Collected research
Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere
Limitations are just an illusion - advanced server-side template exploitation with RCE everywhere
Alex Brumen builds self-contained, quote-free SSTI-to-RCE payloads for Jinja2, Mako, Twig, Smarty, Blade, Groovy, FreeMarker and Razor. Each payload derives command strings from default runtime or template features instead of request parameters or plugins, using object-string slicing, character functions, template blocks and alphabet conversion.
Record
- Document
- Limitations are just an illusion - advanced server-side template exploitation with RCE everywhere
- Researcher
- Alex Brumen
- Published by
- YesWeHack
- Date
- Topic
- Injection
In the archive
Related sources
- Payloads
- watching my presentation of this research at Ekoparty 2024 in Buenos Aires
- Advanced server-side template exploitation with RCE everywhere -Alex Brumen - Ekoparty 2024
Tags
This page is the archive's own catalogue record. The research is the work of Alex Brumen, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .