--- title: "#ssti articles | Hashnode" description: "Explore 15 articles tagged #ssti on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/ssti" --- Tag # #ssti 15 posts · 1 followers [M1H](https://hashnode.com/@m1h) · [Aug 22](https://hashnode.com/posts/from-guest-wifi-to-root-how-one-api-leak-ssti-destroyed-a-luxury-resort/6a8972b5b6f56cae07180b57) ### [From Guest WiFi to Root: How One API Leak + SSTI Destroyed a Luxury Resort](https://m1h.hashnode.dev/from-guest-wifi-to-root-how-one-api-leak-ssti-destroyed-a-luxury-resort?utm_source=hashnode&utm_medium=feed) How an exposed API endpoint, Jinja2 SSTI, and password exposure led to full root compromise on a Flask WiFi captive web application portal. 5 min read · [m1h.hashnode.dev](https://m1h.hashnode.dev/from-guest-wifi-to-root-how-one-api-leak-ssti-destroyed-a-luxury-resort?utm_source=hashnode&utm_medium=feed) [kareem Mohamed](https://hashnode.com/@kmbkareem) · [Aug 10](https://hashnode.com/posts/do-not-disturb-a-walkthrough-of-thm-hacker-holidays-day-7/6a79b95c947a105062390de4) ### [Do Not Disturb: A walkthrough of THM Hacker Holidays - Day 7](https://kmb.hashnode.dev/do-not-disturb-a-walkthrough-of-thm-hacker-holidays-day-7?utm_source=hashnode&utm_medium=feed) Step-by-step THM Hacker Holidays Day 7 walkthrough. Exploit NoSQLi, EJS SSTI, and Node.js inspector privilege escalation with 0xY0K4\_CL4W. 4 min read · [kmb.hashnode.dev](https://kmb.hashnode.dev/do-not-disturb-a-walkthrough-of-thm-hacker-holidays-day-7?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 4](https://hashnode.com/posts/tryhackme-do-not-disturb-writeup/6a71c7cbbf20ac80073fe1fd) ### [TryHackMe : Do Not Disturb Writeup](https://exploitnotes.hashnode.dev/tryhackme-do-not-disturb-writeup?utm_source=hashnode&utm_medium=feed) Complete Do Not Disturb THM walkthrough covering NoSQL injection, EJS SSTI, Node Inspector abuse, privilege escalation, and root. 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-do-not-disturb-writeup?utm_source=hashnode&utm_medium=feed) [Falkenkralle](https://hashnode.com/@falkenkralle) · [Aug 2](https://hashnode.com/posts/template-terror/6a6f4e46e1f2446c9bfb5dc5) ### [Template Terror](https://ttpsandtricks.hashnode.dev/template-terror?utm_source=hashnode&utm_medium=feed) How I found and exploited server-side template injection in a Flask/Jinja2 CTF app — reading /etc/passwd and getting RCE, mistakes and all. 9 min read · [ttpsandtricks.hashnode.dev](https://ttpsandtricks.hashnode.dev/template-terror?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jul 14](https://hashnode.com/posts/hackthebox-jinjacare/6a56248e1def916a1edb1f86) ### [HackTheBox : JinjaCare](https://exploitnotes.hashnode.dev/hackthebox-jinjacare?utm_source=hashnode&utm_medium=feed) Complete Hack The Box JinjaCare writeup covering wkhtmltopdf HTML injection, local file inclusion, Flask SSTI, Jinja2 sandbox escape, and root RCE. 9 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hackthebox-jinjacare?utm_source=hashnode&utm_medium=feed) [Neville Iregi](https://hashnode.com/@m0ng00s3) · [Apr 30](https://hashnode.com/posts/hack-the-box-bike/69f3bb88909e64ad07289cfb) ### [Hack The Box: Bike](https://m0ng00s3-blog.hashnode.dev/hack-the-box-bike?utm_source=hashnode&utm_medium=feed) Server-Side Template Injection (SSTI) in a Node.js application using the Handlebars template engine 14 min read · [m0ng00s3-blog.hashnode.dev](https://m0ng00s3-blog.hashnode.dev/hack-the-box-bike?utm_source=hashnode&utm_medium=feed) [maulik srivastava](https://hashnode.com/@Mooli) · [Jan 22](https://hashnode.com/posts/deconstructing-ssrfssti-vulns-to-gain-rce-in-a-message-broker-environment/6971b9bbd2d87efb4028bc84) ### [Deconstructing SSRF+SSTI vulns to gain RCE in a Message Broker environment](https://pub.nexttechlabap.in/deconstructing-ssrfssti-vulns-to-gain-rce-in-a-message-broker-environment?utm_source=hashnode&utm_medium=feed) Conquering TryHackMe's: Rabbit\_store 12 min read · [pub.nexttechlabap.in](https://pub.nexttechlabap.in/deconstructing-ssrfssti-vulns-to-gain-rce-in-a-message-broker-environment?utm_source=hashnode&utm_medium=feed) [maulik srivastava](https://hashnode.com/@Mooli) · [Jan 21](https://hashnode.com/posts/conquering-tryhackmesrabbitstore/6971528456b9f983844b2812) ### [Conquering TryHackMe's:Rabbit\_store](https://mooli.hashnode.dev/conquering-tryhackmesrabbitstore?utm_source=hashnode&utm_medium=feed) Description: Rabbit Store is medium level machine from tryhackme to test your basic web testing skills and linux basics. it can be conquered if u have understanding of SSRF and SSTI vulnerabilities to achive RCEgain access to shell. Therefore, retrie... 12 min read · [mooli.hashnode.dev](https://mooli.hashnode.dev/conquering-tryhackmesrabbitstore?utm_source=hashnode&utm_medium=feed) [Youssef Ketaj](https://hashnode.com/@youssefketaj) · [Sep 20, 2025](https://hashnode.com/posts/server-side-template-injection-ssti-de-la-detection-a-lexecution-de-code/68cea5b04e449ee21d226150) ### [Server-Side Template Injection (SSTI) : De la Détection à l'Exécution de Code](https://starter-kit-xi-seven.vercel.app/server-side-template-injection-ssti-de-la-detection-a-lexecution-de-code?utm_source=hashnode&utm_medium=feed) Découvrez les dangers du SSTI et les techniques pour protéger vos serveurs contre des attaques critiques 11 min read · [starter-kit-xi-seven.vercel.app](https://starter-kit-xi-seven.vercel.app/server-side-template-injection-ssti-de-la-detection-a-lexecution-de-code?utm_source=hashnode&utm_medium=feed) [Ido Abramov](https://hashnode.com/@lookkattme) · [Jul 14, 2025](https://hashnode.com/posts/hackthebox-server-side-attacks-skills-assessment-walkthrough/6874c16821c05aa1de7cf080) ### [HackTheBox - Server-side Attacks - Skills Assessment Walkthrough](https://id0xa.hashnode.dev/hackthebox-server-side-attacks-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) Scenario You are tasked to perform a security assessment of a client's web application. Apply what you have learned in this module to obtain the flag. Walkthrough Accessing the target URL redirects us to the next page: After browsing the site for a ... 3 min read · [id0xa.hashnode.dev](https://id0xa.hashnode.dev/hackthebox-server-side-attacks-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed)