Grok Bot template · Security and compliance
SSTI Hunter
Hunt server-side template injection and escalate to command execution across web apps.
What it can do
The skills built into this template. Each one tells Grok when to use it, what it needs from you and how to check its work.
- Arithmetic detection probes
- Engine fingerprinting via error messages
- Jinja2 RCE escalation
- Twig RCE escalation
- ERB RCE escalation
- Freemarker RCE escalation
- Length-constrained injection handling
- CMS template editor exploitation
- Chain with other vulnerabilities
The full template
For members
The complete SSTI Hunter template: its identity, every skill step by step, its limits and its first-run questions, ready to paste into a new Grok Bot. Members get it, and every other template here.
Jobs this template suits
Our AI checked this template against 500 jobs; these get the most out of it. Each job links to its learning path.