1 Repo
Techniques for identifying specific injection contexts by analyzing server responses to polyglot payloads.
Distinct from Injection Payloads: Focuses on the mapping/identification phase of the injection process, whereas Injection Payloads refers to the strings themselves.
Explore 1 awesome GitHub repository matching security & cryptography · Injection Mapping. Refine with filters or upvote what's useful.
tplmap is a security tool designed for the detection and exploitation of server-side template injection vulnerabilities. It functions as an automated scanner to identify vulnerable template engine contexts and provides a framework for achieving remote code execution. The tool focuses on translating high-level requests into engine-specific syntax to execute operating system commands and bypass application sandboxes. It further enables remote file system access, allowing users to read, write, and transfer files between a local machine and a target server. Additional capabilities include the ab
Identifies vulnerable engines by sending polyglot payloads and analyzing server response patterns.