SSTI

Server Side Template Injection

A useful polygot for initial detection.

${{<%[%'"}}%\.    ### For more details see the cobalt strike blog below.

A Pentester’s Guide to Server Side Template Injection (SSTI) | CobaltCobalt