This video teaches you how to discover and exploit SSTI or Server Side Template Injection vulnerabilities. To demonstrate this vulnerability, Dimitris is going to hack and root the doctor machine from hackthebox. ✳️ Checkout Dimitris's own YouTube channel 👇 https://www.youtube.com/channel/UC8XUtbJrsi6rJaGlrnN4BNA --------------------------------------------------------------- 🔴 Our VIP Membership 👇 https://zsecurity.org/vip-membership/ --------------------------------------------------------------- 🧠 My hacking courses 👇 https://zsecurity.org/courses/ --------------------------------------------------------------- Website - https://zsecurity.org/ Facebook - https://www.facebook.com/ZSecurity-1453250781458287/ Twitter - https://twitter.com/_zSecurity_ Instagram - https://www.instagram.com/zsecurity_org/ Linkedin - https://www.linkedin.com/company/zsecurity-org/ --------------------------------------------------------------- ⚠️ This video is made for educational purposes only, we only test devices and systems that we own or have permission to test, you should not test the security of devices that you do not own or do not have permission to test. ⚠️ --------------------------------------------------------------- Timestampes: 00:00 - intro 01:18 - Enumeration 03:05 - Discovering SSTI 08:01 - Exploiting SSTI 11:50 - Rooting the target server