-
Notifications
You must be signed in to change notification settings - Fork 176
Handlebars issues. #13
Copy link
Copy link
Open
Labels
delayedThe issue will be fixed with a big update laterThe issue will be fixed with a big update latertemplate engineA template engine to addA template engine to add
Description
Metadata
Metadata
Assignees
Labels
delayedThe issue will be fixed with a big update laterThe issue will be fixed with a big update latertemplate engineA template engine to addA template engine to add
I was testing SSTImap with PortSwiggers Server-side template injection in an unknown language with a documented exploit (https://portswigger.net/web-security/server-side-template-injection/exploiting/lab-server-side-template-injection-in-an-unknown-language-with-a-documented-exploit) lab and noticed some issues. First of all Handlebars engine was detected as Dust but it might because both are nodejs based. Second issue there was no cmd/shell support for this plugin. I tried using tpl-shell but only got some exception.