A $10,000 security bug: Identify, exploit and effectively fix SSTI

in 2016, Uber paid out $10,000 for a security bug that could result into RCE. In this live workshop, we will learn how to identify, write security tests, exploit and effectively fix this severe bug across in TypeScript, Go and Python.

Labs:

  1. SSTI in TypeScript
  2. SSTI in Python
  3. SSTI in Go