6 Commits
Author SHA1 Message Date
vladko312 dac581547e SSTI:
- Added Elixir/EEx payloads
- Added OGNL payloads
- Clarified SpEL payloads and details
- Fixed PHP Error-Based payloads
- Added Twig Error-Based payload for CVE-2022-23614
Insecure Deserialization:
- Improved Python payloads
2026-02-22 21:18:54 +03:00
vladko312 bec6524774 SSTI:
- Fixed NodeJS payloads
2026-01-03 23:19:26 +03:00
vladko312 09a5f07345 SSI, SSTI:
- Improved MarkDown
2026-01-03 22:20:19 +03:00
Vladislav KorchaginandGitHub 4831e36fb8 Merge branch 'master' into master 2026-01-03 19:06:57 +03:00
vladko312 abbbf2fc95 SSTI:
- Fixed NodeJS payloads
2026-01-03 18:43:24 +03:00
vladko312 7fb2ff75d7 SSI:
- Added SSTImap to the tools, as it now supports SSI detection and exploitation
SSTI:
- Added description for known detection and exploitation techniques
- Added payloads for universal detection
- Added universal payloads for different languages
- Added Error-Based and Boolean-Based payloads
- Moved SpEL payloads using `T()` to the correct category
- Moved Pug payloads to the correct language and updated info to reflect the actual name
2026-01-03 05:20:04 +03:00