Template injection workshop
Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
This repository includes all the test applications presented at Hackfest 2020. The project is written primarily in CSS, first published in 2020. Key topics include: appsec, codelabs, freemarker, injection, jinja2.
Template Injection Workshop
This repository includes all the test applications presented at Hackfest 2020.
Reading the tutorials
Slides: https://gosecure.github.io/template-injection-workshop/
Running the application yourself
All the application code and docker script are included in this repository. The build process will vary depending on the technology (Python, PHP or Java).
First start by cloning the repository or exporting the repository to a zip archive. Refer to the README of each individual application.
git clone https://github.com/GoSecure/template-injection-workshop.git
Contributors
Showing top 1 contributor by commit count.
Related Repositories
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
OWASP/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
zaproxy/zaproxy
The ZAP by Checkmarx Core project
maurosoria/dirsearch
Web path scanner
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application