All Projects → GoSecure → template-injection-workshop

GoSecure / template-injection-workshop

Licence: other
Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

Programming Languages

CSS
56736 projects
java
68154 projects - #9 most used programming language
HTML
75241 projects
python
139335 projects - #7 most used programming language
PHP
23972 projects - #3 most used programming language
Dockerfile
14818 projects
hack
652 projects

Projects that are alternatives of or similar to template-injection-workshop

www-project-vulnerable-web-applications-directory
The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site
Stars: ✭ 10 (-89.9%)
Mutual labels:  appsec, vulnerable-web-app
PHPFlask
🍶 Flask for PHP
Stars: ✭ 15 (-84.85%)
Mutual labels:  twig, jinja2
Hrshell
HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
Stars: ✭ 193 (+94.95%)
Mutual labels:  injection, tornado
Clownfish
Smart Content Management System using Spring Boot
Stars: ✭ 14 (-85.86%)
Mutual labels:  velocity, freemarker
Dnsmasqweb
基于DNSmasq的DNS解析、以及DHCP地址分配系统
Stars: ✭ 166 (+67.68%)
Mutual labels:  jinja2, tornado
sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
Stars: ✭ 56 (-43.43%)
Mutual labels:  appsec, vulnerable-web-app
ezinject
Modular binary injection framework, successor of libhooker
Stars: ✭ 47 (-52.53%)
Mutual labels:  injection
Clarkson-Core
A plugin to write Object-Oriented code in combination with the Twig templating engine while keeping the WordPress Way of working in mind.
Stars: ✭ 22 (-77.78%)
Mutual labels:  twig
freemarker-online-tester
Apache FreeMarker Online Tester
Stars: ✭ 53 (-46.46%)
Mutual labels:  freemarker
opyoid
Dependency injection library for Python
Stars: ✭ 34 (-65.66%)
Mutual labels:  injection
time-ago-bundle
Provides a simple twig filter for expressing time difference in words.
Stars: ✭ 13 (-86.87%)
Mutual labels:  twig
jazz
The Scripting Engine that Combines Speed, Safety, and Simplicity
Stars: ✭ 132 (+33.33%)
Mutual labels:  jinja2
JerryServer
A Web Server for Front-end and Back-end Separation.一种专门用于前后端分离的web服务器(静态服务器)基于Netty开发 具有后台监控 负载均衡等功能(欢迎Star,🚫禁止Fork)
Stars: ✭ 51 (-48.48%)
Mutual labels:  freemarker
JWTweak
Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
Stars: ✭ 85 (-14.14%)
Mutual labels:  appsec
SilentXMRMiner
A Silent (Hidden) Monero (XMR) Miner Builder
Stars: ✭ 417 (+321.21%)
Mutual labels:  injection
appsec awareness training
Application Security Awareness Training
Stars: ✭ 17 (-82.83%)
Mutual labels:  appsec
dbmq
Docker-based Message Queuing
Stars: ✭ 39 (-60.61%)
Mutual labels:  tornado
ttl255.com
ttl255.com - Resources
Stars: ✭ 31 (-68.69%)
Mutual labels:  jinja2
view-twig
Yii View Twig Renderer
Stars: ✭ 24 (-75.76%)
Mutual labels:  twig
mayflower
Mayflower Mono Repo (react and pattern lab and documentation)
Stars: ✭ 17 (-82.83%)
Mutual labels:  twig

Template Injection Workshop

This repository includes all the test applications presented at Hackfest 2020.

Reading the tutorials

Slides: https://gosecure.github.io/template-injection-workshop/

Running the application yourself

All the application code and docker script are included in this repository. The build process will vary depending on the technology (Python, PHP or Java).

First start by cloning the repository or exporting the repository to a zip archive. Refer to the README of each individual application.

git clone https://github.com/GoSecure/template-injection-workshop.git
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].