tplmap
Server-side template injection scanner and exploiter. Confirms the engine (Jinja, Twig, Freemarker, ...) then tries a sandbox escape. Manual confirmation still required.
Tags: ssti, templates
- Category
- inject
- Maintenance signal
- slow
Use this when: SSTI. Confirm the template engine before you treat a marker as code execution.
Install
git
git clone https://github.com/epinna/tplmap.git && pip install -r tplmap/requirements.txtCommand templates
Probe a parameter
python2 tplmap.py -u '{url}'