Affanhaxor·6d agoSSTI2 ~ CyLab Security Academy Write-up | Server-Side Template InjectionAuthor: Affanhaxor Platform: CyLab Security Academy Challenge: SSTI2 Category: Web Security Topic: Server-Side Template Injection (SSTI)…
Byaruhangafortunate·Nov 2Hiding in Plain Sight: A Hands-On Look at Confluence’s Widget Connector FlawMy Walkthrough of CVE-2019–3396
Rohandeshmukh·Oct 22TryHackMe Templates Walkthrough: Exploiting Pug SSTI to Achieve RCE and shellPlatform: TryHackMe Room: Templates Category: Web Security Difficulty: Beginner-friendly Technology: Node.js, Express, PugJS Objective…
Affanhaxor·Oct 1SSTI1 Challenge Walkthrough — CyLab AcademyServer-Side Template Injection (SSTI) occurs when user input is concatenated directly into a template string and evaluated on the server…
Joseph "n3m0” KANKO·Sep 11Predator Pattern Web Challenge Write-upHello everyone and welcome to this new write-up, in which we will solve the H*B Web challenge named Predator Pattern.
HariHax·Sep 5Everyone Chains SSTI to RCE. I Chained It to Account Takeover.Three attempts at code execution paid nothing. One template expression that just read a variable paid $1,000.A response icon1A response icon1
InMeetCyberbyRaj Namdev·Sep 5Ten Years of SSTI Disclosures. $4,300 in Public Bounties.30-Second Version: I pulled every disclosed server-side template injection report on HackerOne — twelve, total, across a decade of…
Jamal·Aug 28Cambodia National Cybersecurity Competition 2026: Web — Dictator — WriteupWe are given a live website, a propaganda portal for the "Popular Republic of Mbappé". A floating ministry "hides a secret," and the…
