sstimap

No entries match these filters. Clear filters

1. v1.4 Aug 25, 2026 · issue 057

   SSTImap v1.4 adds save/load of detected vulnerabilities, Pybars3/4 and Mustache GHSA-5hrj-7fc3-cmx9 plugins, and header/cookie-aware crawling.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4 https://github.com/vladko312/SSTImap.git
   # already have the repo? check out this version:
   $ git checkout v1.4

   • Adds ability to save detected vulnerabilities to file and reload them in a later session.
   • New plugin detects GHSA-5hrj-7fc3-cmx9 in Mustache template engine.
   • New plugin supports Pybars3 and Pybars4 template engines for detection and exploitation.
   • New plugin for fuzzing uncommon and legacy evaluating template injection patterns.
   • Crawling and form detection now respect user-supplied headers and cookies, enabling authenticated crawl sessions.

   5 details in Everything

2. v1.3 Aug 19, 2025 · release notes

   SSTImap v1.3 adds error-based and boolean blind detection techniques, Spring EL injection plugin, and new engine capabilities.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3 https://github.com/vladko312/SSTImap.git
   # already have the repo? check out this version:
   $ git checkout v1.3

   • Adds error-based detection and exploitation technique for SSTI scanning.
   • Adds boolean error-based blind detection and exploitation technique.
   • Enables ordered technique testing — techniques are now tested in the user-specified order.
   • New plugin for Spring EL injection detection and exploitation.
   • Supports fromfile data type to supply request body parts from files.

   +8 more show less

   • Freemarker engine now supports expression evaluation.
   • Dust.js now supports rendered code execution.
   • Adds Base64 exfiltration support (available for plugin use).
   • Context suffix can now include closure or reversed closure.
   • Plugins can now specify header and trailer length for more precise injection control.
   • SSTImap can now run with form detection disabled when optional dependencies are not installed.
   • Twig CVE payload replaced with |map()-based payload (CVE payload moved to Extras).
   • Generic template engines are now skipped by default in favor of generic plugins.

   13 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Generic template engines are now skipped by default; setups relying on generic template engine detection without explicitly enabling them may no longer test those engines.
3. v1.2 Jan 6, 2024 · release notes

   Adds --req-body-type for multi-format payloads and --shell to specify target shell in SSTImap v1.2

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.2 https://github.com/vladko312/SSTImap.git
   # already have the repo? check out this version:
   $ git checkout v1.2

   └──▷ USE IT
   Exploit an SSTI vulnerability where the payload must be sent as JSON rather than URL-encoded form data.
   shell copy

   sstimap -u http://target/app -p param --req-body-type json

   Force the tool to use a specific shell interpreter (e.g., cmd.exe) when targeting Windows systems.
   shell copy

   sstimap -u http://target/app --shell cmd.exe

   • Adds --req-body-type flag (json, text, fromhex) to handle non-URLencoded request bodies
   • Adds --shell argument to specify the expected target system shell

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The original Twig payload is now renamed to Twig_v1; scripts referencing the previous default Twig payload name will fail.
4. v1.1 Apr 16, 2023 · release notes

   v1.1 adds Cheetah template engine, Python 3.11 support, crawler/form detection, and interactive reloading

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.1 https://github.com/vladko312/SSTImap.git
   # already have the repo? check out this version:
   $ git checkout v1.1

   • --engine cheetah selects the new Cheetah template engine for payload generation.
   • Enables interactive mode with module reloading via a new REPL command, allowing live updates without restarting the scan.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Removed dependency on telnetlib; requires Python 3.11+ or manual installation of replacement TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. client.