---
title: "Discussion on \"SSTI Bypass Using New Line Injection (1337 UP CTF - Smarty Pants)\" | Hashnode"
description: "Discussion on \"SSTI Bypass Using New Line Injection (1337 UP CTF - Smarty Pants)\". Hi mates! This writeup is intended to showcase the following:\n\nSSTI in template Smarty (PHP)\n\nBypassing regex filters using a new line injection\n\n\nFirst of all, let's see how PHP behaves when we invoke a new line inside a function call:\n\nAs we can se..."
url: "https://hashnode.com/posts/ssti-bypass-using-new-line-injection-1337-up-ctf-smarty-pants/6559a21a302afb402b999013"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [SSTI Bypass Using New Line Injection (1337 UP CTF - Smarty Pants)](https://thewhitehatpanther.hashnode.dev/ssti-bypass-using-new-line-injection-1337-up-ctf-smarty-pants?utm_source=hashnode&utm_medium=feed)

Hi mates! This writeup is intended to showcase the following: SSTI in template Smarty (PHP) Bypassing regex filters using a new line injection First of all, let's see how PHP behaves when we invoke a new line inside a function call: As we can se...

Nov 19, 2023 · 1 min read · thewhitehatpanther.hashnode.dev  
Read the article

-   [#bugbounty](https://hashnode.com/tag/bugbounty)
-   [#bug-bounty-tips](https://hashnode.com/tag/bug-bounty-tips)
-   [#php](https://hashnode.com/tag/php)
-   [#websecurity](https://hashnode.com/tag/websecurity)
-   [#ctf-writeup](https://hashnode.com/tag/ctf-writeup)

## Written by

[Josué Hernández](https://hashnode.com/@thewhitehatpanther)

@thewhitehatpanther

  
[View profile](https://hashnode.com/@thewhitehatpanther)

AppSec Engineer

## Responses

Markdown supported · ⌘↵ to post

No responses yet.