B-Hunters-SSTI-Checker

This module is used to test Code Injection and Server-Side Template Injection vulnerabilities in B-Hunters Framework using SSTImap.

Requirements

To be able to use all the tools remember to update the environment variables with your API keys in docker-compose.yml file as some tools will not work well until you add the API keys.

Usage

Note: You can use this tool inside B-hunters-playground
To use this tool inside your B-Hunters Instance you can easily use docker-compose.yml file after editing b-hunters.ini with your configuration.

1. Build local

Rename docker-compose.example.yml to docker-compose.yml and update environment variables.

docker compose up -d

2. Docker Image

You can also run using docker image

docker run -e process_num=15 -e process_timeout=600 -d -v $(pwd)/b-hunters.ini:/etc/b-hunters/b-hunters.ini bormaa/b-hunters-ssti-checker:v1.0

How it works

B-Hunters-SSTI-Checker receives the data from different B-Hunters modules and run scanning on it