Find template injection in your web application.
What it does
Detects template injection in web applications and guides engine-specific exploitation and follow-up access.
When to use it
Use when template expressions, server-side rendering, preview features, or templating engines may evaluate attacker-controlled content.
How to use it
Give it a web application to test; it checks for template evaluation and identifies the engine to guide further exploitation.
What you provide
- a web application to test
Uses
Latest review
What you need · 0
No setup requirements listed.
Access · 6
This skill
template-enabled web applications
Write
Sends template injection probes
the target application server
Execute
Commands on target servers
reverse shell
Execute
Starts a persistent reverse shell
/proc/self/environ
Read
Reads server environment credentials