Forum Discussion
QuickSloth
Bronze III
Bronze IIIStuck on “Server-Side Template Injection: Ep.2 – Identifying SSTI Vulnerabilities”
None of the three apps are “breaking” for me. For example the input of {{ dump(_SERVER) }} should return server information in at least one example. But nope.
I just took the sample payload from the briefing, and it works on the first app, causing an error.
I think there's only one app using twig, where the above string would trigger.
SSTI...not my favorite.
QuickSlothBronze III
Bronze III> I just took the sample payload from the briefing
Sorry, which payload is that?
netcat
Silver III
Silver IIIThis one: {{$<%=(*`|.'#-%>;}}
- QuickSloth
All three apps just echo back that same input.
- netcat
Just one more click.
- QuickSloth
Sorry, but what do you mean by "one more click"?
