Server Side Template Injection (SSTI) - Explicado desde Cero (Español)

This video tutorial explains the theory and practical exercises of SSTI (Server-Side Template Injection - A03:2021-Injection). Buy me a beer: https://paypal.me/omarpalominoh?count... 00:00 - Introduction 01:14 - What is SSTI? How to identify it? How to exploit it? 13:45 - Exercise 1: Basic SSTI 20:25 - Exercise 2: Basic SSTI (stored parameter) 26:27 - Exercise 3: SSTI using documentation 30:59 - Exercise 4: SSTI in an unknown language and result 39:17 - Exercise 5: SSTI with information disclosure through user-provided objects 46:10 - Exercise 6: SSTI in a sandboxed environment 50:40 - Exercise 7: SSTI with an exploit Customized Bonus eWPT and eWPTX Sample Exercises 01:07:17 - CTF Exploiting XXE and SSTI Resources: Payloads: https://github.com/swisskyrepo/Payloa... https://book.hacktricks.xyz/pentestin... eWPTX Exercise: https://www.vulnhub.com/entry/hacker-... Social Media: Facebook:   / el.palomo.seguridad   Blog: https://elpalomo.com.pe LinkedIn:   / opalomino   Instagram:   / elpalomo.security   Tiktok:   / omar.elpalomo