Back to Playbooks
CTF
ctf-web-server-side
CTF web server-side injection attacks. PHP type juggling, LFI/php://filter, SQL injection (backslash escape, hex, second-order, LIKE brute-force, column truncation, SQLi-to-SSTI), SSTI (Jinja2, Go, EJS, ERB, Mako, Twig), SSRF, XXE, command injection, Host Header SSRF, DNS rebinding.
Slug
ctf-web-server-side
Category
CTF
Run Playbook
/gitest ctf-web-server-side