---
title: "Josué Hernández (@thewhitehatpanther) | Hashnode"
description: "AppSec Engineer. Read the latest articles by Josué Hernández on Hashnode."
url: "https://hashnode.com/@thewhitehatpanther"
---

@thewhitehatpanther

# Josué Hernández

@thewhitehatpanther · Joined November 2023

AppSec Engineer

### [SSTI Bypass Using New Line Injection (1337 UP CTF - Smarty Pants)](https://thewhitehatpanther.hashnode.dev/ssti-bypass-using-new-line-injection-1337-up-ctf-smarty-pants?utm_source=hashnode&utm_medium=feed)

Hi mates! This writeup is intended to showcase the following: SSTI in template Smarty (PHP) Bypassing regex filters using a new line injection First of all, let's see how PHP behaves when we invoke a new line inside a function call: As we can se...

1 min read · [thewhitehatpanther.hashnode.dev](https://thewhitehatpanther.hashnode.dev/ssti-bypass-using-new-line-injection-1337-up-ctf-smarty-pants?utm_source=hashnode&utm_medium=feed)

[Nov 19, 2023](https://hashnode.com/posts/ssti-bypass-using-new-line-injection-1337-up-ctf-smarty-pants/6559a21a302afb402b999013)