tplmap was the first widely used SSTI exploitation tool and is the reference most write-ups still cite. It is no longer maintained — SSTImap is the active successor — but it remains a useful second opinion and a good way to see how sandbox-escape payloads are constructed.
TPL
tplmap
epinna
Original server-side template injection exploiter — now unmaintained, still a useful baseline.
Cyber Kill Chain & Defender Lifecycle
Attacker — Kill Chain
1
Reconnaissance
2
Weaponization
3
Delivery
4
Exploitation
5
Installation
6
Command & Control
7
Actions on Objectives
Defender — IR Lifecycle
8
Preparation
9
Detection & Analysis
10
Containment, Eradication & Recovery
11
Post-Incident Activity
Description
Use cases
- Cross-checking an SSTImap result
- Reading historical SSTI write-ups that reference its payloads
Example
python tplmap.py -u "http://localhost:8000/greet/?name=test"