sstimap
Automatic SSTI detection tool with interactive interface
web-vulnerability-scanningRed Team
Toolweb-vulnerability-scanningredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install sstimap`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
