on GitHub.

Contribute to billyfrndz/ssti-lab development by creating an account on GitHub.

🔥 TBH-SSTI - Detector | Bug Bounty | JSON | Safe Payload - TulungagungBlackHat/TBH-SSTI