SSTI 문서

https://github.com/carlospolop/hacktricks/blob/master/pentesting-web/ssti-server-side-template-injection/README.md

GitHub - carlospolop/hacktricks: Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, re

https://book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection

SSTI정리 이외에도 다른 기법들이 많아서 좋다.

 

https://www.alertyoung.com/archives/10/

Spring相关漏洞总结 - 安全小工坊

SPRING취약점 정리

 

https://core-research-team.github.io/2021-05-01/Server-Side-Template-Injection(SSTI) 

Server-Side Template Injection(SSTI)

JINJA2 CTF문제를 통한 정리

 

https://www.dongyeon1201.kr/3ca5185f-d8d1-4bf1-be69-7b9c736496c3

DMM [ 487 points ]

JINJA2 CTF문제를 통한 필터우회

 

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Template%20Injection/README.md#pebble---code-execution

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

 

https://github.com/nevesnunes/env/blob/master/common/code/cheats/web.md

GitHub - nevesnunes/env: cheatsheets, dotfiles, scripts...

웹 이것저것