← LibraryTechnique entry
W-SSTI-TWIGExecution
SSTI — Twig / PHP
{{_self.env.registerUndefinedFilterCallback('exec')}} pattern reaches PHP system() / shell_exec.
§ Where this technique fits
W-SSTI-TWIG is catalogued under the Execution tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.