SSTI (Server-Side Template Injection)

Cross-platform resources for SSTI (Server-Side Template Injection): curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

SSTI (Server-Side Template Injection)

This page aggregates cross-platform resources to practice SSTI (Server-Side Template Injection): retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
PortSwigger	https://portswigger.net/web-security/server-side-template-injection

HTB machines practicing SSTI (Server-Side Template Injection) (12)

Machine	OS	Difficulty
Anubis	Windows	INSANE
Bolt	Linux	MEDIUM
Catch	Linux	MEDIUM
Doctor	Linux	EASY
Epsilon	Linux	MEDIUM
Flustered	Linux	MEDIUM
GoodGames	Linux	EASY
Hancliffe	Windows	HARD
Late	Linux	EASY
Noter	Linux	MEDIUM
NunChucks	Linux	EASY
Oz	Linux	HARD

PortSwigger labs practicing SSTI (Server-Side Template Injection) (7)

Lab	Difficulty	Topic	Official
Server-side template injection in a sandboxed environment	APPRENTICE	Server-Side Template Injection (SSTI)	Open
Server-side template injection with a custom exploit	APPRENTICE	Server-Side Template Injection (SSTI)	Open
Basic server-side template injection	PRACTITIONER	Server-Side Template Injection (SSTI)	Open
Basic server-side template injection (code context)	PRACTITIONER	Server-Side Template Injection (SSTI)	Open
Server-side template injection in an unknown language with a documented exploit	PRACTITIONER	Server-Side Template Injection (SSTI)	Open
Server-side template injection using documentation	PRACTITIONER	Server-Side Template Injection (SSTI)	Open
Server-side template injection with information disclosure via user-supplied objects	PRACTITIONER	Server-Side Template Injection (SSTI)	Open

TryHackMe rooms practicing SSTI (Server-Side Template Injection) (5)

Room	Difficulty	Type	Access	Official
OWASP Top 10 2025: Insecure Data Handling	EASY	Walkthrough	🟢 Free	Open
Hip Flask	MEDIUM	Walkthrough	🟢 Free	Open
NoNameCTF	MEDIUM	Challenge	🔵 VIP	Open
Server-side Template Injection	MEDIUM	Walkthrough	🔵 VIP	Open
SSTI	MEDIUM	Walkthrough	🟢 Free	Open

Related skills

• /en/skills/rce

---

← Back to the full glossary

Last updated: 2026-06-07