PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere

yeswehack.com | blog | #rce | #exploitation | #template-injection | #ssti | #jinja2 | #twig
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Advanced SSTI research: self-contained RCE payloads built only from default methods for Jinja2, Mako, Twig, Smarty, Blade, Groovy, FreeMarker and Razor, without quotes or external plugins.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #53 Hacker Club solution
This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities.
research · portswigger.net
Server-Side Template Injection
James Kettle's seminal paper on server-side template injection: a detection and exploitation methodology, generic exploits for five template engines, sandbox escapes and RCE zero-days.
vulnerability · mccaulay.co.uk
[CVE-2024-56326] RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution
# RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution 11 May 202611 May 2026 McCaulayVulnerability Research ## Introduction LiteLLM is an...
vulnerability · labs.cognisys.group
Turning Email Template Injection into Remote Code Execution
Modern web applications rely heavily on automation. Email notifications, document processing alerts, and password recovery workflows are all common features designed to improve usability and streamline operations. Behind the scenes, these features often rely on dynamic templates that allow applications to insert variables into messages before they are sent to users.
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
blog · yeswehack.com
Notepad++ hijack, pwning Claude Code, top web hacking techniques of 2025 – ethical hacker news roundup
Roundup: PortSwigger's top 10 web hacking techniques of 2025 (won by error-based SSTI research), a six-bug pre-auth RCE chain in a SIEM/SOAR appliance, and notable writeups.
Back