wstg-inpv-08 - SSI Injection Testing
Test for SSI injection vulnerabilities in web applications
Tags
Updated: 2026-05-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- check SSI file extensions
- test SSI detection
- verify file inclusion
- execute command injection
- analyze server response
- generate test report
Inputs
- target URL
- HTTP parameters
- test payloads
Outputs
- vulnerability report
- test findings
- security assessment
Requirements
- target web server
- Python 3 environment
- requests library
- network access
