#ssti CTF challenges

15 CTF challenges using ssti from 12 CTFs (2021–2024), 15 with writeups. Mostly Web (87%) and Misc (13%).

Web · 13 Misc · 2

Often combined with

#jinja2 4 #filter-bypass 2 #python 1 #jwt-algorithm-confusion 1 #pug 1 #nosql-injection 1 #http-header-injection 1 #java-el-injection 1 #waf-bypass 1 #ejs 1 #go-templates 1 #csp-bypass 1 #webrtc 1

Challenges

Filter and sort these in the challenge browser →