Cross Site Scripting (XSS)

  1. Server-Side Template Injection
    1. SSTI vs XSS Distinction
      1. Execution Context Differences
        1. Impact Comparison
          1. Detection Methods
          2. Template Engine Vulnerabilities
            1. Jinja2 Exploitation
              1. Twig Vulnerabilities
                1. Smarty Template Risks
                  1. Velocity Template Issues
                  2. SSTI Exploitation Techniques
                    1. Sandbox Escape Methods
                      1. Code Execution Payloads
                        1. File System Access
                          1. Remote Code Execution

                        Previous

                        10. Advanced XSS Concepts

                        Go to top

                        Next

                        12. Real-World Case Studies