Skip to content

Commit 1c42bfe

Browse files
authored
Merge pull request #698 from m10x/master
Added TInjA and the Template Injection Table
2 parents 57703ed + db1357b commit 1c42bfe

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

Server Side Template Injection/README.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,6 +86,15 @@
8686

8787
Recommended tools:
8888

89+
[TInjA](https://github.com/Hackmanit/TInjA) - An effiecient SSTI + CSTI scanner which utilizes novel polyglots
90+
91+
e.g:
92+
93+
```bash
94+
tinja url -u "http://example.com/?name=Kirlia" -H "Authentication: Bearer ey..."
95+
tinja url -u "http://example.com/" -d "username=Kirlia" -c "PHPSESSID=ABC123..."
96+
```
97+
8998
[Tplmap](https://github.com/epinna/tplmap) - Server-Side Template Injection and Code Injection Detection and Exploitation Tool
9099

91100
e.g:
@@ -119,6 +128,8 @@ In most cases, this polyglot payload will trigger an error in presence of a SSTI
119128
${{<%[%'"}}%\.
120129
```
121130

131+
The [Template Injection Table](https://github.com/Hackmanit/template-injection-table) is an interactive table containing the most efficient template injection polyglots along with the expected responses of the 44 most important template engines.
132+
122133
## ASP.NET Razor
123134

124135
[Official website](https://docs.microsoft.com/en-us/aspnet/web-pages/overview/getting-started/introducing-razor-syntax-c)

0 commit comments

Comments
 (0)