Later archive addition
Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere
Alex Brumen builds self-contained, quote-free SSTI-to-RCE payloads for Jinja2, Mako, Twig, Smarty, Blade, Groovy, FreeMarker and Razor. Each payload derives command strings from default runtime or template features instead of request parameters or plugins, using object-string slicing, character functions, template blocks and alphabet conversion.
Record
- Researcher
- Alex Brumen
- Published by
- YesWeHack
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Alex Brumen, first published at the original source. Preserved copies are kept so the citation survives its host.